npm - openmates - Versions diffs - 0.18.0-alpha.19 → 0.18.0-alpha.20 - Mend

openmates 0.18.0-alpha.19 → 0.18.0-alpha.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/dist/{chunk-M2SHXC5P.js → chunk-VJRT2LPY.js} +1013 -871
package/dist/cli.js +1 -1
package/dist/index.js +1 -1
package/package.json +1 -1

package/dist/{chunk-M2SHXC5P.js → chunk-VJRT2LPY.js} RENAMED Viewed

@@ -11,6 +11,132 @@ import {
   uploadFile
 } from "./chunk-BBKJZ23O.js";
+// src/generatedFiles.ts
+import { createWriteStream } from "fs";
+import { mkdir, link, rename, unlink, stat } from "fs/promises";
+import { basename, dirname, extname, resolve } from "path";
+import { randomUUID } from "crypto";
+import { Readable } from "stream";
+import { pipeline } from "stream/promises";
+var DOWNLOAD_TIMEOUT_MS = 5 * 60 * 1e3;
+var ORIGINAL_VARIANTS = ["original", "master", "full"];
+var RESULT_FIELDS = ["data", "result", "results", "items", "final"];
+var MIME_EXTENSIONS = { "audio/mpeg": "mp3", "audio/wav": "wav", "image/png": "png", "image/jpeg": "jpg", "image/webp": "webp", "video/mp4": "mp4", "application/pdf": "pdf", "model/gltf-binary": "glb" };
+var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+var text = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+function generatedFileOptions(flags, input) {
+  const option = (name) => {
+    if (flags[name] === void 0) return void 0;
+    if (typeof flags[name] !== "string" || !flags[name].trim()) throw new Error(`--${name} requires a path or name`);
+    return flags[name];
+  };
+  const output = option("output");
+  const directory = option("output-dir");
+  const filename = option("filename");
+  if (output && (directory || filename)) throw new Error("--output cannot be combined with --output-dir or --filename");
+  if (filename && (filename !== basename(filename) || /[\\/]/.test(filename) || filename.includes("\0") || filename === "." || filename === "..")) throw new Error("--filename must be a filename without directories");
+  if (flags["no-download"] && (output || directory || filename)) throw new Error("--no-download cannot be combined with download destinations");
+  if ((output || filename) && Array.isArray(input?.requests) && input.requests.length > 1) throw new Error("One filename cannot name multiple generated files; use --output-dir");
+  return { enabled: !flags["no-download"] && (flags.json !== true || !!(output || directory || filename)), directory: resolve(directory ?? "."), filename, output: output ? resolve(output) : void 0 };
+}
+function safeName(value) {
+  return basename(value.replaceAll("\\", "/")).replace(/[^a-zA-Z0-9._-]/g, "_").replace(/^\.+/, "") || "generated-file";
+}
+function collectGeneratedFiles(value) {
+  const files = [];
+  const seen = /* @__PURE__ */ new Set();
+  const add = (meta, parent, variant) => {
+    const assetId = text(meta.asset_id) ?? text(parent.embed_id) ?? text(parent.asset_id);
+    const url = text(meta.download_url) ?? (assetId ? `/v1/embeds/${encodeURIComponent(assetId)}/file?format=${encodeURIComponent(variant)}` : void 0);
+    if (!url || seen.has(url)) return;
+    seen.add(url);
+    const extension = safeName(text(meta.format) ?? MIME_EXTENSIONS[String(meta.mime_type)] ?? variant);
+    const suppliedName = text(meta.filename) ?? text(meta.path) ?? text(parent.filename);
+    const filename = suppliedName ? safeName(suppliedName) : `openmates-${safeName(assetId ?? "generated")}.${extension}`;
+    files.push({ url, filename, assetId });
+  };
+  const visit = (node) => {
+    if (Array.isArray(node)) {
+      node.forEach(visit);
+      return;
+    }
+    const data = record(node);
+    if (!data) return;
+    const variants = record(data.files);
+    if (variants) {
+      const entries = Object.entries(variants).filter((entry) => !!record(entry[1]));
+      const preferred = [...ORIGINAL_VARIANTS, String(data.output_filetype ?? "")];
+      const chosen = preferred.map((key) => entries.find(([name]) => name === key)).find(Boolean) ?? entries.find(([name]) => !/preview|thumbnail|poster/i.test(name));
+      if (chosen) add(chosen[1], data, chosen[0]);
+    }
+    for (const field of ["artifacts", "files"]) {
+      if (Array.isArray(data[field])) for (const item of data[field]) {
+        const meta = record(item);
+        if (meta && text(meta.download_url)) add(meta, data, text(meta.variant) ?? "original");
+      }
+    }
+    for (const field of RESULT_FIELDS) if (data[field] !== void 0) visit(data[field]);
+  };
+  visit(value);
+  return files;
+}
+function fetchGeneratedFile(url) {
+  return fetch(url, { redirect: "error", signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS) });
+}
+async function downloadGeneratedFiles(result, options, fetchFile = fetchGeneratedFile) {
+  if (!options.enabled) return [];
+  const files = collectGeneratedFiles(result);
+  const explicitName = options.output || options.filename;
+  if (explicitName && files.length !== 1) throw new Error(`Expected one generated file for the explicit filename; received ${files.length}. Use --output-dir for multiple files.`);
+  const saved = [];
+  for (const file of files) {
+    let target = options.output ?? resolve(options.directory, options.filename ?? file.filename);
+    await mkdir(dirname(target), { recursive: true });
+    const temporary = resolve(dirname(target), `.${randomUUID()}.partial`);
+    try {
+      const response = await fetchFile(file.url);
+      if (!response.ok || !response.body) throw new Error(`Download returned HTTP ${response.status}`);
+      await pipeline(Readable.fromWeb(response.body), createWriteStream(temporary, { flags: "wx", mode: 384 }));
+      if ((await stat(temporary)).size === 0) throw new Error("Download returned an empty file");
+      if (explicitName) await rename(temporary, target);
+      else {
+        const original = target;
+        for (let suffix = 0; ; suffix++) {
+          if (suffix) {
+            const extension = extname(original);
+            target = `${original.slice(0, original.length - extension.length)}-${suffix}${extension}`;
+          }
+          try {
+            await link(temporary, target);
+            break;
+          } catch (error) {
+            if (error.code !== "EEXIST") throw error;
+          }
+        }
+      }
+      saved.push({ path: target, asset_id: file.assetId });
+    } catch (error) {
+      const detail = error instanceof Error && !/https?:/.test(error.message) ? error.message : "Transfer failed";
+      throw new Error(`Generated file download failed (${detail}). Asset: ${file.assetId ?? "see result"}. Already saved: ${saved.map((f) => f.path).join(", ") || "none"}. Generation was not retried.`);
+    } finally {
+      await unlink(temporary).catch((error) => {
+        if (error.code !== "ENOENT") throw error;
+      });
+    }
+  }
+  return saved;
+}
+var GENERATED_FILE_HELP = [
+  "Generated files:",
+  "  By default, save in the current directory with unique automatic names; existing files are preserved.",
+  "  --json               Return download URLs and expiry times without downloading, unless a destination is given.",
+  "  --output-dir <dir>    Save generated files in this directory (created if missing).",
+  "  --filename <name>     Name one output file; replace an existing file after a successful download.",
+  "  --output <path>       Full output file path; cannot combine with --output-dir or --filename.",
+  "  --no-download        Return results without saving files.",
+  "  Examples: --output-dir ./media; --output-dir ./media --filename result.wav; --json --output ./media/result.wav"
+].join("\n");
 // src/codexConnection.ts
 import { execFile, spawn } from "child_process";
 import { promisify } from "util";
@@ -45,7 +171,7 @@ async function readCodexThread(threadId, socketPath) {
   codexResumeArguments({ provider: "codex", id: threadId });
   const socket = socketPath ?? await daemonSocket();
   if (!isAbsolute(socket) || socket.includes(":")) throw new Error("Codex requires an absolute local socket path.");
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const ws = new WebSocket(`ws+unix://${socket}:/`, {
       perMessageDeflate: false,
       handshakeTimeout: CONNECTION_TIMEOUT_MS,
@@ -59,7 +185,7 @@ async function readCodexThread(threadId, socketPath) {
       if (ws.readyState === WebSocket.OPEN) ws.close();
       else if (ws.readyState !== WebSocket.CLOSED) ws.terminate();
       if (error) reject(error);
-      else resolve11(value);
+      else resolve12(value);
     };
     const timer = setTimeout(() => finish(new Error("Codex connection timed out.")), CONNECTION_TIMEOUT_MS);
     ws.on("error", () => finish(new Error("Could not connect to the local Codex daemon.")));
@@ -100,15 +226,15 @@ async function resumeCodexTask(context) {
   const args = codexResumeArguments(context);
   if (!process.stdin.isTTY || !process.stdout.isTTY) throw new Error("Task resume requires an interactive terminal; status and connect never launch work.");
   await readCodexThread(context.id);
-  await new Promise((resolve11, reject) => {
+  await new Promise((resolve12, reject) => {
     const child = spawn("codex", args, { stdio: "inherit" });
     child.once("error", () => reject(new Error("Could not open the installed Codex CLI.")));
-    child.once("exit", (code) => code === 0 ? resolve11() : reject(new Error(`Codex resume exited with status ${code ?? "interrupted"}.`)));
+    child.once("exit", (code) => code === 0 ? resolve12() : reject(new Error(`Codex resume exited with status ${code ?? "interrupted"}.`)));
   });
 }
 // src/client.ts
-import { createHash as createHash10, randomBytes as randomBytes4, randomUUID as randomUUID6 } from "crypto";
+import { createHash as createHash10, randomBytes as randomBytes4, randomUUID as randomUUID7 } from "crypto";
 import { arch, platform as platform2, release } from "os";
 import { createInterface as createInterface2 } from "readline/promises";
 import { stdin as stdin2, stdout } from "process";
@@ -936,9 +1062,9 @@ async function parseOpenCodeImportBuffer(payload, sourceName = "opencode-session
     throw new Error(`OpenCode transcript export could not be parsed: ${error instanceof Error ? error.message : String(error)}`);
   }
   if (!transcript || typeof transcript !== "object" || Array.isArray(transcript)) throw new Error("OpenCode transcript export must be an object");
-  const record = transcript;
-  const info = record.info && typeof record.info === "object" ? record.info : null;
-  const rawMessages = Array.isArray(record.messages) ? record.messages : null;
+  const record2 = transcript;
+  const info = record2.info && typeof record2.info === "object" ? record2.info : null;
+  const rawMessages = Array.isArray(record2.messages) ? record2.messages : null;
   const sourceChatId = String(info?.id ?? "");
   if (!info || !sourceChatId || !rawMessages) throw new Error("OpenCode transcript export is missing info.id or messages");
   const messages = [];
@@ -950,7 +1076,7 @@ async function parseOpenCodeImportBuffer(payload, sourceName = "opencode-session
     if (role !== "user" && role !== "assistant") continue;
     const parts = Array.isArray(message.parts) ? message.parts.filter((part) => Boolean(part && typeof part === "object")) : [];
     const textParts = parts.filter((part) => part.type === "text" && part.ignored !== true && typeof part.text === "string");
-    const content = textParts.map((part) => String(part.text)).filter((text) => text.trim()).join("\n");
+    const content = textParts.map((part) => String(part.text)).filter((text2) => text2.trim()).join("\n");
     if (content.trim()) {
       const time2 = messageInfo.time && typeof messageInfo.time === "object" ? messageInfo.time : {};
       messages.push({
@@ -1300,7 +1426,7 @@ import {
 import lockfile from "proper-lockfile";
 import { createHash as createHash4 } from "crypto";
 import { homedir as homedir2 } from "os";
-import { isAbsolute as isAbsolute2, join, resolve } from "path";
+import { isAbsolute as isAbsolute2, join, resolve as resolve2 } from "path";
 // src/keychain.ts
 import { execFileSync } from "child_process";
@@ -1529,7 +1655,7 @@ function resolveStateDir(options = {}) {
   const stateDir2 = options.stateDir ?? process.env.OPENMATES_STATE_DIR?.trim();
   if (stateDir2) {
     if (!isAbsolute2(stateDir2)) throw new Error("OPENMATES_STATE_DIR must be an absolute path.");
-    return resolve(stateDir2);
+    return resolve2(stateDir2);
   }
   const profile = options.profile ?? process.env.OPENMATES_PROFILE?.trim();
   if (!profile) return join(homeDir, ".openmates");
@@ -1901,10 +2027,10 @@ function assertTrustedAccountId(expectedAccountId, actualAccountId) {
 // src/serverConfig.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join2, resolve as resolve2 } from "path";
+import { join as join2, resolve as resolve3 } from "path";
 var CONFIG_FILE = "server.json";
 function stateDir() {
-  return process.env.OPENMATES_STATE_DIR ? resolve2(process.env.OPENMATES_STATE_DIR) : join2(homedir3(), ".openmates");
+  return process.env.OPENMATES_STATE_DIR ? resolve3(process.env.OPENMATES_STATE_DIR) : join2(homedir3(), ".openmates");
 }
 function ensureStateDir2() {
   const STATE_DIR = stateDir();
@@ -1948,7 +2074,7 @@ function isOpenMatesDir(dir) {
 }
 function resolveServerPath(flags) {
   if (typeof flags.path === "string" && flags.path) {
-    const explicit = resolve2(flags.path);
+    const explicit = resolve3(flags.path);
     if (!isOpenMatesDir(explicit)) {
       throw new Error(
         `${explicit} does not appear to be an OpenMates installation (missing ${SOURCE_COMPOSE_MARKER} or ${IMAGE_COMPOSE_MARKER}).`
@@ -2162,14 +2288,14 @@ var OpenMatesWsClient = class {
     });
   }
   async open(timeoutMs = 1e4) {
-    await new Promise((resolve11, reject) => {
+    await new Promise((resolve12, reject) => {
       const timeout = setTimeout(
         () => reject(new Error("WebSocket open timeout")),
         timeoutMs
       );
       this.socket.once("open", () => {
         clearTimeout(timeout);
-        resolve11();
+        resolve12();
       });
       this.socket.once("error", (error) => {
         clearTimeout(timeout);
@@ -2198,10 +2324,10 @@ var OpenMatesWsClient = class {
     this.socket.send(JSON.stringify({ type, payload }));
   }
   sendAsync(type, payload) {
-    return new Promise((resolve11, reject) => {
+    return new Promise((resolve12, reject) => {
       this.socket.send(JSON.stringify({ type, payload }), (error) => {
         if (error) reject(error);
-        else resolve11();
+        else resolve12();
       });
     });
   }
@@ -2247,9 +2373,9 @@ var OpenMatesWsClient = class {
     return () => this.socket.off("message", onMessage);
   }
   waitForClose() {
-    return new Promise((resolve11) => {
+    return new Promise((resolve12) => {
       this.socket.once("close", (code, reason) => {
-        resolve11({ code, reason: reason.toString("utf-8") });
+        resolve12({ code, reason: reason.toString("utf-8") });
       });
     });
   }
@@ -2281,7 +2407,7 @@ var OpenMatesWsClient = class {
     return jobs;
   }
   waitForMessage(expectedType, predicate, timeoutMs = 2e4) {
-    return new Promise((resolve11, reject) => {
+    return new Promise((resolve12, reject) => {
       const seenTypes = /* @__PURE__ */ new Set();
       let predicateMisses = 0;
       const onMessage = (rawData) => {
@@ -2303,7 +2429,7 @@ var OpenMatesWsClient = class {
             return;
           }
           cleanup();
-          resolve11(parsed);
+          resolve12(parsed);
         } catch {
         }
       };
@@ -2341,7 +2467,7 @@ var OpenMatesWsClient = class {
    * Used by ensureSynced to consume the full phased-sync event stream.
    */
   collectMessages(terminatorType, timeoutMs = 9e4) {
-    return new Promise((resolve11, reject) => {
+    return new Promise((resolve12, reject) => {
       const collected = [];
       const onMessage = (rawData) => {
         try {
@@ -2354,7 +2480,7 @@ var OpenMatesWsClient = class {
           }
           if (parsed.type === terminatorType) {
             cleanup();
-            resolve11(collected);
+            resolve12(collected);
             return;
           }
           collected.push(parsed);
@@ -2367,7 +2493,7 @@ var OpenMatesWsClient = class {
       };
       const onClose = () => {
         cleanup();
-        resolve11(collected);
+        resolve12(collected);
       };
       const timeout = setTimeout(() => {
         cleanup();
@@ -2405,7 +2531,7 @@ var OpenMatesWsClient = class {
     const timeoutMs = options?.timeoutMs ?? 9e4;
     const onStream = options?.onStream;
     const asyncEmbedWaitMs = options?.asyncEmbedWaitMs ?? DEFAULT_ASYNC_EMBED_WAIT_MS;
-    return new Promise((resolve11, reject) => {
+    return new Promise((resolve12, reject) => {
       let latestContent = "";
       let messageId = null;
       let taskId = null;
@@ -2486,8 +2612,8 @@ var OpenMatesWsClient = class {
         if (!content || typeof content !== "object") return "";
         try {
           const root = content;
-          const text = root.content?.[0]?.content?.[0]?.text;
-          return typeof text === "string" ? text : "";
+          const text2 = root.content?.[0]?.content?.[0]?.text;
+          return typeof text2 === "string" ? text2 : "";
         } catch {
           return "";
         }
@@ -2500,7 +2626,7 @@ var OpenMatesWsClient = class {
         if (waitingForUserPayload) {
           if (pendingSubChatHandlers.size > 0) return;
           cleanup();
-          resolve11({
+          resolve12({
             status: "waiting_for_user",
             messageId,
             taskId,
@@ -2532,7 +2658,7 @@ var OpenMatesWsClient = class {
         if (processingEmbedIds.size > 0 && !asyncEmbedTimer) {
           asyncEmbedTimer = setTimeout(() => {
             cleanup();
-            resolve11({
+            resolve12({
               status: "completed",
               messageId,
               taskId,
@@ -2560,7 +2686,7 @@ var OpenMatesWsClient = class {
         }
         if (processingEmbedIds.size > 0) return;
         cleanup();
-        resolve11({
+        resolve12({
           status: "completed",
           messageId,
           taskId,
@@ -2878,7 +3004,7 @@ var OpenMatesWsClient = class {
       const onClose = () => {
         if (aiResponseDone) {
           cleanup();
-          resolve11({
+          resolve12({
             status: "completed",
             messageId,
             taskId,
@@ -3364,7 +3490,7 @@ function escapeRegExp(s) {
 }
 // src/embedCreator.ts
-import { randomUUID, createHash as createHash5, randomBytes, webcrypto as webcrypto3 } from "crypto";
+import { randomUUID as randomUUID2, createHash as createHash5, randomBytes, webcrypto as webcrypto3 } from "crypto";
 import { encode as toonEncode } from "@toon-format/toon";
 var cryptoApi3 = webcrypto3;
 var AES_GCM_IV_LENGTH3 = 12;
@@ -3428,7 +3554,7 @@ function toonEncodeContent(data) {
   }
 }
 function generateEmbedId() {
-  return randomUUID();
+  return randomUUID2();
 }
 function createEmbedRef(type, source) {
   const prefix = source.toLowerCase().replace(/^https?:\/\//, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || type;
@@ -3501,7 +3627,7 @@ async function encryptEmbed(embed, masterKey, chatKey, chatId, messageId, userId
 // src/fileEmbed.ts
 import { readFileSync as readFileSync4, statSync, existsSync as existsSync4 } from "fs";
-import { basename, extname, resolve as resolve3 } from "path";
+import { basename as basename2, extname as extname2, resolve as resolve4 } from "path";
 import { homedir as homedir4 } from "os";
 import { createHash as createHash6 } from "crypto";
 import JSZip2 from "jszip";
@@ -3613,7 +3739,7 @@ function isEnvFile(filename) {
   return lower === ".env" || lower.startsWith(".env.") || lower === ".envrc";
 }
 function getExt(filename) {
-  const ext = extname(filename).toLowerCase();
+  const ext = extname2(filename).toLowerCase();
   return ext.startsWith(".") ? ext.slice(1) : ext;
 }
 function isCodeOrTextFile(filename) {
@@ -3718,8 +3844,8 @@ function parseDelimitedLine(line, delimiter) {
   cells.push(current);
   return cells;
 }
-function delimitedTextToMarkdownTable(text, delimiter) {
-  const rows = text.split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line.length > 0).map((line) => parseDelimitedLine(line, delimiter));
+function delimitedTextToMarkdownTable(text2, delimiter) {
+  const rows = text2.split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line.length > 0).map((line) => parseDelimitedLine(line, delimiter));
   if (rows.length === 0) return "";
   const maxCols = Math.max(...rows.map((row) => row.length));
   const normalized = rows.map((row) => {
@@ -3766,7 +3892,7 @@ async function docxBufferToHtml(buffer) {
   const zip = await JSZip2.loadAsync(buffer);
   const documentXml = await zip.file("word/document.xml")?.async("string");
   if (!documentXml) return "";
-  const paragraphs = getXmlBlocks(documentXml, "p").map(getTextFromDocxParagraph).map((text) => text.trim()).filter(Boolean);
+  const paragraphs = getXmlBlocks(documentXml, "p").map(getTextFromDocxParagraph).map((text2) => text2.trim()).filter(Boolean);
   return paragraphs.map((paragraph) => `<p>${escapeHtml(paragraph)}</p>`).join("\n");
 }
 function columnLettersToIndex(letters) {
@@ -3870,9 +3996,9 @@ function processEnvFileZeroKnowledge(content) {
 }
 function resolvePath(filePath) {
   if (filePath.startsWith("~/")) {
-    return resolve3(homedir4(), filePath.slice(2));
+    return resolve4(homedir4(), filePath.slice(2));
   }
-  return resolve3(filePath);
+  return resolve4(filePath);
 }
 function processFiles(filePaths, redactor) {
   const embeds = [];
@@ -3880,7 +4006,7 @@ function processFiles(filePaths, redactor) {
   const blocked = [];
   for (const rawPath of filePaths) {
     const resolvedPath = resolvePath(rawPath);
-    const filename = basename(resolvedPath);
+    const filename = basename2(resolvedPath);
     const ext = getExt(filename);
     if (!existsSync4(resolvedPath)) {
       errors.push({ path: rawPath, error: "File not found" });
@@ -3962,7 +4088,7 @@ async function processFilesAsync(filePaths, redactor) {
   const blocked = [];
   for (const rawPath of filePaths) {
     const resolvedPath = resolvePath(rawPath);
-    const filename = basename(resolvedPath);
+    const filename = basename2(resolvedPath);
     const ext = getExt(filename);
     if (!isDocFile(filename) && !isSheetFile(filename)) {
       syncPaths.push(rawPath);
@@ -4395,7 +4521,7 @@ function buildEmbedShareUrl(origin, embedId, blob) {
 }
 // src/connectedAccountImport.ts
-import { createHash as createHash7, randomUUID as randomUUID2, webcrypto as webcrypto5 } from "crypto";
+import { createHash as createHash7, randomUUID as randomUUID3, webcrypto as webcrypto5 } from "crypto";
 var TRANSFER_PREFIX = "OMCA1.";
 var SUPPORTED_KDF_ITERATIONS = 1e5;
 async function decryptConnectedAccountCliTransferPayload(encryptedPayload, passcode) {
@@ -4425,7 +4551,7 @@ async function decryptConnectedAccountCliTransferPayload(encryptedPayload, passc
   }
 }
 async function buildEncryptedConnectedAccountImportRow(params) {
-  const accountId = randomUUID2();
+  const accountId = randomUUID3();
   const providerId = params.payload.provider_id;
   const appId = normalizeAppId(params.payload.app_id || appIdForProvider(providerId));
   const capabilities = normalizeCapabilities(params.payload.capabilities);
@@ -4629,7 +4755,7 @@ import { connect as connectTcp } from "net";
 import { arch as nodeArch, platform as nodePlatform } from "os";
 import { stdin, stderr } from "process";
 import { createInterface } from "readline/promises";
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 import { setTimeout as sleep } from "timers/promises";
 var PROTON_BRIDGE_PROVIDER_ID = "protonmail_bridge";
 var PROTON_BRIDGE_APP_ID = "mail";
@@ -4650,8 +4776,8 @@ function rejectProtonCredentialFlags(argsOrFlags) {
     throw new Error(`${rejected.split("=")[0]} is not allowed. Bridge credentials must be read privately from Proton Bridge or a hidden prompt.`);
   }
 }
-function redactProtonBridgeSecrets(text) {
-  return text.replace(CREDENTIAL_VALUE_RE, "$1<redacted>");
+function redactProtonBridgeSecrets(text2) {
+  return text2.replace(CREDENTIAL_VALUE_RE, "$1<redacted>");
 }
 function containsCredentialLikeField(value) {
   return containsCredentialLikeKey(value);
@@ -4781,7 +4907,7 @@ function validateProtonBridgeCredentials(credentials) {
 }
 async function validateProtonBridgeImap(credentials, timeoutMs = DEFAULT_IMAP_TIMEOUT_MS) {
   validateProtonBridgeCredentials(credentials);
-  await new Promise((resolve11, reject) => {
+  await new Promise((resolve12, reject) => {
     const socket = connectTcp({ host: credentials.imapHost, port: credentials.imapPort });
     const timer = setTimeout(() => {
       socket.destroy();
@@ -4790,7 +4916,7 @@ async function validateProtonBridgeImap(credentials, timeoutMs = DEFAULT_IMAP_TI
     socket.once("connect", () => {
       clearTimeout(timer);
       socket.end();
-      resolve11();
+      resolve12();
     });
     socket.once("error", (error) => {
       clearTimeout(timer);
@@ -4838,7 +4964,7 @@ async function runProtonBridgeConnector(client, options = {}, deps = {}) {
     validateProtonBridgeCredentials(credentials);
     await (deps.validateImap ?? validateProtonBridgeImap)(credentials);
     registration = await client.registerLocalConnectedAccountConnector(createProtonLocalConnectorRegistration({
-      connectorInstanceId: deps.connectorInstanceId ?? randomUUID3(),
+      connectorInstanceId: deps.connectorInstanceId ?? randomUUID4(),
       credentials,
       write
     }));
@@ -4908,7 +5034,7 @@ var ProtonDelayedSendQueue = class {
     this.delayMs = delayMs;
   }
   queue(payload, deliver, now = Date.now()) {
-    const id = randomUUID3();
+    const id = randomUUID4();
     const job = {
       id,
       status: "queued",
@@ -4967,8 +5093,8 @@ async function localConnectorRequestLoop(client, params) {
   const ws = await client.openLocalConnectorWebSocket();
   const sendQueue = new ProtonDelayedSendQueue();
   let resolveOnce = null;
-  const onceHandled = new Promise((resolve11) => {
-    resolveOnce = resolve11;
+  const onceHandled = new Promise((resolve12) => {
+    resolveOnce = resolve12;
   });
   const removeListener = ws.onLocalConnectorRequest((request) => {
     void handleLocalConnectorRequest(client, request, params, sendQueue).finally(() => {
@@ -5036,8 +5162,8 @@ async function handleLocalConnectorRequest(client, request, params, sendQueue) {
 }
 async function waitForAbort(signal) {
   if (signal.aborted) return;
-  await new Promise((resolve11) => {
-    signal.addEventListener("abort", () => resolve11(), { once: true });
+  await new Promise((resolve12) => {
+    signal.addEventListener("abort", () => resolve12(), { once: true });
   });
 }
 async function searchProtonBridgeImap(credentials, arguments_) {
@@ -5048,7 +5174,7 @@ async function searchProtonBridgeImap(credentials, arguments_) {
   const limit = clampLimit(arguments_.limit);
   const imap = await openTextSocket(credentials.imapHost, credentials.imapPort, IMAP_COMMAND_TIMEOUT_MS);
   try {
-    await imap.readUntil((text) => /^\* OK/im.test(text));
+    await imap.readUntil((text2) => /^\* OK/im.test(text2));
     await imap.command(`LOGIN ${quoteImap(credentials.imapUsername)} ${quoteImap(credentials.imapPassword)}`);
     await imap.command(`SELECT ${quoteImap(mailbox)}`);
     const searchResponse = await imap.command(buildImapSearchCommand({ query, startDate, endDate }));
@@ -5093,25 +5219,25 @@ async function sendProtonBridgeSmtp(credentials, payload) {
   const subject = typeof payload.subject === "string" ? payload.subject.slice(0, 300) : "";
   const bodyText = typeof payload.body_text === "string" ? payload.body_text : typeof payload.body === "string" ? payload.body : "";
   const from = credentials.smtpUsername || credentials.imapUsername;
-  const messageId = `<om-${randomUUID3()}@local.openmates>`;
+  const messageId = `<om-${randomUUID4()}@local.openmates>`;
