openmates 0.27.0-alpha.50 → 0.27.0-alpha.51

package/dist/{chunk-DWN2L3GB.js → chunk-VFL7VCMN.js}

@@ -592,13 +592,13 @@ function collectGeneratedFiles(value) {
       const chosen = preferred.map((key) => entries.find(([name]) => name === key)).find(Boolean) ?? entries.find(([name]) => !/preview|thumbnail|poster/i.test(name));
       if (chosen) add(chosen[1], data, chosen[0]);
     }
-    for (const field2 of ["artifacts", "files"]) {
-      if (Array.isArray(data[field2])) for (const item of data[field2]) {
+    for (const field3 of ["artifacts", "files"]) {
+      if (Array.isArray(data[field3])) for (const item of data[field3]) {
         const meta = record(item);
         if (meta && text(meta.download_url)) add(meta, data, text(meta.variant) ?? "original");
       }
     }
-    for (const field2 of RESULT_FIELDS) if (data[field2] !== void 0) visit2(data[field2]);
+    for (const field3 of RESULT_FIELDS) if (data[field3] !== void 0) visit2(data[field3]);
   };
   visit2(value);
   return files;
@@ -2591,11 +2591,11 @@ function parseSseMessage(rawEvent) {
   for (const line3 of rawEvent.split("\n")) {
     if (!line3 || line3.startsWith(":")) continue;
     const separator = line3.indexOf(":");
-    const field2 = separator >= 0 ? line3.slice(0, separator) : line3;
+    const field3 = separator >= 0 ? line3.slice(0, separator) : line3;
     const value = separator >= 0 ? line3.slice(separator + 1).replace(/^ /, "") : "";
-    if (field2 === "id") message.id = value;
-    if (field2 === "event") message.event = value;
-    if (field2 === "data") message.data += `${message.data ? "\n" : ""}${value}`;
+    if (field3 === "id") message.id = value;
+    if (field3 === "event") message.event = value;
+    if (field3 === "data") message.data += `${message.data ? "\n" : ""}${value}`;
   }
   return message.data ? message : null;
 }
@@ -5000,7 +5000,7 @@ function parseAvailableRecoveryOutputs(value) {
       "target_chat_id",
       "turn_id",
       "subject_id"
-    ].every((field2) => typeof raw[field2] === "string" && Boolean(raw[field2])) || !["message", "embed", "diff", "summary", "checkpoint"].includes(String(raw.output_kind)) || !Number.isSafeInteger(raw.output_version) || Number(raw.output_version) < 1 || !Number.isSafeInteger(raw.chat_key_version) || Number(raw.chat_key_version) < 1) return [];
+    ].every((field3) => typeof raw[field3] === "string" && Boolean(raw[field3])) || !["message", "embed", "diff", "summary", "checkpoint"].includes(String(raw.output_kind)) || !Number.isSafeInteger(raw.output_version) || Number(raw.output_version) < 1 || !Number.isSafeInteger(raw.chat_key_version) || Number(raw.chat_key_version) < 1) return [];
     if (raw.message_role != null && raw.message_role !== "user" && raw.message_role !== "assistant") return [];
     if (raw.root_hashed_team_id !== void 0 && raw.root_hashed_team_id !== null && (typeof raw.root_hashed_team_id !== "string" || !/^[0-9a-f]{64}$/.test(raw.root_hashed_team_id))) return [];
     return [raw];
@@ -6360,7 +6360,7 @@ async function loadActiveCliProjectContext(client2, chatId, text7) {
     project_focus_documents: [],
     project_context_documents: []
   };
-  const revision = (item) => createHash8("sha256").update(["updated_at", "encrypted_metadata", "encrypted_note", "target_id_hash", "deleted_target_state"].map((field2) => item[field2] ? String(item[field2]) : "").join("\0")).digest("hex");
+  const revision = (item) => createHash8("sha256").update(["updated_at", "encrypted_metadata", "encrypted_note", "target_id_hash", "deleted_target_state"].map((field3) => item[field3] ? String(item[field3]) : "").join("\0")).digest("hex");
   const candidates = [];
   const targets = /* @__PURE__ */ new Map();
   for (const item of detail.items) {
@@ -6681,7 +6681,7 @@ function boundedAuthoringHistory(rows2) {
   return firstUser && history.length > 8 ? [{ ...firstUser, content: firstUser.content.slice(0, 3e3) }, ...recent2] : recent2;
 }
 function projectItemRevision(item) {
-  return createHash9("sha256").update(["updated_at", "encrypted_metadata", "encrypted_note", "target_id_hash", "deleted_target_state"].map((field2) => item[field2] ? String(item[field2]) : "").join("\0")).digest("hex");
+  return createHash9("sha256").update(["updated_at", "encrypted_metadata", "encrypted_note", "target_id_hash", "deleted_target_state"].map((field3) => item[field3] ? String(item[field3]) : "").join("\0")).digest("hex");
 }
 async function selectedFocus(client2, chatId, projectId, targetId, revision) {
   const focus = await client2.getActiveProjectFocus(chatId);
@@ -10093,6 +10093,10 @@ function selectNewChatSlugValue(input) {
   const prefix = normalizedMessage.slice(0, prefixLength).replace(/-+$/g, "");
   return `${prefix}-${normalizedChatId}`;
 }
+function teamChatTitleFromMessage(message) {
+  const normalized = message.replace(/\s+/g, " ").trim();
+  return Array.from(normalized).slice(0, 80).join("") || "New team chat";
+}
 function normalizeObjectSelectorLabel(value) {
   return value.trim().toLowerCase().replace(/\s+/g, " ");
 }
@@ -11224,6 +11228,7 @@ async function persistCompressionCheckpoints(ws, chatKeyBytes, checkpoints) {
 }
 var OpenMatesClient = class _OpenMatesClient {
   workflowDeliveriesBySocket = /* @__PURE__ */ new WeakMap();
+  ownTeamDisplayNames = /* @__PURE__ */ new Map();
   apiUrl;
   session;
   http;
@@ -11240,6 +11245,19 @@ var OpenMatesClient = class _OpenMatesClient {
       onRefreshCookieRotated: (sessionId, sentToken, newToken) => this.persistOrdinaryRefreshCookie(sessionId, sentToken, newToken)
     });
   }
+  captureTeamMutationOwner() {
+    const session = this.requireSession();
+    const { sessionId, hashedEmail, activeTeamId, masterKeyExportedB64 } = session;
+    return () => Boolean(this.session && this.session.sessionId === sessionId && this.session.hashedEmail === hashedEmail && this.session.activeTeamId === activeTeamId && this.session.masterKeyExportedB64 === masterKeyExportedB64);
+  }
+  requireTeamMutationOwner(isCurrent) {
+    if (!isCurrent()) throw new Error("Account or Team changed before the operation could be sent.");
+  }
+  captureTeamAccountOwner() {
+    const session = this.requireSession();
+    const { apiUrl, sessionId, hashedEmail, masterKeyExportedB64, createdAt } = session;
+    return { hashedEmail, isCurrent: () => Boolean(this.session && this.session.sessionId === sessionId && this.session.hashedEmail === hashedEmail && this.session.masterKeyExportedB64 === masterKeyExportedB64 && this.session.createdAt === createdAt && this.session.apiUrl === apiUrl) };
+  }
   async persistOrdinaryRefreshCookie(sessionId, sentToken, newToken) {
     await withSessionRefreshLock(async () => {
       const session = this.session;
@@ -11475,13 +11493,15 @@ var OpenMatesClient = class _OpenMatesClient {
     return `${path2}${separator}team_id=${encodeURIComponent(teamId)}`;
   }
   async listTeams() {
-    this.requireSession();
+    const owner = this.captureTeamAccountOwner();
     const response = await this.http.get("/v1/teams", this.getCliRequestHeaders());
     if (!response.ok) throw new Error(`Team list failed with HTTP ${response.status}`);
+    if (!owner.isCurrent()) throw new Error("Account changed while loading Teams.");
     const teams = response.data.teams ?? [];
-    await Promise.all(teams.map((team) => this.cacheTeamKeyFromRecord(team)));
+    await Promise.all(teams.map((team) => this.cacheTeamKeyFromRecord(team, owner.isCurrent)));
+    if (!owner.isCurrent()) throw new Error("Account changed while loading Teams.");
     const teamIds = teams.map((team) => team.team_id).filter((teamId) => typeof teamId === "string" && teamId.length > 0);
-    pruneLocalTeamArtifacts(this.requireSession().hashedEmail, teamIds);
+    pruneLocalTeamArtifacts(owner.hashedEmail, teamIds);
     if (this.session?.activeTeamId && !teamIds.includes(this.session.activeTeamId)) {
       this.setActiveTeamId(null);
     }
@@ -11503,6 +11523,7 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   async createTeam(input) {
     this.requireSession();
+    const isCurrent = this.captureTeamMutationOwner();
     const name = input.name?.trim() || "Untitled team";
     if (input.encryptedName && !input.name && !input.nameApprovalToken) {
       throw new Error("Encrypted team creation requires a name approval token.");
@@ -11526,30 +11547,126 @@ var OpenMatesClient = class _OpenMatesClient {
       created_at: input.createdAt ?? now,
       updated_at: input.createdAt ?? now
     };
+    this.requireTeamMutationOwner(isCurrent);
     const response = await this.http.post("/v1/teams", payload, this.getCliRequestHeaders());
     if (!response.ok || !response.data.team) throw new Error(`Team create failed with HTTP ${response.status}`);
+    this.requireTeamMutationOwner(isCurrent);
     if (!input.encryptedTeamKey) {
       saveLocalTeamKey(this.requireSession().hashedEmail, teamId, bytesToBase64(teamKeyBytes));
     }
     return response.data.team;
   }
   async getTeam(teamId) {
-    this.requireSession();
+    const owner = this.captureTeamAccountOwner();
     const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}`, this.getCliRequestHeaders());
     if (!response.ok || !response.data.team) throw new Error(`Team get failed with HTTP ${response.status}`);
-    await this.cacheTeamKeyFromRecord(response.data.team);
+    if (!owner.isCurrent()) throw new Error("Account changed while loading Team.");
+    await this.cacheTeamKeyFromRecord(response.data.team, owner.isCurrent);
+    if (!owner.isCurrent()) throw new Error("Account changed while loading Team.");
     return response.data.team;
   }
-  async cacheTeamKeyFromRecord(team) {
+  /** Team names and descriptions are decrypted only on this device. */
+  async getTeamDetails(teamId) {
+    const team = await this.getTeam(teamId);
+    const key = await this.loadTeamKeyBytes(teamId);
+    if (!key) throw new Error("Unable to decrypt Team details.");
+    const name = typeof team.encrypted_name === "string" ? await decryptWithAesGcmCombined(team.encrypted_name, key) : null;
+    const description = typeof team.encrypted_description === "string" ? await decryptWithAesGcmCombined(team.encrypted_description, key) : null;
+    return { ...team, name: name ?? "", description: description ?? "" };
+  }
+  async getTeamSecurity(teamId) {
+    this.requireSession();
+    const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}/security`, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team security failed with HTTP ${response.status}`);
+    const policy = response.data.security_policy ?? {};
+    return {
+      restrict_email_domains: policy.restrict_email_domains === true,
+      allowed_email_domains: Array.isArray(policy.allowed_email_domains) ? policy.allowed_email_domains : [],
+      require_invite_link_approval: policy.require_invite_link_approval !== false,
+      require_strong_auth: policy.require_strong_auth === true
+    };
+  }
+  async updateTeamSecurity(teamId, policy) {
+    this.requireSession();
+    const response = await this.http.patch(`/v1/teams/${encodeURIComponent(teamId)}/security`, policy, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.security_policy) throw new Error(`Team security update failed with HTTP ${response.status}`);
+    return response.data.security_policy;
+  }
+  async decryptTeamMember(teamId, member) {
+    if (!member.encrypted_member_profile) return { ...member, profile: null };
+    const key = await this.loadTeamKeyBytes(teamId);
+    if (!key) throw new Error("Unable to decrypt Team member profile.");
+    const plaintext = await decryptWithAesGcmCombined(member.encrypted_member_profile, key);
+    if (!plaintext) throw new Error("Unable to decrypt Team member profile.");
+    const parsed = JSON.parse(plaintext);
+    return { ...member, profile: {
+      display_name: typeof parsed.display_name === "string" ? parsed.display_name : void 0,
+      avatar: typeof parsed.avatar === "string" ? parsed.avatar : null
+    } };
+  }
+  async listTeamMembers(teamId) {
+    this.requireSession();
+    const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}/members`, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team members failed with HTTP ${response.status}`);
+    return Promise.all((response.data.members ?? []).map((member) => this.decryptTeamMember(teamId, member)));
+  }
+  async getTeamMember(teamId, memberUserId) {
+    this.requireSession();
+    const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}/members/${encodeURIComponent(memberUserId)}`, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.member) throw new Error(`Team member failed with HTTP ${response.status}`);
+    return this.decryptTeamMember(teamId, response.data.member);
+  }
+  async updateOwnTeamMemberProfile(teamId, profile) {
+    this.requireSession();
+    const isCurrent = this.captureTeamMutationOwner();
+    const key = await this.loadTeamKeyBytes(teamId);
+    if (!key) throw new Error("Unable to encrypt Team member profile.");
+    const encrypted = await encryptWithAesGcmCombined(JSON.stringify({
+      display_name: profile.display_name?.trim() ?? "",
+      avatar: profile.avatar ?? null
+    }), key);
+    this.requireTeamMutationOwner(isCurrent);
+    const response = await this.http.patch(`/v1/teams/${encodeURIComponent(teamId)}/members/me/profile`, { encrypted_member_profile: encrypted }, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.member) throw new Error(`Team profile update failed with HTTP ${response.status}`);
+    this.requireTeamMutationOwner(isCurrent);
+    this.ownTeamDisplayNames.delete(`${this.requireSession().hashedEmail}:${teamId}`);
+    return this.decryptTeamMember(teamId, response.data.member);
+  }
+  async ownTeamSenderName(teamId) {
+    const isCurrent = this.captureTeamMutationOwner();
+    const identity3 = await this.whoAmI();
+    this.requireTeamMutationOwner(isCurrent);
+    const fallback2 = typeof identity3.username === "string" && identity3.username.trim() ? identity3.username.trim() : "Team member";
+    if (typeof identity3.id !== "string" || !identity3.id) return fallback2;
+    const cacheKey = `${this.requireSession().hashedEmail}:${teamId}`;
+    const cached = this.ownTeamDisplayNames.get(cacheKey);
+    if (cached && cached.expiresAt > Date.now()) return cached.name;
+    let name = fallback2;
+    try {
+      const member = await this.getTeamMember(teamId, identity3.id);
+      this.requireTeamMutationOwner(isCurrent);
+      if (member.profile?.display_name?.trim()) name = member.profile.display_name.trim();
+    } catch {
+    }
+    this.requireTeamMutationOwner(isCurrent);
+    this.ownTeamDisplayNames.delete(cacheKey);
+    if (this.ownTeamDisplayNames.size >= 16) this.ownTeamDisplayNames.delete(this.ownTeamDisplayNames.keys().next().value);
+    this.ownTeamDisplayNames.set(cacheKey, { name, expiresAt: Date.now() + 5 * 6e4 });
+    return name;
+  }
+  async cacheTeamKeyFromRecord(team, ownerCurrent = this.captureTeamAccountOwner().isCurrent) {
+    if (!ownerCurrent()) throw new Error("Account changed while caching Team key.");
     const session = this.requireSession();
     const teamId = typeof team.team_id === "string" ? team.team_id : null;
     const encryptedTeamKey = typeof team.encrypted_team_key === "string" ? team.encrypted_team_key : null;
     if (!teamId || !encryptedTeamKey || loadLocalTeamKey(session.hashedEmail, teamId)) return;
     const teamKey = await decryptBytesWithAesGcm(encryptedTeamKey, this.getMasterKeyBytes());
+    if (!ownerCurrent()) throw new Error("Account changed while caching Team key.");
     if (teamKey) saveLocalTeamKey(session.hashedEmail, teamId, bytesToBase64(teamKey));
   }
   async updateTeam(teamId, input) {
     this.requireSession();
+    const isCurrent = this.captureTeamMutationOwner();
     const payload = {
       updated_at: input.updated_at ?? Math.floor(Date.now() / 1e3),
       ...input
@@ -11571,6 +11688,7 @@ var OpenMatesClient = class _OpenMatesClient {
       payload.encrypted_profile_image_metadata = await encryptWithAesGcmCombined(JSON.stringify(input.profileImageMetadata), teamKey);
       delete payload.profileImageMetadata;
     }
+    this.requireTeamMutationOwner(isCurrent);
     const response = await this.http.patch(`/v1/teams/${encodeURIComponent(teamId)}`, {
       ...payload
     }, this.getCliRequestHeaders());
@@ -11632,6 +11750,7 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   async createTeamInvite(teamId, input) {
     this.requireSession();
+    const isCurrent = this.captureTeamMutationOwner();
     const inviteId = typeof input.invite_id === "string" ? input.invite_id : randomUUID9();
     const payload = {
       invite_id: inviteId,
@@ -11656,6 +11775,7 @@ var OpenMatesClient = class _OpenMatesClient {
         origin
       };
     }
+    this.requireTeamMutationOwner(isCurrent);
     const response = await this.http.post(`/v1/teams/${encodeURIComponent(teamId)}/invites`, {
       ...payload,
       invite_secret: void 0
@@ -12186,7 +12306,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (!userId) {
       throw new Error("Could not resolve current user id for local connected-account connector.");
     }
-    const { createHash: createHash34 } = await import("crypto");
+    const { createHash: createHash35 } = await import("crypto");
     const accountId = randomUUID9();
     const masterKey = this.getMasterKeyBytes();
     const encryptLocalConnectorValue = async (value) => {
@@ -12195,9 +12315,9 @@ var OpenMatesClient = class _OpenMatesClient {
     };
     const payload = {
       id: accountId,
-      hashed_user_id: createHash34("sha256").update(userId).digest("hex"),
+      hashed_user_id: createHash35("sha256").update(userId).digest("hex"),
       encrypted_provider_type: await encryptLocalConnectorValue(input.provider_id),
-      provider_type_hash: createHash34("sha256").update(input.provider_id).digest("hex"),
+      provider_type_hash: createHash35("sha256").update(input.provider_id).digest("hex"),
       encrypted_account_label: await encryptLocalConnectorValue(input.label),
       encrypted_capabilities: await encryptLocalConnectorValue(input.capabilities),
       encrypted_app_permissions: await encryptLocalConnectorValue({
@@ -13050,13 +13170,77 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   /** Observe lifecycle metadata without claiming or collecting AI responses. */
   async observeChatActivity(onChange) {
-    const { ws } = await this.openWsClient({ taskUpdateJobs: false });
-    const types = ["ai_task_initiated", "ai_typing_started", "ai_typing_ended", "ai_background_response_completed", "ai_task_cancel_requested", "ai_task_error", "pending_ai_response"];
-    const cleanup = types.map((type) => ws.onMessageType(type, onChange));
-    return () => {
-      cleanup.forEach((remove) => remove());
-      ws.close();
+    const session = this.requireSession();
+    const owner = [
+      session.apiUrl,
+      session.hashedEmail,
+      session.sessionId,
+      session.createdAt,
+      session.masterKeyExportedB64
+    ];
+    const ownerCurrent = () => {
+      const current2 = this.session;
+      return !!current2 && current2.apiUrl === owner[0] && current2.hashedEmail === owner[1] && current2.sessionId === owner[2] && current2.createdAt === owner[3] && current2.masterKeyExportedB64 === owner[4];
     };
+    const types = ["ai_task_initiated", "ai_typing_started", "ai_typing_ended", "ai_background_response_completed", "ai_task_cancel_requested", "ai_task_error", "pending_ai_response", "team_chat_message_created"];
+    let stopped = false;
+    let socket = null;
+    let removeHandlers = [];
+    let retry = null;
+    let retryAttempt = 0;
+    const stop = () => {
+      stopped = true;
+      if (retry) clearTimeout(retry);
+      retry = null;
+      removeHandlers.forEach((remove) => remove());
+      removeHandlers = [];
+      const active = socket;
+      socket = null;
+      active?.close();
+    };
+    const scheduleReconnect = () => {
+      if (stopped || !ownerCurrent() || retry) return;
+      const delay2 = Math.min(1e4, 250 * 2 ** Math.min(retryAttempt++, 6));
+      retry = setTimeout(() => {
+        retry = null;
+        void connect();
+      }, delay2);
+      retry.unref?.();
+    };
+    const connect = async () => {
+      if (stopped || !ownerCurrent()) return;
+      let opened;
+      try {
+        opened = (await this.openWsClient({ taskUpdateJobs: false })).ws;
+      } catch {
+        scheduleReconnect();
+        return;
+      }
+      if (stopped || !ownerCurrent()) {
+        opened.close();
+        return;
+      }
+      socket = opened;
+      removeHandlers = types.map((type) => opened.onMessageType(type, () => {
