openmates 0.27.0-alpha.20 → 0.27.0-alpha.22

package/dist/{chunk-VFPYXPEU.js → chunk-XVGLSNRM.js}

@@ -194,8 +194,8 @@ import { chmodSync, closeSync, fsyncSync, mkdirSync, openSync, readFileSync, ren
 import { join } from "path";
 var digest = (value) => createHash("sha256").update(value).digest("hex");
 var shortenTaskText = (value, length) => {
-  const text5 = value.replace(/\s+/g, " ").trim();
-  return text5.length <= length ? text5 : `${text5.slice(0, length - 1)}\u2026`;
+  const text6 = value.replace(/\s+/g, " ").trim();
+  return text6.length <= length ? text6 : `${text6.slice(0, length - 1)}\u2026`;
 };
 function atomicPrivateFile(path2, content) {
   const temporary = `${path2}.${randomUUID()}.tmp`;
@@ -403,7 +403,7 @@ async function lockTaskDeliveryRecord(directory, id) {
 }
 
 // src/taskMutationDelivery.ts
-var digest2 = (text5) => createHash3("sha256").update(text5).digest("hex");
+var digest2 = (text6) => createHash3("sha256").update(text6).digest("hex");
 var stable = (value) => JSON.stringify(value, (_key, item) => item && !Array.isArray(item) && typeof item === "object" ? Object.fromEntries(Object.entries(item).sort(([a], [b]) => a.localeCompare(b))) : item);
 function reconcileMutation(mutation, current) {
   if (mutation.kind === "delete") {
@@ -576,9 +576,9 @@ function collectGeneratedFiles(value) {
     const filename = suppliedName ? safeName(suppliedName) : `openmates-${safeName(assetId ?? "generated")}.${extension}`;
     files.push({ url, filename, assetId });
   };
-  const visit = (node) => {
+  const visit2 = (node) => {
     if (Array.isArray(node)) {
-      node.forEach(visit);
+      node.forEach(visit2);
       return;
     }
     const data = record(node);
@@ -596,9 +596,9 @@ function collectGeneratedFiles(value) {
         if (meta && text(meta.download_url)) add(meta, data, text(meta.variant) ?? "original");
       }
     }
-    for (const field of RESULT_FIELDS) if (data[field] !== void 0) visit(data[field]);
+    for (const field of RESULT_FIELDS) if (data[field] !== void 0) visit2(data[field]);
   };
-  visit(value);
+  visit2(value);
   return files;
 }
 function fetchGeneratedFile(url) {
@@ -766,10 +766,10 @@ function assertCodexClaimCaller(threadId, currentThread = process.env.CODEX_THRE
 }
 
 // ../secret-scanner/src/identifierRanges.ts
-function codingIdentifierRanges(text5) {
+function codingIdentifierRanges(text6) {
   const ranges = [];
   const identifiers2 = /\b[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}\b|\b[\da-f]{40,64}\b|\[[A-Z][A-Z\d_]*\]/gi;
-  for (const match of Array.from(text5.matchAll(identifiers2))) {
+  for (const match of Array.from(text6.matchAll(identifiers2))) {
     ranges.push({ start: match.index, end: match.index + match[0].length });
   }
   return ranges;
@@ -1247,16 +1247,16 @@ var PII_TYPE_TO_CATEGORY = {
   USER_AT_HOSTNAME: "user_at_hostname",
   MAC_ADDRESS: "mac_addresses"
 };
-function detectPII(text5, excludedIdsOrOptions = /* @__PURE__ */ new Set()) {
+function detectPII(text6, excludedIdsOrOptions = /* @__PURE__ */ new Set()) {
   const options = excludedIdsOrOptions instanceof Set ? { excludedIds: excludedIdsOrOptions } : excludedIdsOrOptions;
   const excludedIds = options.excludedIds ?? /* @__PURE__ */ new Set();
   const disabledCategories = options.disabledCategories ?? /* @__PURE__ */ new Set();
   const personalEntries = options.personalDataEntries ?? [];
-  if (!text5 || text5.length < MIN_PII_TEXT_LENGTH && personalEntries.length === 0)
+  if (!text6 || text6.length < MIN_PII_TEXT_LENGTH && personalEntries.length === 0)
     return [];
   const matches2 = [];
   const coveredRanges = [];
-  const identifierRanges = codingIdentifierRanges(text5);
+  const identifierRanges = codingIdentifierRanges(text6);
   const typeCounts = {};
   const hasExclusions = excludedIds.size > 0;
   const hasDisabledCategories = disabledCategories.size > 0;
@@ -1264,14 +1264,14 @@ function detectPII(text5, excludedIdsOrOptions = /* @__PURE__ */ new Set()) {
   const urlExclusionZones = [];
   URL_EXCLUSION_REGEX.lastIndex = 0;
   let urlMatch;
-  while ((urlMatch = URL_EXCLUSION_REGEX.exec(text5)) !== null) {
+  while ((urlMatch = URL_EXCLUSION_REGEX.exec(text6)) !== null) {
     urlExclusionZones.push({
       start: urlMatch.index,
       end: urlMatch.index + urlMatch[0].length
     });
   }
   const hasUrlExclusions = urlExclusionZones.length > 0;
-  if (text5.length >= MIN_PII_TEXT_LENGTH) {
+  if (text6.length >= MIN_PII_TEXT_LENGTH) {
     for (const pattern of PII_PATTERNS) {
       if (hasDisabledCategories) {
         const category = PII_TYPE_TO_CATEGORY[pattern.type];
@@ -1279,7 +1279,7 @@ function detectPII(text5, excludedIdsOrOptions = /* @__PURE__ */ new Set()) {
       }
       pattern.regex.lastIndex = 0;
       let regexMatch;
-      while ((regexMatch = pattern.regex.exec(text5)) !== null) {
+      while ((regexMatch = pattern.regex.exec(text6)) !== null) {
         const matchText = regexMatch[0];
         const startIndex = regexMatch.index;
         const endIndex = startIndex + matchText.length;
@@ -1325,7 +1325,7 @@ function detectPII(text5, excludedIdsOrOptions = /* @__PURE__ */ new Set()) {
       }
     }
     for (const searchText of textsToSearch) {
-      const lowerText = text5.toLowerCase();
+      const lowerText = text6.toLowerCase();
       const lowerSearch = searchText.toLowerCase();
       let searchFrom = 0;
       while (searchFrom < lowerText.length) {
@@ -1337,7 +1337,7 @@ function detectPII(text5, excludedIdsOrOptions = /* @__PURE__ */ new Set()) {
           (range) => startIndex >= range.start && startIndex < range.end || endIndex > range.start && endIndex <= range.end || startIndex <= range.start && endIndex >= range.end
         );
         if (!overlaps) {
-          const matchText = text5.substring(startIndex, endIndex);
+          const matchText = text6.substring(startIndex, endIndex);
           const matchId = `pii-PERSONAL_DATA-${entry.id}-${startIndex}`;
           if (!hasExclusions || !excludedIds.has(matchId)) {
             const placeholder = entry.replaceWith.startsWith("[") ? entry.replaceWith : `[${entry.replaceWith}]`;
@@ -1438,8 +1438,8 @@ var ProjectFilePrivacy = class {
     }
     if (this.values.size + this.conflicts.length > 1e4) fail("pii_mapping_limit");
   }
-  restoreText(text5) {
-    return text5.replace(TOKEN, (token) => {
+  restoreText(text6) {
+    return text6.replace(TOKEN, (token) => {
       if (this.ambiguous.has(token)) fail("pii_mapping_ambiguous");
       const mapping = this.values.get(token);
       const customToken = this.options.detection?.personalDataEntries?.some((entry) => (entry.replaceWith.startsWith("[") ? entry.replaceWith : `[${entry.replaceWith}]`) === token);
@@ -1477,28 +1477,28 @@ var ProjectFilePrivacy = class {
     this.addMappings([{ placeholder, original, type }]);
     return placeholder;
   }
-  redactText(text5, enhanced = []) {
+  redactText(text6, enhanced = []) {
     const ranges = [];
-    const tokens = Array.from(text5.matchAll(TOKEN)).map((match) => ({ start: match.index, end: match.index + match[0].length }));
+    const tokens = Array.from(text6.matchAll(TOKEN)).map((match) => ({ start: match.index, end: match.index + match[0].length }));
     for (const range of tokens) {
-      const literal = text5.slice(range.start, range.end);
+      const literal = text6.slice(range.start, range.end);
       if (!(this.options.preserveMappedTokens && this.values.has(literal)) && (this.values.has(literal) || GENERATED_TOKEN.test(literal) || legacyToken(literal))) ranges.push(range);
     }
     const overlaps = (start, end) => [...tokens, ...ranges].some((r) => start < r.end && end > r.start);
     for (const mapping of Array.from(this.values.values()).sort((a, b) => b.original.length - a.original.length)) {
-      let start = text5.indexOf(mapping.original);
+      let start = text6.indexOf(mapping.original);
       while (start !== -1) {
         const end = start + mapping.original.length;
         if (!overlaps(start, end)) ranges.push({ start, end, type: mapping.type });
-        start = text5.indexOf(mapping.original, end);
+        start = text6.indexOf(mapping.original, end);
       }
     }
     if (this.options.enabled !== false) {
-      for (const match of detectPII(text5, this.options.detection)) {
+      for (const match of detectPII(text6, this.options.detection)) {
         if (!overlaps(match.startIndex, match.endIndex)) ranges.push({ start: match.startIndex, end: match.endIndex, type: match.type });
       }
       for (const range of enhanced) {
-        if (!Number.isInteger(range.start) || !Number.isInteger(range.end) || range.start < 0 || range.end <= range.start || range.end > text5.length) fail("pii_invalid_semantic_range");
+        if (!Number.isInteger(range.start) || !Number.isInteger(range.end) || range.start < 0 || range.end <= range.start || range.end > text6.length) fail("pii_invalid_semantic_range");
         let fragments = [{ ...range }];
         for (const shield of [...tokens, ...ranges]) fragments = fragments.flatMap((part) => {
           if (part.start >= shield.end || part.end <= shield.start) return [part];
@@ -1513,30 +1513,30 @@ var ProjectFilePrivacy = class {
     let cursor = 0;
     let result = "";
     for (const range of ranges.sort((a, b) => a.start - b.start)) {
-      result += text5.slice(cursor, range.start);
-      result += text5.slice(range.start, range.end).split(/(\r?\n)/).map((part) => !part || /^(?:\r?\n)$/.test(part) ? part : this.token(part, range.type)).join("");
+      result += text6.slice(cursor, range.start);
+      result += text6.slice(range.start, range.end).split(/(\r?\n)/).map((part) => !part || /^(?:\r?\n)$/.test(part) ? part : this.token(part, range.type)).join("");
       cursor = range.end;
     }
-    return result + text5.slice(cursor);
+    return result + text6.slice(cursor);
   }
   async redactResult(value) {
-    const visit = async (item) => {
+    const visit2 = async (item) => {
       if (typeof item === "string") return this.redactText(item, this.options.enabled !== false && this.options.detectEnhanced ? await this.options.detectEnhanced(item) : []);
       if (Array.isArray(item)) {
         const result2 = [];
-        for (const child of item) result2.push(await visit(child));
+        for (const child of item) result2.push(await visit2(child));
         return result2;
       }
       if (item && typeof item === "object") {
         const result2 = {};
         for (const [key, child] of Object.entries(item)) {
-          result2[key] = ["expected_base", "content_hash", "proposal_commitment"].includes(key) ? child : await visit(child);
+          result2[key] = ["expected_base", "content_hash", "proposal_commitment"].includes(key) ? child : await visit2(child);
         }
         return result2;
       }
       return item;
     };
-    const result = await visit(value);
+    const result = await visit2(value);
     const save = this.savePending.catch(() => {
     }).then(() => this.options.save([...Array.from(this.values.values()), ...this.conflicts]));
     this.savePending = save;
@@ -1556,26 +1556,26 @@ var LABELS = {
   private_date: { type: "OTHER", category: "birthdays" },
   private_url: { type: "OTHER", category: "private_urls" }
 };
-function convertNativePrivacyRanges(text5, spans, disabled = /* @__PURE__ */ new Set()) {
+function convertNativePrivacyRanges(text6, spans, disabled = /* @__PURE__ */ new Set()) {
   const offsets = /* @__PURE__ */ new Map([[0, 0]]);
   let bytes2 = 0;
   let units = 0;
-  for (const character of text5) {
+  for (const character of text6) {
     if (character.length === 1 && /[\uD800-\uDFFF]/.test(character)) throw privacyError("privacy_invalid_unicode");
     bytes2 += Buffer.byteLength(character);
     units += character.length;
     offsets.set(bytes2, units);
   }
-  const protectedRanges = codingIdentifierRanges(text5);
+  const protectedRanges = codingIdentifierRanges(text6);
   const result = [];
   for (const span of spans) {
     const label3 = LABELS[span.label];
     const start = offsets.get(span.start), end = offsets.get(span.end);
     if (!label3 || !Number.isInteger(span.start) || !Number.isInteger(span.end) || start === void 0 || end === void 0 || end <= start) throw privacyError("privacy_invalid_semantic_range");
     if (disabled.has(label3.category) || span.label === "secret" && disabled.has("api_keys")) continue;
-    const context = text5.slice(Math.max(0, start - 60), Math.min(text5.length, end + 60));
+    const context = text6.slice(Math.max(0, start - 60), Math.min(text6.length, end + 60));
     const explicitSecret = /\b(?:password|secret|credential|api[_ -]?key|token)\b/i.test(context);
-    if (protectedRanges.some((r) => start < r.end && end > r.start) && !(span.label === "secret" && explicitSecret && !text5.slice(start, end).startsWith("["))) continue;
+    if (protectedRanges.some((r) => start < r.end && end > r.start) && !(span.label === "secret" && explicitSecret && !text6.slice(start, end).startsWith("["))) continue;
     if ((span.label === "private_date" || span.label === "account_number") && /\b(?:commit|sha|hash|build|release|branch|timestamp|version)\b/i.test(context) && !/\b(?:birth|birthday|born|dob|account|iban)\b/i.test(context)) continue;
     result.push({ start, end, type: label3.type });
   }
@@ -1591,30 +1591,30 @@ function privacyDetectionOptions(memories) {
     })
   } };
 }
-async function scanEnhancedText(text5, scope2, disabled = /* @__PURE__ */ new Set(), progress) {
+async function scanEnhancedText(text6, scope2, disabled = /* @__PURE__ */ new Set(), progress) {
   const preferences = await readPrivacyPreferences();
-  if (!text5 || !enhancedScopeEnabled(preferences, scope2)) return [];
+  if (!text6 || !enhancedScopeEnabled(preferences, scope2)) return [];
   try {
     await ensurePrivacyDaemon();
     const ranges = [];
-    for (let start = 0; start < text5.length; start += 8192) {
-      let from = Math.max(0, start - 1024), end = Math.min(text5.length, start + 9216);
-      if (from > 0 && /[\uDC00-\uDFFF]/.test(text5[from])) from--;
-      if (end < text5.length && /[\uDC00-\uDFFF]/.test(text5[end])) end++;
-      progress?.(start, text5.length);
-      const window = text5.slice(from, end);
+    for (let start = 0; start < text6.length; start += 8192) {
+      let from = Math.max(0, start - 1024), end = Math.min(text6.length, start + 9216);
+      if (from > 0 && /[\uDC00-\uDFFF]/.test(text6[from])) from--;
+      if (end < text6.length && /[\uDC00-\uDFFF]/.test(text6[end])) end++;
+      progress?.(start, text6.length);
+      const window = text6.slice(from, end);
       const result = await privacyRpc({ op: "scan", text: window, scope: privacyProfile(), idleSeconds: preferences.idleSeconds });
       if (!Array.isArray(result.spans)) throw privacyError("privacy_worker_protocol_failed");
       ranges.push(...convertNativePrivacyRanges(window, result.spans, disabled).map((r) => ({ ...r, start: r.start + from, end: r.end + from })));
     }
-    progress?.(text5.length, text5.length);
+    progress?.(text6.length, text6.length);
     return ranges;
   } catch (error) {
     await stopPrivacyDaemon();
     throw error;
   }
 }
-async function prepareCliMessagePrivacy(text5, memories, existing = [], scope2 = { kind: "message" }, progress) {
+async function prepareCliMessagePrivacy(text6, memories, existing = [], scope2 = { kind: "message" }, progress) {
   const options = privacyDetectionOptions(memories);
   let mappings = existing;
   const privacy = new ProjectFilePrivacy({
@@ -1626,7 +1626,7 @@ async function prepareCliMessagePrivacy(text5, memories, existing = [], scope2 =
     },
     detectEnhanced: (value) => scanEnhancedText(value, scope2, options.detection.disabledCategories, progress)
   });
-  const message = await privacy.redactResult(text5);
+  const message = await privacy.redactResult(text6);
   return { message, mappings: mappings.map((mapping) => ({ ...mapping, type: mapping.type ?? "OTHER" })) };
 }
 
@@ -1646,9 +1646,9 @@ function buildMemoryRequestMessage(params) {
   if (!params.requestId || !params.userMessageId) {
     throw new Error("Memory requests require stable request and user-message identities");
   }
-  const keys = Array.from(new Set(params.requestedKeys)).sort();
+  const keys2 = Array.from(new Set(params.requestedKeys)).sort();
   const categories = [];
-  for (const key of keys) {
+  for (const key of keys2) {
     const separator = key.indexOf("-");
     if (separator <= 0 || separator === key.length - 1) {
       throw new Error(`Invalid memory category key: ${key}`);
@@ -1664,7 +1664,7 @@ function buildMemoryRequestMessage(params) {
     type: REQUEST_TYPE,
     user_message_id: params.userMessageId,
     request_id: params.requestId,
-    requested_keys: keys,
+    requested_keys: keys2,
     categories,
     count_semantics_version: COUNT_SEMANTICS_VERSION
   };
@@ -1733,6 +1733,227 @@ function coalesceMemoryRequestMessages(messages) {
   return result;
 }
 