   const smtp = await openTextSocket(credentials.smtpHost, credentials.smtpPort, SMTP_COMMAND_TIMEOUT_MS);
   try {
-    await smtp.readUntil((text) => /^220[ -]/m.test(text));
-    await smtp.rawCommand("EHLO openmates.local", (text) => /^250\s/m.test(text), /^250[ -]/m);
+    await smtp.readUntil((text2) => /^220[ -]/m.test(text2));
+    await smtp.rawCommand("EHLO openmates.local", (text2) => /^250\s/m.test(text2), /^250[ -]/m);
     const auth = Buffer.from(`\0${credentials.smtpUsername || credentials.imapUsername}\0${credentials.smtpPassword || credentials.imapPassword}`).toString("base64");
     try {
-      await smtp.rawCommand(`AUTH PLAIN ${auth}`, (text) => /^235[ -]/m.test(text), /^235[ -]/m);
+      await smtp.rawCommand(`AUTH PLAIN ${auth}`, (text2) => /^235[ -]/m.test(text2), /^235[ -]/m);
     } catch {
       throw new Error("Local SMTP authentication failed.");
     }
-    await smtp.rawCommand(`MAIL FROM:<${from}>`, (text) => /^250[ -]/m.test(text), /^250[ -]/m);
+    await smtp.rawCommand(`MAIL FROM:<${from}>`, (text2) => /^250[ -]/m.test(text2), /^250[ -]/m);
     for (const recipient of to) {
-      await smtp.rawCommand(`RCPT TO:<${recipient}>`, (text) => /^250[ -]/m.test(text), /^250[ -]/m);
+      await smtp.rawCommand(`RCPT TO:<${recipient}>`, (text2) => /^250[ -]/m.test(text2), /^250[ -]/m);
     }
-    await smtp.rawCommand("DATA", (text) => /^354[ -]/m.test(text), /^354[ -]/m);
+    await smtp.rawCommand("DATA", (text2) => /^354[ -]/m.test(text2), /^354[ -]/m);
     await smtp.rawCommand(`${buildSmtpMessage({ from, to, subject, bodyText, messageId })}\r
-.`, (text) => /^250[ -]/m.test(text), /^250[ -]/m);
-    await smtp.rawCommand("QUIT", (text) => /^221[ -]/m.test(text), /^221[ -]/m).catch(() => void 0);
+.`, (text2) => /^250[ -]/m.test(text2), /^250[ -]/m);
+    await smtp.rawCommand("QUIT", (text2) => /^221[ -]/m.test(text2), /^221[ -]/m).catch(() => void 0);
     return { provider: PROTON_BRIDGE_PROVIDER_ID, message_id: messageId, delivered: true };
   } finally {
     smtp.close();
@@ -5199,14 +5325,14 @@ async function openTextSocket(host, port, timeoutMs) {
   socket.on("data", (chunk) => {
     buffer += String(chunk);
   });
-  await new Promise((resolve11, reject) => {
+  await new Promise((resolve12, reject) => {
     const timer = setTimeout(() => {
       socket.destroy();
       reject(new Error(`Timed out connecting to ${host}:${port}.`));
     }, timeoutMs);
     socket.once("connect", () => {
       clearTimeout(timer);
-      resolve11();
+      resolve12();
     });
     socket.once("error", (error) => {
       clearTimeout(timer);
@@ -5223,7 +5349,7 @@ async function openTextSocket(host, port, timeoutMs) {
       buffer = "";
       socket.write(`${tag} ${command}\r
 `);
-      const response = await waitForSocketText(socket, () => buffer, (text) => marker.test(text), timeoutMs);
+      const response = await waitForSocketText(socket, () => buffer, (text2) => marker.test(text2), timeoutMs);
       if (expected && !expected.test(response)) {
         throw new Error(`Local mail command failed: ${redactProtonBridgeSecrets(response.split(/\r?\n/).slice(-2).join(" "))}`);
       }
@@ -5246,11 +5372,11 @@ async function openTextSocket(host, port, timeoutMs) {
   };
 }
 async function waitForSocketText(socket, getBuffer, done, timeoutMs) {
-  return await new Promise((resolve11, reject) => {
+  return await new Promise((resolve12, reject) => {
     const timer = setTimeout(() => cleanup(() => reject(new Error("Timed out waiting for local mail server response."))), timeoutMs);
     const check = () => {
-      const text = getBuffer();
-      if (done(text)) cleanup(() => resolve11(text));
+      const text2 = getBuffer();
+      if (done(text2)) cleanup(() => resolve12(text2));
     };
     const onData = () => check();
     const onError = (error) => cleanup(() => reject(error));
@@ -5275,7 +5401,7 @@ function startProtonBridgeProcess(command, args) {
       if (child.exitCode !== null || child.killed) return;
       child.kill("SIGTERM");
       await Promise.race([
-        new Promise((resolve11) => child.once("exit", () => resolve11())),
+        new Promise((resolve12) => child.once("exit", () => resolve12())),
         sleep(2e3).then(() => {
           if (child.exitCode === null && !child.killed) child.kill("SIGKILL");
         })
@@ -5374,7 +5500,7 @@ async function captureOrPromptBridgeCredentials(command, args) {
   }
 }
 async function captureProtonBridgeInfo(command, args) {
-  return await new Promise((resolve11, reject) => {
+  return await new Promise((resolve12, reject) => {
     const child = spawn2(command, args, { stdio: "pipe" });
     let output = "";
     let errorOutput = "";
@@ -5394,7 +5520,7 @@ async function captureProtonBridgeInfo(command, args) {
     });
     child.once("exit", () => {
       clearTimeout(timer);
-      if (output.trim()) resolve11(output);
+      if (output.trim()) resolve12(output);
       else reject(new Error(redactProtonBridgeSecrets(errorOutput || "Proton Bridge info produced no output.")));
     });
     child.stdin.write("info\nquit\n");
@@ -5424,11 +5550,11 @@ async function promptHidden(prompt) {
   const wasRaw = stdin.isRaw === true;
   stdin.setRawMode(true);
   stdin.resume();
-  return await new Promise((resolve11, reject) => {
+  return await new Promise((resolve12, reject) => {
     let value = "";
     const onData = (chunk) => {
-      const text = chunk.toString("utf8");
-      for (const char of text) {
+      const text2 = chunk.toString("utf8");
+      for (const char of text2) {
         if (char === "") {
           cleanup();
           reject(new Error("Bridge credential prompt cancelled."));
@@ -5437,7 +5563,7 @@ async function promptHidden(prompt) {
         if (char === "\r" || char === "\n") {
           cleanup();
           stderr.write("\n");
-          resolve11(value);
+          resolve12(value);
           return;
         }
         if (char === "\x7F" || char === "\b") {
@@ -5460,7 +5586,7 @@ function stripTimer(job) {
 }
 // src/tasksCli.ts
-import { createHash as createHash8, createHmac as createHmac2, hkdfSync as hkdfSync2, randomBytes as randomBytes2, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash8, createHmac as createHmac2, hkdfSync as hkdfSync2, randomBytes as randomBytes2, randomUUID as randomUUID5 } from "crypto";
 // src/objectSlugs.ts
 import { createHmac, hkdfSync } from "crypto";
@@ -5723,105 +5849,105 @@ async function buildCreateTaskActivityInput(task, masterKey, input) {
     created_at: input.createdAt ?? nowSeconds()
   };
 }
-async function decryptTaskActivityEntry(task, masterKey, record) {
+async function decryptTaskActivityEntry(task, masterKey, record2) {
   const base = {
-    entryId: record.entry_id,
-    taskId: record.task_id,
-    kind: record.kind,
-    actorType: record.actor_type,
-    actorHash: record.actor_hash,
-    actorIdentity: record.actor_identity ?? null,
-    actorDisplayName: record.actor_display_name ?? null,
-    actorProfileImageUrl: record.actor_profile_image_url ?? null,
-    authorHash: record.author_hash ?? record.actor_hash ?? null,
-    eventType: record.event_type,
-    sourceSurface: record.source_surface,
-    previousStatus: record.previous_status ?? null,
-    nextStatus: record.next_status ?? null,
-    createdAt: record.created_at,
-    deletedAt: record.deleted_at ?? null,
-    deletedByHash: record.deleted_by_hash ?? null,
-    deletedByDisplayName: record.deleted_by_display_name ?? null,
-    embedRefs: record.kind === "tombstone" ? [] : record.embed_refs
+    entryId: record2.entry_id,
+    taskId: record2.task_id,
+    kind: record2.kind,
+    actorType: record2.actor_type,
+    actorHash: record2.actor_hash,
+    actorIdentity: record2.actor_identity ?? null,
+    actorDisplayName: record2.actor_display_name ?? null,
+    actorProfileImageUrl: record2.actor_profile_image_url ?? null,
+    authorHash: record2.author_hash ?? record2.actor_hash ?? null,
+    eventType: record2.event_type,
+    sourceSurface: record2.source_surface,
+    previousStatus: record2.previous_status ?? null,
+    nextStatus: record2.next_status ?? null,
+    createdAt: record2.created_at,
+    deletedAt: record2.deleted_at ?? null,
+    deletedByHash: record2.deleted_by_hash ?? null,
+    deletedByDisplayName: record2.deleted_by_display_name ?? null,
+    embedRefs: record2.kind === "tombstone" ? [] : record2.embed_refs
   };
-  if (record.kind === "tombstone") return base;
-  if (record.kind !== "comment") return base;
-  if (!record.encrypted_message) {
-    throw new Error(`Task Activity entry ${record.entry_id} is missing encrypted content.`);
+  if (record2.kind === "tombstone") return base;
+  if (record2.kind !== "comment") return base;
+  if (!record2.encrypted_message) {
+    throw new Error(`Task Activity entry ${record2.entry_id} is missing encrypted content.`);
   }
   const taskKey = await taskKeyFromRecord(task.encrypted, masterKey);
-  const message = await decryptWithAesGcmCombined(record.encrypted_message, taskKey, `task_activity_comment:${task.taskId}:${record.entry_id}:v1`);
-  if (message === null) throw new Error(`Failed to decrypt Task Activity entry ${record.entry_id}.`);
-  const embedKeyMaterial = record.encrypted_embed_key_material ? await decryptWithAesGcmCombined(record.encrypted_embed_key_material, taskKey, `task_activity_embed_keys:${task.taskId}:${record.entry_id}:v1`) : null;
-  if (record.encrypted_embed_key_material && embedKeyMaterial === null) {
-    throw new Error(`Failed to decrypt Task Activity embed key material ${record.entry_id}.`);
+  const message = await decryptWithAesGcmCombined(record2.encrypted_message, taskKey, `task_activity_comment:${task.taskId}:${record2.entry_id}:v1`);
+  if (message === null) throw new Error(`Failed to decrypt Task Activity entry ${record2.entry_id}.`);
+  const embedKeyMaterial = record2.encrypted_embed_key_material ? await decryptWithAesGcmCombined(record2.encrypted_embed_key_material, taskKey, `task_activity_embed_keys:${task.taskId}:${record2.entry_id}:v1`) : null;
+  if (record2.encrypted_embed_key_material && embedKeyMaterial === null) {
+    throw new Error(`Failed to decrypt Task Activity embed key material ${record2.entry_id}.`);
   }
   return { ...base, message, ...embedKeyMaterial !== null ? { embedKeyMaterial } : {} };
 }
 async function decryptTaskActivityEntries(task, masterKey, records) {
   const entries = [];
-  for (const record of records) entries.push(await decryptTaskActivityEntry(task, masterKey, record));
+  for (const record2 of records) entries.push(await decryptTaskActivityEntry(task, masterKey, record2));
   return entries;
 }
-async function decryptUserTask(record, masterKey) {
-  if (record.source === "workflow_run") return workflowProjectionToTask(record);
-  if (typeof record.version !== "number") throw new Error(`Task ${record.task_id} is missing version.`);
-  const taskKey = await taskKeyFromRecord(record, masterKey);
-  const labels = parseStringArray(await decryptOptional(record.encrypted_labels || record.encrypted_tags, taskKey));
-  const linkedProjectIds = parseStringArray(await decryptOptional(record.encrypted_linked_project_ids, taskKey));
-  const externalChat = record.external_chat_provider && record.encrypted_external_chat_id ? {
-    provider: record.external_chat_provider,
-    id: await decryptOptional(record.encrypted_external_chat_id, taskKey),
-    title: await decryptOptional(record.encrypted_external_chat_title, taskKey)
+async function decryptUserTask(record2, masterKey) {
+  if (record2.source === "workflow_run") return workflowProjectionToTask(record2);
+  if (typeof record2.version !== "number") throw new Error(`Task ${record2.task_id} is missing version.`);
+  const taskKey = await taskKeyFromRecord(record2, masterKey);
+  const labels = parseStringArray(await decryptOptional(record2.encrypted_labels || record2.encrypted_tags, taskKey));
+  const linkedProjectIds = parseStringArray(await decryptOptional(record2.encrypted_linked_project_ids, taskKey));
+  const externalChat = record2.external_chat_provider && record2.encrypted_external_chat_id ? {
+    provider: record2.external_chat_provider,
+    id: await decryptOptional(record2.encrypted_external_chat_id, taskKey),
+    title: await decryptOptional(record2.encrypted_external_chat_title, taskKey)
   } : null;
   return {
-    taskId: record.task_id,
-    shortId: record.short_id || deriveShortId(record),
-    slug: await decryptObjectSlug(record.encrypted_slug, taskKey),
-    title: await decryptOptional(record.encrypted_title, taskKey) || "(untitled task)",
-    description: await decryptOptional(record.encrypted_description, taskKey),
+    taskId: record2.task_id,
+    shortId: record2.short_id || deriveShortId(record2),
+    slug: await decryptObjectSlug(record2.encrypted_slug, taskKey),
+    title: await decryptOptional(record2.encrypted_title, taskKey) || "(untitled task)",
+    description: await decryptOptional(record2.encrypted_description, taskKey),
     labels,
     tags: labels,
-    latestInstruction: await decryptOptional(record.encrypted_latest_instruction, taskKey),
-    status: record.status,
-    assigneeType: record.assignee_type,
-    assigneeIdentity: record.assignee_identity ?? null,
-    assigneeHash: record.assignee_hash ?? null,
-    primaryChatId: record.primary_chat_id ?? null,
+    latestInstruction: await decryptOptional(record2.encrypted_latest_instruction, taskKey),
+    status: record2.status,
+    assigneeType: record2.assignee_type,
+    assigneeIdentity: record2.assignee_identity ?? null,
+    assigneeHash: record2.assignee_hash ?? null,
+    primaryChatId: record2.primary_chat_id ?? null,
     externalChat,
-    linkedProjectIds: linkedProjectIds.length > 0 ? linkedProjectIds : record.linked_project_ids ?? [],
-    planId: record.plan_id ?? null,
-    dueAt: record.due_at ?? null,
-    priority: record.priority ?? 0,
-    priorityLevel: taskPriorityLevel(record.priority),
-    position: record.position ?? 0,
-    queueState: record.queue_state ?? "none",
-    blockedReasonCode: record.blocked_reason_code ?? null,
-    blockedReason: await decryptOptional(record.encrypted_blocked_reason, taskKey),
-    aiExecutionState: record.ai_execution_state ?? null,
-    version: record.version,
-    encrypted: record
+    linkedProjectIds: linkedProjectIds.length > 0 ? linkedProjectIds : record2.linked_project_ids ?? [],
+    planId: record2.plan_id ?? null,
+    dueAt: record2.due_at ?? null,
+    priority: record2.priority ?? 0,
+    priorityLevel: taskPriorityLevel(record2.priority),
+    position: record2.position ?? 0,
+    queueState: record2.queue_state ?? "none",
+    blockedReasonCode: record2.blocked_reason_code ?? null,
+    blockedReason: await decryptOptional(record2.encrypted_blocked_reason, taskKey),
+    aiExecutionState: record2.ai_execution_state ?? null,
+    version: record2.version,
+    encrypted: record2
   };
 }
-function workflowProjectionToTask(record) {
-  const blockedReason = record.blocked_reason_code ?? record.blocked_reason ?? null;
+function workflowProjectionToTask(record2) {
+  const blockedReason = record2.blocked_reason_code ?? record2.blocked_reason ?? null;
   return {
-    taskId: record.task_id,
+    taskId: record2.task_id,
     source: "workflow_run",
-    projectionKind: record.projection_kind ?? null,
-    workflowId: record.workflow_id ?? null,
-    workflowRunId: record.workflow_run_id ?? null,
-    triggerId: record.trigger_id ?? null,
-    canCancel: Boolean(record.can_cancel),
-    canDelete: Boolean(record.can_delete),
-    shortId: record.short_id || workflowProjectionShortId(record),
+    projectionKind: record2.projection_kind ?? null,
+    workflowId: record2.workflow_id ?? null,
+    workflowRunId: record2.workflow_run_id ?? null,
+    triggerId: record2.trigger_id ?? null,
+    canCancel: Boolean(record2.can_cancel),
+    canDelete: Boolean(record2.can_delete),
+    shortId: record2.short_id || workflowProjectionShortId(record2),
     slug: "",
-    title: record.title || "Workflow run",
-    description: record.blocked_message ?? "",
+    title: record2.title || "Workflow run",
+    description: record2.blocked_message ?? "",
     labels: [],
     tags: [],
     latestInstruction: "",
-    status: record.status,
+    status: record2.status,
     assigneeType: "user",
     assigneeIdentity: null,
     assigneeHash: null,
@@ -5829,17 +5955,17 @@ function workflowProjectionToTask(record) {
     externalChat: null,
     linkedProjectIds: [],
     planId: null,
-    dueAt: record.due_at ?? null,
-    priority: record.priority ?? 0,
-    priorityLevel: taskPriorityLevel(record.priority),
-    position: record.position ?? 0,
-    queueState: String(record.run_status ?? "workflow"),
+    dueAt: record2.due_at ?? null,
+    priority: record2.priority ?? 0,
+    priorityLevel: taskPriorityLevel(record2.priority),
+    position: record2.position ?? 0,
+    queueState: String(record2.run_status ?? "workflow"),
     blockedReasonCode: blockedReason,
-    blockedReason: record.blocked_message ?? "",
+    blockedReason: record2.blocked_message ?? "",
     aiExecutionState: null,
     readOnly: true,
-    version: typeof record.version === "number" ? record.version : 1,
-    encrypted: record
+    version: typeof record2.version === "number" ? record2.version : 1,
+    encrypted: record2
   };
 }
 async function buildBlockUserTaskInput(task, masterKey, input) {
@@ -5851,23 +5977,23 @@ async function buildBlockUserTaskInput(task, masterKey, input) {
     ...encryptedBlockedReason ? { encrypted_blocked_reason: encryptedBlockedReason } : {}
   };
 }
-function workflowProjectionShortId(record) {
-  const stableId = record.workflow_run_id || record.task_id;
+function workflowProjectionShortId(record2) {
+  const stableId = record2.workflow_run_id || record2.task_id;
   return `WF-${createHash8("sha256").update(stableId).digest("hex").slice(0, 6).toUpperCase()}`;
 }
 async function decryptUserTasks(records, masterKey) {
   const output = [];
-  for (const record of records) output.push(await decryptUserTask(record, masterKey));
+  for (const record2 of records) output.push(await decryptUserTask(record2, masterKey));
   return output;
 }
 async function decryptUserTasksForCli(records, masterKey, warn) {
   const output = [];
-  for (const record of records) {
+  for (const record2 of records) {
     try {
-      output.push(await decryptUserTask(record, masterKey));
+      output.push(await decryptUserTask(record2, masterKey));
     } catch {
-      const identifier = record.short_id || record.task_id || "unknown";
-      warn(`Warning: skipped undecryptable task ${identifier} (${record.task_id || "unknown"}).`);
+      const identifier = record2.short_id || record2.task_id || "unknown";
+      warn(`Warning: skipped undecryptable task ${identifier} (${record2.task_id || "unknown"}).`);
     }
   }
   return output;
@@ -5982,10 +6108,10 @@ function columnTitle(status) {
 function assigneeLabel(task) {
   return taskIdentityDisplayName(task.assigneeIdentity) ?? (task.assigneeType === "unassigned" ? "unassigned" : task.assigneeHash ?? "user");
 }
-async function taskKeyFromRecord(record, masterKey) {
-  if (!record.encrypted_task_key) throw new Error(`Task ${record.task_id} is missing encrypted task key.`);
-  const taskKey = await decryptBytesWithAesGcm(record.encrypted_task_key, masterKey);
-  if (!taskKey) throw new Error(`Failed to decrypt task key for ${record.task_id}.`);
+async function taskKeyFromRecord(record2, masterKey) {
+  if (!record2.encrypted_task_key) throw new Error(`Task ${record2.task_id} is missing encrypted task key.`);
+  const taskKey = await decryptBytesWithAesGcm(record2.encrypted_task_key, masterKey);
+  if (!taskKey) throw new Error(`Failed to decrypt task key for ${record2.task_id}.`);
   return taskKey;
 }
 async function decryptOptional(value, key) {
@@ -6001,9 +6127,9 @@ function parseStringArray(value) {
     return [];
   }
 }
-function deriveShortId(record) {
-  const prefix = record.short_id_prefix || DEFAULT_STANDALONE_PREFIX;
-  const source = record.task_id || `${record.created_at ?? ""}-${record.position ?? ""}`;
+function deriveShortId(record2) {
+  const prefix = record2.short_id_prefix || DEFAULT_STANDALONE_PREFIX;
+  const source = record2.task_id || `${record2.created_at ?? ""}-${record2.position ?? ""}`;
   const digest = createHash8("sha256").update(source).digest("hex").slice(0, 4).toUpperCase();
   return `${prefix}-${parseInt(digest, 16) % 1e4}`;
 }
@@ -6014,7 +6140,7 @@ function formatActivityTime(value) {
   return new Date(value * 1e3).toISOString();
 }
 function randomUUIDCompat() {
-  return randomUUID4();
+  return randomUUID5();
 }
 function pad(value, length) {
   return truncate(value, length).padEnd(length);
@@ -6024,7 +6150,7 @@ function truncate(value, length) {
 }
 // src/plansCli.ts
-import { createHash as createHash9, randomBytes as randomBytes3, randomUUID as randomUUID5 } from "crypto";
+import { createHash as createHash9, randomBytes as randomBytes3, randomUUID as randomUUID6 } from "crypto";
 var PLAN_STATUSES = ["draft", "checking_assumptions", "awaiting_confirmation", "active", "executing", "running_checks", "blocked", "completed", "archived"];
 var LEARNING_TYPES = ["workflow_improvement", "agent_instruction_improvement"];
 var LEARNING_TARGET_KINDS = ["workflow", "project_agent_instructions"];
@@ -6225,49 +6351,49 @@ async function buildUserPlanKeyWrappers(input) {
   }
   return wrappers;
 }
-async function decryptUserPlan(record, masterKey) {
-  if (typeof record.version !== "number") throw new Error(`Plan ${record.plan_id} is missing version.`);
-  const planKey = await planKeyFromRecord(record, masterKey);
-  const linkedProjectIds = parseStringArray2(await decryptOptional2(record.encrypted_linked_project_ids, planKey));
+async function decryptUserPlan(record2, masterKey) {
+  if (typeof record2.version !== "number") throw new Error(`Plan ${record2.plan_id} is missing version.`);
+  const planKey = await planKeyFromRecord(record2, masterKey);
+  const linkedProjectIds = parseStringArray2(await decryptOptional2(record2.encrypted_linked_project_ids, planKey));
   return {
-    planId: record.plan_id,
-    shortId: deriveShortId2(record),
-    slug: await decryptObjectSlug(record.encrypted_slug, planKey),
-    title: await decryptOptional2(record.encrypted_title, planKey) || "(untitled plan)",
-    goal: await decryptOptional2(record.encrypted_goal, planKey),
-    scopeIn: await decryptOptional2(record.encrypted_scope_in, planKey),
-    scopeOut: await decryptOptional2(record.encrypted_scope_out, planKey),
-    userFlows: parseUserFlows(await decryptOptional2(record.encrypted_user_flows, planKey)),
-    assumptions: await decryptOptional2(record.encrypted_assumptions, planKey),
-    openQuestions: await decryptOptional2(record.encrypted_open_questions, planKey),
-    constraints: await decryptOptional2(record.encrypted_constraints, planKey),
-    decisions: await decryptOptional2(record.encrypted_decisions, planKey),
-    risks: await decryptOptional2(record.encrypted_risks, planKey),
-    referencePatterns: await decryptOptional2(record.encrypted_reference_patterns, planKey),
-    context: await decryptOptional2(record.encrypted_context, planKey),
-    status: record.status,
-    primaryChatId: record.primary_chat_id ?? null,
-    linkedProjectIds: linkedProjectIds.length > 0 ? linkedProjectIds : record.linked_project_ids ?? [],
-    plannerFocusId: record.planner_focus_id ?? null,
-    version: record.version,
-    createdAt: record.created_at ?? 0,
-    updatedAt: record.updated_at ?? 0,
-    completedAt: record.completed_at ?? null,
-    encrypted: record
+    planId: record2.plan_id,
+    shortId: deriveShortId2(record2),
+    slug: await decryptObjectSlug(record2.encrypted_slug, planKey),
+    title: await decryptOptional2(record2.encrypted_title, planKey) || "(untitled plan)",
+    goal: await decryptOptional2(record2.encrypted_goal, planKey),
+    scopeIn: await decryptOptional2(record2.encrypted_scope_in, planKey),
+    scopeOut: await decryptOptional2(record2.encrypted_scope_out, planKey),
+    userFlows: parseUserFlows(await decryptOptional2(record2.encrypted_user_flows, planKey)),
+    assumptions: await decryptOptional2(record2.encrypted_assumptions, planKey),
+    openQuestions: await decryptOptional2(record2.encrypted_open_questions, planKey),
+    constraints: await decryptOptional2(record2.encrypted_constraints, planKey),
+    decisions: await decryptOptional2(record2.encrypted_decisions, planKey),
+    risks: await decryptOptional2(record2.encrypted_risks, planKey),
+    referencePatterns: await decryptOptional2(record2.encrypted_reference_patterns, planKey),
+    context: await decryptOptional2(record2.encrypted_context, planKey),
+    status: record2.status,
+    primaryChatId: record2.primary_chat_id ?? null,
+    linkedProjectIds: linkedProjectIds.length > 0 ? linkedProjectIds : record2.linked_project_ids ?? [],
+    plannerFocusId: record2.planner_focus_id ?? null,
+    version: record2.version,
+    createdAt: record2.created_at ?? 0,
+    updatedAt: record2.updated_at ?? 0,
+    completedAt: record2.completed_at ?? null,
+    encrypted: record2
   };
 }
 async function decryptUserPlans(records, masterKey) {
   const output = [];
-  for (const record of records) output.push(await decryptUserPlan(record, masterKey));
+  for (const record2 of records) output.push(await decryptUserPlan(record2, masterKey));
   return output;
 }
 async function decryptUserPlansForCli(records, masterKey, warn) {
   const output = [];
-  for (const record of records) {
+  for (const record2 of records) {
     try {
-      output.push(await decryptUserPlan(record, masterKey));
+      output.push(await decryptUserPlan(record2, masterKey));
     } catch {
-      warn(`Warning: skipped undecryptable plan ${record.plan_id || "unknown"}.`);
+      warn(`Warning: skipped undecryptable plan ${record2.plan_id || "unknown"}.`);
     }
   }
   return output;
@@ -6317,34 +6443,34 @@ async function buildUpdatePlanLearningInput(plan, masterKey, input) {
   if (input.rejectionReason !== void 0) patch.encrypted_rejection_reason = await encryptWithAesGcmCombined(input.rejectionReason, planKey);
   return patch;
 }
-async function decryptPlanLearning(plan, record, masterKey) {
+async function decryptPlanLearning(plan, record2, masterKey) {
   const planKey = await planKeyFromRecord(plan.encrypted, masterKey);
   return {
-    learningId: record.learning_id,
-    type: record.type,
-    targetKind: record.target_kind,
-    status: record.status ?? "draft",
-    severity: record.severity ?? null,
-    confidence: record.confidence ?? null,
-    linkedTaskIds: record.linked_task_ids ?? [],
-    linkedCheckIds: record.linked_check_ids ?? [],
-    appliedTaskId: record.applied_task_id ?? null,
-    title: await decryptOptional2(record.encrypted_title, planKey) || "(untitled learning)",
-    observation: await decryptOptional2(record.encrypted_observation, planKey),
-    rootCause: await decryptOptional2(record.encrypted_root_cause, planKey),
-    suggestedChange: await decryptOptional2(record.encrypted_suggested_change, planKey),
-    evidenceSummary: await decryptOptional2(record.encrypted_evidence_summary, planKey),
-    taskDraft: await decryptOptional2(record.encrypted_task_draft, planKey),
-    rejectionReason: await decryptOptional2(record.encrypted_rejection_reason, planKey),
-    version: record.version ?? 1,
-    createdAt: record.created_at ?? 0,
-    updatedAt: record.updated_at ?? 0,
-    encrypted: record
+    learningId: record2.learning_id,
+    type: record2.type,
+    targetKind: record2.target_kind,
+    status: record2.status ?? "draft",
+    severity: record2.severity ?? null,
+    confidence: record2.confidence ?? null,
+    linkedTaskIds: record2.linked_task_ids ?? [],
+    linkedCheckIds: record2.linked_check_ids ?? [],
+    appliedTaskId: record2.applied_task_id ?? null,
+    title: await decryptOptional2(record2.encrypted_title, planKey) || "(untitled learning)",
+    observation: await decryptOptional2(record2.encrypted_observation, planKey),