+        if (!ownerCurrent()) {
+          stop();
+          return;
+        }
+        if (!stopped) {
+          retryAttempt = 0;
+          onChange();
+        }
+      }));
+      removeHandlers.push(opened.onClose(() => {
+        if (socket !== opened) return;
+        socket = null;
+        removeHandlers.forEach((remove) => remove());
+        removeHandlers = [];
+        scheduleReconnect();
+      }));
+    };
+    await connect();
+    return stop;
   }
   /** Read encrypted local history without refreshing or opening a connection. */
   async listCachedChats(limit = 10, page = 1, options = {}) {
@@ -13695,6 +13879,7 @@ var OpenMatesClient = class _OpenMatesClient {
         role: String(m.role ?? "unknown"),
         content: content ?? "",
         senderName,
+        hashedSenderUserId: typeof m.hashed_user_id === "string" ? m.hashed_user_id : null,
         category: msgCategory,
         modelName,
         createdAt: typeof m.created_at === "number" ? m.created_at : 0,
@@ -13999,12 +14184,35 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   async getChatMessagesWindow(query, options = {}) {
     const teamId = this.resolveTeamContext(options);
-    const cache = await this.ensureSynced(false, [], options);
-    const masterKey = this.getMasterKeyBytes();
-    const wrappingKey = await this.getChatWrappingKey(teamId, masterKey);
+    const session = this.requireSession();
+    const owner = [
+      session.apiUrl,
+      session.hashedEmail,
+      session.sessionId,
+      session.createdAt,
+      session.masterKeyExportedB64
+    ];
+    const masterKey = Buffer.from(this.getMasterKeyBytes());
+    const selectedTeamId = this.getActiveTeamId();
+    const current2 = () => {
+      const active = this.session;
+      if (!active || active.apiUrl !== owner[0] || active.hashedEmail !== owner[1] || active.sessionId !== owner[2] || active.createdAt !== owner[3] || active.masterKeyExportedB64 !== owner[4] || options.preferCache && this.getActiveTeamId() !== selectedTeamId)
+        throw new Error("Chat workspace changed");
+    };
+    const cache = options.preferCache ? loadSyncCache(teamId) : await this.ensureSynced(false, [], options);
+    current2();
+    if (!cache) throw new Error("Chat cache unavailable. Open the chat to refresh it.");
+    const localTeamKey = options.preferCache && teamId ? loadLocalTeamKey(owner[1], teamId) : null;
+    if (options.preferCache && teamId && !localTeamKey) throw new Error("Team key unavailable offline. Reconnect to refresh Team access.");
+    const wrappingKey = localTeamKey ? base64ToBytes(localTeamKey) : await this.getChatWrappingKey(teamId, masterKey);
+    current2();
     const found = await this.resolveCachedChatForQuery(query, cache, wrappingKey, teamId);
+    current2();
     const chatItem = await this.decryptChatListItem(found, wrappingKey, cache, teamId);
+    current2();
     const chatKeyBytes = await this.resolveChatKey(cache, found, wrappingKey, teamId);
+    current2();
+    if (!chatKeyBytes) throw new Error("Chat key unavailable. Use /refresh to retry.");
     const chatId = String(found.details.id ?? chatItem.id);
     const params = new URLSearchParams({
       direction: options.direction ?? "latest",
@@ -14016,13 +14224,40 @@ var OpenMatesClient = class _OpenMatesClient {
     if (options.afterMessageId) params.set("after_message_id", options.afterMessageId);
     if (options.anchorMessageId) params.set("anchor_message_id", options.anchorMessageId);
     if (options.respectCompressionBoundary === false) params.set("respect_compression_boundary", "false");
+    current2();
     const response = await this.http.get(
       this.appendTeamQuery(`/v1/chats/${encodeURIComponent(chatId)}/messages/window?${params.toString()}`, { teamId }),
       this.getCliRequestHeaders()
     );
+    current2();
     if (!response.ok) throw new Error(`Chat message window failed with HTTP ${response.status}`);
     const rawMessages = Array.isArray(response.data.messages) ? response.data.messages : [];
     const messages = await this.decryptRawChatMessages(rawMessages, chatItem, chatKeyBytes, cache.embeds);
+    current2();
+    if (options.preferCache && teamId && (options.direction ?? "latest") === "latest") {
+      const latestCache = loadSyncCache(teamId);
+      const row3 = latestCache?.chats.find((chat) => String(chat.details.id) === chatId);
+      if (row3 && row3.details.messages_v === found.details.messages_v && row3.details.encrypted_chat_key === found.details.encrypted_chat_key && row3.messages.length === found.messages.length && row3.messages.every((raw, index) => raw === found.messages[index])) {
+        const canonicalId = (raw) => {
+          const value = typeof raw === "string" ? JSON.parse(raw) : raw;
+          return String(value.client_message_id ?? value.id ?? value.message_id ?? "");
+        };
+        const existingById = new Map(row3.messages.map((raw, index) => [canonicalId(raw), index]));
+        const overlap = rawMessages.find((raw) => !!canonicalId(raw) && existingById.has(canonicalId(raw)));
+        const older = response.data.has_more_before !== true ? [] : overlap ? row3.messages.slice(0, existingById.get(canonicalId(overlap))) : row3.messages;
+        const byId = /* @__PURE__ */ new Map();
+        for (const raw of [...older, ...rawMessages]) {
+          const value = typeof raw === "string" ? JSON.parse(raw) : raw;
+          const id = String(value.client_message_id ?? value.id ?? value.message_id ?? "");
+          const serialized = typeof raw === "string" ? raw : JSON.stringify(raw);
+          byId.set(id || `unidentified:${serialized}`, { raw: serialized, createdAt: Number(value.created_at ?? 0) });
+        }
+        const merged = [...byId.values()].sort((a, b) => a.createdAt - b.createdAt).map((message) => message.raw);
+        current2();
+        if (merged.length !== row3.messages.length || merged.some((raw, index) => raw !== row3.messages[index]))
+          saveSyncCache({ ...latestCache, chats: latestCache.chats.map((chat) => chat === row3 ? { ...row3, messages: merged } : chat) }, teamId);
+      }
+    }
     return {
       chat: chatItem,
       messages,
@@ -14248,8 +14483,8 @@ var OpenMatesClient = class _OpenMatesClient {
       );
     }
     const embedId = String(embed.embed_id ?? embed.id ?? "");
-    const { createHash: createHash34 } = await import("crypto");
-    const hashedEmbedId = createHash34("sha256").update(embedId).digest("hex");
+    const { createHash: createHash35 } = await import("crypto");
+    const hashedEmbedId = createHash35("sha256").update(embedId).digest("hex");
     const embedKeyBytes = await this.resolveEmbedKey(
       cache,
       wrappingKey,
@@ -14257,8 +14492,8 @@ var OpenMatesClient = class _OpenMatesClient {
       embedId,
       hashedEmbedId
     );
-    const decryptField2 = async (field2) => {
-      const val = embed[field2];
+    const decryptField2 = async (field3) => {
+      const val = embed[field3];
       if (typeof val !== "string" || !embedKeyBytes) return null;
       return decryptWithAesGcmCombined(val, embedKeyBytes);
     };
@@ -14363,7 +14598,7 @@ var OpenMatesClient = class _OpenMatesClient {
   async resolveEmbedKey(cache, masterKey, embed, embedId, hashedEmbedId, visited = /* @__PURE__ */ new Set()) {
     if (visited.has(embedId)) return null;
     visited.add(embedId);
-    const { createHash: createHash34 } = await import("crypto");
+    const { createHash: createHash35 } = await import("crypto");
     const masterKeyEntry = cache.embedKeys.find(
       (ek) => ek.hashed_embed_id === hashedEmbedId && String(ek.key_type) === "master"
     );
@@ -14380,7 +14615,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (chatKeyEntry && typeof chatKeyEntry.encrypted_embed_key === "string") {
       const hashedChatId = String(chatKeyEntry.hashed_chat_id ?? "");
       const owningChat = cache.chats.find((c) => {
-        const chatHash = createHash34("sha256").update(String(c.details.id ?? "")).digest("hex");
+        const chatHash = createHash35("sha256").update(String(c.details.id ?? "")).digest("hex");
         return chatHash === hashedChatId;
       });
       if (owningChat) {
@@ -14400,7 +14635,7 @@ var OpenMatesClient = class _OpenMatesClient {
         const parentFullId = String(
           parentEmbed2.embed_id ?? parentEmbed2.id ?? ""
         );
-        const parentHashedId = createHash34("sha256").update(parentFullId).digest("hex");
+        const parentHashedId = createHash35("sha256").update(parentFullId).digest("hex");
         const parentKey = await this.resolveEmbedKey(
           cache,
           masterKey,
@@ -14581,8 +14816,8 @@ var OpenMatesClient = class _OpenMatesClient {
       }
       if (!rootKey) throw new Error(`Recovery root chat ${output.root_chat_id} key is unavailable.`);
       const ready2 = await request("recovery_output_get", "recovery_output_ready", output.record_id, {});
-      for (const field2 of ["record_id", "root_chat_id", "target_chat_id", "turn_id", "subject_id", "output_kind", "output_version", "chat_key_version"]) {
-        if (ready2[field2] !== output[field2]) throw new Error(`Recovery output ${output.record_id} identity mismatch: ${field2}.`);
+      for (const field3 of ["record_id", "root_chat_id", "target_chat_id", "turn_id", "subject_id", "output_kind", "output_version", "chat_key_version"]) {
+        if (ready2[field3] !== output[field3]) throw new Error(`Recovery output ${output.record_id} identity mismatch: ${field3}.`);
       }
       if (output.root_hashed_team_id !== void 0 && ready2.root_hashed_team_id !== output.root_hashed_team_id) {
         throw new Error(`Recovery output ${output.record_id} Team identity changed after discovery.`);
@@ -14833,7 +15068,7 @@ var OpenMatesClient = class _OpenMatesClient {
               let sealedSource;
               if (content.type === "mail") {
                 const fields = ["receiver", "subject", "content", "footer"];
-                if (fields.some((field2) => sealedEmbed[field2] != null && typeof sealedEmbed[field2] !== "string")) {
+                if (fields.some((field3) => sealedEmbed[field3] != null && typeof sealedEmbed[field3] !== "string")) {
                   throw new Error("Sealed recovery mail had invalid historical fields.");
                 }
                 const receiver = String(sealedEmbed.receiver ?? "");
@@ -14867,11 +15102,11 @@ var OpenMatesClient = class _OpenMatesClient {
                   sheet: "table",
                   mermaid: "diagram_code"
                 };
-                const field2 = historicalFieldByType[content.type];
-                if (!field2 || typeof sealedEmbed[field2] !== "string") {
+                const field3 = historicalFieldByType[content.type];
+                if (!field3 || typeof sealedEmbed[field3] !== "string") {
                   throw new Error("Recovery cannot verify this embed's historical source format.");
                 }
-                sealedSource = sealedEmbed[field2];
+                sealedSource = sealedEmbed[field3];
               }
               if (targetRow.version_number !== output.output_version || historicalContent !== sealedSource) {
                 throw new Error("Canonical historical recovery embed does not match sealed output.");
@@ -15118,7 +15353,7 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   async sendMessage(params) {
     const teamId = this.resolveTeamContext({ teamId: params.teamId, personal: params.personal });
-    const teamSenderName = teamId ? String((await this.whoAmI()).username ?? "").trim() || "Team member" : "User";
+    const teamSenderName = teamId ? await this.ownTeamSenderName(teamId) : "User";
     if (params.chatId && params.newChatId) {
       throw new Error("chatId and newChatId cannot be used together.");
     }
@@ -15182,9 +15417,9 @@ var OpenMatesClient = class _OpenMatesClient {
       for (const embed of params.preparedEmbeds ?? []) {
         if (!["code-code", "docs-doc", "sheets-sheet"].includes(embed.type)) continue;
         const decoded = toonDecode(embed.content);
-        for (const field2 of ["code", "html", "table", "text"]) if (typeof decoded[field2] === "string") {
-          const value = await prepareCliMessagePrivacy(decoded[field2], availableMemories, piiMappings, { kind: "document" }, params.onPrivacyProgress);
-          decoded[field2] = value.message;
+        for (const field3 of ["code", "html", "table", "text"]) if (typeof decoded[field3] === "string") {
+          const value = await prepareCliMessagePrivacy(decoded[field3], availableMemories, piiMappings, { kind: "document" }, params.onPrivacyProgress);
+          decoded[field3] = value.message;
           piiMappings = value.mappings;
         }
         embed.content = toonEncodeContent(decoded);
@@ -15625,7 +15860,7 @@ var OpenMatesClient = class _OpenMatesClient {
         if (!chatSlugLookupKey) {
           throw new Error("Encrypted chat slug lookup key was not initialized.");
         }
-        const initialTitle = teamId && !shouldWaitForAi ? "New team chat" : "";
+        const initialTitle = teamId && !shouldWaitForAi ? teamChatTitleFromMessage(params.message) : "";
         const slugMetadata = await buildEncryptedObjectSlugMetadata({
           value: selectNewChatSlugValue({
             message: finalMessage,
@@ -15744,7 +15979,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (!params.incognito && typeof confirmedPayload.new_messages_v === "number" && Number.isSafeInteger(confirmedPayload.new_messages_v)) {
       terminalExpectedMessagesV = confirmedPayload.new_messages_v;
     }
-    if (!params.incognito) {
+    if (!params.incognito && (!teamId || shouldWaitForAi)) {
       clearSyncCache(teamId);
     }
     let assistant = "";
@@ -16352,6 +16587,7 @@ var OpenMatesClient = class _OpenMatesClient {
       status: "completed",
       chatId,
       messageId: assistantMessageId,
+      userMessageId: messageId,
       assistant,
       category,
       modelName,
@@ -18500,8 +18736,21 @@ var OpenMatesClient = class _OpenMatesClient {
   // -------------------------------------------------------------------------
   // User tasks
   // -------------------------------------------------------------------------
-  async listUserTasks(filters = {}) {
-    this.requireSession();
+  async listUserTasks(filters = {}, options = {}) {
+    const session = this.requireSession();
+    const owner = [
+      session.apiUrl,
+      session.hashedEmail,
+      session.sessionId,
+      session.createdAt,
+      session.masterKeyExportedB64,
+      session.activeTeamId
+    ];
+    const current2 = () => {
+      const active = this.session;
+      if (!active || active.apiUrl !== owner[0] || active.hashedEmail !== owner[1] || active.sessionId !== owner[2] || active.createdAt !== owner[3] || active.masterKeyExportedB64 !== owner[4] || active.activeTeamId !== owner[5])
+        throw new Error("Task workspace changed");
+    };
     const params = new URLSearchParams();
     if (filters.status) params.set("status", filters.status);
     if (filters.chatId) params.set("chat_id", filters.chatId);
@@ -18510,25 +18759,102 @@ var OpenMatesClient = class _OpenMatesClient {
     if (filters.externalChatProvider) params.set("external_chat_provider", filters.externalChatProvider);
     if (filters.externalChatLookupHash) params.set("external_chat_lookup_hash", filters.externalChatLookupHash);
     if (filters.priority !== void 0) params.set("priority", String(filters.priority));
-    const maximumTaskListPage = 500;
+    const maximumTaskListPage = 100;
     const limit = Math.min(filters.limit ?? maximumTaskListPage, maximumTaskListPage);
     if (!Number.isSafeInteger(limit) || limit <= 0) throw new Error("Invalid task list limit");
-    if (Number.isSafeInteger(limit) && limit !== void 0 && limit > 0) params.set("limit", String(limit));
+    params.set("limit", String(limit));
+    params.set("paginate", "true");
     const teamId = this.resolveTeamContext({ teamId: filters.teamId, personal: filters.personal });
     if (teamId) params.set("team_id", teamId);
-    const query = params.toString();
-    const response = await this.http.get(
-      `/v1/user-tasks${query ? `?${query}` : ""}`,
-      this.getCliRequestHeaders()
-    );
-    if (!response.ok) {
-      throw new Error(`User task list failed with HTTP ${response.status}`);
-    }
-    const tasks = response.data.tasks ?? [];
-    if (tasks.length >= limit) {
-      throw new Error(`TASK_LIST_INCOMPLETE: server limit ${limit} reached; refusing a truncated task inventory.`);
+    const mayPageProjections = !teamId && !filters.chatId && !filters.projectId && !filters.externalChatProvider && !filters.externalChatLookupHash && !filters.labelHashes?.length && filters.priority === void 0;
+    const projectionCursorPrefix = "workflow-tasks:";
+    const isProjection = (task) => {
+      const projection = task;
+      return projection.source === "workflow_run" && projection.read_only === true;
+    };
+    const allTasks = [];
+    const seenTaskIds = /* @__PURE__ */ new Set();
+    const seenCursors = /* @__PURE__ */ new Set();
+    let cursor = null;
+    while (true) {
+      current2();
+      const pageParams = new URLSearchParams(params);
+      if (cursor) pageParams.set("cursor", cursor);
+      const response = await this.http.get(
+        `/v1/user-tasks?${pageParams.toString()}`,
+        this.getCliRequestHeaders()
+      );
+      current2();
+      if (!response.ok) throw new Error(`User task list failed with HTTP ${response.status}`);
+      if (!response.data || typeof response.data !== "object")
+        throw new Error("TASK_LIST_INCOMPLETE: invalid task response.");
+      const page = response.data.tasks;
+      if (!Array.isArray(page) || page.some((task) => !task || typeof task.task_id !== "string" || !task.task_id))
+        throw new Error("TASK_LIST_INCOMPLETE: invalid task page.");
+      const hasPaging = Object.hasOwn(response.data, "complete") || Object.hasOwn(response.data, "next_cursor");
+      let complete;
+      let nextCursor;
+      if (!hasPaging) {
+        if (cursor || page.length >= limit)
+          throw new Error("TASK_LIST_INCOMPLETE: legacy task page cannot prove completeness.");
+        complete = true;
+        nextCursor = null;
+      } else {
+        if (typeof response.data.complete !== "boolean" || !Object.hasOwn(response.data, "next_cursor"))
+          throw new Error("TASK_LIST_INCOMPLETE: invalid task paging metadata.");
+        complete = response.data.complete;
+        nextCursor = response.data.next_cursor ?? null;
+        if (response.data.next_cursor !== null && typeof response.data.next_cursor !== "string")
+          throw new Error("TASK_LIST_INCOMPLETE: invalid task cursor.");
+        if (complete && nextCursor !== null)
+          throw new Error("TASK_LIST_INCOMPLETE: completed task page has a cursor.");
+        if (!complete) {
+          if (page.length !== limit || !nextCursor || nextCursor.length > 512 || seenCursors.has(nextCursor))
+            throw new Error("TASK_LIST_INCOMPLETE: task cursor did not advance.");
+          const inProjections2 = cursor?.startsWith(projectionCursorPrefix) ?? false;
+          if (nextCursor.startsWith(projectionCursorPrefix)) {
+            const last = page.at(-1);
+            const nextId = nextCursor.slice(projectionCursorPrefix.length);
+            if (!mayPageProjections || (isProjection(last) ? nextId !== last.task_id : inProjections2 || nextId !== "" || page.some(isProjection)) || inProjections2 && nextId <= cursor.slice(projectionCursorPrefix.length))
+              throw new Error("TASK_LIST_INCOMPLETE: workflow task cursor did not advance.");
+          } else if (inProjections2 || page.some(isProjection) || nextCursor !== page.at(-1)?.task_id || cursor !== null && nextCursor <= cursor) {
+            throw new Error("TASK_LIST_INCOMPLETE: task cursor did not advance.");
+          }
+        }
+      }
+      const inProjections = cursor?.startsWith(projectionCursorPrefix) ?? false;
+      if (!mayPageProjections && page.some(isProjection))
+        throw new Error("TASK_LIST_INCOMPLETE: workflow tasks in a filtered inventory.");
+      if (inProjections && (!mayPageProjections || page.some((task) => !isProjection(task))))
+        throw new Error("TASK_LIST_INCOMPLETE: invalid workflow task phase.");
+      const priorId = inProjections ? cursor.slice(projectionCursorPrefix.length) : cursor;
+      if (priorId !== null && page.length && page[0].task_id <= priorId)
+        throw new Error("TASK_LIST_INCOMPLETE: task page repeated an earlier cursor.");
+      if (page.length > limit)