+// ../ui/src/utils/projectFilePatch.ts
+var ProjectFilePatchError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ProjectFilePatchError";
+  }
+};
+var HEADER = /^(---|\+\+\+) ([^\t]+)(?:\t.*)?$/;
+var HUNK = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(?: .*)?$/;
+function applyProjectFilePatch(original, unifiedDiff, expectedPath) {
+  if (!unifiedDiff || unifiedDiff.includes("\0") || unifiedDiff.includes("\r")) {
+    throw new ProjectFilePatchError("Patch must be a non-empty LF unified diff");
+  }
+  const rows2 = unifiedDiff.split("\n");
+  if (rows2.at(-1) === "") rows2.pop();
+  if (rows2.length < 3) throw new ProjectFilePatchError("Patch is missing file headers or hunks");
+  const oldHeader = HEADER.exec(rows2[0] ?? "");
+  const newHeader = HEADER.exec(rows2[1] ?? "");
+  if (!oldHeader || oldHeader[1] !== "---" || !newHeader || newHeader[1] !== "+++") {
+    throw new ProjectFilePatchError("Patch must start with one old and one new file header");
+  }
+  const oldPath = normalizeHeaderPath(oldHeader[2] ?? "");
+  const newPath = normalizeHeaderPath(newHeader[2] ?? "");
+  if (oldPath === "/dev/null" || newPath === "/dev/null") {
+    throw new ProjectFilePatchError("Update patches cannot create or delete files");
+  }
+  if (expectedPath && (oldPath !== expectedPath || newPath !== expectedPath)) {
+    throw new ProjectFilePatchError("Patch file headers do not match the requested path");
+  }
+  const hunks = [];
+  let row = 2;
+  while (row < rows2.length) {
+    const match = HUNK.exec(rows2[row] ?? "");
+    if (!match) throw new ProjectFilePatchError("Patch contains data outside a valid hunk");
+    const hunk = {
+      oldStart: parseCoordinate(match[1]),
+      oldCount: match[2] === void 0 ? 1 : parseCoordinate(match[2]),
+      newStart: parseCoordinate(match[3]),
+      newCount: match[4] === void 0 ? 1 : parseCoordinate(match[4]),
+      lines: []
+    };
+    row += 1;
+    let oldSeen = 0;
+    let newSeen = 0;
+    while (row < rows2.length && !rows2[row]?.startsWith("@@ ")) {
+      const value = rows2[row] ?? "";
+      if (value === "\") {
+        const previous = hunk.lines.at(-1);
+        if (!previous || !previous.line.hasNewline) {
+          throw new ProjectFilePatchError("Misplaced no-newline marker");
+        }
+        previous.line.hasNewline = false;
+        row += 1;
+        continue;
+      }
+      const prefix = value[0];
+      if (prefix !== " " && prefix !== "-" && prefix !== "+") {
+        throw new ProjectFilePatchError("Every hunk line must have a unified-diff prefix");
+      }
+      const kind = prefix === " " ? "context" : prefix === "-" ? "remove" : "add";
+      hunk.lines.push({ kind, line: { value: value.slice(1), hasNewline: true } });
+      if (kind !== "add") oldSeen += 1;
+      if (kind !== "remove") newSeen += 1;
+      row += 1;
+    }
+    if (oldSeen !== hunk.oldCount || newSeen !== hunk.newCount) {
+      throw new ProjectFilePatchError("Hunk line counts do not match its header");
+    }
+    hunks.push(hunk);
+  }
+  if (hunks.length === 0) throw new ProjectFilePatchError("Patch has no hunks");
+  const source = splitContentLines(original);
+  const output = [];
+  let sourceIndex = 0;
+  let outputLine = 1;
+  for (const hunk of hunks) {
+    const expectedSourceIndex = hunk.oldCount === 0 ? hunk.oldStart : hunk.oldStart - 1;
+    const expectedOutputLine = hunk.newCount === 0 ? hunk.newStart + 1 : hunk.newStart;
+    if (expectedSourceIndex < sourceIndex || expectedSourceIndex > source.length) {
+      throw new ProjectFilePatchError("Patch hunks overlap or are outside the source");
+    }
+    while (sourceIndex < expectedSourceIndex) {
+      output.push(source[sourceIndex]);
+      sourceIndex += 1;
+      outputLine += 1;
+    }
+    if (outputLine !== expectedOutputLine) {
+      throw new ProjectFilePatchError("Patch new-file coordinates are inconsistent");
+    }
+    for (const item of hunk.lines) {
+      if (item.kind !== "add") {
+        const actual = source[sourceIndex];
+        if (!actual || actual.value !== item.line.value || actual.hasNewline !== item.line.hasNewline) {
+          throw new ProjectFilePatchError("Patch context does not match the source exactly");
+        }
+        sourceIndex += 1;
+      }
+      if (item.kind !== "remove") {
+        output.push({ ...item.line });
+        outputLine += 1;
+      }
+    }
+  }
+  output.push(...source.slice(sourceIndex));
+  validateNewlinePlacement(output);
+  return {
+    content: output.map((line) => line.value + (line.hasNewline ? "\n" : "")).join(""),
+    appliedDiff: unifiedDiff,
+    oldPath,
+    newPath
+  };
+}
+function parseCoordinate(value) {
+  const number = Number(value);
+  if (!Number.isSafeInteger(number) || number < 0) throw new ProjectFilePatchError("Invalid hunk coordinate");
+  return number;
+}
+function normalizeHeaderPath(value) {
+  if (value === "/dev/null") return value;
+  if (value.startsWith("a/") || value.startsWith("b/")) return value.slice(2);
+  return value;
+}
+function splitContentLines(content) {
+  if (content === "") return [];
+  const lines = [];
+  let start = 0;
+  for (let index = 0; index < content.length; index += 1) {
+    if (content[index] !== "\n") continue;
+    lines.push({ value: content.slice(start, index), hasNewline: true });
+    start = index + 1;
+  }
+  if (start < content.length) lines.push({ value: content.slice(start), hasNewline: false });
+  return lines;
+}
+function validateNewlinePlacement(lines) {
+  for (let index = 0; index < lines.length - 1; index += 1) {
+    if (!lines[index]?.hasNewline) throw new ProjectFilePatchError("No-newline marker is only valid at end of file");
+  }
+}
+
+// ../ui/src/utils/embedVersionReconstruction.ts
+async function reconstructVersionRows(rows2, decrypt) {
+  const sorted2 = [...rows2].sort((a, b) => a.version_number - b.version_number);
+  let content = null;
+  let expected = sorted2[0]?.version_number ?? 1;
+  for (const row of sorted2) {
+    if (!Number.isSafeInteger(row.version_number) || row.version_number < 1 || row.version_number !== expected) {
+      throw new Error("Version chain is incomplete");
+    }
+    expected += 1;
+    if (row.encrypted_snapshot) {
+      content = await decrypt(row.encrypted_snapshot);
+      if (content === null) throw new Error("Version snapshot could not be decrypted");
+    } else {
+      if (content === null) throw new Error("Version history is missing the initial snapshot");
+      if (!row.encrypted_patch) throw new Error("Version patch is missing");
+      const patch = await decrypt(row.encrypted_patch);
+      if (patch === null) throw new Error("Version patch could not be decrypted");
+      content = applyVersionPatch(content, patch);
+    }
+  }
+  if (content === null) throw new Error("Version history is missing the initial snapshot");
+  return content;
+}
+function applyVersionPatch(content, patch) {
+  if (patch.includes("\")) {
+    const withHeaders = patch.startsWith("@@ ") ? `--- version
++++ version
+${patch}` : patch;
+    return applyProjectFilePatch(content, withHeaders).content;
+  }
+  const source = content === "" ? [] : content.split("\n");
+  const lines = patch.split("\n");
+  if (lines.at(-1) === "") lines.pop();
+  let index = 0;
+  if (lines[0]?.startsWith("--- ") && lines[1]?.startsWith("+++ ")) index = 2;
+  const output = [];
+  let sourceIndex = 0;
+  let hunkCount = 0;
+  while (index < lines.length) {
+    const header2 = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(?: .*)?$/.exec(lines[index] ?? "");
+    if (!header2) throw new Error("Version patch contains an invalid hunk");
+    const oldStart = Number(header2[1]);
+    const oldCount = header2[2] === void 0 ? 1 : Number(header2[2]);
+    const newStart = Number(header2[3]);
+    const newCount = header2[4] === void 0 ? 1 : Number(header2[4]);
+    const start = oldCount === 0 ? oldStart : oldStart - 1;
+    const outputStart = newCount === 0 ? newStart : newStart - 1;
+    if (![oldStart, oldCount, newStart, newCount].every(Number.isSafeInteger) || start < sourceIndex || start > source.length) throw new Error("Version patch hunks overlap or exceed content");
+    output.push(...source.slice(sourceIndex, start));
+    if (output.length !== outputStart) throw new Error("Version patch coordinates do not match content");
+    sourceIndex = start;
+    let removed = 0;
+    let added = 0;
+    index += 1;
+    while (index < lines.length && !lines[index]?.startsWith("@@ ")) {
+      const line = lines[index] ?? "";
+      if (line === "\") {
+        index += 1;
+        continue;
+      }
+      if (![" ", "-", "+"].includes(line[0] ?? "")) throw new Error("Version patch has an invalid line");
+      if (line[0] !== "+") {
+        if (source[sourceIndex] !== line.slice(1)) throw new Error("Version patch context does not match local content");
+        sourceIndex += 1;
+        removed += 1;
+      }
+      if (line[0] !== "-") {
+        output.push(line.slice(1));
+        added += 1;
+      }
+      index += 1;
+    }
+    if (removed !== oldCount || added !== newCount) throw new Error("Version patch line counts do not match its header");
+    hunkCount += 1;
+  }
+  if (hunkCount === 0) throw new Error("Version patch has no hunks");
+  output.push(...source.slice(sourceIndex));
+  return output.join("\n");
+}
+
 // src/accountImport.ts
 import { createDecipheriv, createHash as createHash4, scryptSync } from "crypto";
 import JSZip from "jszip";
@@ -2025,7 +2246,7 @@ async function parseOpenCodeImportBuffer(payload, sourceName = "opencode-session
     if (role !== "user" && role !== "assistant") continue;
     const parts = Array.isArray(message.parts) ? message.parts.filter((part) => Boolean(part && typeof part === "object")) : [];
     const textParts = parts.filter((part) => part.type === "text" && part.ignored !== true && typeof part.text === "string");
-    const content = textParts.map((part) => String(part.text)).filter((text5) => text5.trim()).join("\n");
+    const content = textParts.map((part) => String(part.text)).filter((text6) => text6.trim()).join("\n");
     if (content.trim()) {
       const time2 = messageInfo.time && typeof messageInfo.time === "object" ? messageInfo.time : {};
       messages.push({
@@ -2863,146 +3084,6 @@ function createProjectFileJobExecutor(options) {
   } };
 }
 
-// ../ui/src/utils/projectFilePatch.ts
-var ProjectFilePatchError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "ProjectFilePatchError";
-  }
-};
-var HEADER = /^(---|\+\+\+) ([^\t]+)(?:\t.*)?$/;
-var HUNK = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(?: .*)?$/;
-function applyProjectFilePatch(original, unifiedDiff, expectedPath) {
-  if (!unifiedDiff || unifiedDiff.includes("\0") || unifiedDiff.includes("\r")) {
-    throw new ProjectFilePatchError("Patch must be a non-empty LF unified diff");
-  }
-  const rows2 = unifiedDiff.split("\n");
-  if (rows2.at(-1) === "") rows2.pop();
-  if (rows2.length < 3) throw new ProjectFilePatchError("Patch is missing file headers or hunks");
-  const oldHeader = HEADER.exec(rows2[0] ?? "");
-  const newHeader = HEADER.exec(rows2[1] ?? "");
-  if (!oldHeader || oldHeader[1] !== "---" || !newHeader || newHeader[1] !== "+++") {
-    throw new ProjectFilePatchError("Patch must start with one old and one new file header");
-  }
-  const oldPath = normalizeHeaderPath(oldHeader[2] ?? "");
-  const newPath = normalizeHeaderPath(newHeader[2] ?? "");
-  if (oldPath === "/dev/null" || newPath === "/dev/null") {
-    throw new ProjectFilePatchError("Update patches cannot create or delete files");
-  }
-  if (expectedPath && (oldPath !== expectedPath || newPath !== expectedPath)) {
-    throw new ProjectFilePatchError("Patch file headers do not match the requested path");
-  }
-  const hunks = [];
-  let row = 2;
-  while (row < rows2.length) {
-    const match = HUNK.exec(rows2[row] ?? "");
-    if (!match) throw new ProjectFilePatchError("Patch contains data outside a valid hunk");
-    const hunk = {
-      oldStart: parseCoordinate(match[1]),
-      oldCount: match[2] === void 0 ? 1 : parseCoordinate(match[2]),
-      newStart: parseCoordinate(match[3]),
-      newCount: match[4] === void 0 ? 1 : parseCoordinate(match[4]),
-      lines: []
-    };
-    row += 1;
-    let oldSeen = 0;
-    let newSeen = 0;
-    while (row < rows2.length && !rows2[row]?.startsWith("@@ ")) {
-      const value = rows2[row] ?? "";
-      if (value === "\") {
-        const previous = hunk.lines.at(-1);
-        if (!previous || !previous.line.hasNewline) {
-          throw new ProjectFilePatchError("Misplaced no-newline marker");
-        }
-        previous.line.hasNewline = false;
-        row += 1;
-        continue;
-      }
-      const prefix = value[0];
-      if (prefix !== " " && prefix !== "-" && prefix !== "+") {
-        throw new ProjectFilePatchError("Every hunk line must have a unified-diff prefix");
-      }
-      const kind = prefix === " " ? "context" : prefix === "-" ? "remove" : "add";
-      hunk.lines.push({ kind, line: { value: value.slice(1), hasNewline: true } });
-      if (kind !== "add") oldSeen += 1;
-      if (kind !== "remove") newSeen += 1;
-      row += 1;
-    }
-    if (oldSeen !== hunk.oldCount || newSeen !== hunk.newCount) {
-      throw new ProjectFilePatchError("Hunk line counts do not match its header");
-    }
-    hunks.push(hunk);
-  }
-  if (hunks.length === 0) throw new ProjectFilePatchError("Patch has no hunks");
-  const source = splitContentLines(original);
-  const output = [];
-  let sourceIndex = 0;
-  let outputLine = 1;
-  for (const hunk of hunks) {
-    const expectedSourceIndex = hunk.oldCount === 0 ? hunk.oldStart : hunk.oldStart - 1;
-    const expectedOutputLine = hunk.newCount === 0 ? hunk.newStart + 1 : hunk.newStart;
-    if (expectedSourceIndex < sourceIndex || expectedSourceIndex > source.length) {
-      throw new ProjectFilePatchError("Patch hunks overlap or are outside the source");
-    }
-    while (sourceIndex < expectedSourceIndex) {
-      output.push(source[sourceIndex]);
-      sourceIndex += 1;
-      outputLine += 1;
-    }
-    if (outputLine !== expectedOutputLine) {
-      throw new ProjectFilePatchError("Patch new-file coordinates are inconsistent");
-    }
-    for (const item of hunk.lines) {
-      if (item.kind !== "add") {
-        const actual = source[sourceIndex];
-        if (!actual || actual.value !== item.line.value || actual.hasNewline !== item.line.hasNewline) {
-          throw new ProjectFilePatchError("Patch context does not match the source exactly");
-        }
-        sourceIndex += 1;
-      }
-      if (item.kind !== "remove") {
-        output.push({ ...item.line });
-        outputLine += 1;
-      }
-    }
-  }
-  output.push(...source.slice(sourceIndex));
-  validateNewlinePlacement(output);
-  return {
-    content: output.map((line) => line.value + (line.hasNewline ? "\n" : "")).join(""),
-    appliedDiff: unifiedDiff,
-    oldPath,
-    newPath
-  };
-}
-function parseCoordinate(value) {
-  const number = Number(value);
-  if (!Number.isSafeInteger(number) || number < 0) throw new ProjectFilePatchError("Invalid hunk coordinate");
-  return number;
-}
-function normalizeHeaderPath(value) {
-  if (value === "/dev/null") return value;
-  if (value.startsWith("a/") || value.startsWith("b/")) return value.slice(2);
-  return value;
-}
-function splitContentLines(content) {
-  if (content === "") return [];
-  const lines = [];
-  let start = 0;
-  for (let index = 0; index < content.length; index += 1) {
-    if (content[index] !== "\n") continue;
-    lines.push({ value: content.slice(start, index), hasNewline: true });
-    start = index + 1;
-  }
-  if (start < content.length) lines.push({ value: content.slice(start), hasNewline: false });
-  return lines;
-}
-function validateNewlinePlacement(lines) {
-  for (let index = 0; index < lines.length - 1; index += 1) {
-    if (!lines[index]?.hasNewline) throw new ProjectFilePatchError("No-newline marker is only valid at end of file");
-  }
-}
-
 // ../ui/src/utils/projectSearchProtocol.ts
 var ProjectSearchProtocolError = class extends Error {
   code;
@@ -3102,7 +3183,7 @@ function matchesProjectSearchQuery(value, request) {
 function matchesProjectSearchGlob(path2, glob) {
   if (!glob) return true;
   const memo = /* @__PURE__ */ new Map();
-  const visit = (pathIndex, globIndex) => {
+  const visit2 = (pathIndex, globIndex) => {
     const key = `${pathIndex}:${globIndex}`;
     const cached = memo.get(key);
     if (cached !== void 0) return cached;
@@ -3110,23 +3191,23 @@ function matchesProjectSearchGlob(path2, glob) {
     if (globIndex === glob.length) {
       matched = pathIndex === path2.length;
     } else if (glob.startsWith("**/", globIndex)) {
-      matched = visit(pathIndex, globIndex + 3);
+      matched = visit2(pathIndex, globIndex + 3);
       for (let index = pathIndex; !matched && index < path2.length; index += 1) {
-        if (path2[index] === "/") matched = visit(index + 1, globIndex + 3);
+        if (path2[index] === "/") matched = visit2(index + 1, globIndex + 3);
       }
     } else if (glob.startsWith("**", globIndex)) {
-      matched = visit(pathIndex, globIndex + 2) || pathIndex < path2.length && visit(pathIndex + 1, globIndex);
+      matched = visit2(pathIndex, globIndex + 2) || pathIndex < path2.length && visit2(pathIndex + 1, globIndex);
     } else if (glob[globIndex] === "*") {
-      matched = visit(pathIndex, globIndex + 1) || pathIndex < path2.length && path2[pathIndex] !== "/" && visit(pathIndex + 1, globIndex);
+      matched = visit2(pathIndex, globIndex + 1) || pathIndex < path2.length && path2[pathIndex] !== "/" && visit2(pathIndex + 1, globIndex);
     } else if (glob[globIndex] === "?") {
-      matched = pathIndex < path2.length && path2[pathIndex] !== "/" && visit(pathIndex + 1, globIndex + 1);
+      matched = pathIndex < path2.length && path2[pathIndex] !== "/" && visit2(pathIndex + 1, globIndex + 1);
     } else {
-      matched = pathIndex < path2.length && path2[pathIndex] === glob[globIndex] && visit(pathIndex + 1, globIndex + 1);
+      matched = pathIndex < path2.length && path2[pathIndex] === glob[globIndex] && visit2(pathIndex + 1, globIndex + 1);
     }
     memo.set(key, matched);
     return matched;
   };
-  return visit(0, 0);
+  return visit2(0, 0);
 }
 function isProtectedProjectReadPath(value) {
   const normalized = value.replace(/\\/g, "/").replace(/^\.\//, "").toLowerCase();
@@ -3832,8 +3913,8 @@ async function activateCliProjectFocus(client2, projectId, chatId, teamId, activ
   const key = await client2.decryptProjectKey(detail.project, context);
   if (!settings.encrypted_settings || settings.selection_required) throw new Error("Choose this Project's write policy in Project settings before starting work.");
   if (isCurrent && !isCurrent()) return;
-  const text5 = await decryptWithAesGcmCombined(settings.encrypted_settings, key);
-  const focus = text5 ? JSON.parse(text5).default_focus : void 0;
+  const text6 = await decryptWithAesGcmCombined(settings.encrypted_settings, key);
+  const focus = text6 ? JSON.parse(text6).default_focus : void 0;
   if (!focus?.focus_id || typeof focus.instructions !== "string") throw new Error("The Project's default focus is unavailable.");
   if (isCurrent && !isCurrent()) return;
   await client2.activateProjectFocus(projectId, {
@@ -3898,7 +3979,7 @@ function registerCliProjectFileExecutor(options) {
             key: options.chatKey,
             mappings: [...history.messages.flatMap((message) => message.piiMappings ?? []), ...options.piiMappings ?? []],
             ...detection,
-            detectEnhanced: (text5) => scanEnhancedText(text5, { kind: "project", projectId: job.project_id }, detection.detection.disabledCategories),
+            detectEnhanced: (text6) => scanEnhancedText(text6, { kind: "project", projectId: job.project_id }, detection.detection.disabledCategories),
             read: async () => {
               try {
                 return await readFile(path2, "utf8");
@@ -4351,13 +4432,13 @@ var RemoteCommandOutputAccumulator = class {
       return { text: this.#text, coverage: "full", sequence_gap: false, upstream_truncated: false, omitted_chars: 0 };
     }
     const half = Math.max(0, Math.floor((MAX_COMPLETION_CHARS - OMISSION_MARKER.length) / 2));
-    const text5 = this.#text.length <= MAX_COMPLETION_CHARS ? this.#text : `${this.#text.slice(0, half)}${OMISSION_MARKER}${this.#text.slice(-half)}`;
+    const text6 = this.#text.length <= MAX_COMPLETION_CHARS ? this.#text : `${this.#text.slice(0, half)}${OMISSION_MARKER}${this.#text.slice(-half)}`;
     return {
-      text: text5,
+      text: text6,
       coverage: "selected_excerpt",
       sequence_gap: this.#sequenceGap,
       upstream_truncated: true,
-      omitted_chars: Math.max(0, this.#inputChars - text5.length + (text5.includes(OMISSION_MARKER) ? OMISSION_MARKER.length : 0))
+      omitted_chars: Math.max(0, this.#inputChars - text6.length + (text6.includes(OMISSION_MARKER) ? OMISSION_MARKER.length : 0))
     };
   }
 };
@@ -4884,6 +4965,7 @@ var OpenMatesWsClient = class {
     const clientCapabilities = [
       "canonical_embed_receipts_v1",
       "typed_recovery_outputs_v2",
+      "agentic-storage-v2",
       ...options.taskUpdateJobs !== false ? ["task_update_jobs"] : [],
       ...options.projectFileJobs === true ? ["project_file_jobs"] : [],
       ...options.remoteCommandJobs === true ? ["remote_command_jobs"] : []
@@ -5372,8 +5454,8 @@ var OpenMatesWsClient = class {
         if (!content || typeof content !== "object") return "";
         try {
           const root = content;
-          const text5 = root.content?.[0]?.content?.[0]?.text;
-          return typeof text5 === "string" ? text5 : "";
+          const text6 = root.content?.[0]?.content?.[0]?.text;
+          return typeof text6 === "string" ? text6 : "";
         } catch {
           return "";
         }
@@ -6025,21 +6107,98 @@ function registerChatContextEvents(options) {
 }
 