+    rootCause: await decryptOptional2(record2.encrypted_root_cause, planKey),
+    suggestedChange: await decryptOptional2(record2.encrypted_suggested_change, planKey),
+    evidenceSummary: await decryptOptional2(record2.encrypted_evidence_summary, planKey),
+    taskDraft: await decryptOptional2(record2.encrypted_task_draft, planKey),
+    rejectionReason: await decryptOptional2(record2.encrypted_rejection_reason, planKey),
+    version: record2.version ?? 1,
+    createdAt: record2.created_at ?? 0,
+    updatedAt: record2.updated_at ?? 0,
+    encrypted: record2
   };
 }
 async function decryptPlanLearnings(plan, records, masterKey) {
   const output = [];
-  for (const record of records) output.push(await decryptPlanLearning(plan, record, masterKey));
+  for (const record2 of records) output.push(await decryptPlanLearning(plan, record2, masterKey));
   return output;
 }
 function findPlan(plans, id) {
@@ -6533,11 +6659,11 @@ function hasHiddenControlCharacter(value) {
 function finalizedLearningNeedsTaskSafetyScan(learning) {
   return FINALIZED_LEARNING_STATUSES.has(learning.status) && !learning.appliedTaskId && Boolean(learning.taskDraft.trim());
 }
-async function planKeyFromRecord(record, masterKey) {
-  const wrapper = record.key_wrappers?.find((candidate) => candidate.key_type === "master" && typeof candidate.encrypted_plan_key === "string");
-  if (!wrapper || typeof wrapper.encrypted_plan_key !== "string") throw new Error(`Plan ${record.plan_id} is missing a master key wrapper.`);
+async function planKeyFromRecord(record2, masterKey) {
+  const wrapper = record2.key_wrappers?.find((candidate) => candidate.key_type === "master" && typeof candidate.encrypted_plan_key === "string");
+  if (!wrapper || typeof wrapper.encrypted_plan_key !== "string") throw new Error(`Plan ${record2.plan_id} is missing a master key wrapper.`);
   const planKey = await decryptBytesWithAesGcm(wrapper.encrypted_plan_key, masterKey);
-  if (!planKey) throw new Error(`Failed to decrypt plan key for ${record.plan_id}.`);
+  if (!planKey) throw new Error(`Failed to decrypt plan key for ${record2.plan_id}.`);
   return planKey;
 }
 function sha256Hex3(value) {
@@ -6562,8 +6688,8 @@ function parseUserFlows(value) {
   if (!Array.isArray(parsed)) throw new Error("Plan user flows must be an array.");
   return validateUserFlows(parsed);
 }
-function deriveShortId2(record) {
-  const source = record.plan_id || `${record.created_at ?? ""}-${record.updated_at ?? ""}`;
+function deriveShortId2(record2) {
+  const source = record2.plan_id || `${record2.created_at ?? ""}-${record2.updated_at ?? ""}`;
   const digest = createHash9("sha256").update(source).digest("hex").slice(0, 6).toUpperCase();
   return `${DEFAULT_PLAN_PREFIX}-${digest}`;
 }
@@ -6571,7 +6697,7 @@ function nowSeconds2() {
   return Math.floor(Date.now() / 1e3);
 }
 function randomUUIDCompat2() {
-  return randomUUID5();
+  return randomUUID6();
 }
 function pad2(value, length) {
   return truncate2(value, length).padEnd(length);
@@ -7482,8 +7608,8 @@ var MATE_NAMES = {
   general_knowledge: "George",
   onboarding_support: "Suki"
 };
-function stripLegacySuggestionPrefix(text) {
-  return text.replace(/^\s*\[[^\]]+\]\s*/, "").trim();
+function stripLegacySuggestionPrefix(text2) {
+  return text2.replace(/^\s*\[[^\]]+\]\s*/, "").trim();
 }
 var CLOUD_API_URL = "https://api.openmates.org";
 var DEFAULT_API_URL = process.env.OPENMATES_API_URL ?? CLOUD_API_URL;
@@ -7828,7 +7954,7 @@ var OpenMatesClient = class _OpenMatesClient {
     const wrappingKey = await this.getChatWrappingKey(null, masterKey);
     const encryptedChats = [];
     for (const chat of chats) {
-      const chatId = randomUUID6();
+      const chatId = randomUUID7();
       const chatKey = new Uint8Array(randomBytes4(32));
       const encryptedChatKey = await encryptBytesWithAesGcm(chatKey, wrappingKey);
       const createdAt = Math.floor((chat.created_at ? Date.parse(chat.created_at) : Date.now()) / 1e3);
@@ -7836,7 +7962,7 @@ var OpenMatesClient = class _OpenMatesClient {
       const messages = [];
       let previousUserMessageId = null;
       for (const message of chat.messages) {
-        const messageId = randomUUID6();
+        const messageId = randomUUID7();
         const identity = message.role === "assistant" ? message.imported_assistant_identity : null;
         const isCompressionSummary = message.provider_metadata?.import_type === COMPRESSION_SUMMARY_CATEGORY;
         messages.push({
@@ -7896,7 +8022,7 @@ var OpenMatesClient = class _OpenMatesClient {
     this.requireSession();
     const now = Math.floor(Date.now() / 1e3);
     const teamKeyBytes = randomBytes4(32);
-    const teamId = input.teamId ?? randomUUID6();
+    const teamId = input.teamId ?? randomUUID7();
     const payload = {
       team_id: teamId,
       slug: input.slug ?? void 0,
@@ -8016,7 +8142,7 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   async createTeamInvite(teamId, input) {
     this.requireSession();
-    const inviteId = typeof input.invite_id === "string" ? input.invite_id : randomUUID6();
+    const inviteId = typeof input.invite_id === "string" ? input.invite_id : randomUUID7();
     const payload = {
       invite_id: inviteId,
       created_at: input.created_at ?? Math.floor(Date.now() / 1e3),
@@ -8304,11 +8430,11 @@ var OpenMatesClient = class _OpenMatesClient {
     }
     let anonymousId = loadAnonymousId();
     if (!anonymousId) {
-      anonymousId = randomUUID6();
+      anonymousId = randomUUID7();
       saveAnonymousId(anonymousId);
     }
-    const chatId = `anonymous-${randomUUID6()}`;
-    const messageId = `anonymous-message-${randomUUID6()}`;
+    const chatId = `anonymous-${randomUUID7()}`;
+    const messageId = `anonymous-message-${randomUUID7()}`;
     const requestBody = {
       anonymous_id: anonymousId,
       client_chat_id: chatId,
@@ -8535,7 +8661,7 @@ var OpenMatesClient = class _OpenMatesClient {
       throw new Error("Could not resolve current user id for local connected-account connector.");
     }
     const { createHash: createHash16 } = await import("crypto");
-    const accountId = randomUUID6();
+    const accountId = randomUUID7();
     const masterKey = this.getMasterKeyBytes();
     const encryptLocalConnectorValue = async (value) => {
       const plaintext = typeof value === "string" ? value : JSON.stringify(value);
@@ -8698,7 +8824,7 @@ var OpenMatesClient = class _OpenMatesClient {
       pin: pin.trim().toUpperCase(),
       token
     });
-    const sessionId = randomUUID6();
+    const sessionId = randomUUID7();
     const login = await this.http.post(
       "/v1/auth/login",
       {
@@ -8885,7 +9011,7 @@ var OpenMatesClient = class _OpenMatesClient {
     }
     const session = {
       apiUrl: this.apiUrl,
-      sessionId: randomUUID6(),
+      sessionId: randomUUID7(),
       wsToken: null,
       cookies: this.http.getCookieMap(),
       masterKeyExportedB64: material.masterKeyB64,
@@ -9080,7 +9206,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (!markdown) throw new Error("Draft markdown must not be empty.");
     const masterKey = this.getMasterKeyBytes();
     const encrypted = await this.saveEncryptedDraft({
-      chatId: params.chatId ?? randomUUID6(),
+      chatId: params.chatId ?? randomUUID7(),
       encryptedDraftMd: await encryptWithAesGcmCombined(markdown, masterKey),
       encryptedDraftPreview: params.preview ? await encryptWithAesGcmCombined(params.preview, masterKey) : null
     });
@@ -9182,7 +9308,7 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   async addIdeaBucketAudio(params) {
     const now = Math.floor(Date.now() / 1e3);
-    const chatId = params.chatId ?? randomUUID6();
+    const chatId = params.chatId ?? randomUUID7();
     const fileResult = processFiles([params.filePath], null);
     if (fileResult.blocked.length > 0) {
       throw new Error(fileResult.blocked.map((entry) => `${entry.path}: ${entry.error}`).join("; "));
@@ -9266,7 +9392,7 @@ var OpenMatesClient = class _OpenMatesClient {
   async addIdeaBucketPreparedIdeas(params) {
     if (params.ideas.length === 0) throw new Error("IdeaBucket add requires at least one idea.");
     const now = Math.floor(Date.now() / 1e3);
-    const chatId = params.chatId ?? randomUUID6();
+    const chatId = params.chatId ?? randomUUID7();
     const bucketId = params.bucketId ?? defaultIdeaBucketProcessingWindowId();
     const processingWindowId = bucketId;
     const settings = params.prompt === void 0 || params.scheduledSendAt === void 0 ? await this.getIdeaBucketSettings() : null;
@@ -9333,7 +9459,7 @@ var OpenMatesClient = class _OpenMatesClient {
     try {
       if (!ownerId) throw new Error("Authenticated user identity is required to store IdeaBucket embeds.");
       const masterKey = this.getMasterKeyBytes();
-      const messageId = randomUUID6();
+      const messageId = randomUUID7();
       for (const embed of params.preparedEmbeds) {
         const encrypted = await encryptEmbed(
           embed,
@@ -9344,7 +9470,7 @@ var OpenMatesClient = class _OpenMatesClient {
           ownerId
         );
         if (!encrypted) continue;
-        const storeRequestId = randomUUID6();
+        const storeRequestId = randomUUID7();
         const stored = ws.waitForMessage(
           "store_embed_confirmed",
           (payload) => {
@@ -9371,7 +9497,7 @@ var OpenMatesClient = class _OpenMatesClient {
           updated_at: encrypted.updated_at
         });
         await stored;
-        const keysRequestId = randomUUID6();
+        const keysRequestId = randomUUID7();
         const keysStored = ws.waitForMessage(
           "store_embed_keys_confirmed",
           (payload) => payload.request_id === keysRequestId,
@@ -9793,7 +9919,7 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   async requestAssistantSpeechMessage(ws, chatId, messageId, segments) {
     const timeoutMs = 10 * 60 * 1e3;
-    return await new Promise((resolve11, reject) => {
+    return await new Promise((resolve12, reject) => {
       const expected = /* @__PURE__ */ new Set();
       const queued = /* @__PURE__ */ new Set();
       const terminal = /* @__PURE__ */ new Map();
@@ -9802,7 +9928,7 @@ var OpenMatesClient = class _OpenMatesClient {
         if (!accepted || expected.size === 0 || terminal.size !== expected.size) return;
         cleanup();
         const statuses = [...terminal.values()];
-        resolve11({
+        resolve12({
           generated: statuses.filter((status) => status.status === "ready" && queued.has(String(status.segment_id))).length,
           reused: statuses.filter((status) => status.status === "ready" && !queued.has(String(status.segment_id))).length,
           failed: statuses.filter((status) => status.status === "error").length,
@@ -9906,12 +10032,12 @@ var OpenMatesClient = class _OpenMatesClient {
     const boundaryIndex = findCliMessageBoundaryIndex(state.messages, params.fromMessageId);
     const sourceSlice = state.messages.slice(0, boundaryIndex + 1);
     const masterKey = this.getMasterKeyBytes();
-    const newChatId = randomUUID6();
+    const newChatId = randomUUID7();
     const newChatKey = new Uint8Array(randomBytes4(32));
     const now = Math.floor(Date.now() / 1e3);
     const encryptedMessages = [];
     for (const message of sourceSlice) {
-      const newMessageId = randomUUID6();
+      const newMessageId = randomUUID7();
       const encryptedMessage = {
         client_message_id: newMessageId,
         message_id: newMessageId,
@@ -10337,7 +10463,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (params.newChatId) {
       chatId = params.newChatId;
     } else if (!params.chatId) {
-      chatId = randomUUID6();
+      chatId = randomUUID7();
     } else if (!CANONICAL_UUID_PATTERN.test(params.chatId)) {
       const resolved = await this.resolveFullChatId(params.chatId, { teamId });
       if (!resolved) {
@@ -10385,7 +10511,7 @@ var OpenMatesClient = class _OpenMatesClient {
       ws.close();
       throw new Error("Authenticated user identity is required for saved chat recovery.");
     }
-    const messageId = randomUUID6();
+    const messageId = randomUUID7();
     const createdAt = Math.floor(Date.now() / 1e3);
     const isNewChat = !params.chatId;
     let messageHistoryForRequest = params.messageHistory;
@@ -10549,7 +10675,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (!params.incognito && chatKeyBytes && encryptedChatKey) {
       const protocolVersion = 1;
       const chatKeyVersion = 1;
-      const turnId = randomUUID6();
+      const turnId = randomUUID7();
       savedTurnId = turnId;
       terminalExpectedMessagesV = baselineMessagesV + 1;
       const recoveryKeypair = await deriveChatCompletionRecoveryKeypair(
@@ -11527,7 +11653,7 @@ var OpenMatesClient = class _OpenMatesClient {
           created_at: now
         }
       ] : [];
-      const storeRequestId = randomUUID6();
+      const storeRequestId = randomUUID7();
       const storeConfirmed = params.ws.waitForMessage(
         "store_embed_confirmed",
         (payload) => {
@@ -11560,7 +11686,7 @@ var OpenMatesClient = class _OpenMatesClient {
       });
       await storeConfirmed;
       if (keys.length > 0) {
-        const keysRequestId = randomUUID6();
+        const keysRequestId = randomUUID7();
         const keysConfirmed = params.ws.waitForMessage(
           "store_embed_keys_confirmed",
           (payload) => {
@@ -11740,16 +11866,16 @@ var OpenMatesClient = class _OpenMatesClient {
         );
       } catch (error) {
         lastTransientError = error instanceof Error ? error.message : String(error);
-        await new Promise((resolve11) => setTimeout(resolve11, SKILL_TASK_POLL_INTERVAL_MS));
+        await new Promise((resolve12) => setTimeout(resolve12, SKILL_TASK_POLL_INTERVAL_MS));
         continue;
       }
       if (!response.ok) {
         if (response.status >= SKILL_TASK_POLL_TRANSIENT_ERROR_STATUS) {
           lastTransientError = `HTTP ${response.status}`;
-          await new Promise((resolve11) => setTimeout(resolve11, SKILL_TASK_POLL_INTERVAL_MS));
+          await new Promise((resolve12) => setTimeout(resolve12, SKILL_TASK_POLL_INTERVAL_MS));
           continue;
         }
-        throw new Error(`Task polling failed with HTTP ${response.status}`);
+        throw new Error(`Task ${taskId} polling failed with HTTP ${response.status}. Generation was not retried; retain this task ID for recovery.`);
       }
       lastTransientError = null;
       if (response.data.status === "completed") {
@@ -11758,7 +11884,7 @@ var OpenMatesClient = class _OpenMatesClient {
       if (response.data.status === "failed") {
         throw new Error(response.data.error ?? "Task failed");
       }
-      await new Promise((resolve11) => setTimeout(resolve11, SKILL_TASK_POLL_INTERVAL_MS));
+      await new Promise((resolve12) => setTimeout(resolve12, SKILL_TASK_POLL_INTERVAL_MS));
     }
     if (lastTransientError) {
       throw new Error(
@@ -12493,11 +12619,11 @@ var OpenMatesClient = class _OpenMatesClient {
     }
     return response.data.events ?? [];
   }
-  async followUpWorkflowInput(sessionId, text) {
+  async followUpWorkflowInput(sessionId, text2) {
     this.requireSession();
     const response = await this.http.post(
       `/v1/workflows/input/${encodeURIComponent(sessionId)}/follow-up`,
-      { text },
+      { text: text2 },
       this.getCliRequestHeaders()
     );
     if (!response.ok || !response.data.session) {
@@ -12690,16 +12816,16 @@ var OpenMatesClient = class _OpenMatesClient {
     if (!response.ok) throw this.projectRequestError("remote result", response);
     return response.data;
   }
-  async decryptProjectKey(record, options = {}) {
+  async decryptProjectKey(record2, options = {}) {
     const teamId = this.resolveTeamContext(options);
     if (!teamId) {
-      if (typeof record.encrypted_project_key !== "string") throw new Error("Project is missing its Personal key wrapper.");
-      const projectKey2 = await decryptBytesWithAesGcm(record.encrypted_project_key, this.getMasterKeyBytes());
+      if (typeof record2.encrypted_project_key !== "string") throw new Error("Project is missing its Personal key wrapper.");
+      const projectKey2 = await decryptBytesWithAesGcm(record2.encrypted_project_key, this.getMasterKeyBytes());
       if (!projectKey2) throw new Error("Unable to decrypt Project key.");
       return projectKey2;
     }
     const teamKey = await this.loadTeamKeyBytes(teamId);
-    const wrapper = record.key_wrappers?.find(
+    const wrapper = record2.key_wrappers?.find(
       (candidate) => candidate.key_type === "team" && candidate.team_key_epoch === 1
     );
     if (!teamKey || !wrapper) throw new Error("Team Project key wrapper is unavailable.");
@@ -13354,7 +13480,7 @@ var OpenMatesClient = class _OpenMatesClient {
         `Rate limited by settings API; retrying in ${Math.ceil(SETTINGS_GET_RATE_LIMIT_RETRY_MS / 1e3)}s...
 `
       );
-      await new Promise((resolve11) => setTimeout(resolve11, SETTINGS_GET_RATE_LIMIT_RETRY_MS));
+      await new Promise((resolve12) => setTimeout(resolve12, SETTINGS_GET_RATE_LIMIT_RETRY_MS));
       response = await this.http.get(normalizedPath, headers);
     }
     if (!response.ok) {
@@ -14075,7 +14201,7 @@ Required: ${schema.required.join(", ")}`
         );
       }
     }
-    const entryId = params.entryId ?? randomUUID6();
+    const entryId = params.entryId ?? randomUUID7();
     const now = Math.floor(Date.now() / 1e3);
     const teamId = this.resolveTeamContext({ teamId: params.teamId, personal: params.personal });
     const hashedKey = hashItemKey(params.appId, params.itemType);
@@ -14395,7 +14521,7 @@ Required: ${schema.required.join(", ")}`
     const now = Math.floor(Date.now() / 1e3);
     const { ws } = await this.openWsClient();
     try {
-      const storeRequestId = randomUUID6();
+      const storeRequestId = randomUUID7();
       const storeConfirmed = ws.waitForMessage(
         "store_embed_confirmed",
         (payload) => {
@@ -14427,7 +14553,7 @@ Required: ${schema.required.join(", ")}`
         updated_at: now
       });
       await storeConfirmed;
-      const diffRequestId = randomUUID6();
+      const diffRequestId = randomUUID7();
       const diffConfirmed = ws.waitForMessage(
         "store_embed_diff_confirmed",
         (payload) => {
@@ -14679,7 +14805,7 @@ Required: ${schema.required.join(", ")}`
   makeWsClient(session, options = {}) {
     return new OpenMatesWsClient({
       apiUrl: session.apiUrl,
-      sessionId: randomUUID6(),
+      sessionId: randomUUID7(),
       wsToken: session.wsToken,
       refreshToken: session.cookies.auth_refresh_token ?? null,
       // Same User-Agent as login so OS-based device fingerprint hash matches.
@@ -15201,7 +15327,7 @@ function filenameFromContentDisposition(header2) {
   return plain?.trim() ?? null;
 }
 function sleep2(ms) {
-  return new Promise((resolve11) => setTimeout(resolve11, ms));
+  return new Promise((resolve12) => setTimeout(resolve12, ms));
 }
 function printLogo() {
   const W = "\x1B[1;37m";
@@ -20159,14 +20285,14 @@ var GeneratedAppSkills = class {
 // src/sdk.ts
 import { decode as toonDecode } from "@toon-format/toon";
-import { createHash as createHash11, createHmac as createHmac3, randomBytes as randomBytes6, randomUUID as randomUUID7 } from "crypto";
+import { createHash as createHash11, createHmac as createHmac3, randomBytes as randomBytes6, randomUUID as randomUUID8 } from "crypto";
 import { chmodSync as chmodSync2, existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir5 } from "os";
-import { dirname as dirname2, join as join3 } from "path";
+import { dirname as dirname3, join as join3 } from "path";
 // src/designIcons.ts
-import { mkdir, writeFile } from "fs/promises";
-import { dirname, extname as extname2 } from "path";
+import { mkdir as mkdir2, writeFile } from "fs/promises";
+import { dirname as dirname2, extname as extname3 } from "path";
 import { Resvg } from "@resvg/resvg-js";
 var ICON_SEGMENT_PATTERN = /^[a-z0-9][a-z0-9._-]*$/i;
 var ICON_PATH_PATTERN = /^\/v1\/apps\/design\/icons\/iconify\/([a-z0-9][a-z0-9._-]*)\/([a-z0-9][a-z0-9._-]*)\.svg$/i;
@@ -20234,7 +20360,7 @@ function applyDesignIconColor(svg, color) {
 }
 function resolveDesignIconFormat(format, outputPath) {
   if (format) return format;
-  const extension = outputPath ? extname2(outputPath).toLowerCase() : ".svg";
+  const extension = outputPath ? extname3(outputPath).toLowerCase() : ".svg";
   return extension === ".png" ? "png" : "svg";
 }
 function decodeFetchedSvg(value) {
@@ -20256,9 +20382,9 @@ function normalizePngSize(value, label) {
   return value;
 }
 async function writeExportFile(path2, data) {
-  const directory = dirname(path2);
+  const directory = dirname2(path2);
   if (directory && directory !== ".") {
-    await mkdir(directory, { recursive: true });
+    await mkdir2(directory, { recursive: true });
   }
   await writeFile(path2, data);
 }
@@ -20321,8 +20447,8 @@ var ACCOUNT_EXPORT_FORBIDDEN_VALUE_PATTERNS = [
   /#key=[A-Za-z0-9_-]{8,}/
 ];
 async function writeAccountExportArchive(bundle, flags = {}) {
-  const { mkdir: mkdir2, writeFile: writeFile2 } = await import("fs/promises");
-  const { join: join13, dirname: dirname11 } = await import("path");
+  const { mkdir: mkdir3, writeFile: writeFile2 } = await import("fs/promises");
+  const { join: join13, dirname: dirname12 } = await import("path");
   const exportId = safeArchiveSegment(String(bundle.export.export_id ?? `export-${Date.now()}`));
   const archiveFormat = flags.format === "directory" ? "directory" : "zip";
   const password = typeof flags.password === "string" && flags.password.length > 0 ? flags.password : null;
@@ -20339,7 +20465,7 @@ async function writeAccountExportArchive(bundle, flags = {}) {
     }
     const stagingDir = outputPath;
     const fullPath = join13(stagingDir, relativePath);
-    await mkdir2(dirname11(fullPath), { recursive: true });
+    await mkdir3(dirname12(fullPath), { recursive: true });
     await writeFile2(fullPath, content, "utf-8");
     writtenFiles.push(relativePath);
   }
@@ -20356,7 +20482,7 @@ async function writeAccountExportArchive(bundle, flags = {}) {
   }
   await writeAccountExportChatFiles(domainPayloads.chats ?? [], writeArchiveText);
   if (archiveFormat === "directory") return { output: outputPath, format: "directory", files: writtenFiles.length };
-  await mkdir2(dirname11(outputPath), { recursive: true });
+  await mkdir3(dirname12(outputPath), { recursive: true });
   const zipBuffer = await zip.generateAsync({ type: "nodebuffer", compression: "DEFLATE" });
   await writeFile2(outputPath, password ? encryptZipBuffer(zipBuffer, password) : zipBuffer);
   return { output: outputPath, format: "zip", files: writtenFiles.length, ...password ? { encrypted: true } : {} };
@@ -20502,8 +20628,8 @@ function buildAccountExportChatMarkdown(chat) {
     lines.push("## Messages", "");
     for (const message of messages) {
       if (!message || typeof message !== "object" || Array.isArray(message)) continue;
-      const record = message;
-      lines.push(`### ${String(record.role ?? record.sender ?? "message")}`, "", String(record.content ?? record.text ?? ""), "");
+      const record2 = message;
+      lines.push(`### ${String(record2.role ?? record2.sender ?? "message")}`, "", String(record2.content ?? record2.text ?? ""), "");
     }
   } else {
     lines.push("No readable message records were included in this export chunk.", "");
@@ -20597,18 +20723,18 @@ var IDEABUCKET_DEFAULT_PROCESSING_TIMES2 = ["09:00"];
 var IDEABUCKET_PROCESSING_TIME_PATTERN2 = /^([01]\d|2[0-3]):([0-5]\d)$/;
 function appSkillChatContent(value) {
   if (!value || typeof value !== "object") return "";
-  const record = value;
-  if (typeof record.content === "string") return record.content;
-  if (typeof record.response === "string") return record.response;
-  if (typeof record.answer === "string") return record.answer;
-  const choices = record.choices;
+  const record2 = value;
+  if (typeof record2.content === "string") return record2.content;
+  if (typeof record2.response === "string") return record2.response;
+  if (typeof record2.answer === "string") return record2.answer;
+  const choices = record2.choices;
   if (Array.isArray(choices)) {
     const first = choices[0];
     const message = first?.message;
     if (typeof message?.content === "string") return message.content;
     if (typeof first?.text === "string") return first.text;
   }
-  return appSkillChatContent(record.data);
+  return appSkillChatContent(record2.data);
 }
 function sdkOrigin(apiUrl) {
   if (process.env.OPENMATES_APP_URL) return process.env.OPENMATES_APP_URL.replace(/\/$/, "");
@@ -21007,13 +21133,13 @@ var OpenMates = class {
         });
       } catch (error) {
         lastTransientError = error instanceof Error ? error.message : String(error);
-        await new Promise((resolve11) => setTimeout(resolve11, CODE_RUN_POLL_INTERVAL_MS));
+        await new Promise((resolve12) => setTimeout(resolve12, CODE_RUN_POLL_INTERVAL_MS));
         continue;
       }
       if (!response.ok) {
         if (response.status >= SKILL_TASK_POLL_TRANSIENT_ERROR_STATUS2) {
           lastTransientError = `HTTP ${response.status}`;
-          await new Promise((resolve11) => setTimeout(resolve11, CODE_RUN_POLL_INTERVAL_MS));
+          await new Promise((resolve12) => setTimeout(resolve12, CODE_RUN_POLL_INTERVAL_MS));
           continue;
         }
         throw new OpenMatesApiError(response.status, await this.safeJson(response));
@@ -21022,7 +21148,7 @@ var OpenMates = class {
       const status = await this.parseResponse(response);
       const value = typeof status.status === "string" ? status.status : "";
       if (CODE_RUN_TERMINAL_STATUSES.has(value)) return status;
-      await new Promise((resolve11) => setTimeout(resolve11, CODE_RUN_POLL_INTERVAL_MS));
+      await new Promise((resolve12) => setTimeout(resolve12, CODE_RUN_POLL_INTERVAL_MS));
     }
     if (lastTransientError) {
       throw new Error(`Code Run did not complete within ${CODE_RUN_POLL_TIMEOUT_MS / 1e3}s; last polling error: ${lastTransientError}`);
@@ -21047,13 +21173,13 @@ var OpenMates = class {
         });
       } catch (error) {
         lastTransientError = error instanceof Error ? error.message : String(error);
-        await new Promise((resolve11) => setTimeout(resolve11, SKILL_TASK_POLL_INTERVAL_MS2));
+        await new Promise((resolve12) => setTimeout(resolve12, SKILL_TASK_POLL_INTERVAL_MS2));
         continue;
       }
       if (!response.ok) {
         if (response.status >= SKILL_TASK_POLL_TRANSIENT_ERROR_STATUS2) {
           lastTransientError = `HTTP ${response.status}`;
-          await new Promise((resolve11) => setTimeout(resolve11, SKILL_TASK_POLL_INTERVAL_MS2));
+          await new Promise((resolve12) => setTimeout(resolve12, SKILL_TASK_POLL_INTERVAL_MS2));
           continue;
         }
         throw new OpenMatesApiError(response.status, await this.safeJson(response));
@@ -21062,7 +21188,7 @@ var OpenMates = class {
       const task = await this.parseResponse(response);
       if (task.status === "completed") return task;
       if (task.status === "failed") throw new Error(task.error ?? "Task failed");
-      await new Promise((resolve11) => setTimeout(resolve11, SKILL_TASK_POLL_INTERVAL_MS2));
+      await new Promise((resolve12) => setTimeout(resolve12, SKILL_TASK_POLL_INTERVAL_MS2));
     }
     if (lastTransientError) {
       throw new Error(`Task ${taskId} did not complete within ${SKILL_TASK_POLL_TIMEOUT_MS2 / 1e3}s; last polling error: ${lastTransientError}`);
@@ -21101,8 +21227,8 @@ function loadOrCreateDeviceId(customPath) {
     const stored = readFileSync5(path2, "utf8").trim();
     if (stored) return stored;
   }
-  const deviceId = randomUUID7();
-  mkdirSync3(dirname2(path2), { recursive: true, mode: 448 });
+  const deviceId = randomUUID8();
+  mkdirSync3(dirname3(path2), { recursive: true, mode: 448 });
   writeFileSync3(path2, `${deviceId}
 `, { encoding: "utf8", mode: 384 });
   chmodSync2(path2, 384);