+        throw new Error("TASK_LIST_INCOMPLETE: task page exceeded its limit.");
+      let projectionRows = inProjections;
+      let previousId = priorId;
+      for (const task of page) {
+        if (isProjection(task) && !projectionRows) {
+          projectionRows = true;
+          previousId = null;
+        } else if (projectionRows && !isProjection(task)) {
+          throw new Error("TASK_LIST_INCOMPLETE: canonical task after workflow task phase.");
+        }
+        if (hasPaging && previousId !== null && task.task_id <= previousId)
+          throw new Error("TASK_LIST_INCOMPLETE: task page is not ordered.");
+        previousId = task.task_id;
+        if (seenTaskIds.has(task.task_id)) throw new Error("TASK_LIST_INCOMPLETE: duplicate task in inventory.");
+        seenTaskIds.add(task.task_id);
+      }
+      allTasks.push(...page);
+      current2();
+      await options.onPage?.([...allTasks], complete);
+      current2();
+      if (complete) return allTasks;
+      seenCursors.add(nextCursor);
+      cursor = nextCursor;
     }
-    return tasks;
   }
   /** Submit a confirmed Codex runtime deletion, never a missing-list inference. */
   async unlinkDeletedTaskChat(lookupHash, eventId, context = {}) {
@@ -19722,9 +20048,9 @@ var OpenMatesClient = class _OpenMatesClient {
       }
       let feature = null;
       let followUpSuggestions = [];
-      for (const [field2, kind] of [["encrypted_feature_metadata", "feature"], ["encrypted_follow_up_suggestions", "suggestions"]]) {
-        if (typeof r[field2] !== "string") continue;
-        const plain = await decryptWithAesGcmCombined(r[field2], masterKey);
+      for (const [field3, kind] of [["encrypted_feature_metadata", "feature"], ["encrypted_follow_up_suggestions", "suggestions"]]) {
+        if (typeof r[field3] !== "string") continue;
+        const plain = await decryptWithAesGcmCombined(r[field3], masterKey);
         if (!plain) continue;
         try {
           const value = JSON.parse(plain);
@@ -20035,11 +20361,11 @@ ${known}`
 Required: ${schema.required.join(", ")}`
       );
     }
-    for (const [field2, def] of Object.entries(schema.properties)) {
-      const val = params.itemValue[field2];
+    for (const [field3, def] of Object.entries(schema.properties)) {
+      const val = params.itemValue[field3];
       if (val !== void 0 && def.enum && !def.enum.includes(String(val))) {
         throw new Error(
-          `Invalid value '${String(val)}' for field '${field2}'. Allowed values: ${def.enum.join(", ")}`
+          `Invalid value '${String(val)}' for field '${field3}'. Allowed values: ${def.enum.join(", ")}`
         );
       }
     }
@@ -20203,7 +20529,7 @@ Required: ${schema.required.join(", ")}`
     const session = this.requireSession();
     const masterKey = base64ToBytes(session.masterKeyExportedB64);
     const cache = await this.ensureSynced();
-    const { createHash: createHash34 } = await import("crypto");
+    const { createHash: createHash35 } = await import("crypto");
     const embed = cache.embeds.find(
       (e) => String(e.embed_id ?? "").startsWith(embedIdOrShort) || String(e.id ?? "").startsWith(embedIdOrShort)
     );
@@ -20211,7 +20537,7 @@ Required: ${schema.required.join(", ")}`
       throw new Error(`Embed '${embedIdOrShort}' not found in local cache.`);
     }
     const embedId = String(embed.embed_id ?? embed.id ?? "");
-    const hashedEmbedId = createHash34("sha256").update(embedId).digest("hex");
+    const hashedEmbedId = createHash35("sha256").update(embedId).digest("hex");
     const embedKeyBytes = await this.resolveEmbedKey(
       cache,
       masterKey,
@@ -20378,8 +20704,8 @@ Required: ${schema.required.join(", ")}`
     if (!embed) {
       throw new Error(`Embed '${embedId}' not found in local cache. Run 'openmates chats list' to sync first.`);
     }
-    const { createHash: createHash34 } = await import("crypto");
-    const hashedEmbedId = createHash34("sha256").update(embedId).digest("hex");
+    const { createHash: createHash35 } = await import("crypto");
+    const hashedEmbedId = createHash35("sha256").update(embedId).digest("hex");
     const embedKey = await this.resolveEmbedKey(
       cache,
       masterKey,
@@ -20510,8 +20836,8 @@ Required: ${schema.required.join(", ")}`
     if (!embed) {
       throw new Error(`Embed '${embedId}' not found in local cache. Run 'openmates chats list' to sync first.`);
     }
-    const { createHash: createHash34 } = await import("crypto");
-    const hashedEmbedId = createHash34("sha256").update(embedId).digest("hex");
+    const { createHash: createHash35 } = await import("crypto");
+    const hashedEmbedId = createHash35("sha256").update(embedId).digest("hex");
     const embedKey = await this.resolveEmbedKey(
       cache,
       masterKey,
@@ -21042,9 +21368,9 @@ Required: ${schema.required.join(", ")}`
     chats.splice(0, chats.length, ...reconciledChats);
     if (totalChatCount === 0) totalChatCount = chats.length;
     if (reconciliation.deleted_chat_ids?.length) {
-      const { createHash: createHash34 } = await import("crypto");
+      const { createHash: createHash35 } = await import("crypto");
       const deletedHashes = new Set(
-        reconciliation.deleted_chat_ids.map((id) => createHash34("sha256").update(id).digest("hex"))
+        reconciliation.deleted_chat_ids.map((id) => createHash35("sha256").update(id).digest("hex"))
       );
       const keptEmbeds = embeds.filter((embed) => !deletedHashes.has(String(embed.hashed_chat_id ?? "")));
       const keptKeys = embedKeys.filter((key) => !deletedHashes.has(String(key.hashed_chat_id ?? "")));
@@ -28024,10 +28350,10 @@ function assertAccountExportTextSafe(content, relativePath2) {
   for (const pattern of ACCOUNT_EXPORT_FORBIDDEN_VALUE_PATTERNS) {
     if (pattern.test(content)) throw new Error(`Account export file ${relativePath2} contains forbidden secret-like content`);
   }
-  ACCOUNT_EXPORT_FORBIDDEN_FIELD_NAMES.forEach((field2) => {
-    const escapedField = field2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  ACCOUNT_EXPORT_FORBIDDEN_FIELD_NAMES.forEach((field3) => {
+    const escapedField = field3.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     if (new RegExp(`(^|[^A-Za-z0-9_])['"]?${escapedField}['"]?\\s*:`, "i").test(content)) {
-      throw new Error(`Account export file ${relativePath2} contains forbidden secret field '${field2}'`);
+      throw new Error(`Account export file ${relativePath2} contains forbidden secret field '${field3}'`);
     }
   });
   if (/(^|[^A-Za-z0-9_])['"]?encrypted_[A-Za-z0-9_]*['"]?\s*:/i.test(content)) {
@@ -31203,11 +31529,11 @@ var OpenMatesPlans = class {
     this.review = { submit: (planId) => this.submitForReview(planId) };
     this.approval = { status: (planId) => this.show(planId) };
   }
-  textSectionFacade(field2) {
+  textSectionFacade(field3) {
     return {
-      add: (planId, value) => this.update(planId, { [field2]: value }),
-      update: (planId, value) => this.update(planId, { [field2]: value }),
-      remove: (planId) => this.update(planId, { [field2]: "" })
+      add: (planId, value) => this.update(planId, { [field3]: value }),
+      update: (planId, value) => this.update(planId, { [field3]: value }),
+      remove: (planId) => this.update(planId, { [field3]: "" })
     };
   }
   async list(filters = {}) {
@@ -32156,6 +32482,36 @@ var OpenMatesTeams = class {
   async members(teamId) {
     return this.client.get(`/v1/teams/${encodeURIComponent(teamId)}/members`);
   }
+  async decryptMemberProfile(teamKey, member) {
+    const encrypted = member.encrypted_member_profile;
+    if (typeof encrypted !== "string" || !encrypted) return { ...member, profile: null };
+    const plaintext = await decryptWithAesGcmCombined(encrypted, teamKey);
+    if (!plaintext) throw new OpenMatesConfigError("Failed to decrypt Team member profile");
+    const parsed = JSON.parse(plaintext);
+    return { ...member, profile: {
+      display_name: typeof parsed.display_name === "string" ? parsed.display_name : void 0,
+      avatar: typeof parsed.avatar === "string" ? parsed.avatar : null
+    } };
+  }
+  async listMembers(teamId) {
+    const teamKey = await teamKeyForRecord(this.client, await this.get(teamId));
+    const response = await this.client.get(`/v1/teams/${encodeURIComponent(teamId)}/members`);
+    return Promise.all((response.members ?? []).map((member) => this.decryptMemberProfile(teamKey, member)));
+  }
+  async getMember(teamId, memberUserId) {
+    const teamKey = await teamKeyForRecord(this.client, await this.get(teamId));
+    const response = await this.client.get(`/v1/teams/${encodeURIComponent(teamId)}/members/${encodeURIComponent(memberUserId)}`);
+    if (!response.member) throw new OpenMatesConfigError("Team member response is missing member");
+    return this.decryptMemberProfile(teamKey, response.member);
+  }
+  async updateOwnMemberProfile(teamId, profile) {
+    const teamKey = await teamKeyForRecord(this.client, await this.get(teamId));
+    const response = await this.client.patch(`/v1/teams/${encodeURIComponent(teamId)}/members/me/profile`, {
+      encrypted_member_profile: await encryptWithAesGcmCombined(JSON.stringify({ display_name: profile.display_name?.trim() ?? "", avatar: profile.avatar ?? null }), teamKey)
+    });
+    if (!response.member) throw new OpenMatesConfigError("Team profile response is missing member");
+    return this.decryptMemberProfile(teamKey, response.member);
+  }
   async invites(teamId) {
     return this.client.get(`/v1/teams/${encodeURIComponent(teamId)}/invites`);
   }
@@ -32468,7 +32824,7 @@ async function flushPendingTaskActivities(client2, teamId, stateDir2 = resolveSt
 import { existsSync as existsSync25, readFileSync as readFileSync25, realpathSync as realpathSync13, readdirSync as readdirSync13, statSync as statSync13, writeFileSync as writeFileSync18 } from "fs";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { basename as basename10, dirname as dirname18, join as join30 } from "path";
-import { createHash as createHash33, randomBytes as randomBytes13, randomUUID as randomUUID24 } from "crypto";
+import { createHash as createHash34, randomBytes as randomBytes13, randomUUID as randomUUID24 } from "crypto";
 import { arch as arch2, platform as platform2 } from "os";
 import { parse as parseYaml, parseDocument as parseYamlDocument, stringify as stringifyYaml } from "yaml";
 
@@ -33656,6 +34012,37 @@ function wrapCells(value, width) {
   }
   return result;
 }
+function wrapWords(value, width) {
+  width = Math.max(1, width);
+  return terminalText(value).split("\n").flatMap((paragraph) => {
+    const words = paragraph.trim().split(/\s+/u).filter(Boolean);
+    if (!words.length) return [""];
+    const indent = (paragraph.match(/^ */u)?.[0] ?? "").slice(0, Math.max(0, width - 2));
+    const available2 = width - cells(indent);
+    const lines = [];
+    let line3 = indent;
+    for (const word of words) {
+      const separator = line3.length > indent.length ? " " : "";
+      if (cells(line3 + separator + word) <= width) {
+        line3 += separator + word;
+        continue;
+      }
+      if (line3.length > indent.length) {
+        lines.push(line3);
+        line3 = indent;
+      }
+      if (cells(word) <= available2) {
+        line3 += word;
+        continue;
+      }
+      const parts = wrapCells(word, available2);
+      lines.push(...parts.slice(0, -1).map((part) => indent + part));
+      line3 = indent + parts[parts.length - 1];
+    }
+    lines.push(line3);
+    return lines;
+  });
+}
 function eraseGrapheme(value) {
   const items = [...segments.segment(value)];
   return items.length ? value.slice(0, items[items.length - 1].index) : "";
@@ -35031,7 +35418,7 @@ function renderDirectTypeFullscreen(embed, c, write) {
       const venue = isRecord2(c.venue) ? c.venue : {};
       const organizer = isRecord2(c.organizer) ? c.organizer : {};
       const fee = isRecord2(c.fee) ? c.fee : {};
-      const field2 = (label3, value) => {
+      const field3 = (label3, value) => {
         if (value !== null && value !== void 0 && String(value).trim()) {
           writeEmbedLine(write, label3);
           writeEmbedLine(write, String(value));
@@ -35040,13 +35427,13 @@ function renderDirectTypeFullscreen(embed, c, write) {
       };
       writeEmbedLine(write, str(c.title) ?? str(c.name) ?? "Event");
       writeEmbedLine(write);
-      field2("When", [c.date_start ?? c.start_time ?? c.date, c.date_end, c.timezone].filter(Boolean).join(" \xB7 "));
-      field2("Location", c.event_type === "online" ? "Online event" : [venue.name ?? c.venue_name, venue.address ?? c.venue_address, venue.city ?? c.venue_city, venue.country ?? c.venue_country, str(c.location)].filter(Boolean).join(", "));
-      field2("Organizer", organizer.name ?? c.organizer_name);
-      field2("Description", c.description);
-      field2("Admission", c.is_paid === false ? "Free" : [fee.amount ?? c.fee_amount, fee.currency ?? c.fee_currency].filter((v) => v !== void 0 && v !== null).join(" "));
-      field2("Attendees", c.rsvp_count);
-      field2("Event page", c.url);
+      field3("When", [c.date_start ?? c.start_time ?? c.date, c.date_end, c.timezone].filter(Boolean).join(" \xB7 "));
+      field3("Location", c.event_type === "online" ? "Online event" : [venue.name ?? c.venue_name, venue.address ?? c.venue_address, venue.city ?? c.venue_city, venue.country ?? c.venue_country, str(c.location)].filter(Boolean).join(", "));
+      field3("Organizer", organizer.name ?? c.organizer_name);
+      field3("Description", c.description);
+      field3("Admission", c.is_paid === false ? "Free" : [fee.amount ?? c.fee_amount, fee.currency ?? c.fee_currency].filter((v) => v !== void 0 && v !== null).join(" "));
+      field3("Attendees", c.rsvp_count);
+      field3("Event page", c.url);
       break;
     }
     default: {
@@ -36090,9 +36477,9 @@ function reverseProxyBlocks(content) {
   return blocks;
 }
 function headerUpAffectsTargetEnv(line3) {
-  const field2 = /^header_up\s+(\S+)/i.exec(line3)?.[1]?.replace(/^['"]|['"]$/g, "").replace(/^[+-]/, "").toLowerCase();
-  if (!field2) return false;
-  const escaped = field2.split("*").map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*");
+  const field3 = /^header_up\s+(\S+)/i.exec(line3)?.[1]?.replace(/^['"]|['"]$/g, "").replace(/^[+-]/, "").toLowerCase();
+  if (!field3) return false;
+  const escaped = field3.split("*").map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*");
   return new RegExp(`^${escaped}$`).test("x-target-env");
 }
 function officialUploadOrigins(content) {
@@ -86597,7 +86984,7 @@ function searchExampleChats(query) {
   if (!normalized) return [];
   return ALL_EXAMPLE_CHATS.map(toListItem).filter((chat) => {
     const fields = [chat.id, chat.slug, chat.title, chat.summary, chat.category];
-    return fields.some((field2) => String(field2 ?? "").toLowerCase().includes(normalized));
+    return fields.some((field3) => String(field3 ?? "").toLowerCase().includes(normalized));
   });
 }
 function listExampleChatsForSkill(appId, skillId) {
@@ -89314,7 +89701,7 @@ import { createHash as createHash19, randomBytes as randomBytes9, randomUUID as
 
 // src/tuiForms.ts
 function formValue(form, name) {
-  return form.fields.find((field2) => field2.name === name)?.value ?? "";
+  return form.fields.find((field3) => field3.name === name)?.value ?? "";
 }
 
 // src/tuiCarousel.ts
@@ -90026,16 +90413,16 @@ function relationLabel(reference) {
 }
 function buildTaskForm(kind, task) {
   const normalized = kind.startsWith("task-") ? kind : `task-${kind}`;
-  const field2 = (name, labelText, value = "", options, multiline = false) => ({ name, label: labelText, value, ...options ? { options } : {}, ...multiline ? { multiline } : {} });
+  const field3 = (name, labelText, value = "", options, multiline = false) => ({ name, label: labelText, value, ...options ? { options } : {}, ...multiline ? { multiline } : {} });
   const fields = normalized === "task-create" ? [
-    field2("title", "Title"),
-    field2("description", "Description", "", void 0, true),
-    field2("status", "Status", "todo", TASK_STATUSES),
-    field2("assignee", "Assignee", "user", ["user", "openmates", "codex", "unassigned"])
+    field3("title", "Title"),
+    field3("description", "Description", "", void 0, true),
+    field3("status", "Status", "todo", TASK_STATUSES),
+    field3("assignee", "Assignee", "user", ["user", "openmates", "codex", "unassigned"])
   ] : normalized === "task-edit" ? [
-    field2("title", "Title", task?.title),
-    field2("description", "Description", task?.description, void 0, true)
-  ] : normalized === "task-status" ? [field2("status", "Status", task?.status ?? "todo", TASK_STATUSES)] : normalized === "task-assignee" ? [field2("assignee", "Assignee", task?.assigneeIdentity ?? (task?.assigneeType === "unassigned" ? "unassigned" : "user"), ["user", "openmates", "codex", "unassigned"])] : normalized === "task-block" ? [field2("reason", "Reason code", "needs_user_input", ["needs_user_input", "waiting_for_approval", "missing_credentials", "ambiguous_requirement", "external_dependency", "environment_unavailable", "verification_failed", "other"]), field2("explanation", "Explanation (optional)", "", void 0, true)] : normalized === "task-activity" ? [field2("message", "Activity message", "", void 0, true)] : normalized === "task-delete" ? [field2("confirm", `Type DELETE to delete ${task ? label(task) : "task"}`)] : normalized === "task-reorder" ? [field2("position", "Position", String(task?.position ?? ""))] : normalized === "task-dependency-add" ? [field2("target", "Target task or plan reference")] : normalized === "task-dependency-remove" ? [field2("target", "Target task or plan reference")] : normalized === "task-activity-delete" ? [field2("entry", "Activity entry ID")] : [];
+    field3("title", "Title", task?.title),
+    field3("description", "Description", task?.description, void 0, true)
+  ] : normalized === "task-status" ? [field3("status", "Status", task?.status ?? "todo", TASK_STATUSES)] : normalized === "task-assignee" ? [field3("assignee", "Assignee", task?.assigneeIdentity ?? (task?.assigneeType === "unassigned" ? "unassigned" : "user"), ["user", "openmates", "codex", "unassigned"])] : normalized === "task-block" ? [field3("reason", "Reason code", "needs_user_input", ["needs_user_input", "waiting_for_approval", "missing_credentials", "ambiguous_requirement", "external_dependency", "environment_unavailable", "verification_failed", "other"]), field3("explanation", "Explanation (optional)", "", void 0, true)] : normalized === "task-activity" ? [field3("message", "Activity message", "", void 0, true)] : normalized === "task-delete" ? [field3("confirm", `Type DELETE to delete ${task ? label(task) : "task"}`)] : normalized === "task-reorder" ? [field3("position", "Position", String(task?.position ?? ""))] : normalized === "task-dependency-add" ? [field3("target", "Target task or plan reference")] : normalized === "task-dependency-remove" ? [field3("target", "Target task or plan reference")] : normalized === "task-activity-delete" ? [field3("entry", "Activity entry ID")] : [];
   const titles = {
     "task-create": "Create task",
     "task-edit": "Edit task",
@@ -90176,7 +90563,7 @@ function renderWorkflowCarousel(workflows, width, selectedIndex, focused) {
       truncateCells(clean2(workflow.trigger_summary || "Manual"), 32)
     ].filter(Boolean).join("\n"),
     footer: `${workflow.enabled ? "Enabled" : "Paused"}${workflow.last_run_status ? ` \xB7 Last: ${clean2(workflow.last_run_status)}` : ""}`,
-    background: PRIMARY_GRADIENT.start,
+    background: workflowIdentityColor(workflow),
     action: { kind: "command", command: `/workflow ${workflow.id}` }
   }));
   return [
@@ -90587,29 +90974,29 @@ function buildWorkflowNodeForm(workflow, node, capabilities, kind = "workflow-no
     fields: [{ name: "title", label: "Node title", value: node.title ?? "" }, ...fields]
   };
 }
-function parsedField(raw, oldValue, field2) {
-  if (field2.required && !raw.trim()) throw new Error("This field is required.");
-  if (field2.options?.length && raw && !field2.options.includes(raw)) throw new Error(`Choose ${field2.options.join(", ")}.`);
-  if (field2.valueType === "boolean" || typeof oldValue === "boolean") {
+function parsedField(raw, oldValue, field3) {
+  if (field3.required && !raw.trim()) throw new Error("This field is required.");
+  if (field3.options?.length && raw && !field3.options.includes(raw)) throw new Error(`Choose ${field3.options.join(", ")}.`);
+  if (field3.valueType === "boolean" || typeof oldValue === "boolean") {
     if (raw !== "true" && raw !== "false") throw new Error("Use true or false for boolean fields.");