 // src/cliJevContext.ts
-import { parse as parseYaml } from "yaml";
+import { parseDocument as parseDocument2, isAlias, visit } from "yaml";
+
+// ../projectFocusDocument.ts
+function invalid() {
+  throw new Error("invalid_focus_document");
+}
+function object(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return invalid();
+  return value;
+}
+function keys(value, allowed) {
+  if (Object.keys(value).some((key) => !allowed.includes(key))) invalid();
+}
+function text4(value, limit) {
+  if (typeof value !== "string" || !value.trim() || value.length > limit) return invalid();
+  return value;
+}
+function identifier3(value, canonical) {
+  const result = text4(value, canonical ? 64 : 80);
+  if (!(canonical ? /^[a-z][a-z0-9_-]{0,63}$/ : /^[a-zA-Z0-9_-]{1,80}$/).test(result)) invalid();
+  return result;
+}
+function unique(ids) {
+  if (new Set(ids).size !== ids.length) invalid();
+}
+function projectFocusDocumentFromMetadata(metadata, body) {
+  const header2 = object(metadata);
+  keys(header2, ["name", "title", "description", "when_to_use", "preprocessor_hint", "preprocessor-hint", "phases_version", "phases"]);
+  const names = [header2.name, header2.title].filter((value) => value !== void 0);
+  const hints = [header2.when_to_use, header2.preprocessor_hint, header2["preprocessor-hint"]].filter((value) => value !== void 0);
+  if (names.length !== 1 || hints.length !== 1) invalid();
+  const common = {
+    name: text4(names[0], 200),
+    description: text4(header2.description, 2e3),
+    when_to_use: text4(hints[0], 2e3),
+    instructions: text4(body.trim(), 64e3)
+  };
+  const phases = header2.phases === void 0 ? [] : header2.phases;
+  if (!Array.isArray(phases) || phases.length > 16) invalid();
+  if (Object.prototype.hasOwnProperty.call(header2, "phases_version")) {
+    if (header2.phases_version !== 1 || !phases.length) invalid();
+    const canonical = phases.map((raw) => {
+      const phase = object(raw);
+      keys(phase, ["id", "title", "instructions", "requirements"]);
+      const requirements = phase.requirements;
+      if (!Array.isArray(requirements) || !requirements.length || requirements.length > 24) invalid();
+      const gates = requirements.map((rawRequirement) => {
+        const requirement = object(rawRequirement);
+        keys(requirement, ["id", "text", "type"]);
+        if (requirement.type !== void 0 && (typeof requirement.type !== "string" || !["semantic", "user_confirmation"].includes(requirement.type))) invalid();
+        return {
+          id: identifier3(requirement.id, true),
+          text: text4(requirement.text, 4e3),
+          ...requirement.type === void 0 ? {} : { type: requirement.type }
+        };
+      });
+      unique(gates.map((gate) => gate.id));
+      return {
+        id: identifier3(phase.id, true),
+        title: text4(phase.title, 200),
+        instructions: text4(phase.instructions, 16e3),
+        requirements: gates
+      };
+    });
+    unique(canonical.map((phase) => phase.id));
+    return { ...common, phases_version: 1, phases: canonical };
+  }
+  const legacy = phases.map((raw) => {
+    const phase = object(raw);
+    keys(phase, ["id", "name", "instructions"]);
+    return { id: identifier3(phase.id, false), name: text4(phase.name, 120), instructions: text4(phase.instructions, 16e3) };
+  });
+  unique(legacy.map((phase) => phase.id));
+  return { ...common, phases: legacy };
+}
+
+// src/cliJevContext.ts
 import { createHash as createHash8 } from "crypto";
 function parseFocusAuthoringDocument(document) {
-  if (document.length > 96e3) throw new Error("Project Focus definition exceeds the limit.");
-  const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/.exec(document);
-  if (!match) throw new Error("Project Focus is missing its Markdown definition.");
-  const header2 = parseYaml(match[1], { schema: "core", uniqueKeys: true, maxAliasCount: 0 });
-  const name = header2.name ?? header2.title;
-  const when = header2.when_to_use ?? header2.preprocessor_hint ?? header2["preprocessor-hint"];
-  if (typeof name !== "string" || typeof header2.description !== "string" || typeof when !== "string") throw new Error("Project Focus metadata is incomplete.");
-  const phases = Array.isArray(header2.phases) ? header2.phases.map((value) => {
-    if (typeof value.id !== "string" || typeof (value.name ?? value.title) !== "string" || typeof value.instructions !== "string") throw new Error("Project Focus phase metadata is incomplete.");
-    return { id: value.id, name: String(value.name ?? value.title), instructions: value.instructions };
-  }) : [];
-  return { name, description: header2.description, when_to_use: when, instructions: match[2].trim(), phases };
+  if (document.length > 96e3) throw new Error("invalid_focus_document");
+  const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)([\s\S]*)$/.exec(document);
+  if (!match) throw new Error("invalid_focus_document");
+  try {
+    const parsed = parseDocument2(match[1], { schema: "core", uniqueKeys: true });
+    if (parsed.errors.length) throw new Error("invalid_focus_document");
+    visit(parsed, (_key, node) => {
+      if (isAlias(node)) throw new Error("invalid_focus_document");
+    });
+    return projectFocusDocumentFromMetadata(parsed.toJS({ maxAliasCount: 0 }), match[2]);
+  } catch {
+    throw new Error("invalid_focus_document");
+  }
 }
 async function discoverCliProjectCandidates(client2, options) {
   const records = (await client2.listProjects(options)).filter((record8) => !record8.archived).slice(0, 40);
@@ -6057,7 +6216,7 @@ async function discoverCliProjectCandidates(client2, options) {
   }));
   return entries.filter((entry) => entry !== null);
 }
-async function loadActiveCliProjectContext(client2, chatId, text5) {
+async function loadActiveCliProjectContext(client2, chatId, text6) {
   const active = await client2.getActiveProjectFocus(chatId);
   if (!active) return {};
   const options = { teamId: active.team_id, personal: !active.team_id };
@@ -6113,9 +6272,9 @@ async function loadActiveCliProjectContext(client2, chatId, text5) {
     if (title && description) candidates.push({ kind: "folder", id: folder.folder_id, title: title.slice(0, 200), description: description.slice(0, 640), when_to_use: "", revision: revision(folder) });
   }
   let selected = [];
-  if (text5?.trim() && candidates.length) selected = await client2.selectProjectContext(
+  if (text6?.trim() && candidates.length) selected = await client2.selectProjectContext(
     active.project_id,
-    { chat_id: chatId, text: text5.slice(0, 8e3), candidates: candidates.slice(0, 24) },
+    { chat_id: chatId, text: text6.slice(0, 8e3), candidates: candidates.slice(0, 24) },
     options
   );
   const specialistId = active.specialist_focus_id?.startsWith(`project-focus:${active.project_id}:`) ? active.specialist_focus_id.split(":")[2] : active.specialist_focus_id;
@@ -6260,7 +6419,7 @@ async function collectRelatedCliTaskContext(client2, chatId, options, records, n
   }
   return candidates;
 }
-async function prepareCliJevContext(client2, chatId, options, supplied = {}, text5) {
+async function prepareCliJevContext(client2, chatId, options, supplied = {}, text6) {
   let candidates = [];
   let active = {};
   let tasks = [];
@@ -6271,7 +6430,7 @@ async function prepareCliJevContext(client2, chatId, options, supplied = {}, tex
       candidates = value;
     }).catch(() => {
     }),
-    loadActiveCliProjectContext(client2, chatId, text5).then((value) => {
+    loadActiveCliProjectContext(client2, chatId, text6).then((value) => {
       active = value;
     }).catch(() => {
     }),
@@ -6476,8 +6635,8 @@ async function startCliProjectAuthoring(client2, recommendation, history) {
     const key = await client2.decryptProjectKey(detail.project, options);
     for (const item of detail.items.filter((item2) => item2.item_type === "workflow" && !item2.deleted_target_state)) {
       if (await decryptWithAesGcmCombined(item.target_id_encrypted, key) !== recommendation.target_id) continue;
-      const text5 = item.encrypted_metadata ? await decryptWithAesGcmCombined(item.encrypted_metadata, key) : null;
-      const metadata = text5 ? JSON.parse(text5) : {};
+      const text6 = item.encrypted_metadata ? await decryptWithAesGcmCombined(item.encrypted_metadata, key) : null;
+      const metadata = text6 ? JSON.parse(text6) : {};
       if (metadata.remote_workflow_file && typeof metadata.remote_workflow_file === "object") remoteBinding = metadata.remote_workflow_file;
       break;
     }
@@ -7151,8 +7310,8 @@ function parseDelimitedLine(line, delimiter) {
   cells2.push(current);
   return cells2;
 }
-function delimitedTextToMarkdownTable(text5, delimiter) {
-  const rows2 = text5.split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line.length > 0).map((line) => parseDelimitedLine(line, delimiter));
+function delimitedTextToMarkdownTable(text6, delimiter) {
+  const rows2 = text6.split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line.length > 0).map((line) => parseDelimitedLine(line, delimiter));
   if (rows2.length === 0) return "";
   const maxCols = Math.max(...rows2.map((row) => row.length));
   const normalized = rows2.map((row) => {
@@ -7199,7 +7358,7 @@ async function docxBufferToHtml(buffer) {
   const zip = await JSZip2.loadAsync(buffer);
   const documentXml = await zip.file("word/document.xml")?.async("string");
   if (!documentXml) return "";
-  const paragraphs = getXmlBlocks(documentXml, "p").map(getTextFromDocxParagraph).map((text5) => text5.trim()).filter(Boolean);
+  const paragraphs = getXmlBlocks(documentXml, "p").map(getTextFromDocxParagraph).map((text6) => text6.trim()).filter(Boolean);
   return paragraphs.map((paragraph) => `<p>${escapeHtml(paragraph)}</p>`).join("\n");
 }
 function columnLettersToIndex(letters) {
@@ -8038,8 +8197,8 @@ function splitLongParagraph(paragraph) {
   if (remainder) chunks.push(remainder);
   return chunks;
 }
-function fallback(text5, language) {
-  if (!language.toLowerCase().startsWith("de")) return text5;
+function fallback(text6, language) {
+  if (!language.toLowerCase().startsWith("de")) return text6;
   const german = {
     "Search results are available.": "Suchergebnisse sind verf\xFCgbar.",
     "I used the News Search skill.": "Ich habe die News-Suche verwendet.",
@@ -8048,7 +8207,7 @@ function fallback(text5, language) {
     "A code example is available.": "Ein Codebeispiel ist verf\xFCgbar.",
     "A table is available.": "Eine Tabelle ist verf\xFCgbar."
   };
-  return german[text5] ?? text5;
+  return german[text6] ?? text6;
 }
 function projectFence(markdown, language) {
   const body = markdown.replace(/^```[^\n]*\n|\n?```$/g, "").trim();
@@ -8130,8 +8289,8 @@ function rejectProtonCredentialFlags(argsOrFlags) {
     throw new Error(`${rejected.split("=")[0]} is not allowed. Bridge credentials must be read privately from Proton Bridge or a hidden prompt.`);
   }
 }
-function redactProtonBridgeSecrets(text5) {
-  return text5.replace(CREDENTIAL_VALUE_RE, "$1<redacted>");
+function redactProtonBridgeSecrets(text6) {
+  return text6.replace(CREDENTIAL_VALUE_RE, "$1<redacted>");
 }
 function containsCredentialLikeField(value) {
   return containsCredentialLikeKey(value);
@@ -8528,7 +8687,7 @@ async function searchProtonBridgeImap(credentials, arguments_) {
   const limit = clampLimit(arguments_.limit);
   const imap = await openTextSocket(credentials.imapHost, credentials.imapPort, IMAP_COMMAND_TIMEOUT_MS);
   try {
-    await imap.readUntil((text5) => /^\* OK/im.test(text5));
+    await imap.readUntil((text6) => /^\* OK/im.test(text6));
     await imap.command(`LOGIN ${quoteImap(credentials.imapUsername)} ${quoteImap(credentials.imapPassword)}`);
     await imap.command(`SELECT ${quoteImap(mailbox)}`);
     const searchResponse = await imap.command(buildImapSearchCommand({ query, startDate, endDate }));
@@ -8576,22 +8735,22 @@ async function sendProtonBridgeSmtp(credentials, payload) {
   const messageId = `<om-${randomUUID7()}@local.openmates>`;
   const smtp = await openTextSocket(credentials.smtpHost, credentials.smtpPort, SMTP_COMMAND_TIMEOUT_MS);
   try {
-    await smtp.readUntil((text5) => /^220[ -]/m.test(text5));
-    await smtp.rawCommand("EHLO openmates.local", (text5) => /^250\s/m.test(text5), /^250[ -]/m);
+    await smtp.readUntil((text6) => /^220[ -]/m.test(text6));
+    await smtp.rawCommand("EHLO openmates.local", (text6) => /^250\s/m.test(text6), /^250[ -]/m);
     const auth = Buffer.from(`\0${credentials.smtpUsername || credentials.imapUsername}\0${credentials.smtpPassword || credentials.imapPassword}`).toString("base64");
     try {
-      await smtp.rawCommand(`AUTH PLAIN ${auth}`, (text5) => /^235[ -]/m.test(text5), /^235[ -]/m);
+      await smtp.rawCommand(`AUTH PLAIN ${auth}`, (text6) => /^235[ -]/m.test(text6), /^235[ -]/m);
     } catch {
       throw new Error("Local SMTP authentication failed.");
     }
-    await smtp.rawCommand(`MAIL FROM:<${from}>`, (text5) => /^250[ -]/m.test(text5), /^250[ -]/m);
+    await smtp.rawCommand(`MAIL FROM:<${from}>`, (text6) => /^250[ -]/m.test(text6), /^250[ -]/m);
     for (const recipient of to) {
-      await smtp.rawCommand(`RCPT TO:<${recipient}>`, (text5) => /^250[ -]/m.test(text5), /^250[ -]/m);
+      await smtp.rawCommand(`RCPT TO:<${recipient}>`, (text6) => /^250[ -]/m.test(text6), /^250[ -]/m);
     }
-    await smtp.rawCommand("DATA", (text5) => /^354[ -]/m.test(text5), /^354[ -]/m);
+    await smtp.rawCommand("DATA", (text6) => /^354[ -]/m.test(text6), /^354[ -]/m);
     await smtp.rawCommand(`${buildSmtpMessage({ from, to, subject, bodyText, messageId })}\r
-.`, (text5) => /^250[ -]/m.test(text5), /^250[ -]/m);
-    await smtp.rawCommand("QUIT", (text5) => /^221[ -]/m.test(text5), /^221[ -]/m).catch(() => void 0);
+.`, (text6) => /^250[ -]/m.test(text6), /^250[ -]/m);
+    await smtp.rawCommand("QUIT", (text6) => /^221[ -]/m.test(text6), /^221[ -]/m).catch(() => void 0);
     return { provider: PROTON_BRIDGE_PROVIDER_ID, message_id: messageId, delivered: true };
   } finally {
     smtp.close();
@@ -8703,7 +8862,7 @@ async function openTextSocket(host, port, timeoutMs) {
       buffer = "";
       socket.write(`${tag} ${command}\r
 `);
-      const response = await waitForSocketText(socket, () => buffer, (text5) => marker.test(text5), timeoutMs);
+      const response = await waitForSocketText(socket, () => buffer, (text6) => marker.test(text6), timeoutMs);
       if (expected && !expected.test(response)) {
         throw new Error(`Local mail command failed: ${redactProtonBridgeSecrets(response.split(/\r?\n/).slice(-2).join(" "))}`);
       }
@@ -8729,8 +8888,8 @@ async function waitForSocketText(socket, getBuffer, done, timeoutMs) {
   return await new Promise((resolve17, reject) => {
     const timer = setTimeout(() => cleanup(() => reject(new Error("Timed out waiting for local mail server response."))), timeoutMs);
     const check = () => {
-      const text5 = getBuffer();
-      if (done(text5)) cleanup(() => resolve17(text5));
+      const text6 = getBuffer();
+      if (done(text6)) cleanup(() => resolve17(text6));
     };
     const onData = () => check();
     const onError = (error) => cleanup(() => reject(error));
@@ -8809,8 +8968,8 @@ function splitBridgeInfoSections(output) {
   }
   return sections;
 }
-function firstValue(map, ...keys) {
-  for (const key of keys) {
+function firstValue(map, ...keys2) {
+  for (const key of keys2) {
     const value = map.get(normalizeKey(key));
     if (value) return value;
   }
@@ -8907,8 +9066,8 @@ async function promptHidden(prompt) {
   return await new Promise((resolve17, reject) => {
     let value = "";
     const onData = (chunk) => {
-      const text5 = chunk.toString("utf8");
-      for (const char of text5) {
+      const text6 = chunk.toString("utf8");
+      for (const char of text6) {
         if (char === "") {
           cleanup();
           reject(new Error("Bridge credential prompt cancelled."));
@@ -10610,8 +10769,8 @@ var MATE_NAMES = {
   general_knowledge: "George",
   onboarding_support: "Suki"
 };
-function stripLegacySuggestionPrefix(text5) {
-  return text5.replace(/^\s*\[[^\]]+\]\s*/, "").trim();
+function stripLegacySuggestionPrefix(text6) {
+  return text6.replace(/^\s*\[[^\]]+\]\s*/, "").trim();
 }
 var CLOUD_API_URL = "https://api.openmates.org";
 var DEFAULT_API_URL = process.env.OPENMATES_API_URL ?? CLOUD_API_URL;
@@ -10672,45 +10831,13 @@ var BLOCKED_SETTINGS_MUTATE_PATHS = /* @__PURE__ */ new Set([
   "/v1/settings/verify-action-code",
   "/v1/settings/user/disable-2fa"
 ]);
-function applyUnifiedDiffForEmbedVersion(content, patch) {
-  const contentLines = content.split("\n");
-  const lines = patch.split("\n");
-  const hunks = [];
-  let current = null;
-  for (const line of lines) {
-    const match = /^@@ -(\d+)(?:,\d+)? \+(\d+)(?:,\d+)? @@/.exec(line);
-    if (match) {
-      if (current) hunks.push(current);
-      current = { start: Number(match[1]) - 1, oldLines: [], newLines: [] };
-      continue;
-    }
-    if (!current) continue;
-    if (line.startsWith(" ")) {
-      current.oldLines.push(line.slice(1));
-      current.newLines.push(line.slice(1));
-    } else if (line.startsWith("-")) {
-      current.oldLines.push(line.slice(1));
-    } else if (line.startsWith("+")) {
-      current.newLines.push(line.slice(1));
-    }
-  }
-  if (current) hunks.push(current);
-  for (const hunk of hunks.sort((a, b) => b.start - a.start)) {
-    const actual = contentLines.slice(hunk.start, hunk.start + hunk.oldLines.length);
-    if (actual.join("\n") !== hunk.oldLines.join("\n")) {
-      throw new Error("Version patch context does not match local content");
-    }
-    contentLines.splice(hunk.start, hunk.oldLines.length, ...hunk.newLines);
-  }
-  return contentLines.join("\n");
-}
 function buildUnifiedDiffForEmbedRestore(currentContent, restoredContent, currentVersion, newVersion) {
-  const currentLines = currentContent.split("\n");
-  const restoredLines = restoredContent.split("\n");
+  const currentLines = currentContent ? currentContent.split("\n") : [];
+  const restoredLines = restoredContent ? restoredContent.split("\n") : [];
   return [
     `--- v${currentVersion}`,
     `+++ v${newVersion}`,
-    `@@ -1,${Math.max(1, currentLines.length)} +1,${Math.max(1, restoredLines.length)} @@`,
+    `@@ -${currentLines.length ? 1 : 0},${currentLines.length} +${restoredLines.length ? 1 : 0},${restoredLines.length} @@`,
     ...currentLines.map((line) => `-${line}`),
     ...restoredLines.map((line) => `+${line}`)
   ].join("\n");
@@ -11311,7 +11438,11 @@ var OpenMatesClient = class _OpenMatesClient {
       artifact,
       imported_at: Math.floor(Date.now() / 1e3)
     }, this.getCliRequestHeaders());
-    if (!response.ok) throw new Error(`Team import failed with HTTP ${response.status}`);
+    if (!response.ok) {
+      const detail = response.data?.detail;
+      const explanation = typeof detail === "string" && detail.length <= 500 ? `: ${detail}` : "";
+      throw new Error(`Team import failed with HTTP ${response.status}${explanation}`);
+    }
     return response.data;
   }
   async updateTeamMemberRole(teamId, memberUserId, role) {
@@ -14184,7 +14315,7 @@ var OpenMatesClient = class _OpenMatesClient {
                   historicalContent = await decryptWithAesGcmCombined(versionRow.encrypted_snapshot, embedKey);
                 } else if (typeof versionRow.encrypted_patch === "string" && historicalContent !== null) {
                   const patch = await decryptWithAesGcmCombined(versionRow.encrypted_patch, embedKey);
-                  historicalContent = applyUnifiedDiffForEmbedVersion(historicalContent, patch ?? "");
+                  historicalContent = applyVersionPatch(historicalContent, patch ?? "");
                 } else {
                   throw new Error("Canonical recovery embed history lacks a starting snapshot.");
                 }
@@ -14314,7 +14445,7 @@ var OpenMatesClient = class _OpenMatesClient {
           return types;
         };
         const existingTypes = await verifiedKeyTypes(keyPage.data?.embed_keys ?? []);
-        const keys = [
+        const keys2 = [
           {
             hashed_embed_id: hashedKeySubject,
             key_type: "master",
@@ -14332,7 +14463,7 @@ var OpenMatesClient = class _OpenMatesClient {
             created_at: now
           }
         ].filter((key) => !existingTypes.has(key.key_type));
-        if (keys.length > 0) {
+        if (keys2.length > 0) {
           const requestId = randomUUID9();
           const receipt = ws.waitForMessage("store_embed_keys_confirmed", (value) => value.request_id === requestId, 3e4);
           void receipt.catch(() => {
@@ -14340,10 +14471,10 @@ var OpenMatesClient = class _OpenMatesClient {
           await ws.sendAsync("store_embed_keys", {
             request_id: requestId,
             recovery_record_id: output.record_id,
-            keys
+            keys: keys2
           });
           const result2 = (await receipt).payload;
-          if (result2.failed_count !== 0 || result2.created_count !== keys.length || result2.requested_count !== keys.length) {
+          if (result2.failed_count !== 0 || result2.created_count !== keys2.length || result2.requested_count !== keys2.length) {
             throw new Error("Recovery embed key wrappers were not exactly confirmed.");
           }
           const durable = await this.http.get(
@@ -16034,7 +16165,7 @@ var OpenMatesClient = class _OpenMatesClient {
         embedKey
       );
       const encryptedTextPreview = embed.text_preview ? await encryptWithAesGcmCombined(embed.text_preview, embedKey) : void 0;
-      const keys = !isChild ? [
+      const keys2 = !isChild ? [
         {
           hashed_embed_id: hashedEmbedId,
           key_type: "master",
@@ -16087,7 +16218,7 @@ var OpenMatesClient = class _OpenMatesClient {
         updated_at: updatedAt
       });
       await storeConfirmed;
-      if (keys.length > 0) {
+      if (keys2.length > 0) {
         const keysRequestId = randomUUID9();
         const keysConfirmed = params.ws.waitForMessage(
           "store_embed_keys_confirmed",
@@ -16097,9 +16228,9 @@ var OpenMatesClient = class _OpenMatesClient {
           },
           3e4
         );
-        await params.ws.sendAsync("store_embed_keys", { request_id: keysRequestId, keys });
+        await params.ws.sendAsync("store_embed_keys", { request_id: keysRequestId, keys: keys2 });
         const keysReceipt = (await keysConfirmed).payload;
-        if (keysReceipt.failed_count !== 0 || keysReceipt.created_count !== keys.length) {
+        if (keysReceipt.failed_count !== 0 || keysReceipt.created_count !== keys2.length) {
           throw new Error(`Embed ${embed.embed_id} key wrappers were not durably stored.`);
         }
       }
@@ -17166,11 +17297,11 @@ var OpenMatesClient = class _OpenMatesClient {
     }
     return response.data.events ?? [];
   }
-  async followUpWorkflowInput(sessionId, text5) {
+  async followUpWorkflowInput(sessionId, text6) {
     this.requireSession();
     const response = await this.http.post(
       `/v1/workflows/input/${encodeURIComponent(sessionId)}/follow-up`,
-      { text: text5 },
+      { text: text6 },
       this.getCliRequestHeaders()
     );
     if (!response.ok || !response.data.session) {
@@ -19539,8 +19670,12 @@ Required: ${schema.required.join(", ")}`
     if (!response.ok || !response.data) {
       throw new Error(this.formatEmbedVersionError(response.data, `Failed to load embed version ${version} (HTTP ${response.status})`));
     }
-    if (typeof response.data.content === "string" || !Array.isArray(response.data.rows)) {
-      return response.data;
+    if (response.data.embed_id !== embedId || response.data.version_number !== version) {
+      throw new Error("Version response does not match the selected version");
+    }
+    if (typeof response.data.content === "string") return response.data;
+    if (!Array.isArray(response.data.rows) || response.data.rows.at(-1)?.version_number !== version) {
+      throw new Error("Version response does not match the selected version");
     }
     const content = await this.reconstructEncryptedEmbedVersion(embedId, response.data.rows, context);
     if (response.data.rows.length > 32 && response.data.readonly === false) {
@@ -19693,22 +19828,7 @@ Required: ${schema.required.join(", ")}`
     if (!embedKey) {
       throw new Error("Could not resolve embed encryption key for version history.");
     }
-    const sortedRows = [...rows2].sort((a, b) => a.version_number - b.version_number);
-    let content = null;
-    for (const row of sortedRows) {
-      if (row.encrypted_snapshot) {
-        content = await decryptWithAesGcmCombined(row.encrypted_snapshot, embedKey);
-        continue;
-      }
-      if (row.encrypted_patch && content !== null) {
-        const patch = await decryptWithAesGcmCombined(row.encrypted_patch, embedKey);
-        content = applyUnifiedDiffForEmbedVersion(content, patch ?? "");
-      }
-    }
-    if (content === null) {
-      throw new Error("Version history is missing the initial snapshot");
-    }
-    return content;
+    return reconstructVersionRows(rows2, (ciphertext) => decryptWithAesGcmCombined(ciphertext, embedKey));
   }
   async resolveVersionEmbedKey(embedId, context) {
     if (context?.projectId) {
@@ -20623,6 +20743,7 @@ Required: ${schema.required.join(", ")}`
     return {
       "User-Agent": this.getCliUserAgent(),
       "X-OpenMates-SDK": "cli",
+      "X-OpenMates-Client-Capabilities": "agentic-storage-v2",
       "X-OpenMates-Device-Identity": this.getCliApiKeyDeviceIdentity(),
       Origin: deriveAppUrl(this.apiUrl)
     };
@@ -27727,6 +27848,7 @@ var OpenMates = class {
       Authorization: `Bearer ${splitApiKeyCredential(this.apiKey ?? "").bearer}`,
       Origin: sdkOrigin(this.apiUrl),
       "X-OpenMates-SDK": this.sdkName,
+      "X-OpenMates-Client-Capabilities": "agentic-storage-v2",
       "X-OpenMates-Device-Identity": this.deviceId
     };
     if (hasBody) {
@@ -27738,6 +27860,7 @@ var OpenMates = class {
     return {
       Accept: "application/json",
       "X-OpenMates-SDK": this.sdkName,
+      "X-OpenMates-Client-Capabilities": "agentic-storage-v2",
       "X-OpenMates-Device-Identity": this.deviceId
     };
   }
@@ -30806,8 +30929,8 @@ var OpenMatesWorkflows = class {
     const response = await this.client.get(`/v1/workflows/input/${encodeURIComponent(sessionId)}/events?after_event_id=${encodeURIComponent(String(afterEventId))}`);
     return response.events ?? [];
   }
-  async followUpInput(sessionId, text5) {
-    const response = await this.client.request(`/v1/workflows/input/${encodeURIComponent(sessionId)}/follow-up`, { text: text5 });
+  async followUpInput(sessionId, text6) {
+    const response = await this.client.request(`/v1/workflows/input/${encodeURIComponent(sessionId)}/follow-up`, { text: text6 });
     if (!response.session) throw new OpenMatesApiError(500, { detail: "Workflow input response missing session" });
     return response.session;
   }
@@ -31131,8 +31254,8 @@ var OpenMatesEmbeds = class {
   }
   async share(embedId, options = {}) {
     const shown = await this.show(embedId);
-    const keys = Array.isArray(shown.embed_keys) ? shown.embed_keys : [];
-    const embedKey = await this.client.resolveEmbedKeyForShare(keys, embedId);
+    const keys2 = Array.isArray(shown.embed_keys) ? shown.embed_keys : [];
+    const embedKey = await this.client.resolveEmbedKeyForShare(keys2, embedId);
     if (!embedKey) throw new OpenMatesConfigError("Unable to resolve embed key for share link");
     const blob = await generateEmbedShareBlob(embedId, embedKey, options.expires ?? 0, options.password);
     return { url: buildEmbedShareUrl(this.client.webOrigin(), embedId, blob) };
@@ -31552,7 +31675,7 @@ import { fileURLToPath as fileURLToPath4 } from "url";
 import { basename as basename9, dirname as dirname17, join as join28 } from "path";
 import { createHash as createHash29, randomBytes as randomBytes13, randomUUID as randomUUID23 } from "crypto";
 import { arch as arch2, platform as platform2 } from "os";
-import { parse as parseYaml2, parseDocument as parseYamlDocument, stringify as stringifyYaml } from "yaml";
+import { parse as parseYaml, parseDocument as parseYamlDocument, stringify as stringifyYaml } from "yaml";
 