@@ -21154,7 +21280,7 @@ async function buildTeamPlainCreatePayload(client, input) {
   const now = Math.floor(Date.now() / 1e3);
   const createdAt = input.createdAt ?? now;
   const payload = {
-    team_id: input.teamId ?? randomUUID7(),
+    team_id: input.teamId ?? randomUUID8(),
     slug: input.slug ?? void 0,
     encrypted_name: await encryptWithAesGcmCombined(name, teamKey),
     encrypted_description: input.description ? await encryptWithAesGcmCombined(input.description, teamKey) : void 0,
@@ -21195,7 +21321,7 @@ async function buildProjectCreatePayload(wrappingKey, input, teamId = null) {
     lookupKey: wrappingKey
   });
   const payload = {
-    project_id: randomUUID7(),
+    project_id: randomUUID8(),
     encrypted_project_key: teamId ? null : await encryptBytesWithAesGcm(projectKey, wrappingKey),
     encrypted_slug: slugMetadata.encrypted_slug,
     slug_lookup_hash: slugMetadata.slug_lookup_hash,
@@ -21219,36 +21345,36 @@ async function buildProjectCreatePayload(wrappingKey, input, teamId = null) {
   };
   return { payload, projectKey };
 }
-async function decryptSdkProject(record, wrappingKey, teamId = null) {
-  const encryptedProjectKey = teamId ? record.key_wrappers?.find((wrapper) => wrapper.key_type === "team" && wrapper.hashed_team_id === createHash11("sha256").update(teamId).digest("hex") && wrapper.team_key_epoch === 1)?.encrypted_project_key : record.encrypted_project_key;
-  if (typeof encryptedProjectKey !== "string") throw new OpenMatesConfigError(`Project ${record.project_id} is missing encrypted project key`);
+async function decryptSdkProject(record2, wrappingKey, teamId = null) {
+  const encryptedProjectKey = teamId ? record2.key_wrappers?.find((wrapper) => wrapper.key_type === "team" && wrapper.hashed_team_id === createHash11("sha256").update(teamId).digest("hex") && wrapper.team_key_epoch === 1)?.encrypted_project_key : record2.encrypted_project_key;
+  if (typeof encryptedProjectKey !== "string") throw new OpenMatesConfigError(`Project ${record2.project_id} is missing encrypted project key`);
   const projectKey = await decryptBytesWithAesGcm(encryptedProjectKey, wrappingKey);
-  if (!projectKey) throw new OpenMatesConfigError(`Failed to decrypt Project key for ${record.project_id}`);
-  return decryptSdkProjectWithKey(record, projectKey);
+  if (!projectKey) throw new OpenMatesConfigError(`Failed to decrypt Project key for ${record2.project_id}`);
+  return decryptSdkProjectWithKey(record2, projectKey);
 }
-async function decryptSdkProjectWithKey(record, projectKey) {
+async function decryptSdkProjectWithKey(record2, projectKey) {
   return {
-    projectId: record.project_id,
-    slug: await decryptObjectSlug(record.encrypted_slug, projectKey),
-    name: await decryptOptionalProjectField(record.encrypted_name, projectKey) || "(untitled project)",
-    description: await decryptOptionalProjectField(record.encrypted_description, projectKey),
-    icon: await decryptOptionalProjectField(record.encrypted_icon, projectKey),
-    color: await decryptOptionalProjectField(record.encrypted_color, projectKey),
-    pinned: record.pinned === true,
-    archived: record.archived === true,
-    version: typeof record.version === "number" ? record.version : null,
-    createdAt: typeof record.created_at === "number" ? record.created_at : null,
-    updatedAt: typeof record.updated_at === "number" ? record.updated_at : null,
-    lastOpenedAt: typeof record.last_opened_at === "number" ? record.last_opened_at : null
+    projectId: record2.project_id,
+    slug: await decryptObjectSlug(record2.encrypted_slug, projectKey),
+    name: await decryptOptionalProjectField(record2.encrypted_name, projectKey) || "(untitled project)",
+    description: await decryptOptionalProjectField(record2.encrypted_description, projectKey),
+    icon: await decryptOptionalProjectField(record2.encrypted_icon, projectKey),
+    color: await decryptOptionalProjectField(record2.encrypted_color, projectKey),
+    pinned: record2.pinned === true,
+    archived: record2.archived === true,
+    version: typeof record2.version === "number" ? record2.version : null,
+    createdAt: typeof record2.created_at === "number" ? record2.created_at : null,
+    updatedAt: typeof record2.updated_at === "number" ? record2.updated_at : null,
+    lastOpenedAt: typeof record2.last_opened_at === "number" ? record2.last_opened_at : null
   };
 }
 async function decryptOptionalProjectField(value, projectKey) {
   return value ? await decryptWithAesGcmCombined(value, projectKey) ?? "" : "";
 }
 async function buildProjectUpdatePayload(client, projectId, input, context = { personal: true }) {
-  const { record, projectKey } = await resolveSdkProject(client, projectId, context);
+  const { record: record2, projectKey } = await resolveSdkProject(client, projectId, context);
   const patch = {
-    ...typeof record.version === "number" ? { version: record.version } : {},
+    ...typeof record2.version === "number" ? { version: record2.version } : {},
     updated_at: Math.floor(Date.now() / 1e3)
   };
   if (input.name !== void 0) patch.encrypted_name = await encryptWithAesGcmCombined(input.name, projectKey);
@@ -21267,7 +21393,7 @@ async function buildProjectUpdatePayload(client, projectId, input, context = { p
   }
   if (input.pinned !== void 0) patch.pinned = input.pinned;
   if (input.archived !== void 0) patch.archived = input.archived;
-  return { project_id: record.project_id, patch, projectKey };
+  return { project_id: record2.project_id, patch, projectKey };
 }
 function toPublicPlan(plan) {
   const { encrypted: _encrypted, ...publicPlan } = plan;
@@ -21286,14 +21412,14 @@ async function resolveSdkProject(client, projectId, context = { personal: true }
   const resolvedProjectId = await resolveSdkProjectId(client, projectId, context);
   const crypto2 = await projectWrappingKey(client, context);
   const response = await client.get(withQuery(`/v1/projects/${encodeURIComponent(resolvedProjectId)}`, { team_id: crypto2.teamId }));
-  const record = response.project;
-  if (!record) throw new OpenMatesApiError(404, { detail: "Project not found" });
+  const record2 = response.project;
+  if (!record2) throw new OpenMatesApiError(404, { detail: "Project not found" });
   const teamHash = crypto2.teamId ? createHash11("sha256").update(crypto2.teamId).digest("hex") : null;
-  const encryptedProjectKey = crypto2.teamId ? record.key_wrappers?.find((wrapper) => wrapper.key_type === "team" && wrapper.hashed_team_id === teamHash && wrapper.team_key_epoch === 1)?.encrypted_project_key : record.encrypted_project_key;
+  const encryptedProjectKey = crypto2.teamId ? record2.key_wrappers?.find((wrapper) => wrapper.key_type === "team" && wrapper.hashed_team_id === teamHash && wrapper.team_key_epoch === 1)?.encrypted_project_key : record2.encrypted_project_key;
   if (typeof encryptedProjectKey !== "string") throw new OpenMatesConfigError("Project response is missing encrypted Project key wrapper");
   const projectKey = await decryptBytesWithAesGcm(encryptedProjectKey, crypto2.key);
   if (!projectKey) throw new OpenMatesConfigError("Failed to decrypt Project key");
-  return { record, projectKey };
+  return { record: record2, projectKey };
 }
 async function resolveSdkProjectId(client, projectId, context = { personal: true }) {
   if (CANONICAL_UUID_PATTERN2.test(projectId)) return projectId;
@@ -21369,8 +21495,8 @@ async function listSdkRawPlans(client, filters = {}) {
 async function resolveSdkPlanProjectLinks(client, projectIds) {
   if (projectIds === void 0) return {};
   const entries = await Promise.all(projectIds.map(async (projectId) => {
-    const { record, projectKey } = await resolveSdkProject(client, projectId);
-    return { projectId: record.project_id, projectKey };
+    const { record: record2, projectKey } = await resolveSdkProject(client, projectId);
+    return { projectId: record2.project_id, projectKey };
   }));
   return {
     linkedProjectIds: entries.map((entry) => entry.projectId),
@@ -21423,95 +21549,95 @@ function withoutEncryptedLearning(learning) {
   const { encrypted: _encrypted, ...publicLearning } = learning;
   return publicLearning;
 }
-async function toPublicPlanCriterion(record, planKey) {
+async function toPublicPlanCriterion(record2, planKey) {
   return {
-    criterionId: record.criterion_id,
-    text: await decryptOptionalPlanField(record.encrypted_text, planKey),
-    type: record.type,
-    status: record.status,
-    required: record.required,
-    linkedTaskIds: record.linked_task_ids ?? [],
-    verificationIds: record.verification_ids ?? [],
-    createdAt: typeof record.created_at === "number" ? record.created_at : null,
-    updatedAt: typeof record.updated_at === "number" ? record.updated_at : null
+    criterionId: record2.criterion_id,
+    text: await decryptOptionalPlanField(record2.encrypted_text, planKey),
+    type: record2.type,
+    status: record2.status,
+    required: record2.required,
+    linkedTaskIds: record2.linked_task_ids ?? [],
+    verificationIds: record2.verification_ids ?? [],
+    createdAt: typeof record2.created_at === "number" ? record2.created_at : null,
+    updatedAt: typeof record2.updated_at === "number" ? record2.updated_at : null
   };
 }
-async function toPublicPlanAssumption(record, planKey) {
+async function toPublicPlanAssumption(record2, planKey) {
   return {
-    assumptionId: record.assumption_id,
-    text: await decryptOptionalPlanField(record.encrypted_text, planKey),
-    category: record.category,
-    status: record.status,
-    requiredBefore: record.required_before,
-    linkedSubChatId: record.linked_sub_chat_id ?? null,
-    linkedTaskId: record.linked_task_id ?? null,
-    linkedCriterionIds: record.linked_criterion_ids ?? [],
-    sourceCount: record.source_count,
-    correctedText: await decryptOptionalPlanField(record.encrypted_corrected_text, planKey),
-    evidenceSummary: await decryptOptionalPlanField(record.encrypted_evidence_summary, planKey),
-    blockerReason: await decryptOptionalPlanField(record.encrypted_blocker_reason, planKey),
-    waiverReason: await decryptOptionalPlanField(record.encrypted_waiver_reason, planKey),
-    sources: await decryptOptionalPlanField(record.encrypted_sources, planKey),
-    createdAt: typeof record.created_at === "number" ? record.created_at : null,
-    updatedAt: typeof record.updated_at === "number" ? record.updated_at : null
+    assumptionId: record2.assumption_id,
+    text: await decryptOptionalPlanField(record2.encrypted_text, planKey),
+    category: record2.category,
+    status: record2.status,
+    requiredBefore: record2.required_before,
+    linkedSubChatId: record2.linked_sub_chat_id ?? null,
+    linkedTaskId: record2.linked_task_id ?? null,
+    linkedCriterionIds: record2.linked_criterion_ids ?? [],
+    sourceCount: record2.source_count,
+    correctedText: await decryptOptionalPlanField(record2.encrypted_corrected_text, planKey),
+    evidenceSummary: await decryptOptionalPlanField(record2.encrypted_evidence_summary, planKey),
+    blockerReason: await decryptOptionalPlanField(record2.encrypted_blocker_reason, planKey),
+    waiverReason: await decryptOptionalPlanField(record2.encrypted_waiver_reason, planKey),
+    sources: await decryptOptionalPlanField(record2.encrypted_sources, planKey),
+    createdAt: typeof record2.created_at === "number" ? record2.created_at : null,
+    updatedAt: typeof record2.updated_at === "number" ? record2.updated_at : null
   };
 }
-async function toPublicPlanReferencePattern(record, planKey) {
+async function toPublicPlanReferencePattern(record2, planKey) {
   return {
-    patternId: record.pattern_id,
-    title: await decryptOptionalPlanField(record.encrypted_title, planKey) || "(untitled pattern)",
-    description: await decryptOptionalPlanField(record.encrypted_description, planKey),
-    category: record.category,
-    status: record.status,
-    requiredBefore: record.required_before,
-    sourceCount: record.source_count,
-    linkedTaskIds: record.linked_task_ids ?? [],
-    linkedCheckIds: record.linked_check_ids ?? [],
-    sources: await decryptOptionalPlanField(record.encrypted_sources, planKey),
-    matchRules: await decryptOptionalPlanField(record.encrypted_match_rules, planKey),
-    antiPatterns: await decryptOptionalPlanField(record.encrypted_anti_patterns, planKey),
-    evidenceSummary: await decryptOptionalPlanField(record.encrypted_evidence_summary, planKey),
-    waiverReason: await decryptOptionalPlanField(record.encrypted_waiver_reason, planKey),
-    createdAt: typeof record.created_at === "number" ? record.created_at : null,
-    updatedAt: typeof record.updated_at === "number" ? record.updated_at : null
+    patternId: record2.pattern_id,
+    title: await decryptOptionalPlanField(record2.encrypted_title, planKey) || "(untitled pattern)",
+    description: await decryptOptionalPlanField(record2.encrypted_description, planKey),
+    category: record2.category,
+    status: record2.status,
+    requiredBefore: record2.required_before,
+    sourceCount: record2.source_count,
+    linkedTaskIds: record2.linked_task_ids ?? [],
+    linkedCheckIds: record2.linked_check_ids ?? [],
+    sources: await decryptOptionalPlanField(record2.encrypted_sources, planKey),
+    matchRules: await decryptOptionalPlanField(record2.encrypted_match_rules, planKey),
+    antiPatterns: await decryptOptionalPlanField(record2.encrypted_anti_patterns, planKey),
+    evidenceSummary: await decryptOptionalPlanField(record2.encrypted_evidence_summary, planKey),
+    waiverReason: await decryptOptionalPlanField(record2.encrypted_waiver_reason, planKey),
+    createdAt: typeof record2.created_at === "number" ? record2.created_at : null,
+    updatedAt: typeof record2.updated_at === "number" ? record2.updated_at : null
   };
 }
-async function toPublicPlanVerification(record, planKey) {
+async function toPublicPlanVerification(record2, planKey) {
   return {
-    verificationId: record.verification_id,
-    kind: record.kind,
-    phase: record.phase,
-    status: record.status,
-    requiredForDone: record.required_for_done,
-    covers: record.covers ?? [],
-    sourceHash: record.source_hash ?? null,
-    threshold: record.threshold ?? null,
-    score: record.score ?? null,
-    confidence: record.confidence ?? null,
-    linkedTaskId: record.linked_task_id ?? null,
-    runId: record.run_id ?? null,
-    lifecycleStatus: record.lifecycle_status ?? null,
-    linkedSubChatId: record.linked_sub_chat_id ?? null,
-    sourceEmbedId: record.source_embed_id ?? null,
-    runnerKind: record.runner_kind ?? null,
-    description: await decryptOptionalPlanField(record.encrypted_description, planKey),
-    command: await decryptOptionalPlanField(record.encrypted_command, planKey),
-    evaluationPrompt: await decryptOptionalPlanField(record.encrypted_evaluation_prompt, planKey),
-    evaluatorInstructions: await decryptOptionalPlanField(record.encrypted_evaluator_instructions, planKey),
-    expectedResult: await decryptOptionalPlanField(record.encrypted_expected_result, planKey),
-    sourcePath: await decryptOptionalPlanField(record.encrypted_source_path, planKey),
-    redPhaseReason: await decryptOptionalPlanField(record.encrypted_red_phase_reason, planKey),
-    resultSummary: await decryptOptionalPlanField(record.encrypted_result_summary, planKey),
-    requiredFixes: await decryptOptionalPlanField(record.encrypted_required_fixes, planKey),
-    createdAt: typeof record.created_at === "number" ? record.created_at : null,
-    updatedAt: typeof record.updated_at === "number" ? record.updated_at : null
+    verificationId: record2.verification_id,
+    kind: record2.kind,
+    phase: record2.phase,
+    status: record2.status,
+    requiredForDone: record2.required_for_done,
+    covers: record2.covers ?? [],
+    sourceHash: record2.source_hash ?? null,
+    threshold: record2.threshold ?? null,
+    score: record2.score ?? null,
+    confidence: record2.confidence ?? null,
+    linkedTaskId: record2.linked_task_id ?? null,
+    runId: record2.run_id ?? null,
+    lifecycleStatus: record2.lifecycle_status ?? null,
+    linkedSubChatId: record2.linked_sub_chat_id ?? null,
+    sourceEmbedId: record2.source_embed_id ?? null,
+    runnerKind: record2.runner_kind ?? null,
+    description: await decryptOptionalPlanField(record2.encrypted_description, planKey),
+    command: await decryptOptionalPlanField(record2.encrypted_command, planKey),
+    evaluationPrompt: await decryptOptionalPlanField(record2.encrypted_evaluation_prompt, planKey),
+    evaluatorInstructions: await decryptOptionalPlanField(record2.encrypted_evaluator_instructions, planKey),
+    expectedResult: await decryptOptionalPlanField(record2.encrypted_expected_result, planKey),
+    sourcePath: await decryptOptionalPlanField(record2.encrypted_source_path, planKey),
+    redPhaseReason: await decryptOptionalPlanField(record2.encrypted_red_phase_reason, planKey),
+    resultSummary: await decryptOptionalPlanField(record2.encrypted_result_summary, planKey),
+    requiredFixes: await decryptOptionalPlanField(record2.encrypted_required_fixes, planKey),
+    createdAt: typeof record2.created_at === "number" ? record2.created_at : null,
+    updatedAt: typeof record2.updated_at === "number" ? record2.updated_at : null
   };
 }
 async function buildPlanAssumptionCreateInput(plan, masterKey, input) {
   const planKey = await planKeyFromRecord(plan.encrypted, masterKey);
   const timestamp = Math.floor(Date.now() / 1e3);
   return {
-    assumption_id: input.assumptionId ?? randomUUID7(),
+    assumption_id: input.assumptionId ?? randomUUID8(),
     encrypted_text: await encryptWithAesGcmCombined(input.text, planKey),
     category: input.category,
     status: input.status,
@@ -21550,7 +21676,7 @@ async function buildPlanReferencePatternCreateInput(plan, masterKey, input) {
   const planKey = await planKeyFromRecord(plan.encrypted, masterKey);
   const timestamp = Math.floor(Date.now() / 1e3);
   return {
-    pattern_id: input.patternId ?? randomUUID7(),
+    pattern_id: input.patternId ?? randomUUID8(),
     encrypted_title: await encryptWithAesGcmCombined(input.title, planKey),
     encrypted_description: input.description !== void 0 ? await encryptWithAesGcmCombined(input.description, planKey) : void 0,
     category: input.category,
@@ -21588,7 +21714,7 @@ async function buildPlanReferencePatternUpdateInput(plan, masterKey, input) {
 async function createSdkProjectItem(client, projectId, projectKey, input) {
   const timestamp = Math.floor(Date.now() / 1e3);
   const response = await client.request(`/v1/projects/${encodeURIComponent(projectId)}/items`, {
-    project_item_id: randomUUID7(),
+    project_item_id: randomUUID8(),
     folder_id: input.folder ?? null,
     item_type: input.itemType,
     target_id: input.targetId,
@@ -21625,18 +21751,18 @@ function normalizeHistory(history) {
   return Array.isArray(history.messages) ? history.messages : [];
 }
 function rememberableMessagesFromRecords(records) {
-  return records.map((record) => {
-    const id = stringField(record.id) ?? stringField(record.client_message_id) ?? stringField(record.message_id);
-    const content = stringField(record.content);
+  return records.map((record2) => {
+    const id = stringField(record2.id) ?? stringField(record2.client_message_id) ?? stringField(record2.message_id);
+    const content = stringField(record2.content);
     if (!id || content === null) return null;
     return {
       id,
-      role: stringField(record.role) ?? "unknown",
+      role: stringField(record2.role) ?? "unknown",
       content,
-      senderName: stringField(record.senderName) ?? stringField(record.sender_name),
-      category: stringField(record.category),
-      modelName: stringField(record.modelName) ?? stringField(record.model_name),
-      createdAt: numericField(record.created_at) ?? 0,
+      senderName: stringField(record2.senderName) ?? stringField(record2.sender_name),
+      category: stringField(record2.category),
+      modelName: stringField(record2.modelName) ?? stringField(record2.model_name),
+      createdAt: numericField(record2.created_at) ?? 0,
       preview: content.replace(/\s+/g, " ").trim().slice(0, 120)
     };
   }).filter((message) => message !== null);
@@ -21688,12 +21814,12 @@ var OpenMatesChats = class {
     }
   }
   async addToProject(chatId, projectId, options = {}) {
-    const { record, projectKey } = await resolveSdkProject(this.client, projectId);
+    const { record: record2, projectKey } = await resolveSdkProject(this.client, projectId);
     const loaded = await this.load(chatId);
     const chat = loaded.chat;
     const targetId = String(chat?.id ?? chatId);
     const displayName = typeof chat?.title === "string" ? chat.title : targetId;
-    return createSdkProjectItem(this.client, record.project_id, projectKey, {
+    return createSdkProjectItem(this.client, record2.project_id, projectKey, {
       itemType: "chat",
       targetId,
       displayName,
@@ -21788,13 +21914,13 @@ var OpenMatesChats = class {
     const boundaryIndex = findMessageBoundaryIndex(messages, options.fromMessageId);
     const sourceSlice = messages.slice(0, boundaryIndex + 1);
     const masterKey = await this.client.masterKey();
-    const newChatId = randomUUID7();
+    const newChatId = randomUUID8();
     const newChatKey = new Uint8Array(randomBytes6(32));
     const now = Math.floor(Date.now() / 1e3);
     const idMap = /* @__PURE__ */ new Map();
     const encryptedMessages = [];
     for (const message of sourceSlice) {
-      const newMessageId = randomUUID7();
+      const newMessageId = randomUUID8();
       idMap.set(message.id, newMessageId);
       const raw = message.raw;
       const encryptedMessage = {
@@ -21927,9 +22053,9 @@ var OpenMatesChats = class {
     }
     const teamId = options.teamId?.trim() || null;
     const wrappingKey = teamId ? await teamKeyForRecord(this.client, await this.client.teams.get(teamId)) : masterKey;
-    const chatId = options.chatId ? await resolveSdkChatId(this.client, options.chatId) : randomUUID7();
-    const turnId = randomUUID7();
-    const messageId = randomUUID7();
+    const chatId = options.chatId ? await resolveSdkChatId(this.client, options.chatId) : randomUUID8();
+    const turnId = randomUUID8();
+    const messageId = randomUUID8();
     const createdAt = Math.floor(Date.now() / 1e3);
     let chatKey;
     let encryptedChatKey;
@@ -22125,7 +22251,7 @@ var OpenMatesChats = class {
       }
       const remainingMs = deadline - Date.now();
       if (remainingMs <= 0) break;
-      await new Promise((resolve11) => setTimeout(resolve11, Math.min(pollIntervalMs, remainingMs)));
+      await new Promise((resolve12) => setTimeout(resolve12, Math.min(pollIntervalMs, remainingMs)));
     }
     throw new OpenMatesConfigError("Timed out waiting for saved chat recovery");
   }
@@ -22358,7 +22484,7 @@ var OpenMatesIdeaBucket = class {
     const bucketId = input.bucketId ?? new Date(now * 1e3).toISOString().slice(0, 10);
     const settings = input.prompt === void 0 || input.scheduledSendAt === void 0 ? await this.settings() : null;
     const scheduledSendAt = input.scheduledSendAt ?? (settings?.source === "account" ? nextIdeaBucketScheduledSendAt2(now, settings.processingTimes) : defaultIdeaBucketScheduledSendAt2(now));
-    const chatId = input.chatId ?? randomUUID7();
+    const chatId = input.chatId ?? randomUUID8();
     const prompt = input.prompt ?? settings?.processingPrompt ?? IDEABUCKET_DEFAULT_PROCESSING_PROMPT2;
     const markdown = buildIdeaBucketMarkdown2(prompt, ideaText);
     const preview = `IdeaBucket ${bucketId}: ${ideaText.slice(0, 120)}`;
@@ -22631,14 +22757,14 @@ var OpenMatesAccount = class {
     const masterKey = await this.client.masterKey();
     const encryptedChats = [];
     for (const chat of chats) {
-      const chatId = randomUUID7();
+      const chatId = randomUUID8();
       const chatKey = new Uint8Array(randomBytes6(32));
       const createdAt = Math.floor((chat.created_at ? Date.parse(chat.created_at) : Date.now()) / 1e3);
       const updatedAt = Math.floor((chat.updated_at ? Date.parse(chat.updated_at) : Date.now()) / 1e3);
       const messages = [];
       let previousUserMessageId = null;
       for (const message of chat.messages) {
-        const messageId = randomUUID7();
+        const messageId = randomUUID8();
         const identity = message.role === "assistant" ? message.imported_assistant_identity : null;
         const isCompressionSummary = message.provider_metadata.import_type === COMPRESSION_SUMMARY_CATEGORY;
         messages.push({
@@ -22686,7 +22812,7 @@ var OpenMatesAccount = class {
     const maxBatchCount = typeof preview.max_batch_count === "number" ? preview.max_batch_count : defaultSelectionCount;
     const selectedCount = options.select === "all" ? Math.min(parsed.chats.length, maxBatchCount) : Math.min(defaultSelectionCount, parsed.chats.length, maxBatchCount);
     if (selectedCount <= 0) throw new OpenMatesConfigError("No chats are selected for import.");
-    const importId = typeof preview.import_id === "string" ? preview.import_id : randomUUID7();
+    const importId = typeof preview.import_id === "string" ? preview.import_id : randomUUID8();
     const selectedChats = parsed.chats.slice(0, selectedCount);
     const selectedFingerprints = selectedChats.map((chat) => chat.source_fingerprint);
     const confirmation = await this.confirmImport(importId, selectedFingerprints);
@@ -22826,24 +22952,24 @@ var OpenMatesApiKeys = class {
   async revoke(id) {
     return this.client.delete(`/v1/sdk/settings/api-keys/${encodeURIComponent(id)}`);
   }
-  async decryptRecord(record, masterKey) {
-    const encryptedName = typeof record.encrypted_name === "string" ? record.encrypted_name : "";
-    const encryptedPrefix = typeof record.encrypted_key_prefix === "string" ? record.encrypted_key_prefix : "";
+  async decryptRecord(record2, masterKey) {
+    const encryptedName = typeof record2.encrypted_name === "string" ? record2.encrypted_name : "";
+    const encryptedPrefix = typeof record2.encrypted_key_prefix === "string" ? record2.encrypted_key_prefix : "";
     const name = encryptedName ? await decryptWithAesGcmCombined(encryptedName, masterKey) : null;
     const keyPrefix = encryptedPrefix ? await decryptWithAesGcmCombined(encryptedPrefix, masterKey) : null;
-    const lastUsedAt = typeof record.last_used_at === "string" ? record.last_used_at : null;
+    const lastUsedAt = typeof record2.last_used_at === "string" ? record2.last_used_at : null;
     return {
-      id: String(record.id ?? ""),
+      id: String(record2.id ?? ""),
       name: name || encryptedName || "Unnamed API key",
       keyPrefix: keyPrefix || encryptedPrefix || "sk-api-...",
-      createdAt: typeof record.created_at === "string" ? record.created_at : null,
-      expiresAt: typeof record.expires_at === "string" ? record.expires_at : null,
+      createdAt: typeof record2.created_at === "string" ? record2.created_at : null,
+      expiresAt: typeof record2.expires_at === "string" ? record2.expires_at : null,
       lastUsedAt,
       lastUsedLabel: lastUsedAt ? new Date(lastUsedAt).toLocaleString() : "Never used",
-      fullAccess: typeof record.full_access === "boolean" ? record.full_access : true,
-      scopes: record.scopes && typeof record.scopes === "object" ? record.scopes : {},
-      creditLimit: record.credit_limit && typeof record.credit_limit === "object" ? record.credit_limit : null,
-      pendingDeviceCount: typeof record.pending_device_count === "number" ? record.pending_device_count : 0
+      fullAccess: typeof record2.full_access === "boolean" ? record2.full_access : true,
+      scopes: record2.scopes && typeof record2.scopes === "object" ? record2.scopes : {},
+      creditLimit: record2.credit_limit && typeof record2.credit_limit === "object" ? record2.credit_limit : null,
+      pendingDeviceCount: typeof record2.pending_device_count === "number" ? record2.pending_device_count : 0
     };
   }
 };
@@ -22887,7 +23013,7 @@ var OpenMatesMemories = class {
     }