     return raw === "true";
   }
-  if (field2.valueType === "number" || field2.valueType === "integer" || typeof oldValue === "number") {
+  if (field3.valueType === "number" || field3.valueType === "integer" || typeof oldValue === "number") {
     const value = Number(raw);
     if (!raw.trim() || !Number.isFinite(value)) throw new Error("Enter a valid number.");
-    if (field2.valueType === "integer" && !Number.isInteger(value)) throw new Error("Enter a whole number.");
-    if (field2.minimum !== void 0 && value < field2.minimum) throw new Error(`Enter at least ${field2.minimum}.`);
-    if (field2.maximum !== void 0 && value > field2.maximum) throw new Error(`Enter at most ${field2.maximum}.`);
+    if (field3.valueType === "integer" && !Number.isInteger(value)) throw new Error("Enter a whole number.");
+    if (field3.minimum !== void 0 && value < field3.minimum) throw new Error(`Enter at least ${field3.minimum}.`);
+    if (field3.maximum !== void 0 && value > field3.maximum) throw new Error(`Enter at most ${field3.maximum}.`);
     return value;
   }
-  if (field2.valueType === "object" || field2.valueType === "array" || oldValue !== null && typeof oldValue === "object") {
+  if (field3.valueType === "object" || field3.valueType === "array" || oldValue !== null && typeof oldValue === "object") {
     const value = JSON.parse(raw);
-    if (field2.valueType === "array" && !Array.isArray(value)) throw new Error("Enter a JSON array.");
-    if (field2.valueType === "object" && (!value || typeof value !== "object" || Array.isArray(value))) throw new Error("Enter a JSON object.");
+    if (field3.valueType === "array" && !Array.isArray(value)) throw new Error("Enter a JSON array.");
+    if (field3.valueType === "object" && (!value || typeof value !== "object" || Array.isArray(value))) throw new Error("Enter a JSON object.");
     return value;
   }
-  if (field2.format === "time" && !/^([01]\d|2[0-3]):[0-5]\d$/.test(raw)) throw new Error("Use HH:MM time.");
-  if (field2.format === "date-time" && Number.isNaN(Date.parse(raw))) throw new Error("Enter a valid date and time.");
+  if (field3.format === "time" && !/^([01]\d|2[0-3]):[0-5]\d$/.test(raw)) throw new Error("Use HH:MM time.");
+  if (field3.format === "date-time" && Number.isNaN(Date.parse(raw))) throw new Error("Enter a valid date and time.");
   return raw;
 }
 function setPath(config, path2, value) {
@@ -90640,7 +91027,7 @@ async function submitWorkflowNodeForm(client2, workflow, form) {
     }
     config.schedule = schedule;
   }
-  const advanced = form.fields.find((field2) => field2.name === "config.input" && field2.label === "Advanced input JSON");
+  const advanced = form.fields.find((field3) => field3.name === "config.input" && field3.label === "Advanced input JSON");
   if (advanced && advanced.value !== fieldValue(node.config?.input ?? {})) {
     try {
       setPath(config, "input", parsedField(advanced.value, node.config?.input, advanced));
@@ -90648,10 +91035,10 @@ async function submitWorkflowNodeForm(client2, workflow, form) {
       throw new Error(`${advanced.label}: ${error instanceof Error ? error.message : "Invalid value"}`);
     }
   }
-  for (const field2 of form.fields) {
-    if (!field2.name.startsWith("config.")) continue;
-    if (field2 === advanced) continue;
-    const path2 = field2.name.slice("config.".length);
+  for (const field3 of form.fields) {
+    if (!field3.name.startsWith("config.")) continue;
+    if (field3 === advanced) continue;
+    const path2 = field3.name.slice("config.".length);
     if (path2.startsWith("schedule.") && ![
       "schedule.type",
       "schedule.timezone",
@@ -90659,12 +91046,12 @@ async function submitWorkflowNodeForm(client2, workflow, form) {
     ].includes(path2)) continue;
     if (checkMode === "ai" && path2.startsWith("predicate.") || checkMode === "exact" && path2 === "question") continue;
     const oldValue = valueAt(node.config ?? {}, path2);
-    const required3 = path2.startsWith("schedule.") ? path2 !== "schedule.type" && path2 !== "schedule.timezone" ? true : field2.required : path2 === "question" && checkMode === "ai" || path2.startsWith("predicate.") && checkMode === "exact" ? true : field2.required;
-    if (oldValue === void 0 && !field2.value.trim() && !required3) continue;
+    const required3 = path2.startsWith("schedule.") ? path2 !== "schedule.type" && path2 !== "schedule.timezone" ? true : field3.required : path2 === "question" && checkMode === "ai" || path2.startsWith("predicate.") && checkMode === "exact" ? true : field3.required;
+    if (oldValue === void 0 && !field3.value.trim() && !required3) continue;
     try {
-      setPath(config, path2, parsedField(field2.value, oldValue, { ...field2, required: required3 }));
+      setPath(config, path2, parsedField(field3.value, oldValue, { ...field3, required: required3 }));
     } catch (error) {
-      throw new Error(`${field2.label}: ${error instanceof Error ? error.message : "Invalid value"}`);
+      throw new Error(`${field3.label}: ${error instanceof Error ? error.message : "Invalid value"}`);
     }
   }
   const graph = {
@@ -90674,6 +91061,693 @@ async function submitWorkflowNodeForm(client2, workflow, form) {
   return client2.updateWorkflow(workflow.id, { graph });
 }
 
+// src/tuiCachedWorkspaces.ts
+import { createHash as createHash20 } from "crypto";
+
+// src/tuiWorkspaceCache.ts
+import { createHmac as createHmac3 } from "crypto";
+import { chmodSync as chmodSync8, mkdirSync as mkdirSync15, readFileSync as readFileSync16, renameSync as renameSync8, rmSync as rmSync9, statSync as statSync3, writeFileSync as writeFileSync11 } from "fs";
+import { join as join18 } from "path";
+import { deserialize, serialize } from "v8";
+import lockfile4 from "proper-lockfile";
+var TUI_WORKSPACE_CACHE_FILE = "tui_workspace_cache.json";
+var VERSION = 1;
+var MAX_ENTRIES = 32;
+var MAX_ENTRY_BYTES = 4 * 1024 * 1024;
+var MAX_PLAINTEXT_BYTES = 16 * 1024 * 1024;
+var MAX_FILE_BYTES2 = 24 * 1024 * 1024;
+var KEY_PATTERN = /^[\x21-\x7e]{1,200}$/;
+function contextSignature(session, stateDir2) {
+  return createHmac3("sha256", Buffer.from(session.masterKeyExportedB64, "base64")).update(JSON.stringify([
+    VERSION,
+    stateDir2,
+    process.env.OPENMATES_PROFILE ?? "",
+    session.apiUrl,
+    session.hashedEmail,
+    session.activeTeamId ?? null
+  ])).digest("hex");
+}
+function isRecord4(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function createTuiWorkspaceCache(session, currentSession = loadSession) {
+  const stateDir2 = resolveStateDir();
+  const path2 = join18(stateDir2, TUI_WORKSPACE_CACHE_FILE);
+  const context = contextSignature(session, stateDir2);
+  const loginCreatedAt = session.createdAt;
+  const keyBytes = base64ToBytes(session.masterKeyExportedB64);
+  if (keyBytes.length !== 32) throw new Error("Workspace cache requires a 256-bit master key.");
+  const isCurrent = () => {
+    try {
+      const live = currentSession();
+      const persisted = loadSession();
+      return !!live && !!persisted && live.createdAt === loginCreatedAt && persisted.createdAt === loginCreatedAt && contextSignature(live, stateDir2) === context && contextSignature(persisted, stateDir2) === context;
+    } catch {
+      return false;
+    }
+  };
+  const read = async () => {
+    const empty2 = () => ({ version: VERSION, entries: {} });
+    try {
+      if (statSync3(path2).size > MAX_FILE_BYTES2) return empty2();
+      const disk = readFileSync16(path2, "utf8");
+      if (Buffer.byteLength(disk) > MAX_FILE_BYTES2) return empty2();
+      const envelope = JSON.parse(disk);
+      if (!isRecord4(envelope) || envelope.version !== VERSION || envelope.context !== context || typeof envelope.ciphertext !== "string") return empty2();
+      const plaintext = await decryptWithAesGcmCombined(envelope.ciphertext, keyBytes, context);
+      if (plaintext === null || Buffer.byteLength(plaintext) > MAX_PLAINTEXT_BYTES) return empty2();
+      const parsed = JSON.parse(plaintext);
+      if (!isRecord4(parsed) || parsed.version !== VERSION || !isRecord4(parsed.entries)) return empty2();
+      const entries = {};
+      for (const [key, value] of Object.entries(parsed.entries)) {
+        if (!KEY_PATTERN.test(key) || !isRecord4(value) || typeof value.data !== "string" || typeof value.touchedAt !== "number" || !Number.isFinite(value.touchedAt) || value.touchedAt > Date.now() || value.data.length > MAX_ENTRY_BYTES * 2) continue;
+        entries[key] = { data: value.data, touchedAt: value.touchedAt };
+      }
+      return { version: VERSION, entries };
+    } catch {
+      return empty2();
+    }
+  };
+  const mutate = async (change) => {
+    if (!isCurrent()) return false;
+    mkdirSync15(stateDir2, { recursive: true, mode: 448 });
+    chmodSync8(stateDir2, 448);
+    const release2 = await lockfile4.lock(`${path2}.write`, {
+      realpath: false,
+      stale: 3e4,
+      retries: { retries: 20, factor: 1, minTimeout: 20, maxTimeout: 20 }
+    });
+    try {
+      if (!isCurrent()) return false;
+      const snapshot2 = await read();
+      if (!isCurrent()) return false;
+      change(snapshot2);
+      let plaintext = JSON.stringify(snapshot2);
+      while (Object.keys(snapshot2.entries).length > MAX_ENTRIES || Buffer.byteLength(plaintext) > MAX_PLAINTEXT_BYTES) {
+        const oldest = Object.entries(snapshot2.entries).sort((a, b) => a[1].touchedAt - b[1].touchedAt)[0];
+        if (!oldest) return false;
+        delete snapshot2.entries[oldest[0]];
+        plaintext = JSON.stringify(snapshot2);
+      }
+      const ciphertext = await encryptWithAesGcmCombined(plaintext, keyBytes, context);
+      if (!isCurrent()) return false;
+      const envelope = { version: VERSION, context, ciphertext };
+      const encoded = JSON.stringify(envelope);
+      if (Buffer.byteLength(encoded) > MAX_FILE_BYTES2) return false;
+      const temporary = `${path2}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+      try {
+        writeFileSync11(temporary, encoded, { mode: 384, flag: "wx" });
+        chmodSync8(temporary, 384);
+        if (!isCurrent()) return false;
+        renameSync8(temporary, path2);
+      } finally {
+        rmSync9(temporary, { force: true });
+      }
+      return true;
+    } finally {
+      await release2();
+    }
+  };
+  return {
+    isCurrent,
+    async get(key) {
+      if (!KEY_PATTERN.test(key)) throw new Error("Invalid workspace cache key.");
+      if (!isCurrent()) return null;
+      const snapshot2 = await read();
+      if (!isCurrent()) return null;
+      const entry = snapshot2.entries[key];
+      if (!entry) return null;
+      try {
+        const bytes2 = Buffer.from(entry.data, "base64");
+        if (bytes2.length > MAX_ENTRY_BYTES) return null;
+        return deserialize(bytes2);
+      } catch {
+        return null;
+      }
+    },
+    async set(key, value) {
+      if (!KEY_PATTERN.test(key)) throw new Error("Invalid workspace cache key.");
+      const bytes2 = serialize(value);
+      if (bytes2.length > MAX_ENTRY_BYTES) return false;
+      return mutate((snapshot2) => {
+        snapshot2.entries[key] = { data: bytes2.toString("base64"), touchedAt: Date.now() };
+      });
+    },
+    async invalidate(key) {
+      if (key !== void 0 && !KEY_PATTERN.test(key)) throw new Error("Invalid workspace cache key.");
+      return mutate((snapshot2) => {
+        if (key === void 0) snapshot2.entries = {};
+        else delete snapshot2.entries[key];
+      });
+    }
+  };
+}
+
+// src/tuiCachedWorkspaces.ts
+var states = /* @__PURE__ */ new WeakMap();
+function stateFor(client2) {
+  let state = states.get(client2);
+  if (!state) {
+    state = { pending: /* @__PURE__ */ new Map(), generations: /* @__PURE__ */ new Map(), globalGeneration: 0, cacheOperations: Promise.resolve() };
+    states.set(client2, state);
+  }
+  return state;
+}
+function queueCacheOperation(state, operation) {
+  const result = state.cacheOperations.then(operation);
+  state.cacheOperations = result.then(() => {
+  }, () => {
+  });
+  return result;
+}
+function reportError(onError, error, hasCached) {
+  try {
+    onError?.(error, hasCached);
+  } catch {
+  }
+}
+function rawSessionFrom(client2) {
+  if (typeof client2.hasSession !== "function" || typeof client2.getSession !== "function") return null;
+  try {
+    if (!client2.hasSession()) return null;
+    return client2.getSession();
+  } catch {
+    return null;
+  }
+}
+function sessionFrom(client2) {
+  const session = rawSessionFrom(client2);
+  if (!session || typeof client2.apiUrl !== "string" || client2.apiUrl.replace(/\/$/, "") !== session.apiUrl.replace(/\/$/, "")) return null;
+  return session;
+}
+function identity2(session) {
+  return createHash20("sha256").update(JSON.stringify([
+    session.apiUrl,
+    session.hashedEmail,
+    session.activeTeamId ?? null,
+    session.createdAt,
+    session.masterKeyExportedB64
+  ])).digest("hex");
+}
+function contextFor2(client2) {
+  const session = sessionFrom(client2);
+  if (!session) {
+    const raw = rawSessionFrom(client2);
+    if (raw) {
+      const token2 = `${identity2(raw)}:${client2.apiUrl ?? ""}`;
+      return {
+        token: token2,
+        cache: null,
+        isCurrent: () => {
+          const current2 = rawSessionFrom(client2);
+          return !!current2 && `${identity2(current2)}:${client2.apiUrl ?? ""}` === token2;
+        }
+      };
+    }
+    const hasSessionApi = typeof client2.hasSession === "function" && typeof client2.getSession === "function";
+    return { token: "uncached", cache: null, isCurrent: () => !hasSessionApi };
+  }
+  const token = identity2(session);
+  const isCurrent = () => {
+    const current2 = sessionFrom(client2);
+    return !!current2 && identity2(current2) === token;
+  };
+  try {
+    const cache = createTuiWorkspaceCache(session, () => sessionFrom(client2));
+    return { token, cache: cache.isCurrent() ? cache : null, isCurrent };
+  } catch {
+    return { token, cache: null, isCurrent };
+  }
+}
+function pendingFor(client2, key, context, fetch2) {
+  const state = stateFor(client2);
+  const generation = state.generations.get(key) ?? 0;
+  const globalGeneration = state.globalGeneration;
+  const token = `${context.token}\0${key}`;
+  const isCurrent = () => context.isCurrent() && (state.generations.get(key) ?? 0) === generation && state.globalGeneration === globalGeneration;
+  const existing = state.pending.get(token);
+  if (existing && existing.generation === generation && existing.globalGeneration === globalGeneration && isCurrent()) {
+    return { promise: existing.promise, isCurrent };
+  }
+  const promise = Promise.resolve().then(fetch2).then(async (value) => {
+    if (isCurrent() && context.cache) {
+      try {
+        await queueCacheOperation(state, () => isCurrent() ? context.cache.set(key, value) : Promise.resolve(false));
+      } catch {
+      }
+    }
+    return value;
+  });
+  const pending = { key, context: context.token, generation, globalGeneration, promise };
+  state.pending.set(token, pending);
+  void promise.then(
+    () => {
+      if (state.pending.get(token) === pending) state.pending.delete(token);
+    },
+    () => {
+      if (state.pending.get(token) === pending) state.pending.delete(token);
+    }
+  );
+  return { promise, isCurrent };
+}
+async function loadCachedTuiWorkspace(client2, key, fetch2, publish, onError) {
+  const context = contextFor2(client2);
+  let cached = null;
+  if (context.cache) {
+    try {
+      cached = await context.cache.get(key);
+    } catch {
+    }
+  }
+  if (!context.isCurrent()) return null;
+  if (cached !== null) {
+    try {
+      await publish(cached, "cache");
+    } catch (error) {
+      reportError(onError, error, true);
+    }
+  }
+  const { promise, isCurrent } = pendingFor(client2, key, context, fetch2);
+  const deliver = async () => {
+    try {
+      const value = await promise;
+      if (!isCurrent()) return null;
+      await publish(value, "sync");
+      return value;
+    } catch (error) {
+      reportError(onError, error, cached !== null);
+      return null;
+    }
+  };
+  if (cached !== null) {
+    void deliver();
+    return cached;
+  }
+  return deliver();
+}
+async function loadProgressiveCachedTuiWorkspace(client2, key, fetch2, publish, onError, mergePartial = (_previous, page) => page) {
+  const context = contextFor2(client2);
+  const state = stateFor(client2);
+  let cached = null;
+  if (context.cache) {
+    try {
+      cached = await context.cache.get(key);
+    } catch {
+    }
+  }
+  if (!context.isCurrent()) return null;
+  if (cached !== null) {
+    try {
+      await publish(cached, "cache", false);
+    } catch (error) {
+      reportError(onError, error, true);
+    }
+  }
+  const generation = state.generations.get(key) ?? 0;
+  const globalGeneration = state.globalGeneration;
+  const token = `${context.token}\0${key}`;
+  const isCurrent = () => context.isCurrent() && (state.generations.get(key) ?? 0) === generation && state.globalGeneration === globalGeneration;
+  let hasUsable = cached !== null;
+  let finalPublished = false;
+  const listener = async (value, complete) => {
+    if (!isCurrent()) return;
+    hasUsable = true;
+    finalPublished = complete;
+    try {
+      await publish(value, "sync", complete);
+    } catch (error) {
+      reportError(onError, error, true);
+    }
+  };
+  let pending = state.pending.get(token);
+  if (!pending || pending.generation !== generation || pending.globalGeneration !== globalGeneration || !isCurrent()) {
+    const listeners = /* @__PURE__ */ new Set();
+    let latest = cached;
+    const progress = async (page, complete) => {
+      if (!isCurrent()) return;
+      const value = complete ? page : mergePartial(latest, page);
+      latest = value;
+      if (context.cache) {
+        try {
+          await queueCacheOperation(state, () => isCurrent() ? context.cache.set(key, value) : Promise.resolve(false));
+        } catch {
+        }
+      }
+      if (isCurrent()) await Promise.all([...listeners].map((notify) => notify(value, complete)));
+    };
+    const promise = Promise.resolve().then(() => fetch2(progress)).then(async (value) => {
+      if (isCurrent() && context.cache) {
+        try {
+          await queueCacheOperation(state, () => isCurrent() ? context.cache.set(key, value) : Promise.resolve(false));
+        } catch {
+        }
+      }
+      return value;
+    });
+    pending = { key, context: context.token, generation, globalGeneration, promise, progressListeners: listeners };
+    state.pending.set(token, pending);
+    const created = pending;
+    void promise.then(
+      () => {
+        if (state.pending.get(token) === created) state.pending.delete(token);
+      },
+      () => {
+        if (state.pending.get(token) === created) state.pending.delete(token);
+      }
+    );
+  }
+  pending.progressListeners?.add(listener);
+  const deliver = async () => {
+    try {
+      const value = await pending.promise;
+      if (!isCurrent()) return null;
+      if (!finalPublished) await publish(value, "sync", true);
+      return value;
+    } catch (error) {
+      if (isCurrent()) reportError(onError, error, hasUsable);
+      return null;
+    } finally {
+      pending.progressListeners?.delete(listener);
+    }
+  };
+  if (cached !== null) {
+    void deliver();
+    return cached;
+  }
+  return deliver();
+}
+function captureTuiWorkspaceOwner(client2) {
+  return contextFor2(client2).isCurrent;
+}
+async function readCachedTuiWorkspace(client2, key, ownerCurrent = () => true) {
+  if (!ownerCurrent()) return null;
+  const context = contextFor2(client2);
+  if (!context.cache) return null;
+  try {
+    const value = await context.cache.get(key);
+    return ownerCurrent() && context.isCurrent() ? value : null;
+  } catch {
+    return null;
+  }
+}
+async function invalidateCachedTuiWorkspace(client2, key, ownerCurrent = () => true) {
+  if (!ownerCurrent()) return false;
+  const state = stateFor(client2);
+  if (key === void 0) state.globalGeneration++;
+  else state.generations.set(key, (state.generations.get(key) ?? 0) + 1);
+  const context = contextFor2(client2);
+  if (!context.cache) return false;
+  try {
+    return await queueCacheOperation(state, () => ownerCurrent() && context.isCurrent() ? context.cache.invalidate(key) : Promise.resolve(false));
+  } catch {
+    return false;
+  }
+}
+async function writeCachedTuiWorkspace(client2, key, value, ownerCurrent = () => true) {
+  if (!ownerCurrent()) return false;
+  const state = stateFor(client2);
+  state.generations.set(key, (state.generations.get(key) ?? 0) + 1);