 // ../workflowFile.ts
 var WORKFLOW_FILE_MAX_BYTES = 1048576;
@@ -31630,15 +31753,15 @@ var CREDENTIAL_SUFFIXES = [
 function record4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
 }
-function onlyKeys(value, keys, path2) {
+function onlyKeys(value, keys2, path2) {
   for (const key of Object.keys(value)) {
-    if (!keys.includes(key)) throw new Error(`Unsupported Workflow file field: ${path2}.${key}.`);
+    if (!keys2.includes(key)) throw new Error(`Unsupported Workflow file field: ${path2}.${key}.`);
   }
 }
 function assertPortable(value) {
   let remaining = 5e4;
   const active = /* @__PURE__ */ new Set();
-  function visit(item, path2, depth) {
+  function visit2(item, path2, depth) {
     if (--remaining < 0 || depth > 64) throw new Error("Workflow file is too complex.");
     if (typeof item === "number" && !Number.isFinite(item)) throw new Error("Workflow file contains an invalid number.");
     if (item === null || ["string", "boolean", "number"].includes(typeof item)) return;
@@ -31646,32 +31769,32 @@ function assertPortable(value) {
     if (active.has(item)) throw new Error("Workflow file contains a circular reference.");
     active.add(item);
     if (Array.isArray(item)) {
-      item.forEach((child, i) => visit(child, `${path2}[${i}]`, depth + 1));
+      item.forEach((child, i) => visit2(child, `${path2}[${i}]`, depth + 1));
     } else {
       for (const [key, child] of Object.entries(item)) {
         const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
         if (["__proto__", "constructor", "prototype"].includes(key) || FORBIDDEN_KEYS.has(normalized) || CREDENTIAL_SUFFIXES.some((suffix) => normalized.endsWith(suffix))) {
           throw new Error(`Workflow file contains an account-specific or private field at ${path2}.${key}.`);
         }
-        visit(child, `${path2}.${key}`, depth + 1);
+        visit2(child, `${path2}.${key}`, depth + 1);
       }
     }
     active.delete(item);
   }
-  visit(value, "$", 0);
+  visit2(value, "$", 0);
 }
 function remapGraph(graph, ids) {
   const escaped = Array.from(ids.keys()).sort((a, b) => b.length - a.length).map((id) => id.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
   const references = escaped.length ? new RegExp(`(\\$nodes\\.|\\{\\{\\s*steps\\.|\\$items\\.|\\{\\{\\s*items\\.)(${escaped.join("|")})(?=[.}\\s]|$)`, "g") : null;
-  function visit(value) {
+  function visit2(value) {
     if (typeof value === "string") return references ? value.replace(references, (_match, prefix, id) => prefix + ids.get(id)) : value;
-    if (Array.isArray(value)) return value.map((item) => visit(item));
-    if (record4(value)) return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, visit(child)]));
+    if (Array.isArray(value)) return value.map((item) => visit2(item));
+    if (record4(value)) return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, visit2(child)]));
     return value;
   }
-  const mapped = visit(graph);
+  const mapped = visit2(graph);
   if (graph.ui_layout) mapped.ui_layout = Object.fromEntries(
-    Object.entries(graph.ui_layout).map(([key, child]) => [ids.get(key) ?? key, visit(child)])
+    Object.entries(graph.ui_layout).map(([key, child]) => [ids.get(key) ?? key, visit2(child)])
   );
   mapped.trigger_node_id = graph.trigger_node_id ? ids.get(graph.trigger_node_id) ?? graph.trigger_node_id : null;
   mapped.nodes.forEach((node, i) => {
@@ -32077,27 +32200,27 @@ var SecretRegistry = class {
       textsToAdd.push(entry.textToHide);
     }
     if (entry.additionalTexts) {
-      for (const text5 of entry.additionalTexts) {
-        if (text5 && text5.trim().length > 0) {
-          textsToAdd.push(text5);
+      for (const text6 of entry.additionalTexts) {
+        if (text6 && text6.trim().length > 0) {
+          textsToAdd.push(text6);
         }
       }
     }
-    for (const text5 of textsToAdd) {
+    for (const text6 of textsToAdd) {
       const placeholder = entry.replaceWith.startsWith("[") ? entry.replaceWith : `[${entry.replaceWith}]`;
       const regEntry = {
-        value: text5,
+        value: text6,
         token: placeholder,
         source: "settings",
         name: entry.id,
         type: "PERSONAL_DATA",
-        length: text5.length
+        length: text6.length
       };
-      this.entries.set(text5, regEntry);
-      this.usedPlaceholders.set(placeholder, text5);
-      const lower = text5.toLowerCase();
-      if (lower !== text5) {
-        this.variantToOriginal.set(lower, text5);
+      this.entries.set(text6, regEntry);
+      this.usedPlaceholders.set(placeholder, text6);
+      const lower = text6.toLowerCase();
+      if (lower !== text6) {
+        this.variantToOriginal.set(lower, text6);
       }
     }
     this.automaton = null;
@@ -32151,12 +32274,12 @@ var SecretRegistry = class {
    * @param text Text to scan
    * @returns Array of secret mappings for all matches found
    */
-  findAll(text5) {
+  findAll(text6) {
     if (this.entries.size === 0) return [];
     if (!this.automaton) {
       this.buildAutomaton();
     }
-    const results = this.automaton.search(text5);
+    const results = this.automaton.search(text6);
     const mappings = [];
     const coveredRanges = [];
     const sortedResults = [];
@@ -32361,17 +32484,17 @@ var SecretScanner = class {
    * @param text Text to scan and redact
    * @returns Object with redacted text and mappings for restoration
    */
-  redact(text5) {
-    if (!text5) return { redacted: text5, mappings: [] };
+  redact(text6) {
+    if (!text6) return { redacted: text6, mappings: [] };
     const allMappings = [];
     const coveredRanges = [];
-    const urlExclusionZones = getUrlExclusionZones(text5);
-    const identifierRanges = codingIdentifierRanges(text5);
+    const urlExclusionZones = getUrlExclusionZones(text6);
+    const identifierRanges = codingIdentifierRanges(text6);
     if (this.options.enableRegistryDetection && this.registry.size > 0) {
-      const registryMappings = this.registry.findAll(text5);
+      const registryMappings = this.registry.findAll(text6);
       for (const mapping of registryMappings) {
         let searchFrom = 0;
-        const searchText = text5.toLowerCase();
+        const searchText = text6.toLowerCase();
         const matchLower = mapping.original.toLowerCase();
         while (searchFrom < searchText.length) {
           const idx = searchText.indexOf(matchLower, searchFrom);
@@ -32387,7 +32510,7 @@ var SecretScanner = class {
       for (const pattern of [...SECRET_PATTERNS, ...GENERAL_PII_PATTERNS]) {
         pattern.regex.lastIndex = 0;
         let match;
-        while ((match = pattern.regex.exec(text5)) !== null) {
+        while ((match = pattern.regex.exec(text6)) !== null) {
           const matchText = match[0];
           const startIndex = match.index;
           const endIndex = startIndex + matchText.length;
@@ -32418,7 +32541,7 @@ var SecretScanner = class {
         }
       }
     }
-    let redacted = text5;
+    let redacted = text6;
     const sortedMappings = [...allMappings].sort(
       (a, b) => b.original.length - a.original.length
     );
@@ -32447,9 +32570,9 @@ var SecretScanner = class {
    * @param mappings Mappings from a previous redact() call
    * @returns Text with placeholders replaced by original values
    */
-  restore(text5, mappings) {
-    if (!text5 || !mappings || mappings.length === 0) return text5;
-    let result = text5;
+  restore(text6, mappings) {
+    if (!text6 || !mappings || mappings.length === 0) return text6;
+    let result = text6;
     for (const mapping of mappings) {
       result = result.split(mapping.placeholder).join(mapping.original);
     }
@@ -32468,11 +32591,11 @@ var SecretScanner = class {
 function escapeRegExp2(string3) {
   return string3.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function getUrlExclusionZones(text5) {
+function getUrlExclusionZones(text6) {
   const urlExclusionRegex = /https?:\/\/[^\s]+/g;
   const zones = [];
   let match;
-  while ((match = urlExclusionRegex.exec(text5)) !== null) {
+  while ((match = urlExclusionRegex.exec(text6)) !== null) {
     zones.push({ start: match.index, end: match.index + match[0].length });
   }
   return zones;
@@ -32549,18 +32672,18 @@ var OutputRedactor = class {
    * @param text Text to scan
    * @returns Redacted text with placeholders
    */
-  redact(text5) {
-    return this.redactWithMappings(text5).redacted;
+  redact(text6) {
+    return this.redactWithMappings(text6).redacted;
   }
   /**
    * Redact and return both redacted text and mappings.
    * Used when we need to store mappings alongside message data.
    */
-  redactWithMappings(text5) {
-    if (!text5 || !this.initialized || !this.privacyEnabled) {
-      return { redacted: text5, mappings: [] };
+  redactWithMappings(text6) {
+    if (!text6 || !this.initialized || !this.privacyEnabled) {
+      return { redacted: text6, mappings: [] };
     }
-    const result = this.scanner.redact(text5);
+    const result = this.scanner.redact(text6);
     const excluded = result.mappings.filter((m) => this.disabledCategories.has(PII_TYPE_TO_CATEGORY[m.type] ?? ""));
     if (excluded.length) {
       result.redacted = this.scanner.restore(result.redacted, excluded);
@@ -32575,9 +32698,9 @@ var OutputRedactor = class {
    * Restore placeholders back to original values.
    * Only uses mappings from this session (never from external sources).
    */
-  restore(text5) {
-    if (!text5 || this.sessionMappings.size === 0) return text5;
-    return this.scanner.restore(text5, Array.from(this.sessionMappings.values()));
+  restore(text6) {
+    if (!text6 || this.sessionMappings.size === 0) return text6;
+    return this.scanner.restore(text6, Array.from(this.sessionMappings.values()));
   }
   /** Mappings accumulated while preparing attachments and this message. */
   getMappings() {
@@ -32636,8 +32759,8 @@ function createWebsiteEmbed(url) {
     status: "finished"
   };
 }
-function replaceUrlsInText(text5, embeds) {
-  return text5.replace(URL_PATTERN, (rawUrl) => {
+function replaceUrlsInText(text6, embeds) {
+  return text6.replace(URL_PATTERN, (rawUrl) => {
     const { url, suffix } = trimTrailingUrlPunctuation(rawUrl);
     if (!url) return rawUrl;
     try {
@@ -33637,12 +33760,12 @@ function renderAudioTranscribePreview(c, ln) {
   const language = str(c.language) ?? "";
   if (duration) ln(`\x1B[2mDuration: ${duration}\x1B[0m`);
   if (language) ln(`\x1B[2mLanguage: ${language}\x1B[0m`);
-  const text5 = str(c.text) ?? str(c.transcript) ?? "";
-  if (text5) ln(trunc(text5, 60));
+  const text6 = str(c.text) ?? str(c.transcript) ?? "";
+  if (text6) ln(trunc(text6, 60));
 }
 function renderAudioTranscribeFullscreen(c) {
-  const text5 = str(c.text) ?? str(c.transcript) ?? "";
-  if (text5) console.log(text5);
+  const text6 = str(c.text) ?? str(c.transcript) ?? "";
+  if (text6) console.log(text6);
   else console.log("No transcript available.");
 }
 function renderByDirectType(embed, c, ln) {
@@ -33875,8 +33998,8 @@ function renderDirectTypeFullscreen(embed, c) {
 