     const now = Math.floor(Date.now() / 1e3);
     const entry = {
-      id: String(input.id ?? randomUUID7()),
+      id: String(input.id ?? randomUUID8()),
       app_id: appId,
       item_key: hashItemKey(appId, itemType),
       item_type: itemType,
@@ -23048,8 +23174,8 @@ var OpenMatesProjects = class {
     return Promise.all((response.projects ?? []).map((project) => decryptSdkProject(project, crypto2.key, crypto2.teamId)));
   }
   async show(projectId, context) {
-    const { record, projectKey } = await resolveSdkProject(this.client, projectId, context);
-    return decryptSdkProjectWithKey(record, projectKey);
+    const { record: record2, projectKey } = await resolveSdkProject(this.client, projectId, context);
+    return decryptSdkProjectWithKey(record2, projectKey);
   }
   async create(input, context) {
     const crypto2 = await projectWrappingKey(this.client, context);
@@ -23416,7 +23542,7 @@ function isTaskVersionConflict(error) {
   return error instanceof OpenMatesApiError && error.status === 409 && String(JSON.stringify(error.data)).includes("TASK_VERSION_CONFLICT");
 }
 function delay(ms) {
-  return new Promise((resolve11) => setTimeout(resolve11, ms));
+  return new Promise((resolve12) => setTimeout(resolve12, ms));
 }
 var OpenMatesPlans = class {
   client;
@@ -23550,14 +23676,14 @@ var OpenMatesPlans = class {
   async addToProject(planId, projectId) {
     const masterKey = await this.client.masterKey();
     const plan = await decryptUserPlan(await this.getRawPlan(planId), masterKey);
-    const { record, projectKey } = await resolveSdkProject(this.client, projectId);
-    const linkedProjectIds = appendUniqueProjectId(plan.linkedProjectIds, record.project_id);
+    const { record: record2, projectKey } = await resolveSdkProject(this.client, projectId);
+    const linkedProjectIds = appendUniqueProjectId(plan.linkedProjectIds, record2.project_id);
     const projectLinks = await resolveSdkPlanProjectLinks(this.client, linkedProjectIds);
     const response = await this.client.patch(`/v1/user-plans/${encodeURIComponent(plan.planId)}`, await buildUpdateUserPlanInput(plan, masterKey, {
       primaryChatId: plan.primaryChatId,
       primaryChatKey: plan.primaryChatId ? await resolveSdkChatKey(this.client, plan.primaryChatId) : null,
       linkedProjectIds,
-      linkedProjectKeys: projectLinks.linkedProjectKeys ?? [{ projectId: record.project_id, projectKey }]
+      linkedProjectKeys: projectLinks.linkedProjectKeys ?? [{ projectId: record2.project_id, projectKey }]
     }));
     if (!response.plan) throw new OpenMatesApiError(500, { detail: "User plan response missing plan" });
     return toPublicPlan(await decryptUserPlan(response.plan, masterKey));
@@ -23633,8 +23759,8 @@ var OpenMatesPlans = class {
     }
     const response = await this.client.request(`/v1/user-plans/${encodeURIComponent(existing.plan_id)}/activate`, payload);
     if (!response.plan) throw new OpenMatesApiError(500, { detail: "User plan response missing plan" });
-    const record = response.plan.primary_chat_id || typeof payload.chat_id !== "string" ? response.plan : { ...response.plan, primary_chat_id: payload.chat_id };
-    return toPublicPlan(await decryptUserPlan(record, await this.client.masterKey()));
+    const record2 = response.plan.primary_chat_id || typeof payload.chat_id !== "string" ? response.plan : { ...response.plan, primary_chat_id: payload.chat_id };
+    return toPublicPlan(await decryptUserPlan(record2, await this.client.masterKey()));
   }
   async attach(planId, input = {}) {
     return this.activate(planId, input);
@@ -23899,9 +24025,9 @@ var OpenMatesWorkflows = class {
     throw new OpenMatesConfigError(`Workflow '${workflowId}' was not found.`);
   }
   async addToProject(workflowId, projectId, options = {}) {
-    const { record, projectKey } = await resolveSdkProject(this.client, projectId);
+    const { record: record2, projectKey } = await resolveSdkProject(this.client, projectId);
     const workflow = await this.get(workflowId);
-    return createSdkProjectItem(this.client, record.project_id, projectKey, {
+    return createSdkProjectItem(this.client, record2.project_id, projectKey, {
       itemType: "workflow",
       targetId: workflow.id,
       displayName: workflow.title,
@@ -23985,8 +24111,8 @@ var OpenMatesWorkflows = class {
     const response = await this.client.get(`/v1/workflows/input/${encodeURIComponent(sessionId)}/events?after_event_id=${encodeURIComponent(String(afterEventId))}`);
     return response.events ?? [];
   }
-  async followUpInput(sessionId, text) {
-    const response = await this.client.request(`/v1/workflows/input/${encodeURIComponent(sessionId)}/follow-up`, { text });
+  async followUpInput(sessionId, text2) {
+    const response = await this.client.request(`/v1/workflows/input/${encodeURIComponent(sessionId)}/follow-up`, { text: text2 });
     if (!response.session) throw new OpenMatesApiError(500, { detail: "Workflow input response missing session" });
     return response.session;
   }
@@ -24230,8 +24356,8 @@ var OpenMatesEmbeds = class {
     return this.client.get(`/v1/sdk/embeds/${encodeURIComponent(embedId)}`);
   }
   async addToProject(embedId, projectId, options = {}) {
-    const { record, projectKey } = await resolveSdkProject(this.client, projectId);
-    return createSdkProjectItem(this.client, record.project_id, projectKey, {
+    const { record: record2, projectKey } = await resolveSdkProject(this.client, projectId);
+    return createSdkProjectItem(this.client, record2.project_id, projectKey, {
       itemType: "embed",
       targetId: embedId,
       displayName: embedId,
@@ -24294,7 +24420,7 @@ var OpenMatesEmbedPreview = class {
       if (["running", "failed", "timeout", "cancelled", "stopped"].includes(status.status)) {
         return status;
       }
-      await new Promise((resolve11) => setTimeout(resolve11, 1e3));
+      await new Promise((resolve12) => setTimeout(resolve12, 1e3));
     }
     throw new OpenMatesApiError(408, { detail: "Application preview did not reach running state before timeout" });
   }
@@ -24533,20 +24659,20 @@ function activityDeliveryStore(scope, stateDir2 = resolveStateDir()) {
   const acknowledgedDirectory = join4(directory, "acknowledged");
   mkdirSync4(pendingDirectory, { recursive: true, mode: 448 });
   mkdirSync4(acknowledgedDirectory, { recursive: true, mode: 448 });
-  const save = (path2, record) => {
+  const save = (path2, record2) => {
     const temporary = `${path2}.${process.pid}.tmp`;
-    writeFileSync4(temporary, JSON.stringify(record), { mode: 384 });
+    writeFileSync4(temporary, JSON.stringify(record2), { mode: 384 });
     renameSync2(temporary, path2);
   };
-  const send = async (path2, record, create) => {
-    if (!record.acknowledged) {
-      const acknowledged = await create(record.input);
-      if (acknowledged.entry_id !== record.input.entry_id) throw new Error("Activity acknowledgement identity mismatch");
-      record.acknowledged = acknowledged;
-      save(join4(acknowledgedDirectory, `${record.input.entry_id}.json`), record);
+  const send = async (path2, record2, create) => {
+    if (!record2.acknowledged) {
+      const acknowledged = await create(record2.input);
+      if (acknowledged.entry_id !== record2.input.entry_id) throw new Error("Activity acknowledgement identity mismatch");
+      record2.acknowledged = acknowledged;
+      save(join4(acknowledgedDirectory, `${record2.input.entry_id}.json`), record2);
       rmSync3(path2, { force: true });
     }
-    return record.acknowledged;
+    return record2.acknowledged;
   };
   return {
     async deliver(id, build, create) {
@@ -24555,15 +24681,15 @@ function activityDeliveryStore(scope, stateDir2 = resolveStateDir()) {
       try {
         const acknowledgedPath = join4(acknowledgedDirectory, `${id}.json`);
         const path2 = existsSync7(acknowledgedPath) ? acknowledgedPath : join4(pendingDirectory, `${id}.json`);
-        let record;
+        let record2;
         try {
-          record = JSON.parse(readFileSync6(path2, "utf8"));
+          record2 = JSON.parse(readFileSync6(path2, "utf8"));
         } catch (error) {
           if (error.code !== "ENOENT") throw error;
-          record = { input: await build() };
-          save(path2, record);
+          record2 = { input: await build() };
+          save(path2, record2);
         }
-        return await send(path2, record, create);
+        return await send(path2, record2, create);
       } finally {
         await release2();
       }
@@ -24576,12 +24702,12 @@ function activityDeliveryStore(scope, stateDir2 = resolveStateDir()) {
         let attempted = 0;
         for (const name of names) {
           const path2 = join4(pendingDirectory, name);
-          const record = JSON.parse(readFileSync6(path2, "utf8"));
-          if (record.acknowledged) continue;
+          const record2 = JSON.parse(readFileSync6(path2, "utf8"));
+          if (record2.acknowledged) continue;
           if (attempted >= 3) break;
           attempted++;
           try {
-            await send(path2, record, create);
+            await send(path2, record2, create);
             pending--;
           } catch {
             break;
@@ -24598,8 +24724,8 @@ function activityDeliveryStore(scope, stateDir2 = resolveStateDir()) {
 // src/cli.ts
 import { existsSync as existsSync14, readFileSync as readFileSync13, realpathSync as realpathSync2, writeFileSync as writeFileSync11 } from "fs";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { basename as basename4, dirname as dirname10 } from "path";
-import { createHash as createHash15, randomBytes as randomBytes9, randomUUID as randomUUID15 } from "crypto";
+import { basename as basename5, dirname as dirname11 } from "path";
+import { createHash as createHash15, randomBytes as randomBytes9, randomUUID as randomUUID16 } from "crypto";
 import { arch as arch2, platform as platform3 } from "os";
 import { parse as parseYaml } from "yaml";
 import WebSocket3 from "ws";
@@ -24836,27 +24962,27 @@ var SecretRegistry = class {
       textsToAdd.push(entry.textToHide);
     }
     if (entry.additionalTexts) {
-      for (const text of entry.additionalTexts) {
-        if (text && text.trim().length > 0) {
-          textsToAdd.push(text);
+      for (const text2 of entry.additionalTexts) {
+        if (text2 && text2.trim().length > 0) {
+          textsToAdd.push(text2);
         }
       }
     }
-    for (const text of textsToAdd) {
+    for (const text2 of textsToAdd) {
       const placeholder = entry.replaceWith.startsWith("[") ? entry.replaceWith : `[${entry.replaceWith}]`;
       const regEntry = {
-        value: text,
+        value: text2,
         token: placeholder,
         source: "settings",
         name: entry.id,
         type: "PERSONAL_DATA",
-        length: text.length
+        length: text2.length
       };
-      this.entries.set(text, regEntry);
-      this.usedPlaceholders.set(placeholder, text);
-      const lower = text.toLowerCase();
-      if (lower !== text) {
-        this.variantToOriginal.set(lower, text);
+      this.entries.set(text2, regEntry);
+      this.usedPlaceholders.set(placeholder, text2);
+      const lower = text2.toLowerCase();
+      if (lower !== text2) {
+        this.variantToOriginal.set(lower, text2);
       }
     }
     this.automaton = null;
@@ -24910,12 +25036,12 @@ var SecretRegistry = class {
    * @param text Text to scan
    * @returns Array of secret mappings for all matches found
    */
-  findAll(text) {
+  findAll(text2) {
     if (this.entries.size === 0) return [];
     if (!this.automaton) {
       this.buildAutomaton();
     }
-    const results = this.automaton.search(text);
+    const results = this.automaton.search(text2);
     const mappings = [];
     const coveredRanges = [];
     const sortedResults = [];
@@ -25120,16 +25246,16 @@ var SecretScanner = class {
    * @param text Text to scan and redact
    * @returns Object with redacted text and mappings for restoration
    */
-  redact(text) {
-    if (!text) return { redacted: text, mappings: [] };
+  redact(text2) {
+    if (!text2) return { redacted: text2, mappings: [] };
     const allMappings = [];
     const coveredRanges = [];
-    const urlExclusionZones = getUrlExclusionZones(text);
+    const urlExclusionZones = getUrlExclusionZones(text2);
     if (this.options.enableRegistryDetection && this.registry.size > 0) {
-      const registryMappings = this.registry.findAll(text);
+      const registryMappings = this.registry.findAll(text2);
       for (const mapping of registryMappings) {
         let searchFrom = 0;
-        const searchText = text.toLowerCase();
+        const searchText = text2.toLowerCase();
         const matchLower = mapping.original.toLowerCase();
         while (searchFrom < searchText.length) {
           const idx = searchText.indexOf(matchLower, searchFrom);
@@ -25145,7 +25271,7 @@ var SecretScanner = class {
       for (const pattern of [...SECRET_PATTERNS, ...GENERAL_PII_PATTERNS]) {
         pattern.regex.lastIndex = 0;
         let match;
-        while ((match = pattern.regex.exec(text)) !== null) {
+        while ((match = pattern.regex.exec(text2)) !== null) {
           const matchText = match[0];
           const startIndex = match.index;
           const endIndex = startIndex + matchText.length;
@@ -25175,7 +25301,7 @@ var SecretScanner = class {
         }
       }
     }
-    let redacted = text;
+    let redacted = text2;
     const sortedMappings = [...allMappings].sort(
       (a, b) => b.original.length - a.original.length
     );
@@ -25204,9 +25330,9 @@ var SecretScanner = class {
    * @param mappings Mappings from a previous redact() call
    * @returns Text with placeholders replaced by original values
    */
-  restore(text, mappings) {
-    if (!text || !mappings || mappings.length === 0) return text;
-    let result = text;
+  restore(text2, mappings) {
+    if (!text2 || !mappings || mappings.length === 0) return text2;
+    let result = text2;
     for (const mapping of mappings) {
       result = result.split(mapping.placeholder).join(mapping.original);
     }
@@ -25225,11 +25351,11 @@ var SecretScanner = class {
 function escapeRegExp2(string) {
   return string.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function getUrlExclusionZones(text) {
+function getUrlExclusionZones(text2) {
   const urlExclusionRegex = /https?:\/\/[^\s]+/g;
   const zones = [];
   let match;
-  while ((match = urlExclusionRegex.exec(text)) !== null) {
+  while ((match = urlExclusionRegex.exec(text2)) !== null) {
     zones.push({ start: match.index, end: match.index + match[0].length });
   }
   return zones;
@@ -25301,9 +25427,9 @@ var OutputRedactor = class {
    * @param text Text to scan
    * @returns Redacted text with placeholders
    */
-  redact(text) {
-    if (!text || !this.initialized) return text;
-    const result = this.scanner.redact(text);
+  redact(text2) {
+    if (!text2 || !this.initialized) return text2;
+    const result = this.scanner.redact(text2);
     for (const mapping of result.mappings) {
       this.sessionMappings.set(mapping.placeholder, mapping);
     }
@@ -25313,11 +25439,11 @@ var OutputRedactor = class {
    * Redact and return both redacted text and mappings.
    * Used when we need to store mappings alongside message data.
    */
-  redactWithMappings(text) {
-    if (!text || !this.initialized) {
-      return { redacted: text, mappings: [] };
+  redactWithMappings(text2) {
+    if (!text2 || !this.initialized) {
+      return { redacted: text2, mappings: [] };
     }
-    const result = this.scanner.redact(text);
+    const result = this.scanner.redact(text2);
     for (const mapping of result.mappings) {
       this.sessionMappings.set(mapping.placeholder, mapping);
     }
@@ -25327,9 +25453,9 @@ var OutputRedactor = class {
    * Restore placeholders back to original values.
    * Only uses mappings from this session (never from external sources).
    */
-  restore(text) {
-    if (!text || this.sessionMappings.size === 0) return text;
-    return this.scanner.restore(text, Array.from(this.sessionMappings.values()));
+  restore(text2) {
+    if (!text2 || this.sessionMappings.size === 0) return text2;
+    return this.scanner.restore(text2, Array.from(this.sessionMappings.values()));
   }
   /** Whether the redactor has been initialized with personal data */
   get isInitialized() {
@@ -25384,8 +25510,8 @@ function createWebsiteEmbed(url) {
     status: "finished"
   };
 }
-function replaceUrlsInText(text, embeds) {
-  return text.replace(URL_PATTERN, (rawUrl) => {
+function replaceUrlsInText(text2, embeds) {
+  return text2.replace(URL_PATTERN, (rawUrl) => {
     const { url, suffix } = trimTrailingUrlPunctuation(rawUrl);
     if (!url) return rawUrl;
     try {
@@ -25920,8 +26046,8 @@ async function renderRemotionShareLink(embedId, client, ln) {
   }
 }
 function generateQr(value) {
-  return new Promise((resolve11) => {
-    qrcode2.generate(value, { small: true }, (qr) => resolve11(qr));
+  return new Promise((resolve12) => {
+    qrcode2.generate(value, { small: true }, (qr) => resolve12(qr));
   });
 }
 function remotionMeta(c) {
@@ -26330,12 +26456,12 @@ function renderAudioTranscribePreview(c, ln) {
   const language = str(c.language) ?? "";
   if (duration) ln(`\x1B[2mDuration: ${duration}\x1B[0m`);
   if (language) ln(`\x1B[2mLanguage: ${language}\x1B[0m`);
-  const text = str(c.text) ?? str(c.transcript) ?? "";
-  if (text) ln(trunc(text, 60));
+  const text2 = str(c.text) ?? str(c.transcript) ?? "";
+  if (text2) ln(trunc(text2, 60));
 }
 function renderAudioTranscribeFullscreen(c) {
-  const text = str(c.text) ?? str(c.transcript) ?? "";
-  if (text) console.log(text);
+  const text2 = str(c.text) ?? str(c.transcript) ?? "";
+  if (text2) console.log(text2);
   else console.log("No transcript available.");
 }
 function renderByDirectType(embed, c, ln) {
@@ -26568,8 +26694,8 @@ function renderDirectTypeFullscreen(embed, c) {
 `);
       if (html) {
-        const text = html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
-        console.log(text);
+        const text2 = html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+        console.log(text2);
       }
       break;
     }
@@ -26580,8 +26706,8 @@ function renderDirectTypeFullscreen(embed, c) {
 `);
       if (html) {
-        const text = html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
-        console.log(text);
+        const text2 = html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+        console.log(text2);
       }
       break;
     }
@@ -26778,12 +26904,12 @@ function formatTs(ts) {
 // src/server.ts
 import { execFileSync as execFileSync4, execSync, spawn as nodeSpawn, spawnSync } from "child_process";
-import { createHash as createHash13, randomBytes as randomBytes8, randomUUID as randomUUID11 } from "crypto";
+import { createHash as createHash13, randomBytes as randomBytes8, randomUUID as randomUUID12 } from "crypto";
 import { appendFileSync, chmodSync as chmodSync5, closeSync as closeSync2, copyFileSync as copyFileSync2, cpSync, existsSync as existsSync10, mkdirSync as mkdirSync7, mkdtempSync, openSync as openSync2, readFileSync as readFileSync8, readSync, readdirSync as readdirSync5, rmSync as rmSync7, writeFileSync as writeFileSync6 } from "fs";
 import { createInterface as createInterface3 } from "readline";
 import { createInterface as createPromptInterface } from "readline/promises";
 import { homedir as homedir6 } from "os";
-import { dirname as dirname6, join as join8, resolve as resolve6 } from "path";
+import { dirname as dirname7, join as join8, resolve as resolve7 } from "path";
 // src/branding.ts
 var OPENMATES_WORDMARK = "OPENMATES";
@@ -26826,7 +26952,7 @@ import {
   symlinkSync
 } from "fs";
 import { createRequire as createRequire3 } from "module";
-import { dirname as dirname3, join as join5, resolve as resolve4 } from "path";
+import { dirname as dirname4, join as join5, resolve as resolve5 } from "path";
 var UI_PACKAGE_RELATIVE_PATH = join5("frontend", "packages", "ui");
 var GENERATED_LOCALES_RELATIVE_PATH = join5(UI_PACKAGE_RELATIVE_PATH, "src", "i18n", "locales");
 var BUILD_TRANSLATIONS_SCRIPT_RELATIVE_PATH = join5(UI_PACKAGE_RELATIVE_PATH, "scripts", "build-translations.js");
@@ -26852,8 +26978,8 @@ function ensureSourceInstallTranslations(installPath, sourcePath) {
 }
 function copyGeneratedLocaleJson(sourcePath, installPath) {
   if (!sourcePath) return 0;
-  const sourceRoot = resolve4(sourcePath);
-  const targetRoot = resolve4(installPath);
+  const sourceRoot = resolve5(sourcePath);
+  const targetRoot = resolve5(installPath);
   if (sourceRoot === targetRoot) return 0;
   const sourceLocaleDir = sourceInstallLocalesPath(sourceRoot);
   if (!existsSync8(join5(sourceLocaleDir, REQUIRED_LOCALE_JSON))) return 0;
@@ -26874,7 +27000,7 @@ function runBuildTranslationsScript(installPath) {
     throw new Error(`Translation build script not found at ${buildScript}.`);
   }
   const requireFromCli = createRequire3(import.meta.url);
-  const yamlPackageDir = dirname3(requireFromCli.resolve("yaml/package.json"));
+  const yamlPackageDir = dirname4(requireFromCli.resolve("yaml/package.json"));
   const nodeModulesDir = join5(uiPackageDir, "node_modules");
   const yamlLink = join5(nodeModulesDir, "yaml");
   const hadNodeModulesDir = existsSync8(nodeModulesDir);
@@ -26897,7 +27023,7 @@ function runBuildTranslationsScript(installPath) {
 }
 // src/serverPlanning.ts
-import { dirname as dirname4, join as join6, resolve as resolve5 } from "path";
+import { dirname as dirname5, join as join6, resolve as resolve6 } from "path";
 var CORE_WORKER_SERVICES = [
   "task-worker",
   "user-init-worker",
@@ -27107,10 +27233,10 @@ function parseServerRole(value) {
   throw new Error(`Unsupported server role '${value}'. Use core, upload, or preview.`);
 }
 function defaultOpenMatesCloudOverlayPath(openMatesPath) {
-  return resolve5(join6(dirname4(resolve5(openMatesPath)), OPENMATESCLOUD_OVERLAY_DIR));
+  return resolve6(join6(dirname5(resolve6(openMatesPath)), OPENMATESCLOUD_OVERLAY_DIR));
 }
 function defaultOpenMatesCloudComposeFile(overlayPath) {
-  return resolve5(join6(overlayPath, OPENMATESCLOUD_COMPOSE_FILE));
+  return resolve6(join6(overlayPath, OPENMATESCLOUD_COMPOSE_FILE));
 }
 function planOpenMatesCloudOverlay(input) {
   const deploymentMode = input.deploymentMode ?? "self_host";
@@ -27124,12 +27250,12 @@ function planOpenMatesCloudOverlay(input) {
       modeLabel: "self-host core"
     };
   }
-  const openMatesPath = resolve5(input.openMatesPath);
-  const overlayPath = resolve5(input.overlayPath ?? defaultOpenMatesCloudOverlayPath(openMatesPath));
+  const openMatesPath = resolve6(input.openMatesPath);
+  const overlayPath = resolve6(input.overlayPath ?? defaultOpenMatesCloudOverlayPath(openMatesPath));
   if (input.overlayExists !== true) {
     throw new Error(`OpenMatesCloud overlay path is required for official-cloud mode: ${overlayPath}`);
   }
-  const overlayComposeFile = resolve5(input.overlayComposeFile ?? defaultOpenMatesCloudComposeFile(overlayPath));
+  const overlayComposeFile = resolve6(input.overlayComposeFile ?? defaultOpenMatesCloudComposeFile(overlayPath));
   return {
     deploymentMode,
     enabled: true,
@@ -27511,20 +27637,20 @@ function validateServerEnvironmentTarget(command, environment) {
 // src/serverBackupArchive.ts
 import { execFileSync as execFileSync3 } from "child_process";
 import { chmodSync as chmodSync3, lstatSync, readdirSync as readdirSync4, renameSync as renameSync3, rmSync as rmSync5 } from "fs";
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 function assertRegularBackupTree(path2) {
-  const stat2 = lstatSync(path2);
-  if (stat2.isDirectory()) {
+  const stat3 = lstatSync(path2);
+  if (stat3.isDirectory()) {
     for (const entry of readdirSync4(path2)) assertRegularBackupTree(`${path2}/${entry}`);
     return;
   }
-  if (!stat2.isFile() || stat2.nlink !== 1) {
+  if (!stat3.isFile() || stat3.nlink !== 1) {
     throw new Error(`Backup archive refused unsafe entry: ${path2}`);
   }
 }
 function publishServerBackupArchive(sourceDir, archivePath, options = {}) {
   assertRegularBackupTree(sourceDir);
-  const temporaryArchivePath = `${archivePath}.tmp-${randomUUID8()}`;
+  const temporaryArchivePath = `${archivePath}.tmp-${randomUUID9()}`;
   const previousUmask = process.umask(63);
   try {
     execFileSync3(options.tarCommand ?? "tar", ["-czf", temporaryArchivePath, "-C", sourceDir, "."], { stdio: "pipe" });
@@ -27539,7 +27665,7 @@ function publishServerBackupArchive(sourceDir, archivePath, options = {}) {
 // src/serverHealth.ts
 import dnsModule, { promises as dns } from "dns";
-import { createHmac as createHmac4, randomUUID as randomUUID9 } from "crypto";
+import { createHmac as createHmac4, randomUUID as randomUUID10 } from "crypto";
 import { promises as fs } from "fs";
 import { isIP } from "net";
 import { request as httpsRequest } from "https";
@@ -27766,7 +27892,7 @@ function isBrevoAcceptedResponse(pathName, method, status, responseBody) {
 }
 async function requestBrevo(pathName, method, apiKey, payload) {
   const body = payload ? JSON.stringify(payload) : void 0;
-  await new Promise((resolve11, reject) => {
+  await new Promise((resolve12, reject) => {
     const request = httpsRequest(buildBrevoRequestOptions(pathName, method, apiKey, body), (response) => {
       let responseBytes = 0;
       const chunks = [];
@@ -27778,8 +27904,8 @@ async function requestBrevo(pathName, method, apiKey, payload) {
       response.on("end", () => {
         const status = response.statusCode ?? 0;
         const responseBody = Buffer.concat(chunks).toString("utf8");
-        if (isBrevoAcceptedResponse(pathName, method, status, responseBody)) resolve11();
-        else if (isBrevoIdempotencyDuplicate(status, responseBody, payload)) resolve11();
+        if (isBrevoAcceptedResponse(pathName, method, status, responseBody)) resolve12();
+        else if (isBrevoIdempotencyDuplicate(status, responseBody, payload)) resolve12();
         else reject(new Error(`brevo_delivery_failed:${status}`));
       });
     });
@@ -27922,10 +28048,10 @@ async function resolveGenericWebhookTarget(rawUrl, allowLocalDevelopmentFixture
 async function sendGenericWebhook(target, secret, payload, allowLocalDevelopmentFixture = false) {
   const { url, addresses } = await resolveGenericWebhookTarget(target, allowLocalDevelopmentFixture);
   const timestamp = (/* @__PURE__ */ new Date()).toISOString();
-  const eventId = randomUUID9();
+  const eventId = randomUUID10();
   const signed = signRuntimeWebhookPayload(payload, secret, timestamp, eventId);
   const selected = addresses[0];
-  await new Promise((resolve11, reject) => {
+  await new Promise((resolve12, reject) => {
     const requestFunction = url.protocol === "https:" ? httpsRequest : httpRequest;
     const request = requestFunction({
       protocol: url.protocol,
@@ -27945,7 +28071,7 @@ async function sendGenericWebhook(target, secret, payload, allowLocalDevelopment
       });
       response.on("end", () => {
         const status = response.statusCode ?? 0;
-        if (status >= 200 && status < 300) resolve11();
+        if (status >= 200 && status < 300) resolve12();
         else reject(new Error(`webhook_delivery_failed:${status}`));
       });
     });
@@ -28026,7 +28152,7 @@ async function deliverWithRetries(channel, send) {
       await send();
       return { channel, status: "delivered", attempts: attempt };
     } catch {
-      if (attempt < 3) await new Promise((resolve11) => setTimeout(resolve11, 250 * 2 ** (attempt - 1)));
+      if (attempt < 3) await new Promise((resolve12) => setTimeout(resolve12, 250 * 2 ** (attempt - 1)));
     }
   }
   return { channel, status: "exhausted", attempts: 3, sanitizedReason: "delivery_failed" };
@@ -28039,7 +28165,7 @@ async function deliverUpdateCompletionEmail(config, payload, send = sendUpdateCo
       await send(config, payload);
       return { status: "accepted", attempts };
     } catch {