+  const context = contextFor2(client2);
+  if (!context.cache) return false;
+  try {
+    return await queueCacheOperation(state, () => ownerCurrent() && context.isCurrent() ? context.cache.set(key, value) : Promise.resolve(false));
+  } catch {
+    return false;
+  }
+}
+
+// src/tuiTeamsSettings.ts
+var field = (id, label3, required3 = false) => ({ id, label: label3, kind: "text", required: required3 });
+var activeTeam = (client2) => {
+  const id = client2.getActiveTeamId();
+  if (!id) throw new Error("Select a Team with Teams \u2192 Select Team first.");
+  return id;
+};
+var teamRole = async (client2) => {
+  const teamId = activeTeam(client2), isCurrent = captureTuiWorkspaceOwner(client2);
+  const team = await client2.getTeam(teamId);
+  if (!isCurrent() || client2.getActiveTeamId() !== teamId) throw new Error("Team changed while checking permissions.");
+  if (!team.role) throw new Error("Team role is unavailable.");
+  return team.role;
+};
+var requireRole = async (client2, allowed) => {
+  const id = activeTeam(client2), isCurrent = captureTuiWorkspaceOwner(client2);
+  const team = await client2.getTeam(id);
+  if (!isCurrent() || client2.getActiveTeamId() !== id) throw new Error("Team changed while checking permissions.");
+  if (!allowed.includes(team.role)) throw new Error("Your Team role cannot perform this action.");
+  return id;
+};
+var displayMember = (member) => ({
+  user_id: member.user_id,
+  display_name: member.profile?.display_name ?? "",
+  role: member.role,
+  status: member.status ?? "",
+  joined_at: member.joined_at ?? null
+});
+var TEAM_SETTINGS_PAGES = [
+  {
+    route: "teams",
+    title: "Teams",
+    parent: "main",
+    auth: true,
+    description: "Manage the selected Team or create one.",
+    load: async (c) => ({ active_team_id: c.getActiveTeamId(), teams: await Promise.all((await c.listTeams()).map(async (team) => ({
+      team_id: team.team_id ?? "",
+      name: (await c.getTeamDetails(team.team_id ?? "")).name,
+      role: team.role ?? ""
+    }))) }),
+    rows: (value) => {
+      const list = value?.teams ?? [];
+      return list.filter((team) => team.team_id).map((team) => ({ id: `team:${team.team_id}`, label: `${team.name || team.team_id} \xB7 ${team.role} \xB7 ${team.team_id}`, switchTeam: team.team_id }));
+    }
+  },
+  {
+    route: "teams/select",
+    title: "Select Team",
+    parent: "teams",
+    auth: true,
+    description: "Enter a Team ID shown above. Switching refreshes the Settings owner.",
+    fields: [field("team_id", "Team ID", true)],
+    actions: [{ id: "select", label: "Select Team", requiredFields: ["team_id"], run: async (c, d) => {
+      const isCurrent = captureTuiWorkspaceOwner(c);
+      const team = await c.getTeam(d.team_id.trim());
+      if (!isCurrent()) throw new Error("Workspace changed while selecting Team.");
+      c.setActiveTeamId(team.team_id ?? d.team_id.trim());
+      return { success: true };
+    } }, { id: "personal", label: "Switch to Personal", run: async (c) => {
+      c.setActiveTeamId(null);
+      return { success: true };
+    } }]
+  },
+  {
+    route: "teams/create",
+    title: "Create Team",
+    parent: "teams",
+    auth: true,
+    description: "Team name approval and encryption happen before creation.",
+    fields: [field("name", "Name", true), field("description", "Description")],
+    actions: [{ id: "create", label: "Create Team", run: async (c, d) => {
+      const team = await c.createTeam({ name: d.name.trim(), description: d.description.trim() || void 0 });
+      return { team_id: team.team_id ?? "" };
+    } }]
+  },
+  {
+    route: "teams/details",
+    title: "Team Details",
+    parent: "teams",
+    auth: true,
+    load: async (c) => {
+      const team = await c.getTeamDetails(activeTeam(c));
+      return {
+        team_id: team.team_id ?? "",
+        name: team.name,
+        description: team.description,
+        role: team.role ?? "",
+        status: team.status ?? ""
+      };
+    },
+    fields: [field("name", "Name", true), field("description", "Description")],
+    saveRoles: ["owner", "admin"],
+    defaults: (value) => {
+      const v = value;
+      return { name: v.name ?? "", description: v.description ?? "" };
+    },
+    save: async (c, d) => {
+      await requireRole(c, ["owner", "admin"]);
+      const team = await c.updateTeam(activeTeam(c), { name: d.name.trim(), description: d.description.trim() });
+      return { team_id: team.team_id };
+    }
+  },
+  {
+    route: "teams/members",
+    title: "Members",
+    parent: "teams",
+    auth: true,
+    load: async (c) => ({ role: await teamRole(c), members: (await c.listTeamMembers(activeTeam(c))).map(displayMember) }),
+    rows: (value) => {
+      const list = value?.members ?? [];
+      return list.filter((member) => member.user_id).map((member) => ({
+        id: `member:${member.user_id}`,
+        label: `${member.display_name || member.user_id} \xB7 ${member.role} \xB7 ${member.user_id}`,
+        route: "teams/member",
+        field: "user_id",
+        value: member.user_id,
+        details: { selected_name: member.display_name, selected_role: member.role, selected_user_id: member.user_id }
+      }));
+    }
+  },
+  {
+    route: "teams/member",
+    title: "Member Role",
+    parent: "teams/members",
+    auth: true,
+    description: "Owner and admins can change roles or remove a member.",
+    load: async (c) => ({ role: await teamRole(c) }),
+    requiresLoad: true,
+    fields: [field("user_id", "Member user ID", true), { id: "role", label: "New role", kind: "choice", options: ["member", "viewer", "admin"] }],
+    actions: [
+      { id: "change-role", label: "Change member role", confirm: "Change this member's Team role?", roles: ["owner", "admin"], requiredFields: ["user_id"], run: async (c, d) => {
+        const id = await requireRole(c, ["owner", "admin"]);
+        const member = await c.updateTeamMemberRole(id, d.user_id.trim(), d.role);
+        return displayMember(member);
+      } },
+      { id: "remove-member", label: "Remove member", confirm: "Remove this member from the Team?", roles: ["owner", "admin"], requiredFields: ["user_id"], run: async (c, d) => c.removeTeamMember(await requireRole(c, ["owner", "admin"]), d.user_id.trim()) }
+    ]
+  },
+  {
+    route: "teams/profile",
+    title: "My Team Profile",
+    parent: "teams",
+    auth: true,
+    load: async (c) => {
+      const id = activeTeam(c), isCurrent = captureTuiWorkspaceOwner(c);
+      const identity3 = await c.whoAmI();
+      if (!isCurrent() || c.getActiveTeamId() !== id) throw new Error("Team changed while loading your profile.");
+      const member = await c.getTeamMember(id, String(identity3.id));
+      return { user_id: member.user_id, display_name: member.profile?.display_name ?? "", avatar: member.profile?.avatar ?? "", role: member.role };
+    },
+    fields: [field("display_name", "Display name"), field("avatar", "Avatar")],
+    defaults: (value) => {
+      const v = value;
+      return { display_name: v.display_name ?? "", avatar: v.avatar ?? "" };
+    },
+    save: async (c, d) => displayMember(await c.updateOwnTeamMemberProfile(activeTeam(c), { display_name: d.display_name, avatar: d.avatar || null }))
+  },
+  {
+    route: "teams/invite",
+    title: "Invite Member",
+    parent: "teams",
+    auth: true,
+    teamRoles: ["owner", "admin"],
+    load: async (c) => ({ role: await teamRole(c) }),
+    requiresLoad: true,
+    fields: [{ ...field("email", "Recipient email", true), validate: (value) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value) ? null : "Enter a valid email address." }, { id: "role", label: "Role", kind: "choice", options: ["member", "viewer", "admin"] }],
+    actions: [{ id: "invite", label: "Create invite", roles: ["owner", "admin"], requiredFields: ["email"], run: async (c, d) => {
+      const id = await requireRole(c, ["owner", "admin"]);
+      const invite = await c.createTeamInvite(id, { recipient_email: d.email.trim(), role: d.role });
+      return { invite_id: invite.invite_id ?? "", invite_url: invite.invite_url ?? "" };
+    } }]
+  },
+  {
+    route: "teams/access",
+    title: "Access Requests",
+    parent: "teams",
+    auth: true,
+    teamRoles: ["owner", "admin"],
+    load: async (c) => ({ role: await teamRole(c), requests: (await c.listTeamAccessRequests(activeTeam(c))).map((row3) => ({
+      access_request_id: row3.access_request_id ?? "",
+      status: row3.status ?? ""
+    })) }),
+    fields: [field("request_id", "Request ID", true)],
+    actions: [
+      { id: "approve", label: "Approve access", confirm: "Approve this Team access request?", roles: ["owner", "admin"], requiredFields: ["request_id"], run: async (c, d) => {
+        await c.approveTeamAccessRequest(await requireRole(c, ["owner", "admin"]), d.request_id.trim());
+        return { success: true };
+      } },
+      { id: "reject", label: "Reject access", confirm: "Reject this Team access request?", roles: ["owner", "admin"], requiredFields: ["request_id"], run: async (c, d) => c.rejectTeamAccessRequest(await requireRole(c, ["owner", "admin"]), d.request_id.trim()) }
+    ]
+  },
+  {
+    route: "teams/billing",
+    title: "Team Billing",
+    parent: "teams",
+    auth: true,
+    teamRoles: ["owner", "admin"],
+    description: "Billing applies to the selected Team. Purchases and billing settings are in the browser.",
+    load: async (c) => {
+      const id = await requireRole(c, ["owner", "admin"]), billing = await c.getTeamBilling(id);
+      return {
+        team_id: id,
+        balance_credits: billing.balance_credits ?? 0
+      };
+    }
+  },
+  {
+    route: "teams/billing/usage",
+    title: "Team Usage",
+    parent: "teams/billing",
+    auth: true,
+    teamRoles: ["owner", "admin"],
+    description: "Credit usage for the selected Team only.",
+    load: async (c) => ({ usage: (await c.listTeamUsage(await requireRole(c, ["owner", "admin"]))).map((row3) => ({
+      workspace_type: typeof row3.workspace_type === "string" ? row3.workspace_type : "",
+      credit_amount: typeof row3.credit_amount === "number" ? row3.credit_amount : 0,
+      created_at: typeof row3.created_at === "string" || typeof row3.created_at === "number" ? row3.created_at : ""
+    })) })
+  },
+  {
+    route: "teams/billing/manage",
+    title: "Manage Team Billing",
+    parent: "teams/billing",
+    auth: true,
+    teamRoles: ["owner", "admin"],
+    webOnly: "teams",
+    webReason: "Open Teams, select this Team, then Billing to manage purchases, invoices and payment methods."
+  },
+  {
+    route: "teams/security",
+    title: "Team Security",
+    parent: "teams",
+    auth: true,
+    teamRoles: ["owner", "admin"],
+    requiresLoad: true,
+    description: "Owner and admins can edit Team access policy. Team deletion uses the browser verification flow.",
+    load: async (c) => ({ ...await c.getTeamSecurity(await requireRole(c, ["owner", "admin"])), role: await teamRole(c) }),
+    fields: [
+      { id: "restrict_email_domains", label: "Restrict email domains", kind: "boolean" },
+      field("allowed_email_domains", "Allowed domains"),
+      { id: "require_invite_link_approval", label: "Approve invite links", kind: "boolean" },
+      { id: "require_strong_auth", label: "Require strong auth", kind: "boolean" }
+    ],
+    saveRoles: ["owner", "admin"],
+    saveConfirm: "Save Team security policy? Turning restrictions off can broaden Team access. Review each field before confirming.",
+    defaults: (value) => {
+      const policy = value;
+      return {
+        restrict_email_domains: policy.restrict_email_domains ? "on" : "off",
+        allowed_email_domains: (policy.allowed_email_domains ?? []).join(", "),
+        require_invite_link_approval: policy.require_invite_link_approval === false ? "off" : "on",
+        require_strong_auth: policy.require_strong_auth ? "on" : "off"
+      };
+    },
+    save: async (c, d) => c.updateTeamSecurity(await requireRole(c, ["owner", "admin"]), {
+      restrict_email_domains: d.restrict_email_domains === "on",
+      allowed_email_domains: [...new Set(d.allowed_email_domains.split(",").map((v) => v.trim().toLowerCase()).filter(Boolean))],
+      require_invite_link_approval: d.require_invite_link_approval === "on",
+      require_strong_auth: d.require_strong_auth === "on"
+    })
+  },
+  {
+    route: "teams/security/delete",
+    title: "Delete Team",
+    parent: "teams/security",
+    auth: true,
+    teamRoles: ["owner"],
+    webOnly: "teams",
+    webReason: "Open Teams, select this Team, then use its verified deletion flow in the browser."
+  }
+];
+
 // src/tuiSettingsCatalog.ts
 var object2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
 var string2 = (value) => value == null ? "" : String(value);
@@ -90681,7 +91755,7 @@ var bool = (value) => value === true ? "on" : "off";
 var required = (label3) => (value) => value.trim() ? null : `${label3} is required.`;
 var positive = (label3) => (value) => Number.isSafeInteger(Number(value)) && Number(value) > 0 ? null : `${label3} must be a positive whole number.`;
 var email = (value) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value) ? null : "Enter a valid email address.";
-var field = (id, label3, kind = "text", extras = {}) => ({ id, label: label3, kind, ...extras });
+var field2 = (id, label3, kind = "text", extras = {}) => ({ id, label: label3, kind, ...extras });
 var branch = (route2, title, parent, description) => ({ route: route2, title, parent, description, auth: route2 !== "main" });
 var web = (route2, title, parent, webReason, billing = false) => ({ route: route2, title, parent, auth: true, billing, webOnly: route2, webReason });
 var user = (client2) => client2.whoAmI();
@@ -90691,7 +91765,7 @@ var SETTINGS_PAGES = [
   branch("ai", "AI", "main"),
   branch("privacy", "Privacy", "main"),
   web("projects", "Projects", "main", "Project settings are available in the browser."),
-  web("teams", "Teams", "main", "Team settings and roles are available in the browser."),
+  ...TEAM_SETTINGS_PAGES,
   branch("mates", "Mates", "main"),
   branch("billing", "Billing & Usage", "main"),
   branch("notifications", "Notifications", "main"),
@@ -90709,7 +91783,7 @@ var SETTINGS_PAGES = [
     parent: "account",
     auth: true,
     load: user,
-    fields: [field("timezone", "Timezone", "text", { required: true, hint: "IANA name, for example Europe/Berlin", validate: (v) => {
+    fields: [field2("timezone", "Timezone", "text", { required: true, hint: "IANA name, for example Europe/Berlin", validate: (v) => {
       try {
         new Intl.DateTimeFormat("en", { timeZone: v });
         return null;
@@ -90726,7 +91800,7 @@ var SETTINGS_PAGES = [
     parent: "account",
     auth: true,
     load: (c) => c.getTopicPreferences(),
-    fields: [field("tags", "Interest tags", "text", { required: true, hint: "Comma separated tag IDs" })],
+    fields: [field2("tags", "Interest tags", "text", { required: true, hint: "Comma separated tag IDs" })],
     defaults: (v) => ({ tags: Array.isArray(object2(v).selectedTagIds) ? object2(v).selectedTagIds.join(", ") : "" }),
     save: (c, d) => c.setTopicPreferences(d.tags.split(",").map((v) => v.trim()).filter(Boolean)),
     actions: [{ id: "clear", label: "Clear interests", confirm: "Clear all account interests?", run: (c) => c.clearTopicPreferences() }]
@@ -90737,7 +91811,7 @@ var SETTINGS_PAGES = [
     parent: "account",
     auth: true,
     load: user,
-    fields: [field("username", "Username", "text", { required: true, validate: (v) => /^[a-zA-Z0-9_]{3,30}$/.test(v) ? null : "Use 3\u201330 letters, numbers or underscores." })],
+    fields: [field2("username", "Username", "text", { required: true, validate: (v) => /^[a-zA-Z0-9_]{3,30}$/.test(v) ? null : "Use 3\u201330 letters, numbers or underscores." })],
     defaults: (v) => ({ username: string2(object2(v).username) }),
     save: (c, d) => c.updateUsername(d.username)
   },
@@ -90748,7 +91822,7 @@ var SETTINGS_PAGES = [
     title: "Delete Stored File",
     parent: "account/storage",
     auth: true,
-    fields: [field("file_id", "File ID", "text", { required: true })],
+    fields: [field2("file_id", "File ID", "text", { required: true })],
     actions: [{ id: "delete", label: "Delete file", confirm: "Delete this stored file permanently?", run: (c, d) => d.file_id.trim() ? c.settingsDelete("storage/files", { scope: "single", file_id: d.file_id.trim() }) : Promise.reject(new Error("Enter a file ID.")) }]
   },
   { route: "account/chats", title: "Chat Statistics", parent: "account", auth: true, load: (c) => c.settingsGet("chats") },
@@ -90759,7 +91833,7 @@ var SETTINGS_PAGES = [
     auth: true,
     load: user,
     description: "Changes the web app language.",
-    fields: [field("language", "Language code", "text", { required: true, validate: (v) => /^[a-z]{2}(?:-[A-Z]{2})?$/.test(v) ? null : "Use a language code such as en or de." })],
+    fields: [field2("language", "Language code", "text", { required: true, validate: (v) => /^[a-z]{2}(?:-[A-Z]{2})?$/.test(v) ? null : "Use a language code such as en or de." })],
     defaults: (v) => ({ language: string2(object2(v).language) || "en" }),
     save: (c, d) => c.settingsPost("user/language", { language: d.language })
   },
@@ -90770,7 +91844,7 @@ var SETTINGS_PAGES = [
     auth: true,
     load: user,
     description: "Changes the web app theme.",
-    fields: [field("enabled", "Dark mode", "boolean")],
+    fields: [field2("enabled", "Dark mode", "boolean")],
     defaults: (v) => ({ enabled: bool(object2(v).dark_mode) }),
     save: (c, d) => c.settingsPost("user/darkmode", { dark_mode: d.enabled === "on" })
   },
@@ -90781,7 +91855,7 @@ var SETTINGS_PAGES = [
     auth: true,
     load: user,
     description: "Changes the web app font.",
-    fields: [field("font", "Font", "choice", { options: ["lexend", "figtree", "rubik", "inter", "public_sans", "atkinson", "ibm_plex_sans", "source_serif", "jetbrains_mono", "ibm_plex_mono", "system", "serif", "mono"] })],
+    fields: [field2("font", "Font", "choice", { options: ["lexend", "figtree", "rubik", "inter", "public_sans", "atkinson", "ibm_plex_sans", "source_serif", "jetbrains_mono", "ibm_plex_mono", "system", "serif", "mono"] })],
     defaults: (v) => ({ font: string2(object2(v).ui_font) || "lexend" }),
     save: (c, d) => c.settingsPost("user/ui-font", { ui_font: d.font })
   },
@@ -90791,7 +91865,7 @@ var SETTINGS_PAGES = [
     parent: "ai",
     auth: true,
     load: user,
-    fields: [field("simple", "Simple requests", "text", { required: true, hint: "Model ID or auto" }), field("complex", "Complex requests", "text", { required: true, hint: "Model ID or auto" }), field("most_demanding", "Most demanding", "text", { required: true, hint: "Model ID or auto" })],
+    fields: [field2("simple", "Simple requests", "text", { required: true, hint: "Model ID or auto" }), field2("complex", "Complex requests", "text", { required: true, hint: "Model ID or auto" }), field2("most_demanding", "Most demanding", "text", { required: true, hint: "Model ID or auto" })],
     defaults: (v) => {
       const o = object2(v);
       return { simple: string2(o.default_ai_model_simple) || "auto", complex: string2(o.default_ai_model_complex) || "auto", most_demanding: string2(o.default_ai_model_most_demanding) || "auto" };
@@ -90804,7 +91878,7 @@ var SETTINGS_PAGES = [
     parent: "privacy",
     auth: true,
     load: user,
-    fields: [field("period", "Delete after", "choice", { options: ["30d", "60d", "90d", "6m", "1y", "2y", "5y", "never"] })],
+    fields: [field2("period", "Delete after", "choice", { options: ["30d", "60d", "90d", "6m", "1y", "2y", "5y", "never"] })],
     defaults: (v) => {
       const days = object2(v).auto_delete_chats_after_days;
       return { period: days == null ? "never" : { 30: "30d", 60: "60d", 90: "90d", 180: "6m", 365: "1y", 730: "2y", 1825: "5y" }[Number(days)] ?? "90d" };
@@ -90816,7 +91890,7 @@ var SETTINGS_PAGES = [
     title: "Share Debug Logs",
     parent: "privacy",
     auth: true,
-    fields: [field("duration", "Sharing duration", "choice", { options: ["1h", "24h", "7d"] })],
+    fields: [field2("duration", "Sharing duration", "choice", { options: ["1h", "24h", "7d"] })],
     actions: [{ id: "share", label: "Share debug logs", confirm: "Share diagnostic logs with support?", run: (c, d) => c.settingsPost("debug-session", { duration: d.duration || "1h" }) }]
   },
   { route: "billing/overview", title: "Overview", parent: "billing", auth: true, billing: true, load: (c) => c.settingsGet("billing") },
@@ -90828,7 +91902,7 @@ var SETTINGS_PAGES = [
     auth: true,
     billing: true,