 `);
       if (html) {
-        const text5 = html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
-        console.log(text5);
+        const text6 = html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+        console.log(text6);
       }
       break;
     }
@@ -33887,8 +34010,8 @@ function renderDirectTypeFullscreen(embed, c) {
 
 `);
       if (html) {
-        const text5 = html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
-        console.log(text5);
+        const text6 = html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+        console.log(text6);
       }
       break;
     }
@@ -34039,18 +34162,18 @@ function mindMapOutline(document, maxNodes = 100) {
   }
   const lines = [];
   const visited = /* @__PURE__ */ new Set();
-  const visit = (nodeId, depth) => {
+  const visit2 = (nodeId, depth) => {
     if (visited.size >= maxNodes || visited.has(nodeId)) return;
     const node = nodesById.get(nodeId);
     if (!node) return;
     visited.add(nodeId);
     lines.push(`${"  ".repeat(depth)}- ${node.label}`);
-    for (const childId of node.children ?? []) visit(childId, depth + 1);
+    for (const childId of node.children ?? []) visit2(childId, depth + 1);
   };
-  visit(document.rootId, 0);
+  visit2(document.rootId, 0);
   for (const node of document.nodes) {
     if (visited.size >= maxNodes) break;
-    if (!visited.has(node.id)) visit(node.id, 0);
+    if (!visited.has(node.id)) visit2(node.id, 0);
   }
   return lines.join("\n");
 }
@@ -34435,13 +34558,13 @@ function unsetEnvValue(content, key) {
   }).join("\n").replace(/\n*$/, "")}
 `;
 }
-function unique(items) {
+function unique2(items) {
   return [...new Set(items.map((item) => item.trim()).filter(Boolean))];
 }
 function csv(value) {
   if (value === void 0) return [];
-  if (Array.isArray(value)) return unique(value.flatMap((item) => item.split(",")));
-  return unique(value.split(","));
+  if (Array.isArray(value)) return unique2(value.flatMap((item) => item.split(",")));
+  return unique2(value.split(","));
 }
 function parseServerRole(value) {
   if (!value) return "core";
@@ -34515,7 +34638,7 @@ function planServerRuntime(input) {
   const profileServices = role === "core" ? [...CORE_OBSERVABILITY_BY_PROFILE[coreProfile]] : [];
   if (role === "core" && input.withAlerts) profileServices.push("alertmanager");
   const webappServices = input.includeWebapp === false ? [] : ["webapp"];
-  const defaultServices = role === "core" ? unique([...definition.requiredServices, ...CORE_WORKER_SERVICES, "admin-sidecar", ...profileServices, ...webappServices]) : unique([...definition.requiredServices, ...definition.optionalServices]);
+  const defaultServices = role === "core" ? unique2([...definition.requiredServices, ...CORE_WORKER_SERVICES, "admin-sidecar", ...profileServices, ...webappServices]) : unique2([...definition.requiredServices, ...definition.optionalServices]);
   return {
     role,
     profile,
@@ -34803,7 +34926,7 @@ function planRuntimeMonitoringServices(input) {
       "",
       "[Timer]",
       "OnBootSec=2min",
-      "OnUnitActiveSec=5min",
+      "OnUnitActiveSec=1min",
       "Persistent=true",
       `Unit=${serviceName}`,
       "",
@@ -34863,6 +34986,60 @@ function validateServerEnvironmentTarget(command, environment) {
   throw new Error("Unknown server environment target; use shared-dev for explicit server administration.");
 }
 