-      if (attempts < 3) await new Promise((resolve11) => setTimeout(resolve11, 250 * 2 ** (attempts - 1)));
+      if (attempts < 3) await new Promise((resolve12) => setTimeout(resolve12, 250 * 2 ** (attempts - 1)));
     }
   }
   return { status: "failed", attempts: Math.max(previousAttempts, 3), sanitizedReason: "delivery_failed" };
@@ -28132,7 +28258,7 @@ function signRuntimeWebhookPayload(payload, secret, timestamp, eventId) {
 // src/serverUpdateState.ts
 import { randomBytes as randomBytes7 } from "crypto";
 import { chmodSync as chmodSync4, closeSync, existsSync as existsSync9, mkdirSync as mkdirSync6, openSync, readFileSync as readFileSync7, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync5 } from "fs";
-import { dirname as dirname5, join as join7 } from "path";
+import { dirname as dirname6, join as join7 } from "path";
 function serverUpdateStatusFile(installPath, role) {
   return join7(installPath, ".openmates", `${role}-update-status.json`);
 }
@@ -28151,7 +28277,7 @@ function readServerUpdateStatus(installPath, role) {
 }
 function writeServerUpdateStatus(installPath, role, status) {
   const filePath = serverUpdateStatusFile(installPath, role);
-  mkdirSync6(dirname5(filePath), { recursive: true, mode: 448 });
+  mkdirSync6(dirname6(filePath), { recursive: true, mode: 448 });
   const temporaryPath = `${filePath}.${process.pid}.${randomBytes7(4).toString("hex")}.tmp`;
   writeFileSync5(temporaryPath, `${JSON.stringify({ role, updated_at: (/* @__PURE__ */ new Date()).toISOString(), ...status }, null, 2)}
 `, { mode: 384 });
@@ -28189,7 +28315,7 @@ function acquireServerUpdateLock(installPath) {
 }
 // src/serverQuickTest.ts
-import { randomUUID as randomUUID10 } from "crypto";
+import { randomUUID as randomUUID11 } from "crypto";
 var QUICK_TEST_RESPONSE_TIMEOUT_MS = 12e4;
 var QUICK_TEST_WEB_QUERY = "site:openmates.org OpenMates";
 var QUICK_TEST_EXPECTED_RESPONSE = "server quick test passed";
@@ -28255,7 +28381,7 @@ function decideQuickServerTestAction(input) {
 async function runQuickServerTest(client, options = {}) {
   const now = options.now ?? Date.now;
   const checks = [];
-  const chatId = randomUUID10();
+  const chatId = randomUUID11();
   let chatMayExist = false;
   checks.push({ id: "account.session", status: "passed", duration_ms: 0 });
   const createStarted = now();
@@ -28346,12 +28472,12 @@ function containsExpectedMathResult(value) {
 function containsBoundedWebResult(value) {
   if (Array.isArray(value)) return value.some(containsBoundedWebResult);
   if (!value || typeof value !== "object") return false;
-  const record = value;
-  if (Array.isArray(record.results)) {
-    const directResults = record.results.filter((item) => Boolean(item && typeof item === "object"));
+  const record2 = value;
+  if (Array.isArray(record2.results)) {
+    const directResults = record2.results.filter((item) => Boolean(item && typeof item === "object"));
     if (directResults.some((item) => typeof item.title === "string" && typeof item.url === "string")) return true;
   }
-  return Object.values(record).some(containsBoundedWebResult);
+  return Object.values(record2).some(containsBoundedWebResult);
 }
 // src/server.ts
@@ -28590,9 +28716,9 @@ function exec(cmd, cwd) {
   return execSync(cmd, { cwd, encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
 }
 function runInteractive(cmd, args, cwd) {
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const child = nodeSpawn(cmd, args, { cwd, stdio: "inherit", shell: false });
-    child.on("close", (code) => resolve11(code ?? 1));
+    child.on("close", (code) => resolve12(code ?? 1));
     child.on("error", reject);
   });
 }
@@ -28685,7 +28811,7 @@ function getInstallDeploymentMode(installPath, config) {
 function getOpenMatesCloudOverlayPath(flags, config) {
   const explicit = flags["openmatescloud-path"] ?? flags["openmates-cloud-path"];
   if (explicit === true) throw new Error("Provide an OpenMatesCloud path: --openmatescloud-path <dir>.");
-  if (typeof explicit === "string") return resolve6(explicit);
+  if (typeof explicit === "string") return resolve7(explicit);
   return config?.openMatesCloudOverlayPath;
 }
 function hasServiceFilter(flags) {
@@ -28917,16 +29043,16 @@ async function fetchText(url) {
   return response.text();
 }
 function packagedTemplatePath(role) {
-  return join8(dirname6(new URL(import.meta.url).pathname), "..", "templates", ROLE_TEMPLATE_FILES[role]);
+  return join8(dirname7(new URL(import.meta.url).pathname), "..", "templates", ROLE_TEMPLATE_FILES[role]);
 }
 function packagedNoWebappTemplatePath() {
-  return join8(dirname6(new URL(import.meta.url).pathname), "..", "templates", CORE_NO_WEBAPP_TEMPLATE_FILE);
+  return join8(dirname7(new URL(import.meta.url).pathname), "..", "templates", CORE_NO_WEBAPP_TEMPLATE_FILE);
 }
 function packagedCaddyTemplatePath(role) {
-  return join8(dirname6(new URL(import.meta.url).pathname), "..", "templates", "caddy", role, "Caddyfile");
+  return join8(dirname7(new URL(import.meta.url).pathname), "..", "templates", "caddy", role, "Caddyfile");
 }
 function packagedCoreAlertmanagerTemplatePath() {
-  return join8(dirname6(new URL(import.meta.url).pathname), "..", "templates", "core", "monitoring", "alertmanager", "alertmanager.yml");
+  return join8(dirname7(new URL(import.meta.url).pathname), "..", "templates", "core", "monitoring", "alertmanager", "alertmanager.yml");
 }
 function readOfficialCloudNoWebappComposeTemplate() {
   const packaged = packagedNoWebappTemplatePath();
@@ -28947,7 +29073,7 @@ function ensureOfficialCloudNoWebappComposeFile(installPath, deploymentMode, rol
   if (deploymentMode !== "official_cloud" || role !== "core") return;
   const filePath = join8(installPath, OFFICIAL_CLOUD_NO_WEBAPP_COMPOSE_FILE);
   if (existsSync10(filePath)) return;
-  mkdirSync7(dirname6(filePath), { recursive: true });
+  mkdirSync7(dirname7(filePath), { recursive: true });
   writeFileSync6(filePath, readOfficialCloudNoWebappComposeTemplate());
 }
 function fileHash(path2) {
@@ -28957,7 +29083,7 @@ function fileHash(path2) {
 async function loadSelfHostComposeTemplate(templateRef, role) {
   const templateDir = process.env.OPENMATES_SELFHOST_TEMPLATE_DIR;
   if (templateDir) {
-    return readFileSync8(join8(resolve6(templateDir), ROLE_TEMPLATE_FILES[role]), "utf-8");
+    return readFileSync8(join8(resolve7(templateDir), ROLE_TEMPLATE_FILES[role]), "utf-8");
   }
   const overrideUrl = process.env.OPENMATES_SELFHOST_COMPOSE_URL;
   if (overrideUrl) {
@@ -28978,12 +29104,12 @@ async function writeImageModeRuntimeFiles(installPath, imageTag, role) {
   }
   if (role === "core") {
     const promtailConfigPath = join8(installPath, CORE_PROMTAIL_CONFIG_FILE);
-    mkdirSync7(dirname6(promtailConfigPath), { recursive: true });
+    mkdirSync7(dirname7(promtailConfigPath), { recursive: true });
     writeFileSync6(promtailConfigPath, SELFHOST_PROMTAIL_CONFIG_TEMPLATE);
     const alertmanagerTemplatePath = packagedCoreAlertmanagerTemplatePath();
     if (!existsSync10(alertmanagerTemplatePath)) throw new Error(`Packaged Alertmanager config not found: ${alertmanagerTemplatePath}`);
     const alertmanagerConfigPath = join8(installPath, CORE_ALERTMANAGER_CONFIG_FILE);
-    mkdirSync7(dirname6(alertmanagerConfigPath), { recursive: true });
+    mkdirSync7(dirname7(alertmanagerConfigPath), { recursive: true });
     copyFileSync2(alertmanagerTemplatePath, alertmanagerConfigPath);
   }
   writeFileSync6(join8(vaultConfigDir, "vault.hcl"), VAULT_CONFIG_TEMPLATE);
@@ -29065,7 +29191,7 @@ function defaultCloneBranchForVersion(version) {
 }
 function hasLlmCredentials(envPath) {
   if (!existsSync10(envPath)) return false;
-  if (hasLocalAiModels(dirname6(envPath))) return true;
+  if (hasLocalAiModels(dirname7(envPath))) return true;
   const content = readFileSync8(envPath, "utf-8");
   for (const line of content.split("\n")) {
     const trimmed = line.trim();
@@ -29096,10 +29222,10 @@ function warnIfMissingLlmCredentials(installPath) {
 }
 async function confirmDestructive(phrase) {
   const rl = createInterface3({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     rl.question(`Type "${phrase}" to confirm: `, (answer) => {
       rl.close();
-      resolve11(answer.trim() === phrase);
+      resolve12(answer.trim() === phrase);
     });
   });
 }
@@ -29116,7 +29242,7 @@ function imageBackendConfigPath(installPath) {
 function ensureImageRuntimeConfig(installPath) {
   const configPath = imageBackendConfigPath(installPath);
   if (existsSync10(configPath)) return;
-  mkdirSync7(dirname6(configPath), { recursive: true });
+  mkdirSync7(dirname7(configPath), { recursive: true });
   writeFileSync6(configPath, renderFeatureOverrides({ enabled: [], disabled: [] }));
 }
 function readLocalModelOverlay(path2) {
@@ -29131,7 +29257,7 @@ function readLocalModelOverlay(path2) {
   }
 }
 function writeLocalModelOverlay(path2, overlay) {
-  mkdirSync7(dirname6(path2), { recursive: true });
+  mkdirSync7(dirname7(path2), { recursive: true });
   writeFileSync6(path2, `${JSON.stringify(overlay, null, 2)}
 `);
 }
@@ -29333,7 +29459,7 @@ function sourceUpdateMetadata(installPath) {
 }
 function copyIfExists(source, destination) {
   if (!existsSync10(source)) return;
-  mkdirSync7(dirname6(destination), { recursive: true });
+  mkdirSync7(dirname7(destination), { recursive: true });
   cpSync(source, destination, { recursive: true, force: true });
 }
 function readEnvMap(installPath) {
@@ -29373,7 +29499,7 @@ function backupEnvFile(installPath) {
 }
 function writeEnvContent(installPath, content) {
   const envPath = envPathForInstall(installPath);
-  mkdirSync7(dirname6(envPath), { recursive: true });
+  mkdirSync7(dirname7(envPath), { recursive: true });
   writeFileSync6(envPath, content, { mode: 384 });
   chmodSync5(envPath, 384);
 }
@@ -29387,7 +29513,7 @@ function writeDeploymentModeEnv(installPath, deploymentMode, overlayPath) {
     writeEnvContent(installPath, content);
     return { overlayPath: null };
   }
-  const resolvedOverlayPath = resolve6(overlayPath ?? defaultOpenMatesCloudOverlayPath(installPath));
+  const resolvedOverlayPath = resolve7(overlayPath ?? defaultOpenMatesCloudOverlayPath(installPath));
   const overlayComposeFile = defaultOpenMatesCloudComposeFile(resolvedOverlayPath);
   if (!existsSync10(resolvedOverlayPath) || !existsSync10(overlayComposeFile)) {
     throw new Error(
@@ -29498,7 +29624,7 @@ function printServerCommandStart(subcommand, rest, flags) {
   console.log(renderOpenMatesAsciiLogo());
   console.log("");
   console.log(`Running OpenMates ${command}...`);
-  if (typeof flags.path === "string") console.log(`Path: ${resolve6(flags.path)}`);
+  if (typeof flags.path === "string") console.log(`Path: ${resolve7(flags.path)}`);
   if (typeof flags.role === "string") console.log(`Role: ${flags.role}`);
   console.log("");
 }
@@ -29640,8 +29766,8 @@ function createServerBackup(installPath, role, options = {}) {
   const plan = planBackup({ role, includeObservability: options.includeObservability });
   const backupDir = roleBackupDir(installPath, role);
   mkdirSync7(backupDir, { recursive: true, mode: 448 });
-  const archivePath = options.output ? resolve6(options.output) : join8(backupDir, options.preUpdate ? `latest-pre-update-${role}.tar.gz` : `openmates-${role}-${nowStamp()}.tar.gz`);
-  mkdirSync7(dirname6(archivePath), { recursive: true, mode: 448 });
+  const archivePath = options.output ? resolve7(options.output) : join8(backupDir, options.preUpdate ? `latest-pre-update-${role}.tar.gz` : `openmates-${role}-${nowStamp()}.tar.gz`);
+  mkdirSync7(dirname7(archivePath), { recursive: true, mode: 448 });
   const tempDir = mkdtempSync(join8(backupDir, ".tmp-"));
   const env = readEnvMap(installPath);
   const manifest = {
@@ -29685,7 +29811,7 @@ function createServerBackup(installPath, role, options = {}) {
   }
 }
 function restoreServerBackup(installPath, role, file) {
-  const archivePath = resolve6(file);
+  const archivePath = resolve7(file);
   if (!existsSync10(archivePath)) throw new Error(`Backup file not found: ${archivePath}`);
   mkdirSync7(roleBackupDir(installPath, role), { recursive: true, mode: 448 });
   const tempDir = mkdtempSync(join8(roleBackupDir(installPath, role), ".restore-"));
@@ -29996,12 +30122,12 @@ async function serverRegister(flags) {
   if (!existsSync10(envPath)) {
     throw new Error(`Runtime env file not found: ${envPath}`);
   }
-  const gitRoot = resolve6(exec("git rev-parse --show-toplevel", installPath));
+  const gitRoot = resolve7(exec("git rev-parse --show-toplevel", installPath));
   if (gitRoot !== installPath) {
     throw new Error(`--path must point to the OpenMates Git checkout root (${gitRoot}).`);
   }
   const existing = loadServerConfig();
-  if (existing?.installPath && resolve6(existing.installPath) !== installPath && flags.yes !== true) {
+  if (existing?.installPath && resolve7(existing.installPath) !== installPath && flags.yes !== true) {
     throw new Error(
       `Another server is registered at ${existing.installPath}. Rerun with --yes to replace the local CLI registration; no server data will be changed.`
     );
@@ -30051,8 +30177,8 @@ async function serverRegister(flags) {
   }
 }
 async function serverInstall(flags) {
-  const installPath = typeof flags.path === "string" ? resolve6(flags.path) : DEFAULT_INSTALL_PATH;
-  const sourcePath = typeof flags["source-path"] === "string" ? resolve6(flags["source-path"]) : null;
+  const installPath = typeof flags.path === "string" ? resolve7(flags.path) : DEFAULT_INSTALL_PATH;
+  const sourcePath = typeof flags["source-path"] === "string" ? resolve7(flags["source-path"]) : null;
   const fromSource = flags["from-source"] === true || sourcePath !== null;
   const role = getServerRole(flags, null);
   const profile = getCoreProfile(flags, null);
@@ -30076,7 +30202,7 @@ async function serverInstall(flags) {
     requireDocker();
     mkdirSync7(installPath, { recursive: true });
     if (typeof flags["env-path"] === "string") {
-      const envSource = resolve6(flags["env-path"]);
+      const envSource = resolve7(flags["env-path"]);
       if (!existsSync10(envSource)) {
         throw new Error(`Env file not found: ${envSource}`);
       }
@@ -30151,7 +30277,7 @@ CLI default API: ${cliUrls2.apiUrl}`);
     throw new Error("Failed to clone the OpenMates repository.");
   }
   if (typeof flags["env-path"] === "string") {
-    const envSource = resolve6(flags["env-path"]);
+    const envSource = resolve7(flags["env-path"]);
     if (!existsSync10(envSource)) {
       throw new Error(`Env file not found: ${envSource}`);
     }
@@ -30343,7 +30469,7 @@ async function runUpdateCompletionEmailGate(input) {
       deliveryId: deliveryPlan.deliveryId
     };
   }
-  const deliveryId = deliveryPlan.deliveryId ?? randomUUID11();
+  const deliveryId = deliveryPlan.deliveryId ?? randomUUID12();
   const deliveryPendingAt = deliveryPlan.pendingAt ?? completedAt;
   const previousAttempts = deliveryPlan.previousAttempts ?? 0;
   const { role: _role, updated_at: _updatedAt, ...currentStatus } = readServerUpdateStatus(input.installPath, input.role);
@@ -30420,7 +30546,7 @@ async function persistRuntimeResult(installPath, role, output) {
   return deliveries.flat();
 }
 async function installRuntimeMonitoringServices(installPath, role) {
-  const executablePath = resolve6(process.argv[1] ?? "/usr/local/bin/openmates");
+  const executablePath = resolve7(process.argv[1] ?? "/usr/local/bin/openmates");
   const plan = planRuntimeMonitoringServices({ role, installPath, executablePath });
   const notificationConfig = runtimeNotificationConfig(installPath);
   const emailServiceAvailable = notificationConfig.email ? await probeRuntimeEmailService(notificationConfig.email) : false;
@@ -30460,7 +30586,7 @@ async function installRuntimeMonitoringServices(installPath, role) {
     operationalPlan.watchdogTimerName
   ];
   if (operationalPlan.scheduleEnabled) {
-    mkdirSync7(dirname6(reportStatePath), { recursive: true, mode: 448 });
+    mkdirSync7(dirname7(reportStatePath), { recursive: true, mode: 448 });
     mkdirSync7(reportMetricsDir, { recursive: true, mode: 448 });
     if (!existsSync10(reportStatePath)) {
       writeFileSync6(
@@ -30981,7 +31107,7 @@ async function serverMonitoring(rest, flags) {
   const config = loadConfigForInstallPath(installPath);
   const role = getServerRole(flags, config);
   if (rest[0] === "install-service") {
-    const plan = planRuntimeMonitoringServices({ role, installPath, executablePath: resolve6(process.argv[1] ?? "/usr/local/bin/openmates") });
+    const plan = planRuntimeMonitoringServices({ role, installPath, executablePath: resolve7(process.argv[1] ?? "/usr/local/bin/openmates") });
     const files = [
       [plan.serviceName, plan.unit],
       [plan.timerName, plan.timer],
@@ -31708,7 +31834,7 @@ WARNING: This will replace ${appliedPath} with the packaged ${role} Caddyfile.`)
     const backupPath = `${appliedPath}.openmates-backup-${nowStamp()}`;
     const hadExistingCaddyfile = existsSync10(appliedPath);
     try {
-      mkdirSync7(dirname6(appliedPath), { recursive: true });
+      mkdirSync7(dirname7(appliedPath), { recursive: true });
       if (hadExistingCaddyfile) copyFileSync2(appliedPath, backupPath);
       copyFileSync2(templatePath, appliedPath);
       execSync("systemctl reload caddy", { stdio: "inherit" });
@@ -32047,8 +32173,8 @@ async function handleServer(client, subcommand, rest, flags) {
 }
 // src/codeRunInput.ts
-import { readdir, readFile, stat } from "fs/promises";
-import { basename as basename2, relative, resolve as resolve7 } from "path";
+import { readdir, readFile, stat as stat2 } from "fs/promises";
+import { basename as basename3, relative, resolve as resolve8 } from "path";
 var CODE_RUN_MAX_FILES = 50;
 var CODE_RUN_MAX_FILE_BYTES = 1e6;
 var CODE_RUN_MAX_TOTAL_BYTES = 1e7;
@@ -32092,9 +32218,9 @@ async function buildCodeRunRequestsFromFlags(flags) {
     }, buffer.byteLength);
   }
   for (const filePath of toList(flags.file)) {
-    const absolute = resolve7(filePath);
+    const absolute = resolve8(filePath);
     const buffer = await readFile(absolute);
-    const sandboxPath = normalizeCodeRunPath(basename2(filePath));
+    const sandboxPath = normalizeCodeRunPath(basename3(filePath));
     addFile({
       path: sandboxPath,
       content_base64: buffer.toString("base64"),
@@ -32104,7 +32230,7 @@ async function buildCodeRunRequestsFromFlags(flags) {
     }, buffer.byteLength);
   }
   for (const dirPath of toList(flags.dir)) {
-    const root = resolve7(dirPath);
+    const root = resolve8(dirPath);
     const dirFiles = await collectDirectoryFiles(root, flags.include, flags.exclude);
     for (const absolute of dirFiles) {
       const sandboxPath = normalizeCodeRunPath(relative(root, absolute).replace(/\\/g, "/"));
@@ -32121,10 +32247,10 @@ async function buildCodeRunRequestsFromFlags(flags) {
   for (const url of toList(flags.url)) {
     const response = await fetch(url);
     if (!response.ok) throw new Error(`Failed to download Code Run URL ${redactUrl(url)} (HTTP ${response.status})`);
-    const text = await response.text();
+    const text2 = await response.text();
     const urlPath = new URL(url).pathname;
-    const sandboxPath = normalizeCodeRunPath(entry || basename2(urlPath) || "main.txt");
-    const buffer = Buffer.from(text, "utf8");
+    const sandboxPath = normalizeCodeRunPath(entry || basename3(urlPath) || "main.txt");
+    const buffer = Buffer.from(text2, "utf8");
     addFile({
       path: sandboxPath,
       content_base64: buffer.toString("base64"),
@@ -32134,9 +32260,9 @@ async function buildCodeRunRequestsFromFlags(flags) {
     }, buffer.byteLength);
   }
   if (flags.repo) {
-    await addGithubRepoFiles(flags.repo, toList(flags.include), async (path2, text) => {
+    await addGithubRepoFiles(flags.repo, toList(flags.include), async (path2, text2) => {
       const sandboxPath = normalizeCodeRunPath(path2);
-      const buffer = Buffer.from(text, "utf8");
+      const buffer = Buffer.from(text2, "utf8");
       addFile({
         path: sandboxPath,
         content_base64: buffer.toString("base64"),
@@ -32201,7 +32327,7 @@ async function collectDirectoryFiles(root, include, exclude) {
   const files = [];
   async function walk(directory) {
     for (const entry of await readdir(directory, { withFileTypes: true })) {
-      const absolute = resolve7(directory, entry.name);
+      const absolute = resolve8(directory, entry.name);
       const rel = relative(root, absolute).replace(/\\/g, "/");
       if (matchesAny(rel, excludes) || matchesAny(entry.name, excludes)) continue;
       if (entry.isDirectory()) {
@@ -32211,7 +32337,7 @@ async function collectDirectoryFiles(root, include, exclude) {
       }
     }
   }
-  const rootStat = await stat(root);
+  const rootStat = await stat2(root);
   if (!rootStat.isDirectory()) throw new Error(`Code Run --dir is not a directory: ${root}`);
   await walk(root);
   return files.sort();
@@ -49252,9 +49378,9 @@ function decodeEmbedContent(content) {
   }
   return parseFlatToonFields(content);
 }
-function stringField2(record, keys) {
+function stringField2(record2, keys) {
   for (const key of keys) {
-    const value = cleanString(record[key]);
+    const value = cleanString(record2[key]);
     if (value) return value;
   }
   return "";
@@ -49265,9 +49391,9 @@ function basenameFromUrl(url) {
   return withoutQuery.split("/").pop()?.replace(/[^a-zA-Z0-9._-]/g, "_") ?? "";
 }
 function extensionFromUrl(url) {
-  const basename5 = basenameFromUrl(url);
-  const dotIndex = basename5.lastIndexOf(".");
-  return dotIndex > 0 ? basename5.slice(dotIndex + 1).toLowerCase() : "";
+  const basename6 = basenameFromUrl(url);
+  const dotIndex = basename6.lastIndexOf(".");
+  return dotIndex > 0 ? basename6.slice(dotIndex + 1).toLowerCase() : "";
 }
 function extensionFromLanguage(language) {
   const normalized = language.toLowerCase();
@@ -49293,16 +49419,16 @@ function nestedFormatFromToon(content) {
   const match = content.match(/\n\s+format:\s*([^\n]+)/);
   return cleanString(match?.[1]);
 }
-function urlForType(type, record) {
-  if (type.includes("video") || type === "remotion-video") return stringField2(record, VIDEO_URL_FIELDS);
-  if (type.includes("audio") || type === "music" || type === "recording") return stringField2(record, AUDIO_URL_FIELDS);
-  if (type.includes("image") || type === "svg") return stringField2(record, IMAGE_URL_FIELDS);
-  return stringField2(record, URL_FIELDS);
+function urlForType(type, record2) {
+  if (type.includes("video") || type === "remotion-video") return stringField2(record2, VIDEO_URL_FIELDS);
+  if (type.includes("audio") || type === "music" || type === "recording") return stringField2(record2, AUDIO_URL_FIELDS);
+  if (type.includes("image") || type === "svg") return stringField2(record2, IMAGE_URL_FIELDS);
+  return stringField2(record2, URL_FIELDS);
 }
-function inferFallbackExtension(type, record, content) {
-  const mimeType = stringField2(record, ["mime_type", "file_type", "mimeType"]);
+function inferFallbackExtension(type, record2, content) {
+  const mimeType = stringField2(record2, ["mime_type", "file_type", "mimeType"]);
   if (mimeType && MIME_EXTENSION[mimeType]) return MIME_EXTENSION[mimeType];
-  const urlExtension = extensionFromUrl(urlForType(type, record));
+  const urlExtension = extensionFromUrl(urlForType(type, record2));
   if (urlExtension) return urlExtension;
   const nestedFormat = nestedFormatFromToon(content);
   if (nestedFormat) return nestedFormat;
@@ -49314,25 +49440,25 @@ function inferFallbackExtension(type, record, content) {
   if (type.includes("sheet") || type === "spreadsheet") return "xlsx";
   if (type === "model3d") return "glb";
   if (type.includes("code") || type === "notebook" || type === "pcb_schematic") {
-    return extensionFromLanguage(stringField2(record, ["language"]));
+    return extensionFromLanguage(stringField2(record2, ["language"]));
   }
   return "txt";
 }
-function inferTitle(embedId, type, record, content) {
-  const url = urlForType(type, record);
+function inferTitle(embedId, type, record2, content) {
+  const url = urlForType(type, record2);
   const urlBasename = basenameFromUrl(url);
-  const filename = stringField2(record, FILENAME_FIELDS);
+  const filename = stringField2(record2, FILENAME_FIELDS);
   if ((type.includes("video") || type === "music" || type === "audio") && urlBasename) {
     return urlBasename;
   }
   if (filename) return filename.replace(/[/\\]/g, "_");
   if (urlBasename) return urlBasename;
-  const title = stringField2(record, ["title"]);
+  const title = stringField2(record2, ["title"]);
   if (title) {
-    const extension2 = inferFallbackExtension(type, record, content);
+    const extension2 = inferFallbackExtension(type, record2, content);
     return `${title.replace(/[^a-zA-Z0-9._ -]/g, "_").trim()}.${extension2}`;
   }
-  const extension = inferFallbackExtension(type, record, content);
+  const extension = inferFallbackExtension(type, record2, content);
   return `${type || "file"}-${embedId.slice(0, 8)}.${extension}`;
 }
 function inferNodeType(title, type) {
@@ -49378,13 +49504,13 @@ function formatBytes(bytes) {
 function plural(value, singular, pluralLabel = `${singular}s`) {
   return `${value} ${value === 1 ? singular : pluralLabel}`;
 }
-function buildMetadata(nodeType, type, record) {
+function buildMetadata(nodeType, type, record2) {
   const parts = [labelForNodeType(nodeType, type)];
-  const lineCount = numberValue3(record.line_count ?? record.lineCount);
-  const pageCount = numberValue3(record.page_count ?? record.pageCount);
-  const wordCount = numberValue3(record.word_count ?? record.wordCount);
-  const duration = numberValue3(record.duration_seconds ?? record.durationSeconds);
-  const size = numberValue3(record.byte_length ?? record.size_bytes ?? record.sizeBytes);
+  const lineCount = numberValue3(record2.line_count ?? record2.lineCount);
+  const pageCount = numberValue3(record2.page_count ?? record2.pageCount);
+  const wordCount = numberValue3(record2.word_count ?? record2.wordCount);
+  const duration = numberValue3(record2.duration_seconds ?? record2.durationSeconds);
+  const size = numberValue3(record2.byte_length ?? record2.size_bytes ?? record2.sizeBytes);
   if (lineCount) parts.push(plural(lineCount, "line"));
   if (pageCount) parts.push(plural(pageCount, "page"));
   if (wordCount) parts.push(plural(wordCount, "word"));
@@ -70872,10 +70998,10 @@ function buildAssistantFeedbackDecision(rating) {
 }
 // src/benchmark.ts
-import { createHash as createHash14, randomUUID as randomUUID12 } from "crypto";
+import { createHash as createHash14, randomUUID as randomUUID13 } from "crypto";
 import { existsSync as existsSync11, mkdtempSync as mkdtempSync2, readFileSync as readFileSync9, readdirSync as readdirSync6, writeFileSync as writeFileSync7 } from "fs";
 import { tmpdir } from "os";
-import { dirname as dirname7, join as join9, resolve as resolve8 } from "path";
+import { dirname as dirname8, join as join9, resolve as resolve9 } from "path";
 import { fileURLToPath } from "url";
 var DEFAULT_JUDGE_MODEL = "google/gemini-3-flash-preview";
 var DEFAULT_PROMPT_BUDGET_MODEL = "google/gemini-3.5-flash";
@@ -71288,8 +71414,8 @@ async function handleBenchmark(client, subcommand, rest, flags) {
   const caseIds = parseCaseIds(flags.case);
   const dryRun = flags["dry-run"] === true;
   const output = typeof flags.output === "string" ? flags.output : void 0;
-  const runId = typeof flags["run-id"] === "string" ? flags["run-id"] : randomUUID12();
-  const imagePath = typeof flags.image === "string" ? resolve8(flags.image) : defaultImageFixturePath();
+  const runId = typeof flags["run-id"] === "string" ? flags["run-id"] : randomUUID13();
+  const imagePath = typeof flags.image === "string" ? resolve9(flags.image) : defaultImageFixturePath();
   if (!dryRun && flags["confirm-spend-credits"] !== true) {
     throw new Error(
       "Benchmark runs spend real credits from the logged-in account. Rerun with --confirm-spend-credits, or use --dry-run to preview the plan."