     load: (c) => c.listInvoices(),
-    fields: [field("invoice_id", "Invoice ID for refund", "text")],
+    fields: [field2("invoice_id", "Invoice ID for refund", "text")],
     actions: [{ id: "refund", label: "Request refund", confirm: "Request a refund for this invoice?", run: (c, d) => d.invoice_id.trim() ? c.requestRefund(d.invoice_id.trim()) : Promise.reject(new Error("Enter an invoice ID.")) }]
   },
   {
@@ -90838,7 +91912,7 @@ var SETTINGS_PAGES = [
     auth: true,
     billing: true,
     load: (c) => c.listBankTransferOrders(),
-    fields: [field("credits", "Credits to buy", "number", { required: true, validate: positive("Credits") })],
+    fields: [field2("credits", "Credits to buy", "number", { required: true, validate: positive("Credits") })],
     actions: [{ id: "create-order", label: "Create bank transfer order", confirm: "Create a bank transfer order for these credits?", run: (c, d) => c.createBankTransferOrder(Number(d.credits)) }]
   },
   {
@@ -90848,7 +91922,7 @@ var SETTINGS_PAGES = [
     auth: true,
     billing: true,
     load: (c) => c.listRedeemedGiftCards(),
-    fields: [field("code", "Gift card code", "text", { required: true, validate: required("Gift card code") })],
+    fields: [field2("code", "Gift card code", "text", { required: true, validate: required("Gift card code") })],
     actions: [{ id: "redeem", label: "Redeem gift card", run: (c, d) => c.redeemGiftCard(d.code) }]
   },
   {
@@ -90858,7 +91932,7 @@ var SETTINGS_PAGES = [
     auth: true,
     billing: true,
     load: (c) => c.listPurchasedGiftCards(),
-    fields: [field("credits", "Gift card credits", "number", { required: true, validate: positive("Gift card credits") })],
+    fields: [field2("credits", "Gift card credits", "number", { required: true, validate: positive("Gift card credits") })],
     actions: [{ id: "create-order", label: "Create gift card order", confirm: "Create a gift card bank transfer order?", run: (c, d) => c.createGiftCardBankTransferOrder(Number(d.credits)) }]
   },
   {
@@ -90870,7 +91944,7 @@ var SETTINGS_PAGES = [
     description: "The server fixes the trigger threshold at 100 credits.",
     requiresLoad: true,
     load: user,
-    fields: [field("enabled", "Enabled", "boolean"), field("amount", "Credit amount", "number", { required: true, validate: (v) => Number.isSafeInteger(Number(v)) && Number(v) >= 0 ? null : "Credit amount must be a non-negative whole number." }), field("currency", "Currency", "choice", { options: ["eur", "usd"] }), field("email", "Receipt email", "text", { validate: (v) => v ? email(v) : null })],
+    fields: [field2("enabled", "Enabled", "boolean"), field2("amount", "Credit amount", "number", { required: true, validate: (v) => Number.isSafeInteger(Number(v)) && Number(v) >= 0 ? null : "Credit amount must be a non-negative whole number." }), field2("currency", "Currency", "choice", { options: ["eur", "usd"] }), field2("email", "Receipt email", "text", { validate: (v) => v ? email(v) : null })],
     defaults: (v) => {
       const o = object2(v);
       return { enabled: bool(o.auto_topup_low_balance_enabled ?? o.auto_topup_enabled), amount: String(o.auto_topup_low_balance_amount ?? o.auto_topup_amount ?? 0), currency: String(o.auto_topup_low_balance_currency ?? o.auto_topup_currency ?? "eur").toLowerCase(), email: String(o.email ?? "") };
@@ -90885,7 +91959,7 @@ var SETTINGS_PAGES = [
     requiresLoad: true,
     description: "Notifications use your verified account email. Enter it only if you need to confirm the address.",
     load: (c) => c.getEmailNotificationSettings(),
-    fields: [field("enabled", "Enabled", "boolean"), field("email", "Verified email (optional)", "text", { validate: (v) => v ? email(v) : null }), field("ai", "AI responses", "boolean"), field("backup", "Backup reminder", "boolean"), field("webhook", "Webhook chats", "boolean")],
+    fields: [field2("enabled", "Enabled", "boolean"), field2("email", "Verified email (optional)", "text", { validate: (v) => v ? email(v) : null }), field2("ai", "AI responses", "boolean"), field2("backup", "Backup reminder", "boolean"), field2("webhook", "Webhook chats", "boolean")],
     defaults: (v) => {
       const o = object2(v), p = object2(o.preferences);
       return { enabled: bool(o.enabled), email: "", ai: bool(p.aiResponses), backup: bool(p.backupReminder), webhook: bool(p.webhookChats) };
@@ -90898,7 +91972,7 @@ var SETTINGS_PAGES = [
     parent: "developers",
     auth: true,
     load: (c) => c.listApiKeys(),
-    fields: [field("name", "New key name", "text", { required: true, validate: required("Key name") }), field("key_id", "Key ID to revoke", "text")],
+    fields: [field2("name", "New key name", "text", { required: true, validate: required("Key name") }), field2("key_id", "Key ID to revoke", "text")],
     actions: [
       { id: "create", label: "Create full-access key", confirm: "Create a full-access API key with unlimited credits and no expiration? The key is shown once.", run: (c, d) => c.createApiKey({ name: d.name }) },
       { id: "revoke", label: "Revoke key ID", confirm: "Revoke this API key permanently?", run: (c, d) => d.key_id.trim() ? c.revokeApiKey(d.key_id.trim()) : Promise.reject(new Error("Enter a key ID to revoke.")) }
@@ -90917,7 +91991,7 @@ var SETTINGS_PAGES = [
     parent: "newsletter",
     auth: true,
     load: (c) => c.getNewsletterCategories(),
-    fields: [field("updates", "Updates", "boolean"), field("tips", "Tips", "boolean"), field("daily", "Daily inspiration", "boolean")],
+    fields: [field2("updates", "Updates", "boolean"), field2("tips", "Tips", "boolean"), field2("daily", "Daily inspiration", "boolean")],
     defaults: (v) => {
       const o = object2(object2(v).categories ?? v);
       return { updates: bool(o.updates_and_announcements), tips: bool(o.tips_and_tricks), daily: bool(o.daily_inspirations) };
@@ -90928,7 +92002,7 @@ var SETTINGS_PAGES = [
     route: "newsletter/subscribe",
     title: "Subscribe",
     parent: "newsletter",
-    fields: [field("email", "Email", "text", { required: true, validate: email }), field("language", "Language", "text", { required: true, validate: (v) => /^[a-z]{2}$/.test(v) ? null : "Use a two-letter language code." }), field("darkmode", "Dark newsletter", "boolean")],
+    fields: [field2("email", "Email", "text", { required: true, validate: email }), field2("language", "Language", "text", { required: true, validate: (v) => /^[a-z]{2}$/.test(v) ? null : "Use a two-letter language code." }), field2("darkmode", "Dark newsletter", "boolean")],
     save: (c, d) => c.subscribeNewsletter(d.email, d.language, d.darkmode === "on")
   },
   {
@@ -90937,7 +92011,7 @@ var SETTINGS_PAGES = [
     parent: "settings_memories",
     auth: true,
     load: (c) => c.listMemories({ personal: true }),
-    fields: [field("memory_id", "Memory ID to delete", "text")],
+    fields: [field2("memory_id", "Memory ID to delete", "text")],
     actions: [{ id: "delete", label: "Delete memory", confirm: "Delete this memory permanently?", run: (c, d) => d.memory_id.trim() ? c.deleteMemory(d.memory_id.trim(), { personal: true }) : Promise.reject(new Error("Enter a memory ID.")) }]
   },
   web("account/email", "Email", "account", "Changing email requires browser identity verification."),
@@ -90959,7 +92033,7 @@ var SETTINGS_PAGES = [
 ];
 var settingsPage = (route2) => SETTINGS_PAGES.find((page) => page.route === route2);
 function settingsChildren(route2, options) {
-  return SETTINGS_PAGES.filter((page) => page.parent === route2 && (!page.auth || options.authenticated) && (!page.billing || options.paymentEnabled) && (!page.admin || options.isAdmin === true) && (!options.restricted || !["account", "teams", "settings_memories", "billing"].includes(page.route.split("/")[0])) && (page.route !== "pricing" || !options.authenticated) && (page.route !== "projects" || options.features?.has("projects") !== false) && (page.route !== "teams" || options.features?.has("teams") !== false));
+  return SETTINGS_PAGES.filter((page) => page.parent === route2 && (!page.auth || options.authenticated) && (!page.billing || options.paymentEnabled) && (!page.admin || options.isAdmin === true) && (!options.restricted || !["account", "settings_memories", "billing"].includes(page.route.split("/")[0])) && (page.route !== "pricing" || !options.authenticated) && (page.route !== "projects" || options.features?.has("projects") !== false) && (!page.route.startsWith("teams") || options.features?.has("teams") !== false) && (!page.teamRoles || page.teamRoles.includes(options.teamRole ?? "")));
 }
 
 // src/tuiSettings.ts
@@ -90994,6 +92068,7 @@ function createTuiSettingsState(owner, options = {}) {
     authenticated: options.authenticated ?? true,
     restricted: options.restricted ?? false,
     isAdmin: false,
+    teamRole: "",
     paymentEnabled: options.paymentEnabled ?? false,
     paymentChecked: false,
     features: options.features,
@@ -91056,10 +92131,11 @@ function syncTuiSettingsOwner(ctx) {
 function available(page, state) {
   if (page.auth && !state.authenticated) return false;
   if (page.admin && !state.isAdmin) return false;
-  if (state.restricted && ["account", "teams", "settings_memories", "billing"].includes(page.route.split("/")[0])) return false;
+  if (page.teamRoles && !page.teamRoles.includes(state.teamRole)) return false;
+  if (state.restricted && ["account", "settings_memories", "billing"].includes(page.route.split("/")[0])) return false;
   if (page.billing && !state.paymentEnabled) return false;
   if (page.route === "projects" && state.features?.has("projects") === false) return false;
-  if (page.route === "teams" && state.features?.has("teams") === false) return false;
+  if (page.route.startsWith("teams") && state.features?.has("teams") === false) return false;
   return true;
 }
 function nearestRoute(route2, state) {
@@ -91083,8 +92159,16 @@ async function loadPage(ctx, page) {
   ctx.render();
   try {
     const value = await page.load(ctx.client);
-    if (!ownerValid(ctx, owner) || state.generation !== generation) return;
+    if (!ownerValid(ctx, owner)) {
+      ctx.render();
+      return;
+    }
+    if (state.generation !== generation) return;
     state.data[page.route] = value;
+    if (page.route === "teams") {
+      const teams = asObject(value).teams;
+      state.teamRole = Array.isArray(teams) ? String(asObject(teams.find((team) => asObject(team).team_id === asObject(value).active_team_id)).role ?? "") : "";
+    }
     if (page.defaults) {
       const defaults = page.defaults(value);
       const changed = state.dirtyFields[page.route];
@@ -91126,7 +92210,7 @@ async function openTuiSettingsPage(state, route2, ctx) {
   state.lastResult[next] = void 0;
   state.generation++;
   const page = settingsPage(next);
-  if (page.fields && !state.drafts[next]) state.drafts[next] = Object.fromEntries(page.fields.map((field2) => [field2.id, field2.kind === "boolean" ? "off" : field2.options?.[0] ?? ""]));
+  if (page.fields && !state.drafts[next]) state.drafts[next] = Object.fromEntries(page.fields.map((field3) => [field3.id, field3.kind === "boolean" ? "off" : field3.options?.[0] ?? ""]));
   if (next === "newsletter/subscribe" && !state.dirty[next] && !state.drafts[next]?.language) state.drafts[next].language = "en";
   ctx.render();
   if (next === "main" && state.authenticated) {
@@ -91157,20 +92241,36 @@ async function loadCapabilities(ctx) {
   } catch {
   }
 }
-function validateField(field2, value) {
-  if (field2.required && !value.trim()) return `${field2.label} is required.`;
-  if (field2.kind === "number" && (!Number.isFinite(Number(value)) || !Number.isSafeInteger(Number(value)))) return `${field2.label} must be a whole number.`;
-  if (field2.kind === "choice" && field2.options && !field2.options.includes(value)) return `Choose a listed ${field2.label.toLowerCase()}.`;
-  if (field2.kind === "boolean" && value !== "on" && value !== "off") return `${field2.label} must be on or off.`;
-  return field2.validate?.(value) ?? null;
+function validateField(field3, value) {
+  if (field3.required && !value.trim()) return `${field3.label} is required.`;
+  if (field3.kind === "number" && (!Number.isFinite(Number(value)) || !Number.isSafeInteger(Number(value)))) return `${field3.label} must be a whole number.`;
+  if (field3.kind === "choice" && field3.options && !field3.options.includes(value)) return `Choose a listed ${field3.label.toLowerCase()}.`;
+  if (field3.kind === "boolean" && value !== "on" && value !== "off") return `${field3.label} must be on or off.`;
+  return field3.validate?.(value) ?? null;
+}
+function visibleActions(page, state) {
+  const loaded = asObject(state.data[page.route]);
+  return (page.actions ?? []).filter((action2) => (!action2.authenticatedOnly || state.authenticated) && (!action2.roles || action2.roles.includes(String(loaded.role ?? ""))));
+}
+function visibleSave(page, state) {
+  return Boolean(page.save) && (!page.saveRoles || page.saveRoles.includes(String(asObject(state.data[page.route]).role ?? "")));
+}
+function editableFields(page, state) {
+  return page.saveRoles && !visibleSave(page, state) ? [] : page.fields ?? [];
 }
 function validateTuiSettingsDraft(page, draft) {
-  for (const field2 of page.fields ?? []) {
-    const error = validateField(field2, draft[field2.id] ?? "");
+  for (const field3 of page.fields ?? []) {
+    const error = validateField(field3, draft[field3.id] ?? "");
     if (error) return error;
   }
   if (page.route === "billing/auto-topup/low-balance" && draft.enabled === "on" && !draft.email) return "Email is required when auto top-up is enabled.";
   if (page.route === "billing/auto-topup/low-balance" && draft.enabled === "on" && Number(draft.amount) <= 0) return "Credit amount must be positive when auto top-up is enabled.";
+  if (page.route === "teams/security") {
+    const domains = draft.allowed_email_domains?.split(",").map((value) => value.trim().toLowerCase()).filter(Boolean) ?? [];
+    if (draft.restrict_email_domains === "on" && !domains.length) return "Add at least one allowed email domain before enabling restrictions.";
+    if (domains.length > 50) return "Use at most 50 allowed email domains.";
+    if (domains.some((domain) => !/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$/.test(domain))) return "Enter valid comma-separated email domains.";
+  }
   return null;
 }
 async function runMutation(ctx, actionId) {
@@ -91183,19 +92283,20 @@ async function runMutation(ctx, actionId) {
     ctx.render();
     return;
   }
-  const action2 = page.actions?.find((item) => item.id === actionId);
+  const action2 = visibleActions(page, state).find((item) => item.id === actionId);
+  if (actionId === "save" && !visibleSave(page, state)) return;
   if (actionId !== "save" && !action2 || action2?.authenticatedOnly && !state.authenticated) return;
   const draft = state.drafts[page.route] ?? {};
   const requiredForAction = { create: "name", redeem: "code", revoke: "key_id", delete: page.route === "settings_memories/list" ? "memory_id" : "file_id", refund: "invoice_id", "create-order": "credits" };
   const fieldId = requiredForAction[actionId];
-  const field2 = fieldId ? page.fields?.find((item) => item.id === fieldId) : void 0;
-  const validation = actionId === "save" ? validateTuiSettingsDraft(page, draft) : field2 ? validateField({ ...field2, required: true }, draft[field2.id] ?? "") : null;
+  const field3 = fieldId ? page.fields?.find((item) => item.id === fieldId) : void 0;
+  const validation = actionId === "save" ? validateTuiSettingsDraft(page, draft) : action2?.requiredFields?.map((id) => page.fields?.find((candidate) => candidate.id === id)).filter((item) => Boolean(item)).map((item) => validateField({ ...item, required: true }, draft[item.id] ?? "")).find(Boolean) ?? (field3 ? validateField({ ...field3, required: true }, draft[field3.id] ?? "") : null);
   if (validation) {
     state.error = validation;
     ctx.render();
     return;
   }
-  if (action2?.confirm && state.confirmation !== actionId) {
+  if ((action2?.confirm || actionId === "save" && page.saveConfirm) && state.confirmation !== actionId) {
     state.confirmation = actionId;
     state.confirmationChoice = "confirm";
     state.error = null;
@@ -91210,7 +92311,7 @@ async function runMutation(ctx, actionId) {
   ctx.render();
   try {
     const result = await (action2 ? action2.run(ctx.client, { ...draft }) : page.save(ctx.client, { ...draft }));
-    if (actionId === "logout") {
+    if (actionId === "logout" || page.route === "teams/select" && (actionId === "select" || actionId === "personal")) {
       ctx.render();
       return;
     }
@@ -91242,9 +92343,10 @@ function actionIds(state) {
   const page = settingsPage(state.route);
   return [
     ...settingsChildren(state.route, state).map((child) => `route:${child.route}`),
-    ...(page.fields ?? []).map((field2) => `field:${field2.id}`),
-    ...page.save ? ["save"] : [],
-    ...(page.actions ?? []).filter((action2) => !action2.authenticatedOnly || state.authenticated).map((action2) => `action:${action2.id}`),
+    ...(page.rows?.(state.data[page.route]) ?? []).map((row3) => `row:${row3.id}`),
+    ...editableFields(page, state).map((field3) => `field:${field3.id}`),
+    ...visibleSave(page, state) ? ["save"] : [],
+    ...visibleActions(page, state).map((action2) => `action:${action2.id}`),
     ...state.oneTimeSecret ? ["reveal-secret"] : [],
     ...page.webOnly ? ["web"] : []
   ];
@@ -91294,17 +92396,52 @@ async function handleTuiSettingsCommand(ctx, arg) {
     await openTuiSettingsPage(state, arg.slice(6), ctx);
     return true;
   }
+  if (arg.startsWith("row:")) {
+    const page = settingsPage(state.route);
+    const row3 = page?.rows?.(state.data[page.route]).find((candidate) => candidate.id === arg.slice(4));
+    if (!row3) return true;
+    if (row3.switchTeam) {
+      if (ctx.client.getActiveTeamId() === row3.switchTeam) await openTuiSettingsPage(state, "teams/details", ctx);
+      else {
+        const owner = currentOwner(ctx), generation = ++state.generation;
+        state.busy = true;
+        state.error = null;
+        ctx.render();
+        try {
+          const team = await ctx.client.getTeam(row3.switchTeam);
+          if (!ownerValid(ctx, owner) || state.generation !== generation) return true;
+          ctx.client.setActiveTeamId(team.team_id ?? row3.switchTeam);
+          ctx.render();
+        } catch (error) {
+          if (ownerValid(ctx, owner) && state.generation === generation) state.error = safeText2(error instanceof Error ? error.message : error);
+        } finally {
+          if (ownerValid(ctx, owner) && state.generation === generation) {
+            state.busy = false;
+            ctx.render();
+          }
+        }
+      }
+      return true;
+    }
+    if (row3.route) {
+      await openTuiSettingsPage(state, row3.route, ctx);
+      if (row3.field && row3.value !== void 0) (state.drafts[row3.route] ??= {})[row3.field] = row3.value;
+      if (row3.details) state.data[row3.route] = { ...asObject(state.data[row3.route]), ...row3.details };
+      ctx.render();
+    }
+    return true;
+  }
   if (arg.startsWith("field:")) {
     const id = arg.slice(6), page = settingsPage(state.route);
-    const field2 = page.fields?.find((item) => item.id === id);
-    if (!field2) return true;
-    if (state.loading && (field2.kind === "boolean" || field2.kind === "choice")) return true;
+    const field3 = editableFields(page, state).find((item) => item.id === id);
+    if (!field3) return true;
+    if (state.loading && (field3.kind === "boolean" || field3.kind === "choice")) return true;
     const draft = state.drafts[page.route] ??= {};
-    if (field2.kind === "boolean") {
+    if (field3.kind === "boolean") {
       draft[id] = draft[id] === "on" ? "off" : "on";
       markDraftFieldChanged(state, id);
-    } else if (field2.kind === "choice") {
-      const choices = field2.options ?? [];
+    } else if (field3.kind === "choice") {
+      const choices = field3.options ?? [];
       draft[id] = choices[(choices.indexOf(draft[id] ?? "") + 1) % choices.length] ?? "";
       markDraftFieldChanged(state, id);
     } else state.editing = id;
@@ -91360,8 +92497,8 @@ async function handleTuiSettingsKey(ctx, chunk, key) {
   if (key.ctrl && name === "u") {
     const selected = actionIds(state)[state.selection] ?? "";
     const id = state.editing ?? (selected.startsWith("field:") ? selected.slice(6) : "");
-    const field2 = settingsPage(state.route)?.fields?.find((item) => item.id === id);
-    if (field2 && (field2.kind === "text" || field2.kind === "number")) {
+    const field3 = settingsPage(state.route)?.fields?.find((item) => item.id === id);