+// src/serverStorageMigration.ts
+function parseStorageMigrationOutcome(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return { status: "paused", reason: "migration_coordinator_response_invalid" };
+  }
+  const row = value;
+  if (!["pending", "paused", "reader_enabled", "prune_enabled", "not_applicable"].includes(String(row.status))) {
+    return { status: "paused", reason: "migration_coordinator_response_invalid" };
+  }
+  const result = { status: row.status };
+  if (typeof row.reason === "string" && /^[a-z_]{1,80}$/.test(row.reason)) result.reason = row.reason;
+  if (typeof row.source_commit === "string" && /^[a-f0-9]{40}$/.test(row.source_commit)) result.source_commit = row.source_commit;
+  if (Number.isInteger(row.retry_seconds) && Number(row.retry_seconds) > 0 && Number(row.retry_seconds) <= 86400) {
+    result.retry_seconds = Number(row.retry_seconds);
+  }
+  return result;
+}
+function parseStorageMigrationProgress(value) {
+  const row = value && typeof value === "object" && !Array.isArray(value) ? value : {};
+  const result = { automatic: parseStorageMigrationOutcome(row.automatic) };
+  if (row.legacy_full_graph !== void 0) result.legacy_full_graph = parseStorageMigrationOutcome(row.legacy_full_graph);
+  const fields = {
+    message_segments: ["copying", "verified", "reader_active"],
+    message_pages: ["read_enabled", "pruned"],
+    version_rows: ["copied", "reader_active", "pruned", "stale"]
+  };
+  for (const [name, names] of Object.entries(fields)) {
+    const counts = row[name];
+    if (!counts || typeof counts !== "object" || Array.isArray(counts)) continue;
+    const selected = {};
+    for (const key of names) {
+      const count = counts[key];
+      if (typeof count === "number" && Number.isSafeInteger(count) && count >= 0) selected[key] = count;
+    }
+    result[name] = selected;
+  }
+  return result;
+}
+function storageMigrationCommand(composePrefix, operation, sourceRevision) {
+  if (sourceRevision !== void 0 && !/^[a-f0-9]{40}$/i.test(sourceRevision)) {
+    throw new Error("source_revision_unavailable");
+  }
+  return [
+    ...composePrefix,
+    "exec",
+    "-T",
+    ...sourceRevision ? ["-e", `BUILD_COMMIT_SHA=${sourceRevision.toLowerCase()}`] : [],
+    "api",
+    "python",
+    "/app/scripts/storage_rollout.py",
+    operation
+  ];
+}
+
 // src/serverBackupArchive.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import { chmodSync as chmodSync4, lstatSync as lstatSync2, readdirSync as readdirSync4, renameSync as renameSync3, rmSync as rmSync4 } from "fs";
@@ -34898,7 +35075,7 @@ import { createHash as createHash16 } from "crypto";
 import { accessSync, constants as constants2, existsSync as existsSync9, mkdirSync as mkdirSync9, mkdtempSync, readFileSync as readFileSync10, renameSync as renameSync4, rmSync as rmSync5, writeFileSync as writeFileSync5 } from "fs";
 import { tmpdir } from "os";
 import { dirname as dirname7, join as join12 } from "path";
-var hash2 = (text5) => createHash16("sha256").update(text5).digest("hex");
+var hash2 = (text6) => createHash16("sha256").update(text6).digest("hex");
 function resolveCaddyProfile(role, explicit, previous) {
   if (explicit === void 0) return previous ?? "self-host";
   if (role !== "upload" || explicit !== "official-upload") throw new Error("caddy_profile_unsupported");
@@ -37301,6 +37478,100 @@ function sourceUpdateMetadata(installPath) {
     }
   };
 }
+function runAutomaticStorageMigration(installPath, role, installMode, withOverrides) {
+  if (role !== "core") return { status: "not_applicable" };
+  if (!shouldAutoInstallRuntimeMonitoringServices(process.env)) {
+    return { status: "paused", reason: "inventory_refresh_service_disabled", retry_seconds: 60 };
+  }
+  if (!refreshStorageRuntimeInventory(installPath, role, installMode, withOverrides)) {
+    return { status: "paused", reason: "runtime_inventory_refresh_unavailable", retry_seconds: 60 };
+  }
+  let sourceRevision;
+  if (installMode === "source") {
+    if (exec("git status --porcelain", installPath).trim()) {
+      return { status: "pending", reason: "source_worktree_unverified" };
+    }
+    const revision = exec("git rev-parse HEAD", installPath).trim();
+    if (!/^[a-f0-9]{40}$/i.test(revision)) {
+      return { status: "pending", reason: "source_revision_unavailable" };
+    }
+    sourceRevision = revision;
+  }
+  const args = storageMigrationCommand(composeArgs(installPath, withOverrides, installMode, role), "auto", sourceRevision);
+  const result = spawnSync("docker", args, {
+    cwd: installPath,
+    encoding: "utf8",
+    timeout: 45e3,
+    stdio: ["ignore", "pipe", "pipe"],
+    maxBuffer: 64 * 1024
+  });
+  if (result.error || result.status !== 0) {
+    return { status: "paused", reason: "migration_coordinator_unavailable" };
+  }
+  try {
+    return parseStorageMigrationOutcome(JSON.parse(result.stdout.trim()));
+  } catch {
+  }
+  return { status: "paused", reason: "migration_coordinator_response_invalid" };
+}
+function refreshStorageRuntimeInventory(installPath, role, installMode, withOverrides) {
+  if (role !== "core") return true;
+  if (installMode === "source" && exec("git status --porcelain", installPath).trim()) return false;
+  try {
+    const containers = execFileSync4(
+      "docker",
+      [...composeArgs(installPath, withOverrides, installMode, role), "ps", "--all", "-q", "api"],
+      { cwd: installPath, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], timeout: 15e3 }
+    ).trim().split(/\s+/).filter(Boolean);
+    if (containers.length < 1 || containers.length > 128 || new Set(containers).size !== containers.length || containers.some((id) => !/^[a-f0-9]{12,64}$/.test(id))) return false;
+    const cohort = [];
+    for (const container of containers) {
+      const output = execFileSync4(
+        "docker",
+        ["exec", container, "python", "/app/scripts/storage_runtime_inventory.py", "inspect"],
+        { cwd: installPath, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], timeout: 15e3, maxBuffer: 64 * 1024 }
+      );
+      cohort.push(JSON.parse(output.trim()));
+    }
+    const result = spawnSync(
+      "docker",
+      ["exec", "-i", containers[0], "python", "/app/scripts/storage_runtime_inventory.py", "publish"],
+      {
+        cwd: installPath,
+        encoding: "utf8",
+        input: JSON.stringify(cohort),
+        timeout: 45e3,
+        stdio: ["pipe", "pipe", "pipe"],
+        maxBuffer: 64 * 1024
+      }
+    );
+    if (result.error || result.status !== 0) return false;
+    const published = JSON.parse(result.stdout.trim());
+    return published.status === "published";
+  } catch {
+    return false;
+  }
+}
+function readStorageMigrationProgress(installPath, role, installMode, withOverrides) {
+  if (role !== "core") return { automatic: { status: "not_applicable" } };
+  const result = spawnSync("docker", storageMigrationCommand(
+    composeArgs(installPath, withOverrides, installMode, role),
+    "status"
+  ), {
+    cwd: installPath,
+    encoding: "utf8",
+    timeout: 45e3,
+    stdio: ["ignore", "pipe", "pipe"],
+    maxBuffer: 64 * 1024
+  });
+  if (!result.error && result.status === 0) {
+    try {
+      return parseStorageMigrationProgress(JSON.parse(result.stdout.trim()));
+    } catch {
+    }
+  }
+  return { automatic: { status: "paused", reason: "migration_coordinator_unavailable", retry_seconds: 60 } };
+}
 function copyIfExists(source, destination) {
   if (!existsSync11(source)) return;
   mkdirSync12(dirname9(destination), { recursive: true });
@@ -37810,8 +38081,31 @@ async function serverStatus(flags) {
     args.push("--format", "json");
   }
   if (selection.requested) args.push(...selection.services);
+  if (flags.json === true) {
+    const output = execFileSync4("docker", args, { cwd: installPath, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
+    const containers = [];
+    if (output) {
+      if (output.startsWith("[")) containers.push(...JSON.parse(output));
+      else for (const line of output.split("\n")) containers.push(JSON.parse(line));
+    }
+    printJson({
+      command: "status",
+      path: installPath,
+      role,
+      containers,
+      storageMigration: readStorageMigrationProgress(installPath, role, getInstallMode(installPath, config), withOverrides)
+    });
+    return;
+  }
   const code = await runInteractive("docker", args, installPath);
   if (code !== 0) process.exit(code);
+  const migration = readStorageMigrationProgress(installPath, role, getInstallMode(installPath, config), withOverrides);
+  const outcome = migration.automatic;
+  console.log(`Storage migration: ${outcome.status}${outcome.reason ? ` (${outcome.reason})` : ""}${outcome.retry_seconds ? `; retry in ${outcome.retry_seconds}s` : ""}`);
+  if (migration.legacy_full_graph) console.log(`Legacy full graph migration: ${migration.legacy_full_graph.status} (${migration.legacy_full_graph.reason ?? "policy_pending"})`);
+  if (migration.message_segments) console.log(`Message segments: ${JSON.stringify(migration.message_segments)}`);
+  if (migration.message_pages) console.log(`Message pages: ${JSON.stringify(migration.message_pages)}`);
+  if (migration.version_rows) console.log(`Version rows: ${JSON.stringify(migration.version_rows)}`);
 }
 async function serverStart(flags) {
   requireDocker();
@@ -38485,6 +38779,8 @@ async function installRuntimeMonitoringServices(installPath, role) {
   execSync("systemctl daemon-reload", { stdio: "pipe" });
   const timers = files.filter(([name]) => name.endsWith(".timer")).map(([name]) => name);
   execSync(`systemctl enable --now ${timers.map(shellQuote).join(" ")}`, { stdio: "pipe" });
+  execFileSync4("systemctl", ["restart", plan.timerName], { stdio: "pipe" });
+  execFileSync4("systemctl", ["--no-block", "try-restart", plan.serviceName], { stdio: "pipe" });
   for (const timer of timers) execFileSync4("systemctl", ["is-active", "--quiet", timer], { stdio: "pipe" });
 }
 async function autoInstallRuntimeMonitoringServices(installPath, role) {
@@ -38856,6 +39152,8 @@ async function serverUpdate(client2, rest, flags) {
         await runInteractive("docker", [...composeArgs(installPath, withOverrides, installMode, role), "ps"], installPath);
         throw error;
       }
+      const automaticStorageMigration2 = runAutomaticStorageMigration(installPath, role, installMode, withOverrides);
+      console.error(`Storage migration: ${automaticStorageMigration2.status}${automaticStorageMigration2.reason ? ` (${automaticStorageMigration2.reason})` : ""}`);
       if (config) {
         saveServerConfig({ ...config, imageTag: target.tag, imageChannel: target.channel });
       }
@@ -38893,6 +39191,7 @@ async function serverUpdate(client2, rest, flags) {
           checks: successfulRuntimeOutput2?.checks ?? [],
           runtimeCompletedAt: successfulRuntimeOutput2?.completed_at,
           quickTest: quickTest2,
+          automaticStorageMigration: automaticStorageMigration2,
           completionEmailDelivery: completion3.delivery
         });
         if (flags.json === true) {
@@ -38922,6 +39221,7 @@ async function serverUpdate(client2, rest, flags) {
         checks: successfulRuntimeOutput2?.checks ?? [],
         runtimeCompletedAt: successfulRuntimeOutput2?.completed_at,
         quickTest: quickTest2,
+        automaticStorageMigration: automaticStorageMigration2,
         completionEmailDelivery: completion2.delivery,
         completionEmailDeliveryId: completion2.deliveryId,
         completionEmailPendingAt: completion2.deliveryPendingAt,
@@ -38937,6 +39237,7 @@ async function serverUpdate(client2, rest, flags) {
           runtimeVerification: successfulRuntimeOutput2,
           caddy: caddy2,
           quickTest: quickTest2,
+          automaticStorageMigration: automaticStorageMigration2,
           completionEmailDelivery: completion2.delivery,
           completedAt: completion2.completedAt
         });
@@ -39001,8 +39302,16 @@ async function serverUpdate(client2, rest, flags) {
         );
       }
     }
+    let sourceBuildRevision = "";
+    try {
+      if (!exec("git status --porcelain", installPath).trim()) {
+        const revision = exec("git rev-parse HEAD", installPath).trim();
+        if (/^[a-f0-9]{40}$/i.test(revision)) sourceBuildRevision = revision.toLowerCase();
+      }
+    } catch {
+    }
     const buildArgs = appendSelectedServices(
-      [...composeArgs(installPath, withOverrides, installMode, role), "build"],
+      [...composeArgs(installPath, withOverrides, installMode, role), "build", "--build-arg", `BUILD_COMMIT_SHA=${sourceBuildRevision}`],
       coreSetupPlan.pullOrBuildServices,
       filterRequested
     );
@@ -39069,6 +39378,8 @@ async function serverUpdate(client2, rest, flags) {
       await runInteractive("docker", [...composeArgs(installPath, withOverrides, installMode, role), "ps"], installPath);
       throw error;
     }
+    const automaticStorageMigration = runAutomaticStorageMigration(installPath, role, installMode, withOverrides);
+    console.error(`Storage migration: ${automaticStorageMigration.status}${automaticStorageMigration.reason ? ` (${automaticStorageMigration.reason})` : ""}`);
     try {
       await autoInstallRuntimeMonitoringServices(installPath, role);
     } catch (error) {
@@ -39095,6 +39406,7 @@ async function serverUpdate(client2, rest, flags) {
         checks: successfulRuntimeOutput?.checks ?? [],
         runtimeCompletedAt: successfulRuntimeOutput?.completed_at,
         quickTest,
+        automaticStorageMigration,
         completionEmailDelivery: completion2.delivery
       });
       if (flags.json === true) {
@@ -39122,6 +39434,7 @@ async function serverUpdate(client2, rest, flags) {
       checks: successfulRuntimeOutput?.checks ?? [],
       runtimeCompletedAt: successfulRuntimeOutput?.completed_at,
       quickTest,
+      automaticStorageMigration,
       completionEmailDelivery: completion.delivery,
       completionEmailDeliveryId: completion.deliveryId,
       completionEmailPendingAt: completion.deliveryPendingAt,
@@ -39138,6 +39451,7 @@ async function serverUpdate(client2, rest, flags) {
         runtimeVerification: successfulRuntimeOutput,
         caddy,
         quickTest,
+        automaticStorageMigration,
         completionEmailDelivery: completion.delivery,
         completedAt: completion.completedAt
       });
@@ -39294,7 +39608,23 @@ async function serverMonitoring(rest, flags) {
   let output;
   try {
     requireDocker();
+    const inventoryRefreshed = refreshStorageRuntimeInventory(
+      installPath,
+      role,
+      getInstallMode(installPath, config),
+      config?.composeProfile === "full"
+    );
     output = runRuntimeVerification(installPath, role, config);
+    if (!inventoryRefreshed) {
+      output.checks.push({
+        id: "core.storage_migration_inventory",
+        status: "failed",
+        required: false,
+        duration_ms: 0,
+        failureClass: "configuration",
+        sanitized_reason: "runtime_inventory_refresh_unavailable"
+      });
+    }
   } catch (error) {
     console.error(`Runtime verifier unavailable: ${error instanceof Error ? error.name : "UnknownError"}`);
     output = {
@@ -40016,8 +40346,8 @@ ${entry.category}:`);
   if (action === "edit") {
     const category = rest[1];
     if (category) {
-      const keys = entries.filter((entry) => entry.category === category).map((entry) => entry.key);
-      console.error(keys.length ? `Focused ${category} keys: ${keys.join(", ")}` : `No existing ${category} keys found; opening canonical .env.`);
+      const keys2 = entries.filter((entry) => entry.category === category).map((entry) => entry.key);
+      console.error(keys2.length ? `Focused ${category} keys: ${keys2.join(", ")}` : `No existing ${category} keys found; opening canonical .env.`);
     }
     const backupPath = backupEnvFile(installPath);
     if (backupPath) console.error(`Backup: ${backupPath}`);
@@ -40327,10 +40657,10 @@ async function buildCodeRunRequestsFromFlags(flags) {
   for (const url of toList(flags.url)) {
     const response = await fetch(url);
     if (!response.ok) throw new Error(`Failed to download Code Run URL ${redactUrl(url)} (HTTP ${response.status})`);
-    const text5 = await response.text();
+    const text6 = await response.text();
     const urlPath = new URL(url).pathname;
     const sandboxPath = normalizeCodeRunPath(entry || basename3(urlPath) || "main.txt");
-    const buffer = Buffer.from(text5, "utf8");
+    const buffer = Buffer.from(text6, "utf8");
     addFile({
       path: sandboxPath,
       content_base64: buffer.toString("base64"),
@@ -40340,9 +40670,9 @@ async function buildCodeRunRequestsFromFlags(flags) {
     }, buffer.byteLength);
   }
   if (flags.repo) {
-    await addGithubRepoFiles(flags.repo, toList(flags.include), async (path2, text5) => {
+    await addGithubRepoFiles(flags.repo, toList(flags.include), async (path2, text6) => {
       const sandboxPath = normalizeCodeRunPath(path2);
-      const buffer = Buffer.from(text5, "utf8");
+      const buffer = Buffer.from(text6, "utf8");
       addFile({
         path: sandboxPath,
         content_base64: buffer.toString("base64"),
@@ -57970,8 +58300,8 @@ function decodeEmbedContent(content) {
   }
   return parseFlatToonFields(content);
 }
-function stringField3(record8, keys) {
-  for (const key of keys) {
+function stringField3(record8, keys2) {
+  for (const key of keys2) {
     const value = cleanString(record8[key]);
     if (value) return value;
   }
@@ -84359,8 +84689,8 @@ function parseSuites(value) {
   const suites = value.split(",").map((suite) => suite.trim()).filter(Boolean);
   if (suites.includes("all")) return ["quick", "extensive"];
   const allowed = /* @__PURE__ */ new Set(["quick", "extensive"]);
-  const invalid = suites.filter((suite) => !allowed.has(suite));
-  if (invalid.length > 0 || suites.length === 0) {
+  const invalid2 = suites.filter((suite) => !allowed.has(suite));
+  if (invalid2.length > 0 || suites.length === 0) {
     throw new Error("Invalid --suite. Use quick, extensive, or all.");
   }
   return [...new Set(suites)];
@@ -84933,13 +85263,13 @@ function parseJudgment(answer) {
     return { score: null, reason: null };
   }
 }
-function extractJsonObject(text5) {
-  const fenced = text5.match(/```(?:json)?\s*([\s\S]*?)\s*```/i);
+function extractJsonObject(text6) {
+  const fenced = text6.match(/```(?:json)?\s*([\s\S]*?)\s*```/i);
   if (fenced) return fenced[1];
-  const start = text5.indexOf("{");
-  const end = text5.lastIndexOf("}");
+  const start = text6.indexOf("{");
+  const end = text6.lastIndexOf("}");
   if (start === -1 || end === -1 || end <= start) return null;
-  return text5.slice(start, end + 1);
+  return text6.slice(start, end + 1);
 }
 function loadPricingForModels(models) {
   const availablePricing = loadProviderPricing();
@@ -84968,21 +85298,21 @@ function loadProviderPricing() {
   for (const fileName of readdirSync6(providersDir)) {
     if (!fileName.endsWith(".yml")) continue;
     const filePath = join16(providersDir, fileName);
-    const text5 = readFileSync13(filePath, "utf-8");
-    const provider = parseProviderId(text5) ?? fileName.replace(/\.yml$/, "");
-    for (const modelPricing of parseModelPricing(text5, provider)) {
+    const text6 = readFileSync13(filePath, "utf-8");
+    const provider = parseProviderId(text6) ?? fileName.replace(/\.yml$/, "");
+    for (const modelPricing of parseModelPricing(text6, provider)) {
       pricing.set(`${modelPricing.provider}/${modelPricing.modelId}`, modelPricing);
       pricing.set(modelPricing.modelId, modelPricing);
     }
   }
   return pricing;
 }
-function parseProviderId(text5) {
-  const match = text5.match(/^provider_id:\s*["']?([^"'\n]+)["']?/m);
+function parseProviderId(text6) {
+  const match = text6.match(/^provider_id:\s*["']?([^"'\n]+)["']?/m);
   return match?.[1]?.trim() ?? null;
 }
-function parseModelPricing(text5, provider) {
-  const lines = text5.split("\n");
+function parseModelPricing(text6, provider) {
+  const lines = text6.split("\n");
   const results = [];
   let modelId = null;
   let inModel = false;
@@ -85544,10 +85874,10 @@ var TuiTerminal = class {
     const tail = rows2.length < this.height ? `\x1B[${rows2.length + 1};1H\x1B[J` : "";
     this.output.write(`\x1B[?2026h${body}${tail}\x1B[?2026l`);
   }
-  receiveInput(text5) {
+  receiveInput(text6) {
     if (this.inputTimer) clearTimeout(this.inputTimer);
     this.inputTimer = null;
-    this.pendingInput += text5;
+    this.pendingInput += text6;
     const marker = this.paste ? "\x1B[201~" : "\x1B[200~";
     const found = this.pendingInput.indexOf(marker);
     if (found >= 0) {
@@ -85575,10 +85905,10 @@ var TuiTerminal = class {
     }, 30);
   }
   /** Consume SGR mouse reports without letting clicks become composer text. */
-  dispatchInput(text5) {
+  dispatchInput(text6) {
     if (this.mouseTimer) clearTimeout(this.mouseTimer);
     this.mouseTimer = null;
-    const input = this.pendingMouse + text5;
+    const input = this.pendingMouse + text6;
     this.pendingMouse = "";
     let offset = 0;
     while (offset < input.length) {
@@ -85977,25 +86307,25 @@ function wrapCells(value, width) {
   width = Math.max(1, width);
   const result = [];
   for (const line of terminalText(value).split("\n")) {
-    let text5 = "", used = 0;
+    let text6 = "", used = 0;
     for (const { segment } of segments.segment(line)) {
       const size = graphemeWidth(segment);
       if (size > width) {
-        if (text5) result.push(text5);
+        if (text6) result.push(text6);
         result.push("?");
-        text5 = "";
+        text6 = "";
         used = 0;
         continue;
       }
       if (used + size > width) {
-        result.push(text5);
-        text5 = "";
+        result.push(text6);
+        text6 = "";
         used = 0;
       }
-      text5 += segment;
+      text6 += segment;
       used += size;
     }
-    result.push(text5);
+    result.push(text6);
   }
   return result;
 }
@@ -86649,8 +86979,8 @@ var NODE_FIELDS = {
   custom_code: ["code"]
 };
 function compact(value, max = 80) {
-  const text5 = typeof value === "string" ? value : Array.isArray(value) ? value.map((item) => compact(item, max)).join(", ") : value && typeof value === "object" ? Object.entries(value).map(([key, item]) => `${key.replaceAll("_", " ")}: ${compact(item, max)}`).join(" \xB7 ") : String(value);
-  const oneLine3 = text5.replace(/\s+/g, " ");
+  const text6 = typeof value === "string" ? value : Array.isArray(value) ? value.map((item) => compact(item, max)).join(", ") : value && typeof value === "object" ? Object.entries(value).map(([key, item]) => `${key.replaceAll("_", " ")}: ${compact(item, max)}`).join(" \xB7 ") : String(value);
+  const oneLine3 = text6.replace(/\s+/g, " ");
   return truncateCells(oneLine3, max);
 }
 function label2(node) {
@@ -86845,7 +87175,7 @@ function buildWorkflowNodeForm(workflow, node, kind = "workflow-node") {
     }
     return [key];
   });
-  const keys = [.../* @__PURE__ */ new Set([...schemaKeys, ...currentKeys])];
+  const keys2 = [.../* @__PURE__ */ new Set([...schemaKeys, ...currentKeys])];
   return {
     kind,
     title: `Edit ${label2(node)}`,
@@ -86853,7 +87183,7 @@ function buildWorkflowNodeForm(workflow, node, kind = "workflow-node") {
     fieldIndex: 0,
     fields: [
       { name: "title", label: "Node title", value: node.title ?? "" },
-      ...keys.map((key) => {
+      ...keys2.map((key) => {
         const value = valueAt(config, key);
         return { name: `config.${key}`, label: key.replaceAll("_", " "), value: fieldValue(value), multiline: typeof value === "object" || /(?:message|body|prompt|code)$/i.test(key) };
       })
@@ -87218,8 +87548,8 @@ function tuiChatSidebarRows(state) {
       group.push(chat);
       groups2.set(key, group);
     }
-    const keys = [...CHAT_TIME_GROUPS.filter((key) => groups2.has(key)), ...[...groups2.keys()].filter((key) => !CHAT_TIME_GROUPS.some((standard) => standard === key))];
-    for (const key of keys) {
+    const keys2 = [...CHAT_TIME_GROUPS.filter((key) => groups2.has(key)), ...[...groups2.keys()].filter((key) => !CHAT_TIME_GROUPS.some((standard) => standard === key))];
+    for (const key of keys2) {
       const label3 = { today: "Today", yesterday: "Yesterday", previous_7_days: "Previous 7 days", previous_30_days: "Previous 30 days" }[key] ?? new Date(Number(key.split("_")[1]), Number(key.split("_")[2]) - 1).toLocaleDateString("en", { month: "long", year: "numeric" });
       rows2.push({ kind: "section", label: label3 });
       rows2.push(...groups2.get(key).map((chat) => ({
@@ -87413,7 +87743,7 @@ function renderWorkspaceFrame(state, rawWidth, rawHeight, body, options = {}) {
   const title = state.activeChat?.title && state.workspace === "chats" ? ` \xB7 ${state.activeChat.title}` : "";
   const nav = contentWidth >= 90 ? `OpenMates  ${labels}${title}` : `OpenMates  [${titleCase(state.workspace)}]  ${state.sidebarOpen ? "Sidebar open" : "Ctrl+B sidebar"}${title}`;
   const inputWidth = Math.max(1, contentWidth - 6);
-  const inputLines = state.input.split("\n").flatMap((text5) => wrapCells(text5, inputWidth));
+  const inputLines = state.input.split("\n").flatMap((text6) => wrapCells(text6, inputWidth));
   const showComposer = state.workspace !== "apps" || state.focus === "composer" || Boolean(state.input);
   const composerRows = showComposer ? Math.min(3, Math.max(1, inputLines.length)) : 0;
   const bodyHeight = Math.max(1, height - 2 - (showComposer ? composerRows + 3 : 1));
@@ -87468,8 +87798,8 @@ function renderWorkspaceFrame(state, rawWidth, rawHeight, body, options = {}) {
         let remaining = span;
         rendered = "";
         for (const part of style.spans) {
-          const text5 = truncateCells(terminalText(part.text).replace(/\n/g, " "), remaining), size = cells(text5);
-          rendered += part.background ? backgroundLine(text5, size, part.background, mode, part.bold) : text5;
+          const text6 = truncateCells(terminalText(part.text).replace(/\n/g, " "), remaining), size = cells(text6);
+          rendered += part.background ? backgroundLine(text6, size, part.background, mode, part.bold) : text6;
           remaining -= size;
           if (!remaining) break;
         }
@@ -87486,12 +87816,12 @@ function renderWorkspaceFrame(state, rawWidth, rawHeight, body, options = {}) {
   const hintColor = state.focus === "composer" ? "#a0a0a0" : "#ff553b";
   const composer = [];
   if (showComposer) {
-    const inputRows = inputLines.slice(-composerRows).map((text5, i) => `${i ? "  " : "> "}${text5 || (!state.input ? placeholder : "")}`);
-    if (contentWidth < 6) composer.push(...inputRows.map((text5) => place(padCells(text5, contentWidth))), place(foreground(padCells(hint, contentWidth), hintColor, mode)), place(" ".repeat(contentWidth)), place(" ".repeat(contentWidth)));
+    const inputRows = inputLines.slice(-composerRows).map((text6, i) => `${i ? "  " : "> "}${text6 || (!state.input ? placeholder : "")}`);
+    if (contentWidth < 6) composer.push(...inputRows.map((text6) => place(padCells(text6, contentWidth))), place(foreground(padCells(hint, contentWidth), hintColor, mode)), place(" ".repeat(contentWidth)), place(" ".repeat(contentWidth)));
     else {
       const edge = (left, right) => place(foreground(left + line.repeat(contentWidth - 2) + right, "#6b6b6b", mode));
-      const inputRow = (text5, color) => place(foreground(vertical, "#6b6b6b", mode) + " " + foreground(padCells(text5, contentWidth - 4), color ?? "#e6e6e6", mode) + " " + foreground(vertical, "#6b6b6b", mode));
-      composer.push(edge(ascii ? "+" : "\u256D", ascii ? "+" : "\u256E"), ...inputRows.map((text5) => inputRow(text5)), inputRow(hint, hintColor), edge(ascii ? "+" : "\u2570", ascii ? "+" : "\u256F"));
+      const inputRow = (text6, color) => place(foreground(vertical, "#6b6b6b", mode) + " " + foreground(padCells(text6, contentWidth - 4), color ?? "#e6e6e6", mode) + " " + foreground(vertical, "#6b6b6b", mode));
+      composer.push(edge(ascii ? "+" : "\u256D", ascii ? "+" : "\u256E"), ...inputRows.map((text6) => inputRow(text6)), inputRow(hint, hintColor), edge(ascii ? "+" : "\u2570", ascii ? "+" : "\u256F"));
     }
   }
   const frame = [
@@ -87543,8 +87873,8 @@ function renderCardCarousel(cards, width, selectedIndex, focused) {
     return { text: spans.map((span) => span.text).join(""), spans };
   });
 }
-function centeredCarouselText(text5, width) {
-  const value = truncateCells(text5, width);
+function centeredCarouselText(text6, width) {
+  const value = truncateCells(text6, width);
   return " ".repeat(Math.max(0, Math.floor((width - cells(value)) / 2))) + value;
 }
 