@@ -71390,7 +71516,7 @@ async function handlePromptBudgetBenchmark(client, rest, flags) {
   if (resumeArtifact) {
     validatePromptBudgetResumeArtifact(resumeArtifact, { phase, targetModel, judgeModel });
   }
-  const runId = stringFlag(flags["run-id"]) ?? resumeArtifact?.runId ?? randomUUID12();
+  const runId = stringFlag(flags["run-id"]) ?? resumeArtifact?.runId ?? randomUUID13();
   const result = makePromptBudgetBaseResult({
     phase,
     runId,
@@ -71951,7 +72077,7 @@ function buildLongContextHistory() {
 }
 function appendHistory(history, role, content) {
   history.push({
-    message_id: randomUUID12(),
+    message_id: randomUUID13(),
     role,
     sender_name: role === "user" ? "User" : "Assistant",
     content,
@@ -72009,13 +72135,13 @@ function parseJudgment(answer) {
     return { score: null, reason: null };
   }
 }
-function extractJsonObject(text) {
-  const fenced = text.match(/```(?:json)?\s*([\s\S]*?)\s*```/i);
+function extractJsonObject(text2) {
+  const fenced = text2.match(/```(?:json)?\s*([\s\S]*?)\s*```/i);
   if (fenced) return fenced[1];
-  const start = text.indexOf("{");
-  const end = text.lastIndexOf("}");
+  const start = text2.indexOf("{");
+  const end = text2.lastIndexOf("}");
   if (start === -1 || end === -1 || end <= start) return null;
-  return text.slice(start, end + 1);
+  return text2.slice(start, end + 1);
 }
 function loadPricingForModels(models) {
   const availablePricing = loadProviderPricing();
@@ -72044,21 +72170,21 @@ function loadProviderPricing() {
   for (const fileName of readdirSync6(providersDir)) {
     if (!fileName.endsWith(".yml")) continue;
     const filePath = join9(providersDir, fileName);
-    const text = readFileSync9(filePath, "utf-8");
-    const provider = parseProviderId(text) ?? fileName.replace(/\.yml$/, "");
-    for (const modelPricing of parseModelPricing(text, provider)) {
+    const text2 = readFileSync9(filePath, "utf-8");
+    const provider = parseProviderId(text2) ?? fileName.replace(/\.yml$/, "");
+    for (const modelPricing of parseModelPricing(text2, provider)) {
       pricing.set(`${modelPricing.provider}/${modelPricing.modelId}`, modelPricing);
       pricing.set(modelPricing.modelId, modelPricing);
     }
   }
   return pricing;
 }
-function parseProviderId(text) {
-  const match = text.match(/^provider_id:\s*["']?([^"'\n]+)["']?/m);
+function parseProviderId(text2) {
+  const match = text2.match(/^provider_id:\s*["']?([^"'\n]+)["']?/m);
   return match?.[1]?.trim() ?? null;
 }
-function parseModelPricing(text, provider) {
-  const lines = text.split("\n");
+function parseModelPricing(text2, provider) {
+  const lines = text2.split("\n");
   const results = [];
   let modelId = null;
   let inModel = false;
@@ -72096,13 +72222,13 @@ function normalizeModelKey(model) {
 }
 function findProvidersDir() {
   const currentFile = fileURLToPath(import.meta.url);
-  let current = dirname7(currentFile);
+  let current = dirname8(currentFile);
   for (let index = 0; index < 8; index += 1) {
     const candidate = join9(current, "backend", "providers");
     if (existsSync11(candidate)) return candidate;
     const parentCandidate = join9(current, "..", "..", "backend", "providers");
-    if (existsSync11(parentCandidate)) return resolve8(parentCandidate);
-    const next = dirname7(current);
+    if (existsSync11(parentCandidate)) return resolve9(parentCandidate);
+    const next = dirname8(current);
     if (next === current) break;
     current = next;
   }
@@ -72309,7 +72435,7 @@ function stableHash(value) {
   return createHash14("sha256").update(JSON.stringify(value)).digest("hex");
 }
 function defaultImageFixturePath() {
-  const fixtureDir = join9(dirname7(fileURLToPath(import.meta.url)), "..", "fixtures");
+  const fixtureDir = join9(dirname8(fileURLToPath(import.meta.url)), "..", "fixtures");
   const fixturePath = join9(fixtureDir, "brandenburger-tor.png");
   if (existsSync11(fixturePath)) return fixturePath;
   const tempDir = mkdtempSync2(join9(tmpdir(), "openmates-benchmark-"));
@@ -73130,8 +73256,8 @@ async function runTui(client, terminal = new TuiTerminal()) {
     void handleKey({ chunk, key, state, client, terminal, render, finish });
   });
   render();
-  return new Promise((resolve11) => {
-    resolveResult = resolve11;
+  return new Promise((resolve12) => {
+    resolveResult = resolve12;
   });
 }
 async function handleKey(params) {
@@ -73295,14 +73421,14 @@ async function handleEnter(params) {
     render();
     return;
   }
-  const text = state.input.trim();
-  if (!text) return;
+  const text2 = state.input.trim();
+  if (!text2) return;
   state.input = "";
-  if (text.startsWith("/")) {
-    await handleCommand({ command: text, state, client, terminal, render, finish });
+  if (text2.startsWith("/")) {
+    await handleCommand({ command: text2, state, client, terminal, render, finish });
     return;
   }
-  await sendTuiMessage({ message: text, state, client, render });
+  await sendTuiMessage({ message: text2, state, client, render });
 }
 async function handleCommand(params) {
   const { command, state, client, terminal, render, finish } = params;
@@ -73833,7 +73959,7 @@ import {
   writeFileSync as writeFileSync8
 } from "fs";
 import { spawn as spawn3, spawnSync as spawnSync2 } from "child_process";
-import { join as join10, resolve as resolve9, relative as relative2 } from "path";
+import { join as join10, resolve as resolve10, relative as relative2 } from "path";
 // src/projectFileRisk.ts
 var SECRET_OR_ENVIRONMENT_PATTERNS = [
@@ -73955,7 +74081,7 @@ function resolveRemoteAccessRoots(pathFlag, cwd = process.cwd()) {
   }
   const roots = [];
   for (const value of requested) {
-    const candidate = resolve9(cwd, value);
+    const candidate = resolve10(cwd, value);
     if (!existsSync12(candidate) || !statSync2(candidate).isDirectory()) {
       throw new Error(`Remote source path does not exist or is not a directory: ${candidate}`);
     }
@@ -74273,7 +74399,7 @@ function resolveRemoteCachePath(sourceId, homeDirectory = homedir7()) {
 function startRemoteAccessSource(input) {
   assertSafeSourceId(input.sourceId);
   const homeDirectory = input.homeDirectory ?? homedir7();
-  const requestedRootPath = resolve9(input.rootPath);
+  const requestedRootPath = resolve10(input.rootPath);
   if (!existsSync12(requestedRootPath) || !statSync2(requestedRootPath).isDirectory()) {
     throw new Error(`Remote source path does not exist or is not a directory: ${requestedRootPath}`);
   }
@@ -74311,7 +74437,7 @@ function listRemoteAccessSources(homeDirectory = homedir7()) {
   }
 }
 async function searchRemoteSource(options) {
-  const sourceRoot = resolve9(options.sourceRoot);
+  const sourceRoot = resolve10(options.sourceRoot);
   const maxResults = normalizeMaxResults(options.maxResults);
   let output;
   try {
@@ -74489,9 +74615,9 @@ function shouldExcludePath(sourceRoot, relativePath, userProtectedPatterns) {
   return classifyProjectFileRisk(relativePath, userProtectedPatterns).isHighRisk;
 }
 function isPathInsideRoot(sourceRoot, relativePath) {
-  const resolvedPath = resolve9(sourceRoot, relativePath);
+  const resolvedPath = resolve10(sourceRoot, relativePath);
   const relation = relative2(sourceRoot, resolvedPath);
-  return relation === "" || !relation.startsWith("..") && !resolve9(relation).startsWith("/..");
+  return relation === "" || !relation.startsWith("..") && !resolve10(relation).startsWith("/..");
 }
 function isBinaryPath(path2) {
   const lowerPath = path2.toLowerCase();
@@ -74517,7 +74643,7 @@ function parseRgMatch(line) {
 }
 function resolveApprovedPath(sourceRoot, relativePath) {
   if (!relativePath || relativePath.includes("\0")) throw new Error("Remote source path is invalid");
-  const lexical = resolve9(sourceRoot, relativePath);
+  const lexical = resolve10(sourceRoot, relativePath);
   assertInsideRoot(sourceRoot, lexical);
   const canonical = realpathSync(lexical);
   assertInsideRoot(sourceRoot, canonical);
@@ -74525,7 +74651,7 @@ function resolveApprovedPath(sourceRoot, relativePath) {
 }
 function assertInsideRoot(sourceRoot, path2) {
   const relation = relative2(sourceRoot, path2);
-  if (relation.startsWith("..") || resolve9(sourceRoot, relation) !== resolve9(path2)) {
+  if (relation.startsWith("..") || resolve10(sourceRoot, relation) !== resolve10(path2)) {
     throw new Error("Remote source path escapes the approved source root");
   }
 }
@@ -74590,7 +74716,7 @@ function assertRemoteAccessSourceRecord(value, index) {
 }
 // src/projectRequester.ts
-import { randomUUID as randomUUID13 } from "crypto";
+import { randomUUID as randomUUID14 } from "crypto";
 var REMOTE_PROTOCOL_TIMEOUT_MS = 45e3;
 var REMOTE_POLL_INTERVAL_MS = 250;
 var MAX_REMOTE_RESULT_BYTES = 200 * 1024;
@@ -74616,8 +74742,8 @@ async function requestProjectRemoteOperation(options) {
     keyEpoch = discovery.keyEpoch;
     routingIdentity = discovery.routingIdentity;
   }
-  const requestingClientId = randomUUID13();
-  const requestId = randomUUID13();
+  const requestingClientId = randomUUID14();
+  const requestId = randomUUID14();
   const identity = await buildIdentity(
     options.client,
     options.projectId,
@@ -74678,9 +74804,9 @@ async function requestProjectRemoteOperation(options) {
   return response.result;
 }
 async function discoverRouting(options, timeoutMs) {
-  const requestId = randomUUID13();
-  const requestingClientId = randomUUID13();
-  const nonce = randomUUID13();
+  const requestId = randomUUID14();
+  const requestingClientId = randomUUID14();
+  const nonce = randomUUID14();
   const encryptedEnvelope = await encryptWithAesGcmCombined(JSON.stringify({
     type: "routing_discovery",
     requesting_client_id: requestingClientId,
@@ -74780,7 +74906,7 @@ function remoteErrorMessage(code) {
 import { spawnSync as spawnSync3 } from "child_process";
 import { readFileSync as readFileSync11, mkdirSync as mkdirSync9, writeFileSync as writeFileSync9, renameSync as renameSync5 } from "fs";
 import { homedir as homedir8 } from "os";
-import { dirname as dirname8, basename as basename3, join as join11 } from "path";
+import { dirname as dirname9, basename as basename4, join as join11 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var PACKAGE_NAME = "openmates";
 function channelFile() {
@@ -74804,17 +74930,17 @@ function savedChannel() {
 function persistSelfUpdateChannel(plan) {
   if (plan.dryRun || !plan.persistChannel) return;
   const path2 = channelFile();
-  mkdirSync9(dirname8(path2), { recursive: true, mode: 448 });
+  mkdirSync9(dirname9(path2), { recursive: true, mode: 448 });
   const temporary = `${path2}.${process.pid}.tmp`;
   writeFileSync9(temporary, JSON.stringify({ channel: plan.channel }) + "\n", { mode: 384 });
   renameSync5(temporary, path2);
 }
 function installedNpmPrefix(moduleUrl = import.meta.url, platform4 = process.platform) {
-  const packageRoot = dirname8(dirname8(fileURLToPath2(moduleUrl)));
-  const modules = dirname8(packageRoot);
-  if (basename3(packageRoot) !== PACKAGE_NAME || basename3(modules) !== "node_modules") return null;
-  if (platform4 === "win32") return dirname8(modules);
-  return basename3(dirname8(modules)) === "lib" ? dirname8(dirname8(modules)) : null;
+  const packageRoot = dirname9(dirname9(fileURLToPath2(moduleUrl)));
+  const modules = dirname9(packageRoot);
+  if (basename4(packageRoot) !== PACKAGE_NAME || basename4(modules) !== "node_modules") return null;
+  if (platform4 === "win32") return dirname9(modules);
+  return basename4(dirname9(modules)) === "lib" ? dirname9(dirname9(modules)) : null;
 }
 function compareVersions(left, right) {
   const parse = (value) => {
@@ -74964,7 +75090,7 @@ function commandName(name) {
 // src/workRecovery.ts
 import { mkdirSync as mkdirSync10, renameSync as renameSync6, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname9 } from "path";
+import { dirname as dirname10 } from "path";
 import { stringify } from "yaml";
 async function projectPlanAssumption(plan, masterKey, assumption) {
   const key = await planKeyFromRecord(plan.encrypted, masterKey);
@@ -75143,7 +75269,7 @@ function collectMismatchPaths(left, right, path2, mismatches) {
 }
 function writeWorkRecoveryAtomically(path2, document) {
   validateWorkRecoveryDocument(document);
-  mkdirSync10(dirname9(path2), { recursive: true, mode: 448 });
+  mkdirSync10(dirname10(path2), { recursive: true, mode: 448 });
   const temporaryPath = `${path2}.tmp`;
   writeFileSync10(temporaryPath, stringify(document, { sortMapEntries: true, lineWidth: 0 }), { encoding: "utf8", mode: 384 });
   renameSync6(temporaryPath, path2);
@@ -75151,10 +75277,10 @@ function writeWorkRecoveryAtomically(path2, document) {
 // src/revolutBusinessCertificate.ts
 import { execFileSync as execFileSync5 } from "child_process";
-import { createSign, randomUUID as randomUUID14 } from "crypto";
+import { createSign, randomUUID as randomUUID15 } from "crypto";
 import { chmodSync as chmodSync7, existsSync as existsSync13, mkdirSync as mkdirSync11, readFileSync as readFileSync12 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join12, resolve as resolve10 } from "path";
+import { join as join12, resolve as resolve11 } from "path";
 var REVOLUT_BUSINESS_CERTIFICATE_DOCS_URL = "https://developer.revolut.com/docs/guides/manage-accounts/get-started/make-your-first-api-request#generate-a-private-and-a-public-certificate";
 var REVOLUT_BUSINESS_DEFAULT_SANDBOX_REDIRECT_URI = "https://app.dev.openmates.org/oauth/revolut-business/callback";
 var REVOLUT_BUSINESS_DEFAULT_PRODUCTION_REDIRECT_URI = "https://openmates.org/oauth/revolut-business/callback";
@@ -75225,7 +75351,7 @@ function generateRevolutBusinessClientAssertion(options) {
     aud: REVOLUT_BUSINESS_AUDIENCE,
     exp: now + 3600,
     iat: now,
-    jti: randomUUID14()
+    jti: randomUUID15()
   });
   const unsigned = `${header2}.${payload}`;
   const signer = createSign("RSA-SHA256");
@@ -75235,7 +75361,7 @@ function generateRevolutBusinessClientAssertion(options) {
 }
 function generateRevolutBusinessCertificate(options = {}) {
   const environment = options.environment ?? "sandbox";
-  const outputDir = resolve10(options.outputDir ?? defaultRevolutBusinessCertificateDir(environment));
+  const outputDir = resolve11(options.outputDir ?? defaultRevolutBusinessCertificateDir(environment));
   const title = (options.title ?? REVOLUT_BUSINESS_DEFAULT_CERTIFICATE_TITLE).trim();
   const redirectUri = (options.redirectUri ?? defaultRevolutBusinessRedirectUri(environment)).trim();
   if (!title) throw new Error("Revolut certificate title must not be empty.");
@@ -75887,8 +76013,8 @@ async function handleTasks(client, subcommand, rest, flags, redactor) {
       if (!message.trim()) throw new Error("Missing comment. Usage: openmates tasks activity add <task-id> --message <text>");
       const deliveryId = typeof flags["delivery-id"] === "string" ? flags["delivery-id"] : void 0;
       const build = () => buildCreateTaskActivityInput(task, masterKey, { message, ...deliveryId ? { entryId: deliveryId } : {} });
-      const record = deliveryId ? await delivery().deliver(deliveryId, build, createActivity) : await createActivity(await build());
-      const entry = await decryptTaskActivityEntry(task, masterKey, record);
+      const record2 = deliveryId ? await delivery().deliver(deliveryId, build, createActivity) : await createActivity(await build());
+      const entry = await decryptTaskActivityEntry(task, masterKey, record2);
       if (entry.message !== message) throw new Error("Activity delivery id already belongs to a different milestone message");
       if (flags.json === true) printJson2({ entry: taskActivityToJson(entry) });
       else console.log(renderTaskActivityList([entry]));
@@ -76231,13 +76357,13 @@ function extractRecord(container, key) {
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`Workspace ask planning returned invalid ${key}.`);
   return value;
 }
-function requiredString(record, key, fallback) {
-  const value = record[key];
+function requiredString(record2, key, fallback) {
+  const value = record2[key];
   if (typeof value === "string" && value.trim()) return value.trim();
   return fallback;
 }
-function optionalString(record, key) {
-  const value = record[key];
+function optionalString(record2, key) {
+  const value = record2[key];
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 async function proposeTasksForAsk(client, instruction, flags) {
@@ -76530,28 +76656,28 @@ function normalizeAskLookup(value) {
 async function loadProjects(client, masterKey, flags, context = teamContextFromFlags(flags)) {
   const records = await client.listProjects({ includeArchived: true, ...context });
   const projects = [];
-  for (const record of records) {
-    const decrypted = await decryptProject(client, record, masterKey, context);
+  for (const record2 of records) {
+    const decrypted = await decryptProject(client, record2, masterKey, context);
     if (decrypted) projects.push(decrypted);
   }
   return projects;
 }
-async function decryptProject(client, record, masterKey, context = {}) {
+async function decryptProject(client, record2, masterKey, context = {}) {
   void masterKey;
-  if (!record.project_id) return null;
-  const projectKey = await client.decryptProjectKey(record, context);
+  if (!record2.project_id) return null;
+  const projectKey = await client.decryptProjectKey(record2, context);
   return {
-    projectId: record.project_id,
-    slug: await decryptOptionalProjectField2(record.encrypted_slug, projectKey),
-    name: await decryptOptionalProjectField2(record.encrypted_name, projectKey) || "(untitled project)",
-    description: await decryptOptionalProjectField2(record.encrypted_description, projectKey),
-    icon: await decryptOptionalProjectField2(record.encrypted_icon, projectKey),
-    color: await decryptOptionalProjectField2(record.encrypted_color, projectKey),
-    pinned: record.pinned === true,
-    archived: record.archived === true,
-    version: typeof record.version === "number" ? record.version : null,
+    projectId: record2.project_id,
+    slug: await decryptOptionalProjectField2(record2.encrypted_slug, projectKey),
+    name: await decryptOptionalProjectField2(record2.encrypted_name, projectKey) || "(untitled project)",
+    description: await decryptOptionalProjectField2(record2.encrypted_description, projectKey),
+    icon: await decryptOptionalProjectField2(record2.encrypted_icon, projectKey),
+    color: await decryptOptionalProjectField2(record2.encrypted_color, projectKey),
+    pinned: record2.pinned === true,
+    archived: record2.archived === true,
+    version: typeof record2.version === "number" ? record2.version : null,
     projectKey,
-    encrypted: record
+    encrypted: record2
   };
 }
 async function decryptOptionalProjectField2(value, projectKey) {
@@ -76614,7 +76740,7 @@ async function resolveAddToProjectStorageChoice(client, project, flags, objectTy
 async function createEncryptedProjectItem(client, project, input) {
   const timestamp = nowSeconds3();
   return client.createProjectItem(project.projectId, {
-    project_item_id: randomUUID15(),
+    project_item_id: randomUUID16(),
     folder_id: input.folderId ?? null,
     item_type: input.itemType,
     target_id: input.targetId,
@@ -76808,7 +76934,7 @@ async function handlePlans(client, subcommand, rest, flags, redactor) {
     const encryptedSources = proof.length ? await encryptPlanAssumptionSources(plan, masterKey, proof) : void 0;
     if (action === "create" || action === "add") {
       const assumption = await client.createPlanAssumption(plan.planId, {
-        assumption_id: typeof flags.id === "string" ? flags.id : randomUUID15(),
+        assumption_id: typeof flags.id === "string" ? flags.id : randomUUID16(),
         encrypted_text: await encryptPlanAssumptionSources(plan, masterKey, requiredStringFlag(flags.text ?? rest.slice(2).join(" "), "--text <assumption>")),
         status: typeof flags.status === "string" ? flags.status : void 0,
         linked_sub_chat_id: typeof flags["sub-chat"] === "string" ? flags["sub-chat"] : void 0,
@@ -77129,10 +77255,10 @@ async function handlePlans(client, subcommand, rest, flags, redactor) {
       else console.log(`Plan success criterion updated: ${updated.criterion_id}`);
       return;
     }
-    const text = requiredStringFlag(flags.text ?? rest.slice(2).join(" "), "--text <criterion>");
+    const text2 = requiredStringFlag(flags.text ?? rest.slice(2).join(" "), "--text <criterion>");
     const criterion = await buildCreatePlanCriterionInput(plan, masterKey, {
       criterionId: typeof flags.id === "string" ? flags.id : void 0,
-      text,
+      text: text2,
       type: typeof flags.type === "string" ? flags.type : void 0,
       status: typeof flags.status === "string" ? flags.status : void 0,
       required: flags.required === true ? true : flags.optional === true ? false : void 0,
@@ -77430,25 +77556,25 @@ async function handleWorkRecovery(client, subcommand, rest, flags) {
     if (conflicts.length > 0) throw new Error(`Recovery restore found conflicts and made no changes: ${JSON.stringify(conflicts)}`);
     const applied = [];
     try {
-      for (const record of document.plans) {
-        const linkContext = await resolvePlanLinkKeyContext(client, masterKey2, flags, { primaryChatId: typeof record.primary_chat_id === "string" ? record.primary_chat_id : null, linkedProjectIds: [project2.projectId] });
-        const input = await buildCreateUserPlanInput(masterKey2, recoveryPlanCreateOptions(record, linkContext));
+      for (const record2 of document.plans) {
+        const linkContext = await resolvePlanLinkKeyContext(client, masterKey2, flags, { primaryChatId: typeof record2.primary_chat_id === "string" ? record2.primary_chat_id : null, linkedProjectIds: [project2.projectId] });
+        const input = await buildCreateUserPlanInput(masterKey2, recoveryPlanCreateOptions(record2, linkContext));
         await client.createUserPlan(input);
         applied.push(`plan:${input.plan_id}`);
       }
-      for (const record of document.tasks) {
-        const input = await buildCreateUserTaskInput(masterKey2, recoveryTaskCreateOptions(record, project2.projectId));
+      for (const record2 of document.tasks) {
+        const input = await buildCreateUserTaskInput(masterKey2, recoveryTaskCreateOptions(record2, project2.projectId));
         await client.createUserTask(input);
         applied.push(`task:${input.task_id}`);
       }
       const restoredPlans = await loadPlans(client, masterKey2, { projectId: project2.projectId });
       const planById = new Map(restoredPlans.map((plan) => [plan.planId, plan]));
-      for (const record of document.assumptions) {
-        const planId = recoveryString(record, "plan_id");
+      for (const record2 of document.assumptions) {
+        const planId = recoveryString(record2, "plan_id");
         const plan = planById.get(planId);
         if (!plan) throw new Error(`Restored plan ${planId} was not available for its assumption.`);
-        await client.createPlanAssumption(planId, await recoveryAssumptionInput(plan, masterKey2, record));
-        applied.push(`assumption:${recoveryString(record, "assumption_id")}`);
+        await client.createPlanAssumption(planId, await recoveryAssumptionInput(plan, masterKey2, record2));
+        applied.push(`assumption:${recoveryString(record2, "assumption_id")}`);
       }
       for (const dependency of document.dependencies) {
         const [kind, id] = dependency.source_ref.split(":", 2);
@@ -77456,13 +77582,13 @@ async function handleWorkRecovery(client, subcommand, rest, flags) {
         else await client.addTaskDependency(id, dependency.target_ref);
         applied.push(`dependency:${dependency.source_ref}->${dependency.target_ref}`);
       }
-      for (const record of document.revisions) {
-        const planId = recoveryString(record, "plan_id");
-        const snapshot = JSON.stringify(record.snapshot);
+      for (const record2 of document.revisions) {
+        const planId = recoveryString(record2, "plan_id");
+        const snapshot = JSON.stringify(record2.snapshot);
         const plan = planById.get(planId);
         if (!plan) throw new Error(`Restored plan ${planId} was not available for its revision.`);
-        await client.submitPlanRevision(planId, { fingerprint: recoveryString(record, "fingerprint"), encrypted_snapshot: await encryptPlanAssumptionSources(plan, masterKey2, snapshot), created_at: nowSeconds3() });
-        applied.push(`revision:${recoveryString(record, "revision_id")}`);
+        await client.submitPlanRevision(planId, { fingerprint: recoveryString(record2, "fingerprint"), encrypted_snapshot: await encryptPlanAssumptionSources(plan, masterKey2, snapshot), created_at: nowSeconds3() });
+        applied.push(`revision:${recoveryString(record2, "revision_id")}`);
       }
     } catch (error) {
       throw new Error(`Recovery restore partially applied (${applied.join(", ") || "nothing"}); it is not cross-object atomic. ${error instanceof Error ? error.message : String(error)}`);
@@ -77500,13 +77626,13 @@ async function buildProjectWorkRecoveryDocument(client, masterKey, projectId) {
   }
   return { schema_version: 1, project: { project_id: projectId }, plans: plans.map(planToJson), tasks: tasks.map(taskToJson), dependencies, assumptions, revisions };
 }
-function recoveryString(record, key) {
-  const value = record[key];
+function recoveryString(record2, key) {
+  const value = record2[key];
   if (typeof value !== "string") throw new Error(`Recovery record requires ${key}.`);
   return value;
 }
-function recoveryStrings(record, key) {
-  const value = record[key];
+function recoveryStrings(record2, key) {
+  const value = record2[key];
   if (!Array.isArray(value) || !value.every((item) => typeof item === "string")) throw new Error(`Recovery record requires ${key} string array.`);
   return value;
 }
@@ -77517,8 +77643,8 @@ function parsePlanUserFlowsFlag(value) {
   if (!Array.isArray(parsed)) throw new Error("--user-flows must be a JSON array.");
   return parsed;
 }
-function recoveryPlanUserFlows(record) {
-  const flows = record.user_flows;
+function recoveryPlanUserFlows(record2) {
+  const flows = record2.user_flows;
   if (!Array.isArray(flows)) throw new Error("Recovery record requires user_flows array.");
   return flows;
 }
@@ -77526,62 +77652,62 @@ function requiredPlanGoal(flags) {
   if (typeof flags.goal !== "string" || !flags.goal.trim()) throw new Error("Creating a plan requires --goal.");
   return flags.goal;
 }
-function recoveryPlanCreateOptions(record, linkContext) {
+function recoveryPlanCreateOptions(record2, linkContext) {
   return {
-    planId: recoveryString(record, "plan_id"),
-    title: recoveryString(record, "title"),
-    goal: recoveryString(record, "goal"),
-    scopeIn: recoveryString(record, "scope_in"),
-    scopeOut: recoveryString(record, "scope_out"),
-    userFlows: recoveryPlanUserFlows(record),
-    assumptions: recoveryString(record, "assumptions"),
-    openQuestions: recoveryString(record, "open_questions"),
-    constraints: recoveryString(record, "constraints"),
-    decisions: recoveryString(record, "decisions"),
-    risks: recoveryString(record, "risks"),
-    referencePatterns: recoveryString(record, "reference_patterns"),
-    context: recoveryString(record, "context"),
-    status: recoveryString(record, "status"),
-    slug: typeof record.slug === "string" ? record.slug : void 0,
+    planId: recoveryString(record2, "plan_id"),
+    title: recoveryString(record2, "title"),
+    goal: recoveryString(record2, "goal"),
+    scopeIn: recoveryString(record2, "scope_in"),
+    scopeOut: recoveryString(record2, "scope_out"),
+    userFlows: recoveryPlanUserFlows(record2),
+    assumptions: recoveryString(record2, "assumptions"),
+    openQuestions: recoveryString(record2, "open_questions"),
+    constraints: recoveryString(record2, "constraints"),
+    decisions: recoveryString(record2, "decisions"),
+    risks: recoveryString(record2, "risks"),
+    referencePatterns: recoveryString(record2, "reference_patterns"),
+    context: recoveryString(record2, "context"),
+    status: recoveryString(record2, "status"),
+    slug: typeof record2.slug === "string" ? record2.slug : void 0,
     primaryChatId: linkContext.primaryChatId,
     primaryChatKey: linkContext.primaryChatKey,
     linkedProjectIds: linkContext.linkedProjectIds,
     linkedProjectKeys: linkContext.linkedProjectKeys,
-    plannerFocusId: typeof record.planner_focus_id === "string" ? record.planner_focus_id : null
+    plannerFocusId: typeof record2.planner_focus_id === "string" ? record2.planner_focus_id : null
   };
 }
-function recoveryTaskCreateOptions(record, projectId) {
+function recoveryTaskCreateOptions(record2, projectId) {
   return {
-    taskId: recoveryString(record, "task_id"),
-    title: recoveryString(record, "title"),
-    description: recoveryString(record, "description"),
-    labels: recoveryStrings(record, "labels"),
-    status: recoveryString(record, "status"),
-    assign: typeof record.assignee_hash === "string" ? record.assignee_hash : recoveryString(record, "assignee_type"),
-    chatId: typeof record.primary_chat_id === "string" ? record.primary_chat_id : null,
+    taskId: recoveryString(record2, "task_id"),
+    title: recoveryString(record2, "title"),
+    description: recoveryString(record2, "description"),
+    labels: recoveryStrings(record2, "labels"),
+    status: recoveryString(record2, "status"),
+    assign: typeof record2.assignee_hash === "string" ? record2.assignee_hash : recoveryString(record2, "assignee_type"),
+    chatId: typeof record2.primary_chat_id === "string" ? record2.primary_chat_id : null,
     projectIds: [projectId],
-    planId: typeof record.plan_id === "string" ? record.plan_id : null,
-    dueAt: typeof record.due_at === "number" ? record.due_at : null,
-    priority: typeof record.priority === "number" ? record.priority : null,
-    slug: typeof record.slug === "string" ? record.slug : void 0
+    planId: typeof record2.plan_id === "string" ? record2.plan_id : null,
+    dueAt: typeof record2.due_at === "number" ? record2.due_at : null,
+    priority: typeof record2.priority === "number" ? record2.priority : null,
+    slug: typeof record2.slug === "string" ? record2.slug : void 0
   };
 }
-async function recoveryAssumptionInput(plan, masterKey, record) {
-  const encrypt = (key) => encryptPlanAssumptionSources(plan, masterKey, typeof record[key] === "string" ? record[key] : "");
+async function recoveryAssumptionInput(plan, masterKey, record2) {
+  const encrypt = (key) => encryptPlanAssumptionSources(plan, masterKey, typeof record2[key] === "string" ? record2[key] : "");
   return {
-    assumption_id: recoveryString(record, "assumption_id"),
+    assumption_id: recoveryString(record2, "assumption_id"),
     encrypted_text: await encrypt("text"),
-    category: typeof record.category === "string" ? record.category : void 0,
-    status: typeof record.status === "string" ? record.status : void 0,
-    required_before: typeof record.required_before === "string" ? record.required_before : void 0,
-    linked_sub_chat_id: typeof record.linked_sub_chat_id === "string" ? record.linked_sub_chat_id : null,
-    linked_task_id: typeof record.linked_task_id === "string" ? record.linked_task_id : null,
-    linked_criterion_ids: Array.isArray(record.linked_criterion_ids) ? record.linked_criterion_ids : [],
+    category: typeof record2.category === "string" ? record2.category : void 0,
+    status: typeof record2.status === "string" ? record2.status : void 0,
+    required_before: typeof record2.required_before === "string" ? record2.required_before : void 0,
+    linked_sub_chat_id: typeof record2.linked_sub_chat_id === "string" ? record2.linked_sub_chat_id : null,
+    linked_task_id: typeof record2.linked_task_id === "string" ? record2.linked_task_id : null,
+    linked_criterion_ids: Array.isArray(record2.linked_criterion_ids) ? record2.linked_criterion_ids : [],
     encrypted_corrected_text: await encrypt("corrected_text"),
     encrypted_evidence_summary: await encrypt("evidence_summary"),
     encrypted_blocker_reason: await encrypt("blocker_reason"),
     encrypted_waiver_reason: await encrypt("waiver_reason"),
-    encrypted_sources: await encryptPlanAssumptionSources(plan, masterKey, JSON.stringify(record.sources)),
+    encrypted_sources: await encryptPlanAssumptionSources(plan, masterKey, JSON.stringify(record2.sources)),
     created_at: nowSeconds3(),
     updated_at: nowSeconds3()
   };
@@ -77733,7 +77859,7 @@ async function handleProjects(client, subcommand, rest, flags, redactor) {
     const name = requiredStringFlag(rest[0] ?? flags.name, "project name");
     const projectKey = randomBytes9(32);
     const wrapping = await client.projectWrappingKey(context);
-    const projectId = randomUUID15();
+    const projectId = randomUUID16();
     const timestamp = nowSeconds3();
     const slugMetadata = await buildEncryptedObjectSlugMetadata({
       value: typeof flags.slug === "string" ? flags.slug : name,
@@ -77763,8 +77889,8 @@ async function handleProjects(client, subcommand, rest, flags, redactor) {
       }] : []