+    if (field3 && (field3.kind === "text" || field3.kind === "number")) {
       const draft = state.drafts[state.route] ??= {};
       draft[id] = "";
       markDraftFieldChanged(state, id);
@@ -91433,7 +92570,11 @@ var summaryFields = {
   "account/storage": [["used_bytes", "Used bytes"], ["total_bytes", "Total bytes"], ["file_count", "Files"]],
   "account/chats": [["chat_count", "Chats"], ["message_count", "Messages"]],
   "billing/overview": [["credits", "Credits"], ["balance", "Balance"], ["currency", "Currency"]],
-  "billing/usage": [["total_credits", "Credits used"], ["total_cost", "Total cost"], ["currency", "Currency"]]
+  "billing/usage": [["total_credits", "Credits used"], ["total_cost", "Total cost"], ["currency", "Currency"]],
+  "teams/details": [["team_id", "Team ID"], ["name", "Name"], ["description", "Description"], ["role", "Your role"]],
+  "teams/profile": [["user_id", "User ID"], ["display_name", "Display name"], ["role", "Role"]],
+  "teams/member": [["selected_name", "Name"], ["selected_user_id", "User ID"], ["selected_role", "Role"]],
+  "teams/billing": [["team_id", "Team ID"], ["balance_credits", "Team credits"]]
 };
 var listFields = {
   "account/storage/files": { key: "files", fields: [["filename", "File"], ["id", "File ID"], ["size", "Bytes"]] },
@@ -91442,12 +92583,18 @@ var listFields = {
   "billing/gift-cards": { key: "gift_cards", fields: [["id", "Gift card ID"], ["credits", "Credits"], ["status", "Status"]] },
   "billing/gift-cards/bank-transfer": { key: "orders", fields: [["id", "Order ID"], ["status", "Status"], ["credits", "Credits"]] },
   "developers/api-keys": { key: "api_keys", fields: [["name", "Name"], ["id", "Key ID"], ["full_access", "Full access"], ["expires_at", "Expires"]] },
-  "settings_memories/list": { key: "memories", fields: [["title", "Title"], ["id", "Memory ID"]] }
+  "settings_memories/list": { key: "memories", fields: [["title", "Title"], ["id", "Memory ID"]] },
+  "teams": { key: "teams", fields: [["name", "Team"], ["team_id", "Team ID"], ["role", "Your role"]] },
+  "teams/members": { key: "members", fields: [["display_name", "Name"], ["user_id", "User ID"], ["role", "Role"], ["status", "Status"]] },
+  "teams/access": { key: "requests", fields: [["access_request_id", "Request ID"], ["status", "Status"]] },
+  "teams/billing/usage": { key: "usage", fields: [["workspace_type", "Workspace"], ["credit_amount", "Credits"], ["created_at", "Time"]] }
 };
 var resultFields = {
   "billing/bank-transfer": [["order_id", "Order ID"], ["payment_reference", "Reference"], ["iban", "IBAN"], ["recipient", "Recipient"], ["amount", "Amount"], ["currency", "Currency"]],
   "billing/gift-cards/bank-transfer": [["order_id", "Order ID"], ["payment_reference", "Reference"], ["iban", "IBAN"], ["recipient", "Recipient"], ["amount", "Amount"], ["currency", "Currency"]],
-  "billing/gift-cards": [["credits", "Credits redeemed"]]
+  "billing/gift-cards": [["credits", "Credits redeemed"]],
+  "teams/create": [["team_id", "Team ID"]],
+  "teams/invite": [["invite_id", "Invite ID"], ["invite_url", "Invite link"]]
 };
 function scalarValue(value) {
   if (typeof value === "boolean") return value ? "Yes" : "No";
@@ -91463,6 +92610,7 @@ function allowedRows(value, fields, width) {
 }
 function settingsDataLines(page, value, width, result = false) {
   if (result) return allowedRows(value, resultFields[page.route] ?? [], width);
+  if (page.rows) return [];
   if (page.save && page.defaults && page.fields) {
     const defaults = page.defaults(value);
     return allowedRows(defaults, page.fields.map(({ id, label: label3 }) => [id, label3]), width);
@@ -91493,50 +92641,59 @@ function renderTuiSettings(state, width) {
   if (state.ownerStale) return [line("Settings"), line("Account or team changed. Reopen Settings."), line("Close Settings", "close")];
   if (state.confirmation) {
     lines.push(
-      ...wrapCells(page.actions?.find((action2) => action2.id === state.confirmation)?.confirm ?? "Confirm operation?", width),
+      ...wrapWords((state.confirmation === "save" ? page.saveConfirm : page.actions?.find((action2) => action2.id === state.confirmation)?.confirm) ?? "Confirm operation?", width),
       "",
       line(state.confirmationChoice === "confirm" ? "\u203A Confirm" : "  Confirm", "confirm", state.confirmationChoice === "confirm"),
       line(state.confirmationChoice === "cancel" ? "\u203A Cancel" : "  Cancel", "cancel", state.confirmationChoice === "cancel"),
       "",
-      ...wrapCells("Tab choose \xB7 Enter select \xB7 Esc cancel", width)
+      ...wrapWords("Tab choose \xB7 Enter select \xB7 Esc cancel", width)
     );
     return lines;
   }
   if (state.route === "main") {
     const profile = state.authenticated ? [state.profile.username || "Signed in", state.profile.team || "Personal", state.restricted ? "Paired session" : "", state.profile.email].filter(Boolean).join(" \xB7 ") : "Signed out";
-    lines.push(...wrapCells(profile, width), "");
+    const profileLines = wrapWords(profile, width);
+    lines.push(profileLines[0] ?? "", profileLines.length > 2 ? truncateCells(profileLines.slice(1).join(" "), width) : profileLines[1] ?? "", "");
   }
-  if (page.description) lines.push(...wrapCells(page.description, width), "");
-  if (state.message) lines.push(...wrapCells(`\u2713 ${state.message}`, width), "");
-  if (state.error) lines.push(...wrapCells(`Error: ${state.error}`, width), "");
+  if (page.description) lines.push(...wrapWords(page.description, width), "");
+  if (state.message) lines.push(...wrapWords(`\u2713 ${state.message}`, width), "");
+  if (state.error) lines.push(...wrapWords(`Error: ${state.error}`, width), "");
   if (state.busy) lines.push("Working\u2026", "");
   const ids = actionIds(state);
   for (const child of settingsChildren(state.route, state)) {
     const id = `route:${child.route}`, index = ids.indexOf(id);
     lines.push(line(truncateCells(`${index + 1}. ${state.selection === index ? "\u203A " : "  "}${child.title}${child.webOnly ? "  [Web]" : ""}`, width), id, state.selection === index));
   }
+  const rows2 = page.rows?.(state.data[page.route]) ?? [];
+  if (rows2.length) {
+    lines.push("", "Select an item:");
+    for (const row3 of rows2) {
+      const id = `row:${row3.id}`, index = ids.indexOf(id);
+      lines.push(line(truncateCells(`${index + 1}. ${state.selection === index ? "\u203A " : "  "}${safeText2(row3.label)}`, width), id, state.selection === index));
+    }
+  }
   const draft = state.drafts[page.route] ?? {};
-  if (page.fields?.length) {
+  if (editableFields(page, state).length) {
     lines.push("", "Edit fields, then Save:");
-    for (const field2 of page.fields) {
-      const id = `field:${field2.id}`, index = ids.indexOf(id), value = draft[field2.id] ?? "";
-      const pendingChoice = state.loading && (field2.kind === "boolean" || field2.kind === "choice");
+    for (const field3 of editableFields(page, state)) {
+      const id = `field:${field3.id}`, index = ids.indexOf(id), value = draft[field3.id] ?? "";
+      const pendingChoice = state.loading && (field3.kind === "boolean" || field3.kind === "choice");
       const visibleValue = pendingChoice && state.data[page.route] === void 0 ? "Loading\u2026" : value || "\u2014";
-      const suffix = pendingChoice ? "" : field2.kind === "boolean" || field2.kind === "choice" ? "  \u21BB" : state.editing === field2.id ? "  [edit]" : "";
-      lines.push(line(truncateCells(`${index + 1}. ${state.selection === index ? "\u203A " : "  "}${field2.label}: ${visibleValue}${suffix}`, width), pendingChoice ? void 0 : id, state.selection === index));
-      if (field2.hint && state.editing === field2.id) lines.push(...wrapCells(`   ${field2.hint}`, width));
+      const suffix = pendingChoice ? "" : field3.kind === "boolean" || field3.kind === "choice" ? "  \u21BB" : state.editing === field3.id ? "  [edit]" : "";
+      lines.push(line(truncateCells(`${index + 1}. ${state.selection === index ? "\u203A " : "  "}${field3.label}: ${visibleValue}${suffix}`, width), pendingChoice ? void 0 : id, state.selection === index));
+      if (field3.hint && state.editing === field3.id) lines.push(...wrapWords(`   ${field3.hint}`, width));
     }
   }
-  if (page.save) {
+  if (visibleSave(page, state)) {
     const index = ids.indexOf("save");
     lines.push("", line(`${index + 1}. Save${state.dirty[page.route] ? " changes" : ""}`, "save", state.selection === index));
   }
-  for (const action2 of (page.actions ?? []).filter((action3) => !action3.authenticatedOnly || state.authenticated)) {
+  for (const action2 of visibleActions(page, state)) {
     const id = `action:${action2.id}`, index = ids.indexOf(id);
     lines.push(line(`${index + 1}. ${action2.label}`, id, state.selection === index));
   }
   if (page.webOnly) {
-    lines.push("", ...wrapCells(page.webReason ?? "This action requires the browser.", width));
+    lines.push("", ...wrapWords(page.webReason ?? "This action requires the browser.", width));
     const index = ids.indexOf("web");
     lines.push(line(`${index + 1}. Open web destination`, "web", state.selection === index), ...wrapCells(settingsWebDestination(state.webUrl, page.webOnly), width));
   }
@@ -91553,7 +92710,7 @@ function renderTuiSettings(state, width) {
     lines.push("", line(`${index + 1}. ${state.secretRevealed ? "Hide" : "Reveal"} new API key`, "reveal-secret", state.selection === index));
     if (state.secretRevealed) lines.push("Shown once; store securely:", ...wrapCells(state.oneTimeSecret, width));
   }
-  lines.push("", ...wrapCells("\u2191/\u2193 or Tab select \xB7 Enter open/edit \xB7 Ctrl+S save \xB7 Ctrl+U clear field \xB7 PgUp/PgDn scroll \xB7 Esc back/close", width));
+  lines.push("", ...wrapWords("\u2191/\u2193 or Tab select \xB7 Enter open/edit \xB7 Ctrl+S save \xB7 Ctrl+U clear field \xB7 PgUp/PgDn scroll \xB7 Esc back/close", width));
   return lines;
 }
 
@@ -91858,332 +93015,6 @@ function renderTuiModelSelector(state, width) {
 
 // src/tuiModelSelectorShell.ts
 import { createHash as createHash21 } from "crypto";
-
-// src/tuiCachedWorkspaces.ts
-import { createHash as createHash20 } from "crypto";
-
-// src/tuiWorkspaceCache.ts
-import { createHmac as createHmac3 } from "crypto";
-import { chmodSync as chmodSync8, mkdirSync as mkdirSync15, readFileSync as readFileSync16, renameSync as renameSync8, rmSync as rmSync9, statSync as statSync3, writeFileSync as writeFileSync11 } from "fs";
-import { join as join18 } from "path";
-import { deserialize, serialize } from "v8";
-import lockfile4 from "proper-lockfile";
-var TUI_WORKSPACE_CACHE_FILE = "tui_workspace_cache.json";
-var VERSION = 1;
-var MAX_ENTRIES = 32;
-var MAX_ENTRY_BYTES = 4 * 1024 * 1024;
-var MAX_PLAINTEXT_BYTES = 16 * 1024 * 1024;
-var MAX_FILE_BYTES2 = 24 * 1024 * 1024;
-var KEY_PATTERN = /^[\x21-\x7e]{1,200}$/;
-function contextSignature(session, stateDir2) {
-  return createHmac3("sha256", Buffer.from(session.masterKeyExportedB64, "base64")).update(JSON.stringify([
-    VERSION,
-    stateDir2,
-    process.env.OPENMATES_PROFILE ?? "",
-    session.apiUrl,
-    session.hashedEmail,
-    session.activeTeamId ?? null
-  ])).digest("hex");
-}
-function isRecord4(value) {
-  return !!value && typeof value === "object" && !Array.isArray(value);
-}
-function createTuiWorkspaceCache(session, currentSession = loadSession) {
-  const stateDir2 = resolveStateDir();
-  const path2 = join18(stateDir2, TUI_WORKSPACE_CACHE_FILE);
-  const context = contextSignature(session, stateDir2);
-  const loginCreatedAt = session.createdAt;
-  const keyBytes = base64ToBytes(session.masterKeyExportedB64);
-  if (keyBytes.length !== 32) throw new Error("Workspace cache requires a 256-bit master key.");
-  const isCurrent = () => {
-    try {
-      const live = currentSession();
-      const persisted = loadSession();
-      return !!live && !!persisted && live.createdAt === loginCreatedAt && persisted.createdAt === loginCreatedAt && contextSignature(live, stateDir2) === context && contextSignature(persisted, stateDir2) === context;
-    } catch {
-      return false;
-    }
-  };
-  const read = async () => {
-    const empty2 = () => ({ version: VERSION, entries: {} });
-    try {
-      if (statSync3(path2).size > MAX_FILE_BYTES2) return empty2();
-      const disk = readFileSync16(path2, "utf8");
-      if (Buffer.byteLength(disk) > MAX_FILE_BYTES2) return empty2();
-      const envelope = JSON.parse(disk);
-      if (!isRecord4(envelope) || envelope.version !== VERSION || envelope.context !== context || typeof envelope.ciphertext !== "string") return empty2();
-      const plaintext = await decryptWithAesGcmCombined(envelope.ciphertext, keyBytes, context);
-      if (plaintext === null || Buffer.byteLength(plaintext) > MAX_PLAINTEXT_BYTES) return empty2();
-      const parsed = JSON.parse(plaintext);
-      if (!isRecord4(parsed) || parsed.version !== VERSION || !isRecord4(parsed.entries)) return empty2();
-      const entries = {};
-      for (const [key, value] of Object.entries(parsed.entries)) {
-        if (!KEY_PATTERN.test(key) || !isRecord4(value) || typeof value.data !== "string" || typeof value.touchedAt !== "number" || !Number.isFinite(value.touchedAt) || value.touchedAt > Date.now() || value.data.length > MAX_ENTRY_BYTES * 2) continue;
-        entries[key] = { data: value.data, touchedAt: value.touchedAt };
-      }
-      return { version: VERSION, entries };
-    } catch {
-      return empty2();
-    }
-  };
-  const mutate = async (change) => {
-    if (!isCurrent()) return false;
-    mkdirSync15(stateDir2, { recursive: true, mode: 448 });
-    chmodSync8(stateDir2, 448);
-    const release2 = await lockfile4.lock(`${path2}.write`, {
-      realpath: false,
-      stale: 3e4,
-      retries: { retries: 20, factor: 1, minTimeout: 20, maxTimeout: 20 }
-    });
-    try {
-      if (!isCurrent()) return false;
-      const snapshot2 = await read();
-      if (!isCurrent()) return false;
-      change(snapshot2);
-      let plaintext = JSON.stringify(snapshot2);
-      while (Object.keys(snapshot2.entries).length > MAX_ENTRIES || Buffer.byteLength(plaintext) > MAX_PLAINTEXT_BYTES) {
-        const oldest = Object.entries(snapshot2.entries).sort((a, b) => a[1].touchedAt - b[1].touchedAt)[0];
-        if (!oldest) return false;
-        delete snapshot2.entries[oldest[0]];
-        plaintext = JSON.stringify(snapshot2);
-      }
-      const ciphertext = await encryptWithAesGcmCombined(plaintext, keyBytes, context);
-      if (!isCurrent()) return false;
-      const envelope = { version: VERSION, context, ciphertext };
-      const encoded = JSON.stringify(envelope);
-      if (Buffer.byteLength(encoded) > MAX_FILE_BYTES2) return false;
-      const temporary = `${path2}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
-      try {
-        writeFileSync11(temporary, encoded, { mode: 384, flag: "wx" });
-        chmodSync8(temporary, 384);
-        if (!isCurrent()) return false;
-        renameSync8(temporary, path2);
-      } finally {
-        rmSync9(temporary, { force: true });
-      }
-      return true;
-    } finally {
-      await release2();
-    }
-  };
-  return {
-    isCurrent,
-    async get(key) {
-      if (!KEY_PATTERN.test(key)) throw new Error("Invalid workspace cache key.");
-      if (!isCurrent()) return null;
-      const snapshot2 = await read();
-      if (!isCurrent()) return null;
-      const entry = snapshot2.entries[key];
-      if (!entry) return null;
-      try {
-        const bytes2 = Buffer.from(entry.data, "base64");
-        if (bytes2.length > MAX_ENTRY_BYTES) return null;
-        return deserialize(bytes2);
-      } catch {
-        return null;
-      }
-    },
-    async set(key, value) {
-      if (!KEY_PATTERN.test(key)) throw new Error("Invalid workspace cache key.");
-      const bytes2 = serialize(value);
-      if (bytes2.length > MAX_ENTRY_BYTES) return false;
-      return mutate((snapshot2) => {
-        snapshot2.entries[key] = { data: bytes2.toString("base64"), touchedAt: Date.now() };
-      });
-    },
-    async invalidate(key) {
-      if (key !== void 0 && !KEY_PATTERN.test(key)) throw new Error("Invalid workspace cache key.");
-      return mutate((snapshot2) => {
-        if (key === void 0) snapshot2.entries = {};
-        else delete snapshot2.entries[key];
-      });
-    }
-  };
-}
-
-// src/tuiCachedWorkspaces.ts
-var states = /* @__PURE__ */ new WeakMap();
-function stateFor(client2) {
-  let state = states.get(client2);
-  if (!state) {
-    state = { pending: /* @__PURE__ */ new Map(), generations: /* @__PURE__ */ new Map(), globalGeneration: 0, cacheOperations: Promise.resolve() };
-    states.set(client2, state);
-  }
-  return state;
-}
-function queueCacheOperation(state, operation) {
-  const result = state.cacheOperations.then(operation);
-  state.cacheOperations = result.then(() => {
-  }, () => {
-  });
-  return result;
-}
-function reportError(onError, error, hasCached) {
-  try {
-    onError?.(error, hasCached);
-  } catch {
-  }
-}
-function rawSessionFrom(client2) {
-  if (typeof client2.hasSession !== "function" || typeof client2.getSession !== "function") return null;
-  try {
-    if (!client2.hasSession()) return null;
-    return client2.getSession();
-  } catch {
-    return null;
-  }
-}
-function sessionFrom(client2) {
-  const session = rawSessionFrom(client2);
-  if (!session || typeof client2.apiUrl !== "string" || client2.apiUrl.replace(/\/$/, "") !== session.apiUrl.replace(/\/$/, "")) return null;
-  return session;
-}
-function identity2(session) {
-  return createHash20("sha256").update(JSON.stringify([
-    session.apiUrl,
-    session.hashedEmail,
-    session.activeTeamId ?? null,
-    session.createdAt,
-    session.masterKeyExportedB64
-  ])).digest("hex");
-}
-function contextFor2(client2) {
-  const session = sessionFrom(client2);
-  if (!session) {
-    const raw = rawSessionFrom(client2);
-    if (raw) {
-      const token2 = `${identity2(raw)}:${client2.apiUrl ?? ""}`;
-      return {
-        token: token2,
-        cache: null,
-        isCurrent: () => {
-          const current2 = rawSessionFrom(client2);
-          return !!current2 && `${identity2(current2)}:${client2.apiUrl ?? ""}` === token2;
-        }
-      };
-    }
-    const hasSessionApi = typeof client2.hasSession === "function" && typeof client2.getSession === "function";
-    return { token: "uncached", cache: null, isCurrent: () => !hasSessionApi };
-  }
-  const token = identity2(session);
-  const isCurrent = () => {
-    const current2 = sessionFrom(client2);
-    return !!current2 && identity2(current2) === token;
-  };
-  try {
-    const cache = createTuiWorkspaceCache(session, () => sessionFrom(client2));
-    return { token, cache: cache.isCurrent() ? cache : null, isCurrent };
-  } catch {
-    return { token, cache: null, isCurrent };
-  }
-}
-function pendingFor(client2, key, context, fetch2) {
-  const state = stateFor(client2);
-  const generation = state.generations.get(key) ?? 0;
-  const globalGeneration = state.globalGeneration;
-  const token = `${context.token}\0${key}`;
-  const isCurrent = () => context.isCurrent() && (state.generations.get(key) ?? 0) === generation && state.globalGeneration === globalGeneration;
-  const existing = state.pending.get(token);
-  if (existing && existing.generation === generation && existing.globalGeneration === globalGeneration && isCurrent()) {
-    return { promise: existing.promise, isCurrent };
-  }
-  const promise = Promise.resolve().then(fetch2).then(async (value) => {
-    if (isCurrent() && context.cache) {
-      try {
-        await queueCacheOperation(state, () => isCurrent() ? context.cache.set(key, value) : Promise.resolve(false));
-      } catch {
-      }
-    }
-    return value;
-  });
-  const pending = { key, context: context.token, generation, globalGeneration, promise };
-  state.pending.set(token, pending);
-  void promise.then(
-    () => {
-      if (state.pending.get(token) === pending) state.pending.delete(token);
-    },
-    () => {
-      if (state.pending.get(token) === pending) state.pending.delete(token);
-    }
-  );
-  return { promise, isCurrent };
-}
-async function loadCachedTuiWorkspace(client2, key, fetch2, publish, onError) {
-  const context = contextFor2(client2);
-  let cached = null;
-  if (context.cache) {
-    try {
-      cached = await context.cache.get(key);
-    } catch {
-    }
-  }
-  if (!context.isCurrent()) return null;
-  if (cached !== null) {
-    try {
-      await publish(cached, "cache");
-    } catch (error) {
-      reportError(onError, error, true);
-    }
-  }
-  const { promise, isCurrent } = pendingFor(client2, key, context, fetch2);
-  const deliver = async () => {