@@ -87824,7 +88154,7 @@ function homeHeader(state, width, height) {
   const title = inspiration?.feature?.title || inspiration?.title || "Daily inspiration";
   const banner = [centered2(`DAILY INSPIRATION  ${state.focus === "inspiration" ? "\u2039  Enter open  \u203A" : "\u2039  Ctrl+O explore  \u203A"}`, width), "", ...parts.map((line) => centered2(line, width)), centered2(title, width)];
   while (banner.length < rows2) banner.push("");
-  banner.forEach((text5) => result.push({ text: text5, background: gradient.start }));
+  banner.forEach((text6) => result.push({ text: text6, background: gradient.start }));
   result.push("", { text: centered2(state.workspace === "apps" ? prompts.apps : state.username ? `Hey ${state.username}!` : "Hey there!", width), bold: true });
   if (state.workspace !== "chats" || !homeChatItems(state).length) result.push({ text: centered2(state.workspace === "apps" ? "Use your apps directly and return to saved results." : prompts[state.workspace], width), color: "#cfcfcf" });
   result.push("");
@@ -87860,14 +88190,14 @@ function renderHomeChatCards(state, width, height) {
 import { randomBytes as randomBytes10, randomUUID as randomUUID18 } from "crypto";
 
 // ../ui/src/components/apps/appsSkillFormUtils.ts
-var object = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+var object2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
 var own = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var pathParts = (path2) => path2.split(".").filter(Boolean).map((part) => part.endsWith("[]") ? part.slice(0, -2) : part);
 function resolveSkillSchema(schema, root, seen = /* @__PURE__ */ new Set()) {
   if (schema.$ref) {
     const reference = schema.$ref;
     if (!reference.startsWith("#/") || seen.has(reference)) return schema;
-    const resolved = reference.slice(2).split("/").reduce((value, part) => object(value)[part.replace(/~1/g, "/").replace(/~0/g, "~")], root);
+    const resolved = reference.slice(2).split("/").reduce((value, part) => object2(value)[part.replace(/~1/g, "/").replace(/~0/g, "~")], root);
     if (!resolved || typeof resolved !== "object") return schema;
     return resolveSkillSchema({ ...resolved, ...schema, $ref: void 0 }, root, /* @__PURE__ */ new Set([...Array.from(seen), reference]));
   }
@@ -87881,7 +88211,7 @@ function resolveSkillSchema(schema, root, seen = /* @__PURE__ */ new Set()) {
 function getSkillPath(input, path2) {
   let cursor = input;
   for (const part of path2.split(".").filter(Boolean)) {
-    cursor = object(cursor)[part.replace(/\[\]$/, "")];
+    cursor = object2(cursor)[part.replace(/\[\]$/, "")];
     if (part.endsWith("[]")) cursor = Array.isArray(cursor) ? cursor[0] : void 0;
   }
   return cursor;
@@ -87892,7 +88222,7 @@ function setSkillPath(input, path2, value) {
     if (index === parts.length) return value;
     const part = parts[index];
     const key = part.replace(/\[\]$/, "");
-    const parent = { ...object(current) };
+    const parent = { ...object2(current) };
     if (part.endsWith("[]")) {
       const entries = Array.isArray(parent[key]) ? [...parent[key]] : [];
       entries[0] = update(entries[0], index + 1);
@@ -87915,17 +88245,17 @@ function prepareSkillInput(schema, input, timezone, now = /* @__PURE__ */ new Da
   const isoDate = (ordinal) => new Date(ordinal * 864e5).toISOString().slice(0, 10);
   function walk(node, value) {
     const resolved = resolveSkillSchema(node, schema);
-    const token = object(value).$date;
+    const token = object2(value).$date;
     if (typeof token === "string") {
       const weekday = (new Date(today * 864e5).getUTCDay() + 6) % 7;
       const ordinal = token === "today" || token === "today_end" || token === "next_seven_days_start" ? today : token === "next_seven_days_end" ? today + 6 : token === "next_week_start" ? today + 7 - weekday : token === "next_week_end" ? today + 13 - weekday : null;
       if (ordinal === null) return value;
       const date = isoDate(ordinal);
-      return object(value).format === "datetime" || resolved.format === "date-time" ? `${date}T${token.endsWith("_end") ? "23:59:59" : "00:00:00"}[${timezone}]` : date;
+      return object2(value).format === "datetime" || resolved.format === "date-time" ? `${date}T${token.endsWith("_end") ? "23:59:59" : "00:00:00"}[${timezone}]` : date;
     }
     if (resolved.type === "array" && Array.isArray(value)) return value.map((item) => walk(resolved.items ?? {}, item));
     if ((resolved.type === "object" || resolved.properties) && value && typeof value === "object" && !Array.isArray(value)) {
-      const prepared = { ...object(value) };
+      const prepared = { ...object2(value) };
       for (const [name, child] of Object.entries(resolved.properties ?? {})) {
         if (own(prepared, name)) prepared[name] = walk(child, prepared[name]);
       }
@@ -87958,7 +88288,7 @@ function validateSkillInput(schema, input) {
         issues.push({ path: path2, code: "type" });
         return;
       }
-      for (const [name, child] of Object.entries(field.properties ?? {})) walk(child, object(value)[name], path2 ? `${path2}.${name}` : name, (field.required ?? []).includes(name));
+      for (const [name, child] of Object.entries(field.properties ?? {})) walk(child, object2(value)[name], path2 ? `${path2}.${name}` : name, (field.required ?? []).includes(name));
     } else if (field.type === "array") {
       if (!Array.isArray(value)) {
         issues.push({ path: path2, code: "type" });
@@ -88505,21 +88835,21 @@ function embedPreview(embedId, type, content, appId, skillId, action, width) {
 }
 function readableFields(value, width) {
   const lines = [];
-  function visit(label3, item, indent) {
+  function visit2(label3, item, indent) {
     if (Array.isArray(item)) {
       lines.push(`${indent}${label3} (${item.length})`);
-      item.forEach((entry, index) => visit(`${index + 1}.`, entry, `${indent}  `));
+      item.forEach((entry, index) => visit2(`${index + 1}.`, entry, `${indent}  `));
     } else if (item && typeof item === "object") {
       lines.push(`${indent}${label3}`);
-      for (const [key, entry] of Object.entries(item)) visit(readableLabel(key), entry, `${indent}  `);
+      for (const [key, entry] of Object.entries(item)) visit2(readableLabel(key), entry, `${indent}  `);
     } else {
-      const text5 = item === null ? "None" : typeof item === "boolean" ? item ? "Yes" : "No" : String(item);
-      const [first = "", ...rest] = text5.split("\n");
+      const text6 = item === null ? "None" : typeof item === "boolean" ? item ? "Yes" : "No" : String(item);
+      const [first = "", ...rest] = text6.split("\n");
       lines.push(`${indent}${label3} ${first}`);
       lines.push(...rest.map((line) => `${indent}  ${line}`));
     }
   }
-  for (const [key, item] of Object.entries(value)) visit(`${readableLabel(key)}:`, item, "");
+  for (const [key, item] of Object.entries(value)) visit2(`${readableLabel(key)}:`, item, "");
   return lines.flatMap((line) => textLines(line, width));
 }
 function readableLabel(key) {
@@ -88714,7 +89044,7 @@ function renderTuiFrame(state, width, height, options = {}) {
   return renderWorkspaceFrame(state, width, height, renderBody(state, bodyWidth, height), { ...options, stickyRows, headerRows: state.screen === "chat" || state.screen === "example" ? renderChatHeader(state, bodyWidth).length : void 0 });
 }
 function coloredHero(lines, rows2, gradient = PRIMARY_GRADIENT) {
-  return lines.map((text5, index) => index < rows2 ? { text: text5, background: gradient.start } : text5);
+  return lines.map((text6, index) => index < rows2 ? { text: text6, background: gradient.start } : text6);
 }
 var blueHero = (lines, rows2) => coloredHero(lines, rows2);
 function homeCards(lines, width, gradients) {
@@ -88726,7 +89056,7 @@ function homeCards(lines, width, gradients) {
   }
   return groups.filter((group) => group.length).flatMap((group, index) => {
     const cardWidth = Math.min(width, Math.max(...group.map(cells))), inset = Math.max(0, Math.floor((width - cardWidth) / 2));
-    return [...group.map((text5) => ({ text: text5, background: (gradients[index] ?? PRIMARY_GRADIENT).start, inset })), ""];
+    return [...group.map((text6) => ({ text: text6, background: (gradients[index] ?? PRIMARY_GRADIENT).start, inset })), ""];
   });
 }
 function renderBody(state, width, height) {
@@ -89080,9 +89410,9 @@ function required(value) {
   return value;
 }
 function authoringReplacementPatch(path2, original, content) {
-  const lines = (text5, prefix) => {
-    if (!text5) return { count: 0, rows: [] };
-    const parts = text5.split("\n");
+  const lines = (text6, prefix) => {
+    if (!text6) return { count: 0, rows: [] };
+    const parts = text6.split("\n");
     const newline = parts.at(-1) === "";
     if (newline) parts.pop();
     const rows2 = parts.map((line) => prefix + line);
@@ -89187,8 +89517,8 @@ async function persistCliProjectAuthoringJob(client2, job, approvedDigest) {
   for (const row of detail.items) {
     if (!["embed", "upload"].includes(row.item_type) || row.deleted_target_state) continue;
     const target = await decryptWithAesGcmCombined(row.target_id_encrypted, projectKey);
-    const text5 = row.encrypted_metadata ? await decryptWithAesGcmCombined(row.encrypted_metadata, projectKey) : null;
-    const meta = text5 ? record6(JSON.parse(text5)) : {};
+    const text6 = row.encrypted_metadata ? await decryptWithAesGcmCombined(row.encrypted_metadata, projectKey) : null;
+    const meta = text6 ? record6(JSON.parse(text6)) : {};
     const filePath = meta.path ?? meta.file_path ?? meta.filename ?? meta.display_path;
     if (target && typeof filePath === "string") files.push({ embedId: target, path: filePath });
   }
@@ -89869,8 +90199,8 @@ async function handleWorkspaceCommand(context, command) {
         if (request !== state.routeVersion) return true;
         state.detailTitle = embed.textPreview || (embed.appId ? `${embed.appId}${embed.skillId ? `/${embed.skillId}` : ""}` : embed.type?.replaceAll("_", " ")) || "Embed";
         const body = embed.content;
-        const text5 = ["code", "markdown", "content", "text", "transcript"].map((key) => body?.[key]).find((value) => typeof value === "string");
-        state.detailLines = typeof text5 === "string" ? text5.split("\n") : formatEmbedPreviewLines(embed, 100);
+        const text6 = ["code", "markdown", "content", "text", "transcript"].map((key) => body?.[key]).find((value) => typeof value === "string");
+        state.detailLines = typeof text6 === "string" ? text6.split("\n") : formatEmbedPreviewLines(embed, 100);
       }
       render();
       return true;
@@ -90369,10 +90699,10 @@ async function handleWorkspaceKey(context, chunk, key) {
             state.filter = "";
           }
         } else if (file) {
-          const text5 = await readTuiProjectFile(context.client, project, file);
+          const text6 = await readTuiProjectFile(context.client, project, file);
           if (request === state.routeVersion && state.activeProject?.id === project.id) {
             state.detailTitle = file.name;
-            state.detailLines = text5.split("\n");
+            state.detailLines = text6.split("\n");
             state.screen = "embed";
             state.scrollOffset = 0;
           }
@@ -90457,9 +90787,9 @@ async function handleWorkspaceKey(context, chunk, key) {
       return true;
     }
     if (key.name === "return" && state.screen === "chats" && state.input.trim()) {
-      const text5 = state.input.trim();
+      const text6 = state.input.trim();
       newChat(state);
-      await context.send(text5);
+      await context.send(text6);
       return true;
     }
     const cursor = state.inputCursor ?? state.input.length;
@@ -90501,9 +90831,9 @@ async function handleWorkspaceKey(context, chunk, key) {
       return true;
     }
     if (key.name === "paste" || !key.ctrl && !key.meta && chunk && chunk >= " ") {
-      const text5 = terminalText(chunk);
-      state.input = state.input.slice(0, cursor) + text5 + state.input.slice(cursor);
-      state.inputCursor = cursor + text5.length;
+      const text6 = terminalText(chunk);
+      state.input = state.input.slice(0, cursor) + text6 + state.input.slice(cursor);
+      state.inputCursor = cursor + text6.length;
       rememberDraft(state);
       render();
       return true;
@@ -90884,13 +91214,13 @@ async function handleEnter(params) {
     render();
     return;
   }
-  const text5 = state.input.trim();
-  if (!text5) return;
-  if (text5.startsWith("/")) {
-    await handleCommand({ command: text5, state, client: client2, terminal, render, finish });
+  const text6 = state.input.trim();
+  if (!text6) return;
+  if (text6.startsWith("/")) {
+    await handleCommand({ command: text6, state, client: client2, terminal, render, finish });
     return;
   }
-  await sendTuiMessage({ message: text5, state, client: client2, render });
+  await sendTuiMessage({ message: text6, state, client: client2, render });
 }
 async function handleCommand(params) {
   const { command, state, client: client2, terminal, render, finish } = params;
@@ -95138,11 +95468,11 @@ function validateSummary(value) {
   if (item.protocol_version !== 1) throw new Error("Invalid remote command protocol version");
   return {
     protocol_version: 1,
-    execution_id: identifier3(item.execution_id, "execution_id"),
-    chat_id: identifier3(item.chat_id, "chat_id"),
-    project_id: identifier3(item.project_id, "project_id"),
-    source_id: identifier3(item.source_id, "source_id"),
-    state: text4(item.state, "state"),
+    execution_id: identifier4(item.execution_id, "execution_id"),
+    chat_id: identifier4(item.chat_id, "chat_id"),
+    project_id: identifier4(item.project_id, "project_id"),
+    source_id: identifier4(item.source_id, "source_id"),
+    state: text5(item.state, "state"),
     last_sequence: integer3(item.last_sequence ?? -1, "last_sequence", -1),
     lease_expires_at: integer3(item.lease_expires_at ?? 0, "lease_expires_at", 0)
   };
@@ -95154,16 +95484,16 @@ function validateClaimedRequest(value, summary, binding, sourceSessionId) {
   return {
     ...item,
     protocol_version: 1,
-    execution_id: identifier3(item.execution_id, "execution_id"),
-    chat_id: identifier3(item.chat_id, "chat_id"),
-    project_id: identifier3(item.project_id, "project_id"),
-    source_id: identifier3(item.source_id, "source_id"),
-    state: text4(item.state, "state"),
-    encrypted_request: text4(item.encrypted_request, "encrypted_request"),
-    request_digest: text4(item.request_digest, "request_digest"),
+    execution_id: identifier4(item.execution_id, "execution_id"),
+    chat_id: identifier4(item.chat_id, "chat_id"),
+    project_id: identifier4(item.project_id, "project_id"),
+    source_id: identifier4(item.source_id, "source_id"),
+    state: text5(item.state, "state"),
+    encrypted_request: text5(item.encrypted_request, "encrypted_request"),
+    request_digest: text5(item.request_digest, "request_digest"),
     approval,
     key_epoch: integer3(item.key_epoch, "key_epoch", 1),
-    lease_token: text4(item.lease_token, "lease_token"),
+    lease_token: text5(item.lease_token, "lease_token"),
     lease_generation: integer3(item.lease_generation, "lease_generation", 1),
     lease_expires_at: integer3(item.lease_expires_at, "lease_expires_at", 1),
     last_sequence: integer3(item.last_sequence ?? -1, "last_sequence", -1),
@@ -95176,7 +95506,7 @@ function validateLeaseResponse(value, executionId) {
   return {
     ...item,
     execution_id: executionId,
-    lease_token: text4(item.lease_token, "lease_token"),
+    lease_token: text5(item.lease_token, "lease_token"),
     lease_generation: integer3(item.lease_generation, "lease_generation", 1),
     lease_expires_at: integer3(item.lease_expires_at, "lease_expires_at", 1),
     last_sequence: integer3(item.last_sequence ?? -1, "last_sequence", -1),
@@ -95191,10 +95521,10 @@ function parsePortableRequest(plaintext) {
   const policy = parsePolicy(item.policy);
   const request = {
     protocol_version: 1,
-    execution_id: identifier3(item.execution_id, "execution_id"),
-    chat_id: identifier3(item.chat_id, "chat_id"),
-    project_id: identifier3(item.project_id, "project_id"),
-    source_id: identifier3(item.source_id, "source_id"),
+    execution_id: identifier4(item.execution_id, "execution_id"),
+    chat_id: identifier4(item.chat_id, "chat_id"),
+    project_id: identifier4(item.project_id, "project_id"),
+    source_id: identifier4(item.source_id, "source_id"),
     policy,
     approval: parseApproval(item.approval)
   };
@@ -95220,12 +95550,12 @@ function parsePolicy(value) {
   if (!Array.isArray(policy.credential_profiles) || policy.credential_profiles.some((item) => typeof item !== "string")) throw new Error("Invalid credential profiles");
   return {
     argv: [...policy.argv],
-    cwd: text4(policy.cwd, "cwd"),
+    cwd: text5(policy.cwd, "cwd"),
     mode: oneOf3(policy.mode, ["foreground", "background"], "mode"),
     source_access: oneOf3(policy.source_access, ["read_only", "read_write"], "source_access"),
     deadline_ms: integer3(policy.deadline_ms, "deadline_ms", 100),
     writable_profiles: [...policy.writable_profiles],
-    network_profile: policy.network_profile === null ? null : text4(policy.network_profile, "network_profile"),
+    network_profile: policy.network_profile === null ? null : text5(policy.network_profile, "network_profile"),
     credential_profiles: [...policy.credential_profiles]
   };
 }
@@ -95239,7 +95569,7 @@ function parseApproval(value) {
   if (approval.kind !== "preset" || typeof approval.definition_digest !== "string" || !/^[a-f0-9]{64}$/i.test(approval.definition_digest)) throw new Error("Invalid preset approval");
   return {
     kind: "preset",
-    preset_id: identifier3(approval.preset_id, "preset_id"),
+    preset_id: identifier4(approval.preset_id, "preset_id"),
     definition_digest: approval.definition_digest
   };
 }
@@ -95254,16 +95584,16 @@ function validateTrustedGrants(value) {
   }
   const result = {
     writable_targets: value.writable_targets.map((item) => ({
-      profile_id: identifier3(item.profile_id, "writable profile"),
-      host_path: text4(item.host_path, "writable host path")
+      profile_id: identifier4(item.profile_id, "writable profile"),
+      host_path: text5(item.host_path, "writable host path")
     })),
     network_profiles: value.network_profiles.map((item) => {
       if (!Array.isArray(item.destinations) || item.destinations.some((destination) => typeof destination !== "string")) {
         throw new RemoteCommandError("resource_not_granted", "Trusted network grant is invalid");
       }
       return {
-        profile_id: identifier3(item.profile_id, "network profile"),
-        destinations: item.destinations.map((destination) => text4(destination, "network destination"))
+        profile_id: identifier4(item.profile_id, "network profile"),
+        destinations: item.destinations.map((destination) => text5(destination, "network destination"))
       };
     }),
     credential_profiles: value.credential_profiles.map((item) => {
@@ -95271,7 +95601,7 @@ function validateTrustedGrants(value) {
         throw new RemoteCommandError("credential_unavailable", "Trusted credential grant is invalid");
       }
       return {
-        profile_id: identifier3(item.profile_id, "credential profile"),
+        profile_id: identifier4(item.profile_id, "credential profile"),
         environment: { ...item.environment }
       };
     })
@@ -95347,14 +95677,14 @@ function record7(value, context) {
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`Invalid ${context}`);
   return value;
 }
-function exactKeys2(value, keys) {
-  if (Object.keys(value).length !== keys.length || Object.keys(value).some((key) => !keys.includes(key))) throw new Error("Remote command request contains unexpected fields");
+function exactKeys2(value, keys2) {
+  if (Object.keys(value).length !== keys2.length || Object.keys(value).some((key) => !keys2.includes(key))) throw new Error("Remote command request contains unexpected fields");
 }
-function identifier3(value, context) {
+function identifier4(value, context) {
   if (typeof value !== "string" || !IDENTIFIER3.test(value)) throw new Error(`Invalid ${context}`);
   return value;
 }
-function text4(value, context) {
+function text5(value, context) {
   if (typeof value !== "string" || !value || value.length > 1048576 || value.includes("\0")) throw new Error(`Invalid ${context}`);
   return value;
 }
@@ -95436,7 +95766,7 @@ function resolveRemoteAccessRoots(pathFlag, cwd = process.cwd()) {
 function discoverRemoteAccessRepositories(roots) {
   const repositoryRoots = /* @__PURE__ */ new Set();
   const permissionDenied = [];
-  const visit = (directory, approvedRoot) => {
+  const visit2 = (directory, approvedRoot) => {
     let entries;
     try {
       entries = readdirSync12(directory, { withFileTypes: true });
@@ -95453,10 +95783,10 @@ function discoverRemoteAccessRepositories(roots) {
     }
     for (const entry of entries) {
       if (entry.name === ".git" || entry.isSymbolicLink() || !entry.isDirectory()) continue;
-      visit(join25(directory, entry.name), approvedRoot);
+      visit2(join25(directory, entry.name), approvedRoot);
     }
   };
-  for (const root of roots) visit(root, root);
+  for (const root of roots) visit2(root, root);
   return {
     repositories: [...repositoryRoots].sort().map((rootPath) => ({ rootPath, displayName: rootPath.split(/[\\/]/).filter(Boolean).pop() ?? rootPath })),
     permissionDenied: permissionDenied.sort()
@@ -97178,15 +97508,15 @@ function validateWorkRecoveryDocument(value) {
   }
   const visiting = /* @__PURE__ */ new Set();
   const visited = /* @__PURE__ */ new Set();
-  const visit = (node) => {
+  const visit2 = (node) => {
     if (visiting.has(node)) throw new Error(`Work recovery dependency cycle includes ${node}.`);
     if (visited.has(node)) return;
     visiting.add(node);
-    for (const next of graph.get(node) ?? []) visit(next);
+    for (const next of graph.get(node) ?? []) visit2(next);
     visiting.delete(node);
     visited.add(node);
   };
-  for (const node of graph.keys()) visit(node);
+  for (const node of graph.keys()) visit2(node);
 }
 function findRecoveryConflicts(document, projectId, current) {
   if (document.project.project_id !== projectId) return [{ kind: "plan", id: document.project.project_id, reason: "wrong_project" }];
@@ -99364,10 +99694,10 @@ async function handlePlans(client2, subcommand, rest, flags, redactor) {
       else console.log(`Plan success criterion updated: ${updated.criterion_id}`);
       return;
     }
-    const text5 = requiredStringFlag(flags.text ?? rest.slice(2).join(" "), "--text <criterion>");
+    const text6 = requiredStringFlag(flags.text ?? rest.slice(2).join(" "), "--text <criterion>");
     const criterion = await buildCreatePlanCriterionInput(plan, masterKey, {
       criterionId: typeof flags.id === "string" ? flags.id : void 0,
-      text: text5,
+      text: text6,
       type: typeof flags.type === "string" ? flags.type : void 0,
       status: typeof flags.status === "string" ? flags.status : void 0,
       required: flags.required === true ? true : flags.optional === true ? false : void 0,
@@ -99642,7 +99972,7 @@ async function handleWorkRecovery(client2, subcommand, rest, flags) {
   if (subcommand === "validate" || subcommand === "restore") {
     const path2 = requiredStringFlag(flags.file ?? rest[0], "--file <projection.yml>");
     if (!existsSync24(path2)) throw new Error(`Recovery projection does not exist: ${path2}`);
-    const document = parseYaml2(readFileSync22(path2, "utf8"));
+    const document = parseYaml(readFileSync22(path2, "utf8"));
     validateWorkRecoveryDocument(document);
     if (subcommand === "validate") {
       if (flags.json === true) printJson2({ valid: true });
@@ -101130,8 +101460,8 @@ function taskAssignFlag(flags) {
   return typeof flags.assign === "string" ? flags.assign : typeof flags.assignee === "string" ? flags.assignee : void 0;
 }
 function labelFlags(flags, ...names) {
-  const keys = names.length > 0 ? names : ["label", "labels", "tag", "tags"];
-  return normalizeLabels(keys.flatMap((key) => splitCsvFlag(flags[key])));
+  const keys2 = names.length > 0 ? names : ["label", "labels", "tag", "tags"];
+  return normalizeLabels(keys2.flatMap((key) => splitCsvFlag(flags[key])));
 }
 async function handleRemoteAccess(client2, subcommand, rest, flags) {
   if (!subcommand || subcommand === "help" || flags.help === true) {
@@ -101540,11 +101870,11 @@ async function handleIdeaBucket(client2, subcommand, rest, flags) {
     return;
   }
   if (subcommand === "add") {
-    const text5 = rest.join(" ").trim();
-    if (!text5) throw new Error("Missing IdeaBucket text for add.");
+    const text6 = rest.join(" ").trim();
+    if (!text6) throw new Error("Missing IdeaBucket text for add.");
     const scheduledSendAt = typeof flags["scheduled-at"] === "string" ? parseUnixSecondsFlag(flags["scheduled-at"], "--scheduled-at") : void 0;
     printJson2(await client2.addIdeaBucketText({
-      text: text5,
+      text: text6,
       chatId: typeof flags.chat === "string" ? flags.chat : void 0,
       bucketId: typeof flags.bucket === "string" ? flags.bucket : void 0,
       scheduledSendAt,
@@ -101638,11 +101968,11 @@ function renderRemoteCommandEvent(event) {
   if (event.event_kind === "output") {
     const raw = typeof event.payload.text === "string" ? event.payload.text : "";
     const limit = 24e3;
-    const text5 = escapeTerminalControls(raw.slice(0, limit));
+    const text6 = escapeTerminalControls(raw.slice(0, limit));
     const omitted = raw.length > limit ? `
 [${raw.length - limit} characters omitted from this display]` : "";
     return `Unreviewed command output (inert) ${identity2}:
-${text5}${omitted}`;
+${text6}${omitted}`;
   }
   if (event.event_kind === "output_truncated") {
     return `Command output was truncated upstream (${identity2}); displayed output does not cover the full process transcript.`;
@@ -101656,9 +101986,9 @@ ${text5}${omitted}`;
 var EXPLICIT_PROJECT_MENTION = /@project:([A-Za-z0-9](?:[A-Za-z0-9_-]|\.(?=[A-Za-z0-9]))*)/gi;
 function extractExplicitProjectMentions(message) {
   const matches2 = Array.from(message.matchAll(EXPLICIT_PROJECT_MENTION), (match) => match[1]);
-  const unique2 = /* @__PURE__ */ new Map();
-  for (const target of matches2) unique2.set(target.toLocaleLowerCase("en-US"), target);
-  return [...unique2.values()];
+  const unique3 = /* @__PURE__ */ new Map();
+  for (const target of matches2) unique3.set(target.toLocaleLowerCase("en-US"), target);
+  return [...unique3.values()];
 }
 async function resolveExplicitChatProject(client2, masterKey, message, flags, context) {
   const mentions = extractExplicitProjectMentions(message);
@@ -102321,19 +102651,19 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
         if (embed.type === "app_skill_use" && embed.appId === "videos" && (embed.skillId === "get_transcript" || embed.skillId === "get-transcript") && embed.content) {
           const results = embed.content.results ?? embed.content.data ?? [];
           if (Array.isArray(results) && results.length > 0) {
-            let text5 = "";
+            let text6 = "";
             for (const r of results) {
               const meta = r.metadata;
-              if (meta?.title) text5 += `# ${meta.title}
+              if (meta?.title) text6 += `# ${meta.title}
 