     };
     const result = await client.createProject(payload, context);
-    const record = { ...payload, ...result.project ?? {} };
-    printProjectOutput(await decryptProject(client, record, masterKey, context), flags);
+    const record2 = { ...payload, ...result.project ?? {} };
+    printProjectOutput(await decryptProject(client, record2, masterKey, context), flags);
     return;
   }
   if (["update", "archive", "unarchive"].includes(subcommand)) {
@@ -77841,7 +77967,7 @@ async function handleProjects(client, subcommand, rest, flags, redactor) {
     const proposal = isShortWorkspaceAsk(instruction) ? { name: instruction, description: "", icon: "folder", color: "default" } : extractRecord(await client.planProjectAsk({ instruction }), "proposed_project");
     const projectKey = randomBytes9(32);
     const timestamp = Math.floor(Date.now() / 1e3);
-    const projectId = randomUUID15();
+    const projectId = randomUUID16();
     const name = requiredString(proposal, "name", instruction);
     const slugMetadata = await buildEncryptedObjectSlugMetadata({
       value: typeof flags.slug === "string" ? flags.slug : name,
@@ -78740,7 +78866,7 @@ async function handleRemoteAccess(client, subcommand, rest, flags) {
     const projects = await loadProjects(client, masterKey, hostingFlags, hostingContext);
     const bindings = await resolveRemoteAccessBindings(client, masterKey, projects, candidateRoots, hostingFlags, hostingContext);
     if (bindings.length === 0) throw new Error("No Project folders were approved for remote access.");
-    const sourceSessionId = randomUUID15();
+    const sourceSessionId = randomUUID16();
     const controller = new AbortController();
     const stop = () => controller.abort();
     process.once("SIGINT", stop);
@@ -78847,8 +78973,8 @@ async function resolveRemoteAccessBindings(client, masterKey, projects, candidat
     const answer = (await promptLine2(`Create ${unresolved.length} missing Project${unresolved.length === 1 ? "" : "s"}? [y/N] `)).trim().toLowerCase();
     if (answer !== "y" && answer !== "yes") throw new Error("Remote access Project creation cancelled.");
     for (const rootPath of unresolved) {
-      const project = await createEncryptedRemoteAccessProject(client, masterKey, basename4(rootPath), context);
-      resolved.push({ rootPath, project, sourceId: randomUUID15() });
+      const project = await createEncryptedRemoteAccessProject(client, masterKey, basename5(rootPath), context);
+      resolved.push({ rootPath, project, sourceId: randomUUID16() });
     }
   }
   const bindings = [];
@@ -78859,7 +78985,7 @@ async function resolveRemoteAccessBindings(client, masterKey, projects, candidat
       projectId: item.project.projectId,
       rootPath: item.rootPath,
       sourceType,
-      displayName: basename4(item.rootPath)
+      displayName: basename5(item.rootPath)
     });
     const remoteSources = await client.listProjectSources(item.project.projectId, context);
     const remoteSource = remoteSources.find((entry) => entry.source_id === source.sourceId);
@@ -78885,7 +79011,7 @@ async function resolveRemoteAccessBindings(client, masterKey, projects, candidat
 }
 async function createEncryptedRemoteAccessProject(client, masterKey, name, context) {
   const projectKey = randomBytes9(32);
-  const projectId = randomUUID15();
+  const projectId = randomUUID16();
   const timestamp = Math.floor(Date.now() / 1e3);
   const wrapping = await client.projectWrappingKey(context);
   const payload = {
@@ -78983,11 +79109,11 @@ async function handleIdeaBucket(client, subcommand, rest, flags) {
     return;
   }
   if (subcommand === "add") {
-    const text = rest.join(" ").trim();
-    if (!text) throw new Error("Missing IdeaBucket text for add.");
+    const text2 = rest.join(" ").trim();
+    if (!text2) throw new Error("Missing IdeaBucket text for add.");
     const scheduledSendAt = typeof flags["scheduled-at"] === "string" ? parseUnixSecondsFlag(flags["scheduled-at"], "--scheduled-at") : void 0;
     printJson2(await client.addIdeaBucketText({
-      text,
+      text: text2,
       chatId: typeof flags.chat === "string" ? flags.chat : void 0,
       bucketId: typeof flags.bucket === "string" ? flags.bucket : void 0,
       scheduledSendAt,
@@ -79532,10 +79658,10 @@ Run 'openmates chats show ` + chatId + "' to check if suggestions have been save
         input: process.stdin,
         output: process.stdout
       });
-      const answer = await new Promise((resolve11) => {
+      const answer = await new Promise((resolve12) => {
         iface.question(
           `Delete ${resolved.length} chat(s)? This cannot be undone. [y/N] `,
-          resolve11
+          resolve12
         );
       });
       iface.close();
@@ -79663,19 +79789,19 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
         if (embed.type === "app_skill_use" && embed.appId === "videos" && (embed.skillId === "get_transcript" || embed.skillId === "get-transcript") && embed.content) {
           const results = embed.content.results ?? embed.content.data ?? [];
           if (Array.isArray(results) && results.length > 0) {
-            let text = "";
+            let text2 = "";
             for (const r of results) {
               const meta = r.metadata;
-              if (meta?.title) text += `# ${meta.title}
+              if (meta?.title) text2 += `# ${meta.title}
 `;
-              if (r.url) text += `Source: ${r.url}
+              if (r.url) text2 += `Source: ${r.url}
 `;
-              text += String(
+              text2 += String(
                 r.transcript ?? r.formatted_transcript ?? r.text ?? r.content ?? ""
               );
-              text += "\n\n---\n\n";
+              text2 += "\n\n---\n\n";
             }
             let fname = `${eid.slice(0, 8)}_transcript.md`;
             const firstMeta = results[0]?.metadata;
@@ -79685,7 +79811,7 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
             transcriptEmbeds.push({
               embedId: eid,
               filename: fname,
-              content: text
+              content: text2
             });
           }
         }
@@ -79701,18 +79827,18 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
       } catch {
       }
     }
-    const { mkdir: mkdir2, writeFile: writeFile2 } = await import("fs/promises");
+    const { mkdir: mkdir3, writeFile: writeFile2 } = await import("fs/promises");
     const { join: join13 } = await import("path");
     if (useZip) {
       const tmpDir = join13(outputDir, `.${filenameBase}_tmp`);
-      await mkdir2(tmpDir, { recursive: true });
+      await mkdir3(tmpDir, { recursive: true });
       await writeFile2(join13(tmpDir, `${filenameBase}.yml`), yamlContent);
       await writeFile2(join13(tmpDir, `${filenameBase}.md`), mdContent);
       if (codeEmbeds.length > 0) {
         for (const ce of codeEmbeds) {
           const fpath = ce.filePath ?? ce.filename ?? `${ce.embedId.slice(0, 8)}.${getExtForLang(ce.language)}`;
           const fullPath = join13(tmpDir, "code", fpath);
-          await mkdir2(fullPath.substring(0, fullPath.lastIndexOf("/")), {
+          await mkdir3(fullPath.substring(0, fullPath.lastIndexOf("/")), {
             recursive: true
           });
           await writeFile2(fullPath, ce.content);
@@ -79720,7 +79846,7 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
       }
       if (transcriptEmbeds.length > 0) {
         const tDir = join13(tmpDir, "transcripts");
-        await mkdir2(tDir, { recursive: true });
+        await mkdir3(tDir, { recursive: true });
         for (const te of transcriptEmbeds) {
           await writeFile2(join13(tDir, te.filename), te.content);
         }
@@ -79741,7 +79867,7 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
       }
     } else {
       const chatDir = join13(outputDir, filenameBase);
-      await mkdir2(chatDir, { recursive: true });
+      await mkdir3(chatDir, { recursive: true });
       const written = [];
       await writeFile2(join13(chatDir, `${filenameBase}.yml`), yamlContent);
       written.push(`${filenameBase}.yml`);
@@ -79751,7 +79877,7 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
         for (const ce of codeEmbeds) {
           const fpath = ce.filePath ?? ce.filename ?? `${ce.embedId.slice(0, 8)}.${getExtForLang(ce.language)}`;
           const fullPath = join13(chatDir, "code", fpath);
-          await mkdir2(fullPath.substring(0, fullPath.lastIndexOf("/")), {
+          await mkdir3(fullPath.substring(0, fullPath.lastIndexOf("/")), {
             recursive: true
           });
           await writeFile2(fullPath, ce.content);
@@ -79760,7 +79886,7 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
       }
       if (transcriptEmbeds.length > 0) {
         const tDir = join13(chatDir, "transcripts");
-        await mkdir2(tDir, { recursive: true });
+        await mkdir3(tDir, { recursive: true });
         for (const te of transcriptEmbeds) {
           await writeFile2(join13(tDir, te.filename), te.content);
           written.push(`transcripts/${te.filename}`);
@@ -80044,29 +80170,29 @@ function getCliApiKeyDeviceIdentity() {
 }
 function extractAiAskContent(value) {
   if (!value || typeof value !== "object") return "";
-  const record = value;
-  if (typeof record.content === "string") return record.content;
-  if (typeof record.response === "string") return record.response;
-  if (typeof record.answer === "string") return record.answer;
-  const choices = record.choices;
+  const record2 = value;
+  if (typeof record2.content === "string") return record2.content;
+  if (typeof record2.response === "string") return record2.response;
+  if (typeof record2.answer === "string") return record2.answer;
+  const choices = record2.choices;
   if (Array.isArray(choices)) {
     const first = choices[0];
     const message = first?.message;
     if (typeof message?.content === "string") return message.content;
     if (typeof first?.text === "string") return first.text;
   }
-  const data = record.data;
+  const data = record2.data;
   if (data && typeof data === "object") return extractAiAskContent(data);
   return JSON.stringify(value);
 }
 function extractApiKeyChatModelName(value, depth = 0) {
   if (!value || typeof value !== "object" || depth > 3) return null;
-  const record = value;
+  const record2 = value;
   for (const key of ["model_name", "modelName", "model"]) {
-    const field = record[key];
+    const field = record2[key];
     if (typeof field === "string" && field) return field;
   }
-  return extractApiKeyChatModelName(record.data, depth + 1) ?? extractApiKeyChatModelName(record.raw, depth + 1) ?? null;
+  return extractApiKeyChatModelName(record2.data, depth + 1) ?? extractApiKeyChatModelName(record2.raw, depth + 1) ?? null;
 }
 function normalizeApiKeyChatResponse(response) {
   const chatId = typeof response.chat_id === "string" ? response.chat_id : null;
@@ -80432,10 +80558,10 @@ async function handleWorkflows(client, subcommand, rest, flags, redactor) {
     return;
   }
   if (subcommand === "input") {
-    const text = typeof flags.text === "string" ? flags.text : rest.join(" ").trim();
-    if (!text) throw new Error('Missing workflow input text. Example: openmates workflows ask "alert me if it rains"');
+    const text2 = typeof flags.text === "string" ? flags.text : rest.join(" ").trim();
+    if (!text2) throw new Error('Missing workflow input text. Example: openmates workflows ask "alert me if it rains"');
     const session = await client.startWorkflowInput({
-      text,
+      text: text2,
       selectedWorkflowId: typeof flags["workflow-id"] === "string" ? flags["workflow-id"] : void 0,
       selectedProjectId: typeof flags["project-id"] === "string" ? flags["project-id"] : void 0
     });
@@ -80479,9 +80605,9 @@ async function handleWorkflows(client, subcommand, rest, flags, redactor) {
   }
   if (subcommand === "input-follow-up") {
     const sessionId = rest[0];
-    const text = typeof flags.text === "string" ? flags.text : rest.slice(1).join(" ").trim();
-    if (!sessionId || !text) throw new Error('Missing session ID or text. Example: openmates workflows input-follow-up <session-id> "make it weekdays only"');
-    const session = await client.followUpWorkflowInput(sessionId, text);
+    const text2 = typeof flags.text === "string" ? flags.text : rest.slice(1).join(" ").trim();
+    if (!sessionId || !text2) throw new Error('Missing session ID or text. Example: openmates workflows input-follow-up <session-id> "make it weekdays only"');
+    const session = await client.followUpWorkflowInput(sessionId, text2);
     if (flags.json === true) {
       printJson2(session);
     } else {
@@ -80824,7 +80950,7 @@ function buildImagesAiDetectionSummary(uploadResult, filePath) {
   const classification = classifyImagesAiDetection(score);
   return {
     file: filePath,
-    filename: uploadResult.filename || basename4(filePath),
+    filename: uploadResult.filename || basename5(filePath),
     content_type: uploadResult.content_type,
     embed_id: uploadResult.embed_id,
     deduplicated: uploadResult.deduplicated,
@@ -80862,6 +80988,7 @@ async function handleGeneratedAppSkillCommand(client, command, positionals, flag
     return;
   }
   const inputData = buildGeneratedAppSkillInput(command, positionals, flags);
+  const downloadOptions = generatedFileOptions(flags, inputData);
   try {
     const result = await client.runSkill({
       app: command.app_id,
@@ -80870,10 +80997,19 @@ async function handleGeneratedAppSkillCommand(client, command, positionals, flag
       apiKey,
       promptInjectionProtection: flags["disable-prompt-injection-protection"] === true ? false : void 0
     });
+    const localFiles = await downloadGeneratedFiles(result, downloadOptions, async (url) => {
+      if (url.startsWith("/")) {
+        const raw = await client.getRaw(url, apiKey);
+        return new Response(Buffer.from(raw.data));
+      }
+      return fetchGeneratedFile(url);
+    });
     if (flags.json === true) {
-      printJson2(result);
+      printJson2(localFiles.length ? { ...result, local_files: localFiles } : result);
     } else {
-      printSkillResult(command.app_id, command.skill_id, result);
+      if (localFiles.length) header(`${capitalise(command.app_id)} \u203A ${capitalise(command.skill_id)} \xB7 ${localFiles.length} file${localFiles.length === 1 ? "" : "s"} generated`);
+      else printSkillResult(command.app_id, command.skill_id, result);
+      for (const file of localFiles) console.log(`Saved ${file.path}`);
     }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -80911,7 +81047,7 @@ function buildGeneratedAppSkillValue(command, shape, positionals, flags) {
   const value = {};
   const consumedPositionals = applyPrimaryPositionals(command, shape, value, positionals);
   for (const [name, schema] of Object.entries(shape.properties)) {
-    if (value[name] !== void 0 || name === "requests") continue;
+    if (value[name] !== void 0 || ["requests", "output", "output_dir", "filename", "no_download"].includes(name)) continue;
     const raw = readFlag(flags, name);
     if (raw === void 0) continue;
     value[name] = coerceAppSkillFlagValue(name, raw, schema);
@@ -81102,6 +81238,9 @@ ${command.description}
   const key = `${command.app_id}/${command.skill_id}`;
   const examples = APP_SKILL_COMMAND_EXAMPLES[key] ?? [buildGeneratedAppSkillExample(command, shape)];
   for (const example of examples) console.log(`  ${example}`);
+  console.log(`
+${GENERATED_FILE_HELP}`);
+  if (command.app_id === "code" && command.skill_id === "run") console.log("  --source-filename <name>  Name the inline source code file (default follows --language).");
   console.log("\nInspect metadata:");
   console.log(`  openmates apps skill-info ${command.app_id} ${command.skill_id}`);
 }
@@ -81551,7 +81690,7 @@ async function handleCodeRun(client, flags, apiKey) {
   const requests = await buildCodeRunRequestsFromFlags({
     code: typeof flags.code === "string" ? flags.code : void 0,
     language: typeof flags.language === "string" ? flags.language : void 0,
-    filename: typeof flags.filename === "string" ? flags.filename : void 0,
+    filename: typeof flags["source-filename"] === "string" ? flags["source-filename"] : void 0,
     entry: typeof flags.entry === "string" ? flags.entry : void 0,
     file: typeof flags.file === "string" ? flags.file : void 0,
     dir: typeof flags.dir === "string" ? flags.dir : void 0,
@@ -81570,6 +81709,7 @@ async function handleCodeRun(client, flags, apiKey) {
 `);
     }
   }
+  const downloadOptions = generatedFileOptions(flags, { requests });
   const response = await client.runSkill({
     app: "code",
     skill: "run",
@@ -81607,11 +81747,13 @@ async function handleCodeRun(client, flags, apiKey) {
   } else {
     finalStatus = await pollCodeRunStatus(client, result.status_path, apiKey, flags.json === true);
   }
+  const localFiles = finalStatus.status === "finished" && finalStatus.exit_code === 0 ? await downloadGeneratedFiles(finalStatus, downloadOptions) : [];
   if (flags.json === true) {
-    printJson2({ ...result, final: finalStatus });
+    printJson2({ ...result, final: finalStatus, ...localFiles.length ? { local_files: localFiles } : {} });
   } else {
     const finalOutput = formatCodeRunFinalStatusOutput(finalStatus, { includeOutput: !usedStream });
     if (finalOutput) process.stdout.write(finalOutput);
+    for (const file of localFiles) console.log(`Saved ${file.path}`);
   }
   const finalExitCode = typeof finalStatus.exit_code === "number" ? finalStatus.exit_code : null;
   const finalState = typeof finalStatus.status === "string" ? finalStatus.status : "unknown";
@@ -81620,7 +81762,7 @@ async function handleCodeRun(client, flags, apiKey) {
   }
 }
 async function streamCodeRunToTerminal(url, jsonMode) {
-  return await new Promise((resolve11, reject) => {
+  return await new Promise((resolve12, reject) => {
     const ws = new WebSocket3(url);
     let lastStatus = {};
     ws.on("message", (data) => {
@@ -81629,17 +81771,17 @@ async function streamCodeRunToTerminal(url, jsonMode) {
         const payload = message.payload ?? {};
         if (message.type === "code_run_event") {
           const kind = String(payload.kind ?? "status");
-          const text = String(payload.text ?? "");
+          const text2 = String(payload.text ?? "");
           if (!jsonMode) {
-            if (kind === "stdout") process.stdout.write(text);
-            else process.stderr.write(text);
+            if (kind === "stdout") process.stdout.write(text2);
+            else process.stderr.write(text2);
           }
         } else if (message.type === "code_run_update") {
           lastStatus = { ...lastStatus, ...payload };
           const status = String(payload.status ?? "");
           if (["finished", "failed", "timeout", "cancelled"].includes(status)) {
             ws.close();
-            resolve11(lastStatus);
+            resolve12(lastStatus);
           }
         }
       } catch (err) {
@@ -81649,7 +81791,7 @@ async function streamCodeRunToTerminal(url, jsonMode) {
     });
     ws.on("error", () => reject(new Error("Code Run stream failed.")));
     ws.on("close", () => {
-      if (Object.keys(lastStatus).length > 0) resolve11(lastStatus);
+      if (Object.keys(lastStatus).length > 0) resolve12(lastStatus);
     });
   });
 }
@@ -81660,7 +81802,7 @@ async function pollCodeRunStatus(client, statusPath, apiKey, jsonMode) {
     if (!jsonMode && value) process.stderr.write(`Code Run status: ${value}
 `);
     if (["finished", "failed", "timeout", "cancelled"].includes(value)) return status;
-    await new Promise((resolve11) => setTimeout(resolve11, 1e3));
+    await new Promise((resolve12) => setTimeout(resolve12, 1e3));
   }
 }
 async function suggestAppOrSkill(client, app, skill, apiKey) {
@@ -81942,7 +82084,7 @@ async function waitForApplicationPreview(client, started, flags) {
   while (Date.now() < deadline) {
     const status = String(current.status ?? "");
     if (["running", "failed", "timeout", "cancelled", "stopped"].includes(status)) return current;
-    await new Promise((resolve11) => setTimeout(resolve11, 1e3));
+    await new Promise((resolve12) => setTimeout(resolve12, 1e3));
     current = await client.getApplicationPreviewStatus(started.session_id);
   }
   throw new Error(`Application preview did not reach a terminal or running state within ${timeoutSeconds}s`);
@@ -82139,12 +82281,12 @@ async function parseAccountImportFile(parserFormat, file, flags = {}) {
   const selectedSource = requestedSource;
   if (parserFormat === "generic") {
     if (selectedSource !== "gemini" && selectedSource !== "other") throw new Error("Generic account import requires --source gemini or --source other.");
-    return parseGenericImportBuffer(payload, basename4(file), selectedSource);
+    return parseGenericImportBuffer(payload, basename5(file), selectedSource);
   }
-  if (parserFormat === "claude") return parseClaudeImportBuffer(payload, basename4(file), selectedSource);
-  if (parserFormat === "chatgpt") return parseChatGPTImportBuffer(payload, basename4(file), selectedSource);
-  if (parserFormat === "opencode") return parseOpenCodeImportBuffer(payload, basename4(file), selectedSource);
-  return parseOpenMatesImportBuffer(payload, basename4(file), typeof flags.password === "string" ? flags.password : void 0, selectedSource);
+  if (parserFormat === "claude") return parseClaudeImportBuffer(payload, basename5(file), selectedSource);
+  if (parserFormat === "chatgpt") return parseChatGPTImportBuffer(payload, basename5(file), selectedSource);
+  if (parserFormat === "opencode") return parseOpenCodeImportBuffer(payload, basename5(file), selectedSource);
+  return parseOpenMatesImportBuffer(payload, basename5(file), typeof flags.password === "string" ? flags.password : void 0, selectedSource);
 }
 async function runAccountImport(client, parserFormat, file, flags) {
   if (parserFormat === "generic" && typeof flags.source !== "string") throw new Error("Generic account import requires --source gemini or --source other.");
@@ -82183,7 +82325,7 @@ async function runAccountImport(client, parserFormat, file, flags) {
   if (flags.yes !== true) {
     await confirmOrExit(`Import ${selectedCount} chat(s) into new encrypted OpenMates chats? [y/N] `);
   }
-  const importId = typeof preview.import_id === "string" ? preview.import_id : randomUUID15();
+  const importId = typeof preview.import_id === "string" ? preview.import_id : randomUUID16();
   const selectedChats = parsed.chats.slice(0, selectedCount);
   const selectedFingerprints = selectedChats.map((chat) => chat.source_fingerprint);
   const confirmation = await client.confirmAccountImport(importId, selectedFingerprints);
@@ -82513,12 +82655,12 @@ function parseYamlScalar(value) {
   return trimmed;
 }
 async function saveDownloadedDocument(document, output) {
-  const { mkdir: mkdir2, writeFile: writeFile2 } = await import("fs/promises");
-  const { join: join13, basename: basename5, dirname: dirname11 } = await import("path");
+  const { mkdir: mkdir3, writeFile: writeFile2 } = await import("fs/promises");
+  const { join: join13, basename: basename6, dirname: dirname12 } = await import("path");
   const target = typeof output === "string" ? output : ".";
-  const filename = basename5(document.filename || "document.pdf");
+  const filename = basename6(document.filename || "document.pdf");
   const filePath = target.endsWith(".pdf") ? target : join13(target, filename);
-  await mkdir2(dirname11(filePath), { recursive: true });
+  await mkdir3(dirname12(filePath), { recursive: true });
   await writeFile2(filePath, document.data);
   return filePath;
 }
@@ -82546,7 +82688,7 @@ function printMateInfo(mateId, json) {
 async function confirmOrExit(question) {
   const rl = await import("readline");
   const iface = rl.createInterface({ input: process.stdin, output: process.stdout });
-  const answer = await new Promise((resolve11) => iface.question(question, resolve11));
+  const answer = await new Promise((resolve12) => iface.question(question, resolve12));
   iface.close();
   if (answer.trim().toLowerCase() !== "y") {
     console.log("Aborted.");
@@ -82556,7 +82698,7 @@ async function confirmOrExit(question) {
 async function promptLine2(question) {
   const rl = await import("readline");
   const iface = rl.createInterface({ input: process.stdin, output: process.stdout });
-  const answer = await new Promise((resolve11) => iface.question(question, resolve11));
+  const answer = await new Promise((resolve12) => iface.question(question, resolve12));
   iface.close();
   return answer.trim();
 }
@@ -82564,7 +82706,7 @@ async function promptSecret(question) {
   if (!process.stdin.isTTY) {
     return promptLine2(question);
   }
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const stdin4 = process.stdin;
     const wasRaw = stdin4.isRaw;
     let value = "";
@@ -82577,7 +82719,7 @@ async function promptSecret(question) {
         stdin4.off("data", onData);
         stdin4.setRawMode(wasRaw);
         process.stdout.write("\n");
-        resolve11(value);
+        resolve12(value);
         return;
       }
       if (char === "") {
@@ -82677,8 +82819,8 @@ async function handleFinance(client, subcommand, _rest, flags) {
         refresh_token_envelope: connectedAccount.refreshTokenBundle
       }
     ] : [],
-    chatId: `cli-finance-${randomUUID15()}`,
-    messageId: `cli-finance-message-${randomUUID15()}`,
+    chatId: `cli-finance-${randomUUID16()}`,
+    messageId: `cli-finance-message-${randomUUID16()}`,
     apiKey: resolveApiKey(flags) ?? void 0,
     promptInjectionProtection: false
   });
@@ -82690,7 +82832,7 @@ async function handleFinance(client, subcommand, _rest, flags) {
 }
 function readFinanceCsvStatements(flags) {
   const paths = parseCsvFlag(flags.csv) ?? [];
-  return paths.map((filePath) => ({ filename: basename4(filePath), content: readFileSync13(filePath, "utf8") }));
+  return paths.map((filePath) => ({ filename: basename5(filePath), content: readFileSync13(filePath, "utf8") }));
 }
 function buildFinanceCheckAccountsInput(flags, csvStatements, connectedAccount) {
   const input = {
@@ -82984,10 +83126,10 @@ async function promptPlainText(question) {
   }
 }
 async function writeSecretFile(filePath, content, force = false) {
-  const { mkdir: mkdir2, writeFile: writeFile2, stat: stat2 } = await import("fs/promises");
-  const { dirname: dirname11 } = await import("path");
+  const { mkdir: mkdir3, writeFile: writeFile2, stat: stat3 } = await import("fs/promises");
+  const { dirname: dirname12 } = await import("path");
   try {
-    await stat2(filePath);
+    await stat3(filePath);
     if (!force) throw new Error(`${filePath} already exists. Use --force to overwrite.`);
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code !== "ENOENT") {
@@ -82995,7 +83137,7 @@ async function writeSecretFile(filePath, content, force = false) {
     }
     if (error instanceof Error && !("code" in error)) throw error;
   }
-  await mkdir2(dirname11(filePath), { recursive: true });
+  await mkdir3(dirname12(filePath), { recursive: true });
   await writeFile2(filePath, content, { mode: 384 });
   return filePath;
 }
@@ -84083,8 +84225,8 @@ function resolveApiKey(flags) {
 function printJson2(value) {
   console.log(JSON.stringify(value, null, 2));
 }
-function header(text) {
-  process.stdout.write(`\x1B[1m${text}\x1B[0m
+function header(text2) {
+  process.stdout.write(`\x1B[1m${text2}\x1B[0m
 `);
 }
 function kv(key, value, keyWidth = 16) {
@@ -84755,15 +84897,15 @@ async function acceptChatTaskProposals(client, chatId, proposals, fallbackText)
   }
   return accepted;
 }
-function buildTaskProposalFallbackText(text) {
+function buildTaskProposalFallbackText(text2) {
   const seen = /* @__PURE__ */ new Set();
-  const bulletLines = text.split("\n").map((line) => line.trim()).filter((line) => /^[-*•]\s+/.test(line)).map((line) => line.replace(/^([-*•]\s*)\[[ xX]\]\s*/, "$1")).filter((line) => {
+  const bulletLines = text2.split("\n").map((line) => line.trim()).filter((line) => /^[-*•]\s+/.test(line)).map((line) => line.replace(/^([-*•]\s*)\[[ xX]\]\s*/, "$1")).filter((line) => {
     const key = line.replace(/^[-*•]\s+/, "").trim().toLowerCase();
     if (seen.has(key)) return false;
     seen.add(key);
     return true;
   });
-  return bulletLines.length > 0 ? bulletLines.join("\n") : text;
+  return bulletLines.length > 0 ? bulletLines.join("\n") : text2;
 }
 function printIncognitoNoHistoryNotice(json) {
   const message = "Incognito chats are not stored. There is no incognito history to show or clear.";
@@ -84781,8 +84923,8 @@ function parseMessageSegments(content) {
   let m;
   while ((m = pattern.exec(content)) !== null) {
     if (m.index > last) {
-      const text = content.slice(last, m.index);
-      segments.push({ type: "text", value: text, rawLength: text.length });
+      const text2 = content.slice(last, m.index);
+      segments.push({ type: "text", value: text2, rawLength: text2.length });
     }
     const blockRawLength = m[0].length;
     try {
@@ -84801,8 +84943,8 @@ function parseMessageSegments(content) {
     last = m.index + m[0].length;
   }
   if (last < content.length) {
-    const text = content.slice(last);
-    segments.push({ type: "text", value: text, rawLength: text.length });
+    const text2 = content.slice(last);
+    segments.push({ type: "text", value: text2, rawLength: text2.length });
   }
   return segments;
 }
@@ -84829,8 +84971,8 @@ function renderEmbedFromMeta(embedId, meta) {
   process.stdout.write(`\x1B[2m\u2514\u2500 openmates embeds show ${shortId}\x1B[0m
 `);
 }
-async function renderMessageText(text, embedRefIndex, client) {
-  const lines = text.split("\n");
+async function renderMessageText(text2, embedRefIndex, client) {
+  const lines = text2.split("\n");
   const outputLines = [];
   for (const line of lines) {
     const blockMatch = line.match(/^\s*\[!?\]\(embed:([^)]+)\)\s*$/);
@@ -85254,8 +85396,8 @@ No example chats are linked to ${label} yet.`);
     console.log(`All examples: openmates apps examples ${appId}${skillId ? ` ${skillId}` : ""}`);
   }
 }
-function wrapText(text, width) {
-  const words = text.split(" ");
+function wrapText(text2, width) {
+  const words = text2.split(" ");
   const lines = [];
   let current = "";
   for (const w of words) {
@@ -85458,8 +85600,8 @@ function printSkillResultItem(item, num, total) {
     if (amenities.length > 0) kv("amenities", amenities.join(", "), 14);
     const reviews = item.reviews;
     if (reviews !== void 0 && reviews !== null) kv("reviews", String(reviews), 14);
-    const link = str2(item.link) ?? str2(item.url);
-    if (link) kv("url", link, 14);
+    const link2 = str2(item.link) ?? str2(item.url);
+    if (link2) kv("url", link2, 14);
     console.log("");
     return;
   }
@@ -86751,7 +86893,7 @@ Examples:
   openmates apps math calculate "sqrt(144)" --mode numeric --json
   openmates apps code get_docs --library React --question "How do I use useState?" --json
   openmates apps examples travel search_connections
-  openmates apps code run --language python --filename hello.py --code 'print("Hello from CLI")'
+  openmates apps code run --language python --source-filename hello.py --code 'print("Hello from CLI")'
   openmates apps images detect-ai --file ./image.png --json
   openmates apps models3d search --query benchy --count 2 --providers Printables --json
   openmates apps design search_icons --query home --count 12 --json
@@ -86982,18 +87124,18 @@ async function handleDocs(client, subcommand, rest, flags) {
     return;
   }
   if (subcommand === "download") {
-    const { writeFile: writeFile2, mkdir: mkdir2 } = await import("fs/promises");
-    const { join: join13, dirname: dirname11 } = await import("path");
+    const { writeFile: writeFile2, mkdir: mkdir3 } = await import("fs/promises");
+    const { join: join13, dirname: dirname12 } = await import("path");
     if (flags.all === true) {
       const outputDir = typeof flags.output === "string" ? flags.output : "./openmates-docs";
       const tree = await client.listDocs();
       const slugs = collectSlugs(tree);
-      await mkdir2(outputDir, { recursive: true });
+      await mkdir3(outputDir, { recursive: true });
       let count = 0;
       for (const slug2 of slugs) {
         const content2 = await client.getDoc(slug2);
         const filePath = join13(outputDir, `${slug2}.md`);
-        await mkdir2(dirname11(filePath), { recursive: true });
+        await mkdir3(dirname12(filePath), { recursive: true });
         await writeFile2(filePath, content2, "utf-8");
         count++;
         process.stderr.write(`\r  Downloaded ${count}/${slugs.length}`);
@@ -87066,7 +87208,7 @@ function isCliEntrypoint() {
   try {
     const invokedPath = realpathSync2(entrypoint);
     const modulePath = realpathSync2(fileURLToPath3(import.meta.url));
-    return invokedPath === modulePath || basename4(invokedPath) === "cli.js" && dirname10(invokedPath) === dirname10(modulePath);
+    return invokedPath === modulePath || basename5(invokedPath) === "cli.js" && dirname11(invokedPath) === dirname11(modulePath);
   } catch {
     return false;
   }