 `;
-              if (r.url) text5 += `Source: ${r.url}
+              if (r.url) text6 += `Source: ${r.url}
 
 `;
-              text5 += String(
+              text6 += String(
                 r.transcript ?? r.formatted_transcript ?? r.text ?? r.content ?? ""
               );
-              text5 += "\n\n---\n\n";
+              text6 += "\n\n---\n\n";
             }
             let fname = `${eid.slice(0, 8)}_transcript.md`;
             const firstMeta = results[0]?.metadata;
@@ -102343,7 +102673,7 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
             transcriptEmbeds.push({
               embedId: eid,
               filename: fname,
-              content: text5
+              content: text6
             });
           }
         }
@@ -103026,8 +103356,8 @@ async function syncCliBoundWorkflowFiles(client2, workflow, flags) {
     const contents = await client2.listProjectItems(project.projectId, context);
     for (const item of contents.items.filter((item2) => item2.item_type === "workflow")) {
       if (await decryptOptionalProjectField2(item.target_id_encrypted, project.projectKey) !== workflow.id) continue;
-      const text5 = await decryptOptionalProjectField2(item.encrypted_metadata, project.projectKey);
-      const metadata = text5 ? JSON.parse(text5) : {};
+      const text6 = await decryptOptionalProjectField2(item.encrypted_metadata, project.projectKey);
+      const metadata = text6 ? JSON.parse(text6) : {};
       const binding = metadata.remote_workflow_file;
       if (!binding) continue;
       const source = (await client2.listProjectSources(project.projectId, context)).find((item2) => item2.source_id === binding.source_id);
@@ -103317,10 +103647,10 @@ async function handleWorkflows(client2, subcommand, rest, flags, redactor) {
     return;
   }
   if (subcommand === "input") {
-    const text5 = typeof flags.text === "string" ? flags.text : rest.join(" ").trim();
-    if (!text5) throw new Error('Missing workflow input text. Example: openmates workflows ask "alert me if it rains"');
+    const text6 = typeof flags.text === "string" ? flags.text : rest.join(" ").trim();
+    if (!text6) throw new Error('Missing workflow input text. Example: openmates workflows ask "alert me if it rains"');
     const session = await client2.startWorkflowInput({
-      text: text5,
+      text: text6,
       selectedWorkflowId: typeof flags["workflow-id"] === "string" ? flags["workflow-id"] : void 0,
       selectedProjectId: typeof flags["project-id"] === "string" ? flags["project-id"] : void 0,
       timezone: typeof flags.timezone === "string" ? flags.timezone : Intl.DateTimeFormat().resolvedOptions().timeZone,
@@ -103367,9 +103697,9 @@ async function handleWorkflows(client2, subcommand, rest, flags, redactor) {
   }
   if (subcommand === "input-follow-up") {
     const sessionId = rest[0];
-    const text5 = typeof flags.text === "string" ? flags.text : rest.slice(1).join(" ").trim();
-    if (!sessionId || !text5) throw new Error('Missing session ID or text. Example: openmates workflows input-follow-up <session-id> "make it weekdays only"');
-    const session = await client2.followUpWorkflowInput(sessionId, text5);
+    const text6 = typeof flags.text === "string" ? flags.text : rest.slice(1).join(" ").trim();
+    if (!sessionId || !text6) throw new Error('Missing session ID or text. Example: openmates workflows input-follow-up <session-id> "make it weekdays only"');
+    const session = await client2.followUpWorkflowInput(sessionId, text6);
     if (flags.json === true) {
       printJson2(session);
     } else {
@@ -104562,10 +104892,10 @@ async function streamCodeRunToTerminal(url, jsonMode) {
         const payload = message.payload ?? {};
         if (message.type === "code_run_event") {
           const kind = String(payload.kind ?? "status");
-          const text5 = String(payload.text ?? "");
+          const text6 = String(payload.text ?? "");
           if (!jsonMode) {
-            if (kind === "stdout") process.stdout.write(text5);
-            else process.stderr.write(text5);
+            if (kind === "stdout") process.stdout.write(text6);
+            else process.stderr.write(text6);
           }
         } else if (message.type === "code_run_update") {
           lastStatus = { ...lastStatus, ...payload };
@@ -105354,8 +105684,8 @@ function parseChatImportPayload(raw) {
       return parsed;
     }
     if (parsed && typeof parsed === "object") {
-      const object2 = parsed;
-      if (object2.chat || object2.messages) return { chats: [normalizeImportedChat(object2)] };
+      const object3 = parsed;
+      if (object3.chat || object3.messages) return { chats: [normalizeImportedChat(object3)] };
     }
     throw new Error("JSON import must contain a chats array, a chat object, or messages.");
   }
@@ -107038,8 +107368,8 @@ function resolveApiKey(flags) {
 function printJson2(value) {
   console.log(JSON.stringify(value, null, 2));
 }
-function header(text5) {
-  process.stdout.write(`\x1B[1m${text5}\x1B[0m
+function header(text6) {
+  process.stdout.write(`\x1B[1m${text6}\x1B[0m
 `);
 }
 function kv(key, value, keyWidth = 16) {
@@ -107805,15 +108135,15 @@ async function acceptChatTaskProposals(client2, chatId, proposals, fallbackText)
   }
   return accepted;
 }
-function buildTaskProposalFallbackText(text5) {
+function buildTaskProposalFallbackText(text6) {
   const seen = /* @__PURE__ */ new Set();
-  const bulletLines = text5.split("\n").map((line) => line.trim()).filter((line) => /^[-*•]\s+/.test(line)).map((line) => line.replace(/^([-*•]\s*)\[[ xX]\]\s*/, "$1")).filter((line) => {
+  const bulletLines = text6.split("\n").map((line) => line.trim()).filter((line) => /^[-*•]\s+/.test(line)).map((line) => line.replace(/^([-*•]\s*)\[[ xX]\]\s*/, "$1")).filter((line) => {
     const key = line.replace(/^[-*•]\s+/, "").trim().toLowerCase();
     if (seen.has(key)) return false;
     seen.add(key);
     return true;
   });
-  return bulletLines.length > 0 ? bulletLines.join("\n") : text5;
+  return bulletLines.length > 0 ? bulletLines.join("\n") : text6;
 }
 function printIncognitoNoHistoryNotice(json) {
   const message = "Incognito chats are not stored. There is no incognito history to show or clear.";
@@ -107847,8 +108177,8 @@ function renderEmbedFromMeta(embedId, meta) {
   process.stdout.write(`\x1B[2m\u2514\u2500 openmates embeds show ${shortId}\x1B[0m
 `);
 }
-async function renderMessageText(text5, embedRefIndex, client2) {
-  const lines = text5.split("\n");
+async function renderMessageText(text6, embedRefIndex, client2) {
+  const lines = text6.split("\n");
   const outputLines = [];
   for (const line of lines) {
     const blockMatch = line.match(/^\s*\[!?\]\(embed:([^)]+)\)\s*$/);
@@ -108272,8 +108602,8 @@ No example chats are linked to ${label3} yet.`);
     console.log(`All examples: openmates apps examples ${appId}${skillId ? ` ${skillId}` : ""}`);
   }
 }
-function wrapText(text5, width) {
-  const words = text5.split(" ");
+function wrapText(text6, width) {
+  const words = text6.split(" ");
   const lines = [];
   let current = "";
   for (const w of words) {