-    try {
-      const value = await promise;
-      if (!isCurrent()) return null;
-      await publish(value, "sync");
-      return value;
-    } catch (error) {
-      reportError(onError, error, cached !== null);
-      return null;
-    }
-  };
-  if (cached !== null) {
-    void deliver();
-    return cached;
-  }
-  return deliver();
-}
-function captureTuiWorkspaceOwner(client2) {
-  return contextFor2(client2).isCurrent;
-}
-async function readCachedTuiWorkspace(client2, key, ownerCurrent = () => true) {
-  if (!ownerCurrent()) return null;
-  const context = contextFor2(client2);
-  if (!context.cache) return null;
-  try {
-    const value = await context.cache.get(key);
-    return ownerCurrent() && context.isCurrent() ? value : null;
-  } catch {
-    return null;
-  }
-}
-async function invalidateCachedTuiWorkspace(client2, key, ownerCurrent = () => true) {
-  if (!ownerCurrent()) return false;
-  const state = stateFor(client2);
-  if (key === void 0) state.globalGeneration++;
-  else state.generations.set(key, (state.generations.get(key) ?? 0) + 1);
-  const context = contextFor2(client2);
-  if (!context.cache) return false;
-  try {
-    return await queueCacheOperation(state, () => ownerCurrent() && context.isCurrent() ? context.cache.invalidate(key) : Promise.resolve(false));
-  } catch {
-    return false;
-  }
-}
-async function writeCachedTuiWorkspace(client2, key, value, ownerCurrent = () => true) {
-  if (!ownerCurrent()) return false;
-  const state = stateFor(client2);
-  state.generations.set(key, (state.generations.get(key) ?? 0) + 1);
-  const context = contextFor2(client2);
-  if (!context.cache) return false;
-  try {
-    return await queueCacheOperation(state, () => ownerCurrent() && context.isCurrent() ? context.cache.set(key, value) : Promise.resolve(false));
-  } catch {
-    return false;
-  }
-}
-
-// src/tuiModelSelectorShell.ts
 function isTuiAiComposer(state) {
   return state.workspace === "chats" && ["start", "chats", "chat", "example"].includes(state.screen);
 }
@@ -92504,6 +93335,29 @@ function createTuiShareQr(url, origin, target) {
   return { url, lines, width, height: lines.length };
 }
 
+// src/tuiTaskList.ts
+function mergePartialTuiTasks(previous, page) {
+  if (!previous?.length) return page;
+  const freshIds = new Set(page.map((task) => task.taskId));
+  return [...page, ...previous.filter((task) => !freshIds.has(task.taskId))];
+}
+function loadTuiTaskList(client2, key, filters, publish, onError) {
+  return loadProgressiveCachedTuiWorkspace(client2, key, async (progress) => {
+    const masterKey = client2.getMasterKeyBytes();
+    let decrypted = [];
+    let received = 0;
+    const records = await client2.listUserTasks(filters, {
+      onPage: async (cumulative, complete) => {
+        const next = await decryptUserTasks(cumulative.slice(received), masterKey);
+        received = cumulative.length;
+        decrypted = [...decrypted, ...next];
+        await progress(decrypted, complete);
+      }
+    });
+    return received === records.length ? decrypted : decryptUserTasks(records, masterKey);
+  }, publish, onError, mergePartialTuiTasks);
+}
+
 // src/messageSegments.ts
 function parseMessageSegments(content, options = {}) {
   const segments2 = [];
@@ -93460,17 +94314,36 @@ async function loadTuiChatSettings(context, dialog) {
   dialog.items = [];
   dialog.error = void 0;
   context.render();
+  if (tab === "tasks") {
+    const current2 = () => dialog.ownerCurrent() && context.state.chrome === dialog && dialog.tab === tab && dialog.request === request && context.state.activeChatId === dialog.chatId;
+    await loadTuiTaskList(context.client, `chat:${dialog.chatId}:tasks`, { chatId: dialog.chatId }, (tasks, source, complete) => {
+      if (!current2()) return;
+      const tabs = visibleChatSettingsTabs(context.state), selectedCommand = dialog.field >= tabs.length ? chatSettingsActions(dialog, context.state)[dialog.field - tabs.length]?.command : void 0;
+      dialog.tasks = tasks;
+      dialog.loading = !complete;
+      dialog.error = complete ? void 0 : source === "cache" ? "Showing saved tasks. Syncing\u2026" : `Loading more tasks\u2026 ${tasks.length} available.`;
+      if (selectedCommand) {
+        const index = chatSettingsActions(dialog, context.state).findIndex((action2) => action2.command === selectedCommand);
+        if (index >= 0) dialog.field = tabs.length + index;
+      }
+      context.render();
+    }, (_error, hasUsable) => {
+      if (!current2()) return;
+      dialog.loading = false;
+      dialog.error = hasUsable ? "Showing saved or partially synced tasks. Refresh failed." : "Could not load tasks. Retry when connected.";
+      context.render();
+    });
+    return;
+  }
   try {
     const key = tab === "usage" ? null : context.client.getMasterKeyBytes();
     const plans = tab === "plan" ? await decryptUserPlans(await context.client.listUserPlans({ chatId: dialog.chatId }), key) : null;
-    const tasks = tab === "tasks" ? await decryptUserTasks(await context.client.listUserTasks({ chatId: dialog.chatId }), key) : null;
     const usage = tab === "usage" ? await Promise.all([
       context.client.settingsGet(`usage/chat-entries?${new URLSearchParams({ chat_id: dialog.chatId, limit: "500" })}`),
       context.client.settingsGet(`usage/chat-total?${new URLSearchParams({ chat_id: dialog.chatId })}`)
     ]) : null;
     if (!dialog.ownerCurrent() || context.state.chrome !== dialog || dialog.tab !== tab || dialog.request !== request || context.state.activeChatId !== dialog.chatId) return;
     if (plans) dialog.items = plans.map((plan) => `${plan.title} \xB7 ${plan.status}${plan.goal ? ` \xB7 ${plan.goal}` : ""}`);
-    if (tasks) dialog.tasks = tasks;
     if (usage) {
       const [entries, total] = usage;
       if (!Array.isArray(entries?.entries) || !entries.entries.every((item) => item && typeof item === "object")) throw Error("Invalid usage rows.");
@@ -93504,11 +94377,14 @@ async function submitTuiChatTask(context, dialog, taskId) {
   dialog.busy = true;
   dialog.error = void 0;
   context.render();
+  let phase = "prepare";
   try {
     const key = context.client.getMasterKeyBytes();
     const input = task ? await buildUpdateUserTaskInput(task, key, { status: task.status === "done" ? "todo" : "done" }) : await buildCreateUserTaskInput(key, { title, chatId: dialog.chatId, assign: "user" });
     if (!dialog.ownerCurrent() || context.state.chrome !== dialog || context.state.activeChatId !== dialog.chatId) return;
+    phase = "save";
     const record10 = task ? await context.client.updateUserTask(task.taskId, input) : await context.client.createUserTask(input);
+    phase = "decrypt";
     const updated = await decryptUserTask(record10, key);
     if (!dialog.ownerCurrent() || context.state.chrome !== dialog || context.state.activeChatId !== dialog.chatId) return;
     dialog.tasks = [updated, ...dialog.tasks.filter((item) => item.taskId !== updated.taskId)];
@@ -93516,8 +94392,10 @@ async function submitTuiChatTask(context, dialog, taskId) {
     dialog.editingTask = false;
     dialog.taskTitle = "";
     dialog.field = visibleChatSettingsTabs(context.state).length;
-  } catch {
-    if (dialog.ownerCurrent() && context.state.chrome === dialog) dialog.error = task ? "Could not update task. Retry." : "Could not create task. Review the title and retry.";
+  } catch (error) {
+    const status = error && typeof error === "object" && "status" in error ? error.status : void 0;
+    const detail = typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599 ? `${phase}: HTTP ${status}` : phase;
+    if (dialog.ownerCurrent() && context.state.chrome === dialog) dialog.error = task ? `Could not update task (${detail}). Retry.` : `Could not create task (${detail}). Review the title and retry.`;
   } finally {
     dialog.busy = false;
     if (dialog.ownerCurrent() && context.state.chrome === dialog) context.render();
@@ -93535,7 +94413,7 @@ function chatSettingsActions(dialog, state) {
       return [{ label: `Open ${alias}`, command: `/header-action settings-file ${alias}` }, ...downloadable ? [{ label: `Download ${alias}`, command: `/header-action settings-file-download ${alias}` }] : []];
     }), { label: "Copy web settings link", command: "/header-action settings-web" }];
   }
-  if (dialog.tab === "tasks") return dialog.loading ? [] : dialog.editingTask ? [{ label: "Save task", command: "/header-action settings-task-save" }, { label: "Cancel task", command: "/header-action settings-task-cancel" }] : [{ label: "Create task", command: "/header-action settings-task-create" }, ...dialog.tasks.slice(0, 20).flatMap((task) => [
+  if (dialog.tab === "tasks") return dialog.loading && !dialog.tasks.length ? [] : dialog.editingTask ? [{ label: "Save task", command: "/header-action settings-task-save" }, { label: "Cancel task", command: "/header-action settings-task-cancel" }] : [{ label: "Create task", command: "/header-action settings-task-create" }, ...dialog.tasks.slice(0, 20).flatMap((task) => [
     { label: `Open task ${task.title}`, command: `/header-action settings-task-open ${task.taskId}` },
     ...task.readOnly ? [] : [{ label: `${task.status === "done" ? "Undo done" : "Mark done"} \xB7 ${task.title}`, command: `/header-action settings-task-toggle ${task.taskId}` }]
   ]), ...dialog.error ? [{ label: "Retry", command: "/header-action settings-retry" }] : []];
@@ -93554,7 +94432,7 @@ function renderTuiChatSettings(dialog, state, width) {
     else if (!dialog.items.length) lines.push(row("No plans linked to this chat."));
     else for (const item of dialog.items.slice(0, 20)) lines.push(...wrapCells(`\u2022 ${item}`, max).map((line3) => row(line3)));
   } else if (dialog.tab === "tasks") {
-    if (dialog.loading) lines.push(row("Loading tasks\u2026"));
+    if (dialog.loading) lines.push(row(dialog.error ?? "Loading tasks\u2026"));
     else if (dialog.error && !dialog.editingTask) lines.push(row(dialog.error));
     else lines.push(row(`${dialog.tasks.filter((task) => task.status === "done").length}/${dialog.tasks.length} tasks done`));
     if (dialog.editingTask) lines.push(row(`Task title: ${truncateCells(dialog.taskTitle, max - 14)}_`, "/header-action settings-task-focus"));
@@ -93589,7 +94467,7 @@ var DURATIONS = [0, 60, 3600, 86400, 604800, 1209600, 2592e3];
 var DURATION_LABELS = ["Never", "1 minute", "1 hour", "24 hours", "7 days", "14 days", "30 days"];
 var action = (command) => ({ kind: "command", command });
 var row2 = (text7, command) => ({ text: text7, ...command ? { action: action(command) } : {} });
-function wrapWords(text7, width) {
+function wrapWords2(text7, width) {
   const lines = [];
   let line3 = "";
   for (const word of text7.split(/\s+/)) {
@@ -94180,7 +95058,7 @@ function renderHeaderDialog(dialog, width, height = 24, state) {
     return [row2("Share QR code"), row2(""), ...dialog.qr.width <= available2 && neededRows <= height ? dialog.qr.lines.map((line3) => {
       const padding = " ".repeat(Math.floor((width - dialog.qr.width) / 2));
       return { text: padding + line3, spans: [{ text: padding }, { text: line3, color: "#ffffff", background: "#000000" }] };
-    }) : wrapWords(`QR needs ${dialog.qr.width + 2} columns and ${neededRows} rows. Resize terminal or copy the link.`, Math.max(1, width - 2)).map((line3) => row2(line3)), row2("Back to share", "/header-action qr-back"), row2("Copy Link", "/header-action copy-link")];
+    }) : wrapWords2(`QR needs ${dialog.qr.width + 2} columns and ${neededRows} rows. Resize terminal or copy the link.`, Math.max(1, width - 2)).map((line3) => row2(line3)), row2("Back to share", "/header-action qr-back"), row2("Copy Link", "/header-action copy-link")];
   }
   if (dialog.kind === "copy") return dialog.ownerCurrent && !dialog.ownerCurrent() ? [row2("This content is no longer available.")] : [row2(dialog.title), ...wrapCells(dialog.text, max).map((line3) => row2(line3)), row2("Select text above if clipboard delivery was not confirmed."), row2("Copy again", "/header-action copy"), row2("Close", "/header-action close")];
   if (dialog.kind === "share") {
@@ -94232,7 +95110,7 @@ function initialAnswer(question) {
     case "choice":
       return { selection: [] };
     case "input":
-      return { inputs: Object.fromEntries((question.fields ?? []).map((field2) => [field2.id, ""])) };
+      return { inputs: Object.fromEntries((question.fields ?? []).map((field3) => [field3.id, ""])) };
     case "slider":
       return { value: question.default ?? Math.round(((question.min ?? 0) + (question.max ?? 100)) / 2) };
     case "swipe":
@@ -94250,7 +95128,7 @@ function controls(editor) {
         ...a.selection.some((id) => isCustomChoiceOption(q, id)) ? [{ id: "custom", label: q.custom_placeholder ?? "Your own answer", value: String(a.custom_answer ?? ""), text: true }] : []
       ];
     case "input":
-      return (q.fields ?? []).map((field2) => ({ id: field2.id, label: field2.label + (field2.required ? " \xB7 required" : ""), value: String(a.inputs[field2.id] ?? ""), text: true }));
+      return (q.fields ?? []).map((field3) => ({ id: field3.id, label: field3.label + (field3.required ? " \xB7 required" : ""), value: String(a.inputs[field3.id] ?? ""), text: true }));
     case "slider":
       return [{ id: "value", label: `${q.min} \u2190 Value \u2192 ${q.max}`, value: `${a.value}${q.labels?.[Number(a.value)] ? ` (${q.labels[Number(a.value)]})` : ""}` }];
     case "rating":
@@ -94373,7 +95251,7 @@ async function handleQuestionKey(context, chunk, key) {
     return false;
   }
   if (editor.busy) return true;
-  const q = editor.question.payload, items = controls(editor), field2 = items[editor.fieldIndex];
+  const q = editor.question.payload, items = controls(editor), field3 = items[editor.fieldIndex];
   const clear = () => {
     editor.answer = initialAnswer(q);
     editor.fieldIndex = 0;
@@ -94431,22 +95309,22 @@ async function handleQuestionKey(context, chunk, key) {
     editor.fieldIndex = (editor.fieldIndex + delta + items.length + 2) % (items.length + 2);
   } else if (key.name === "return" && editor.fieldIndex === items.length) await submit();
   else if (key.name === "return" && editor.fieldIndex === items.length + 1) clear();
-  else if (field2?.text) {
-    let value = field2.value ?? "";
+  else if (field3?.text) {
+    let value = field3.value ?? "";
     if (key.name === "backspace") value = eraseGrapheme(value);
     else if (key.name === "return") {
       editor.fieldIndex++;
       render();
       return true;
     } else if (!key.ctrl && !key.meta && chunk) value += terminalText(chunk);
-    if (q.type === "input") editor.answer.inputs[field2.id] = value;
-    else editor.answer[field2.id === "custom" ? "custom_answer" : field2.id] = value;
+    if (q.type === "input") editor.answer.inputs[field3.id] = value;
+    else editor.answer[field3.id === "custom" ? "custom_answer" : field3.id] = value;
     editor.error = void 0;
-  } else if (field2 && q.type === "choice" && ["space", "return"].includes(key.name ?? "")) {
+  } else if (field3 && q.type === "choice" && ["space", "return"].includes(key.name ?? "")) {
     const selected = editor.answer.selection;
-    editor.answer.selection = q.multiple ? selected.includes(field2.id) ? selected.filter((id) => id !== field2.id) : [...selected, field2.id] : [field2.id];
+    editor.answer.selection = q.multiple ? selected.includes(field3.id) ? selected.filter((id) => id !== field3.id) : [...selected, field3.id] : [field3.id];
     editor.error = void 0;
-  } else if (field2 && ["left", "right"].includes(key.name ?? "")) {
+  } else if (field3 && ["left", "right"].includes(key.name ?? "")) {
     const delta = key.name === "left" ? -1 : 1;
     if (q.type === "slider") {
       const min = q.min, max = q.max, step = q.step ?? 1;
@@ -94454,7 +95332,7 @@ async function handleQuestionKey(context, chunk, key) {
       editor.touched = true;
     } else if (q.type === "rating") editor.answer.rating = Math.max(1, Math.min(q.max_stars ?? q.max ?? q.scale ?? 5, Number(editor.answer.rating) + delta));
     else if (q.type === "swipe") {
-      editor.answer.swipes[field2.id] = delta < 0 ? "dislike" : "like";
+      editor.answer.swipes[field3.id] = delta < 0 ? "dislike" : "like";
       editor.fieldIndex = Math.min(items.length, editor.fieldIndex + 1);
     }
     editor.error = void 0;
@@ -94915,7 +95793,7 @@ async function createTuiChatProject(state, client2, chatIds) {
   if (!name || name.length > 200) throw new Error("Could not generate a project title.");
   if (context !== client2.getActiveTeamId() || !master.equals(Buffer.from(client2.getMasterKeyBytes()))) throw new Error("Chat workspace changed");
   const form = buildProjectForm();
-  form.fields.find((field2) => field2.name === "name").value = name;
+  form.fields.find((field3) => field3.name === "name").value = name;
   const project = await submitProjectForm(client2, form, true);
   await placeTuiChats(state, client2, chatIds, { projectId: project.id, folderId: null }, "move");
   return project.id;
@@ -94932,13 +95810,14 @@ function workspaceGeometry(state, rawWidth) {
   const dialog = Boolean(state.form || state.paletteOpen || state.questionEditor || state.chrome);
   const settingsSplit = Boolean(state.settings && width >= 120 && !dialog);
   const settingsFullscreen = Boolean(state.settings && width < 120 && !dialog);
-  const sidebarWidth = settingsSplit ? 44 : state.sidebarOpen && width >= 90 && !dialog && !state.settings ? 27 : 0;
-  const paneWidth = Math.max(1, width - gutter * 2 - sidebarWidth);
+  const sidebarWidth = state.sidebarOpen && width >= 90 && !dialog && !state.settings ? 27 : 0;
+  const settingsWidth = settingsSplit ? 44 : 0;
+  const paneWidth = Math.max(1, width - gutter * 2 - sidebarWidth - settingsWidth);
   const contentWidth = Math.min(WORKSPACE_MAX_COLUMNS, paneWidth);
   const inset = Math.floor((paneWidth - contentWidth) / 2);
   const composerWidth = Math.min(CONTENT_MAX_COLUMNS, paneWidth);
   const composerInset = Math.floor((paneWidth - composerWidth) / 2);
-  return { width, gutter, sidebarWidth, paneWidth, contentWidth, inset, composerWidth, composerInset, settingsSplit, settingsFullscreen };
+  return { width, gutter, sidebarWidth, paneWidth, contentWidth, inset, composerWidth, composerInset, settingsWidth, settingsSplit, settingsFullscreen };
 }
 function composerViewport(state, width) {
   const wrapWidth = Math.max(1, width - 6);
@@ -95048,18 +95927,18 @@ function overlayLines(state, width, height) {
       { text: "Step configuration \xB7 Tab field \xB7 Ctrl+S save", color: "#a0a0a0", inset },
       ""
     ];
-    for (const [index, field2] of form.fields.entries()) {
+    for (const [index, field3] of form.fields.entries()) {
       const focused = index === form.fieldIndex;
-      const suffix = [field2.required ? "required" : "", field2.valueType && field2.valueType !== "string" ? field2.valueType : "", field2.options ? "\u2190/\u2192 choose" : ""].filter(Boolean).join(" \xB7 ");
-      const action2 = { kind: "select", target: "form-field", index, id: field2.name };
-      rows3.push({ text: `${focused ? "\u203A" : " "} ${field2.label}${suffix ? ` \xB7 ${suffix}` : ""}`, bold: true, color: focused ? "#32ade6" : "#e6e6e6", inset, action: action2 });
+      const suffix = [field3.required ? "required" : "", field3.valueType && field3.valueType !== "string" ? field3.valueType : "", field3.options ? "\u2190/\u2192 choose" : ""].filter(Boolean).join(" \xB7 ");
+      const action2 = { kind: "select", target: "form-field", index, id: field3.name };
+      rows3.push({ text: `${focused ? "\u203A" : " "} ${field3.label}${suffix ? ` \xB7 ${suffix}` : ""}`, bold: true, color: focused ? "#32ade6" : "#e6e6e6", inset, action: action2 });
       if (panelWidth >= 6) {
         const edge = "\u2500".repeat(panelWidth - 2), border = focused ? "#32ade6" : "#626878";
         rows3.push({ text: `\u256D${edge}\u256E`, color: border, inset });
-        rows3.push(...wrapCells(`${field2.secret ? "\u2022".repeat(Array.from(field2.value).length) : field2.value || "(empty)"}${focused && !form.busy ? "_" : ""}`, panelWidth - 4).map((text7) => ({ text: `\u2502 ${padCells(text7, panelWidth - 4)} \u2502`, color: focused ? "#ffffff" : "#cfcfcf", ...focused ? { background: "#2b3548" } : {}, inset, action: action2 })));
+        rows3.push(...wrapCells(`${field3.secret ? "\u2022".repeat(Array.from(field3.value).length) : field3.value || "(empty)"}${focused && !form.busy ? "_" : ""}`, panelWidth - 4).map((text7) => ({ text: `\u2502 ${padCells(text7, panelWidth - 4)} \u2502`, color: focused ? "#ffffff" : "#cfcfcf", ...focused ? { background: "#2b3548" } : {}, inset, action: action2 })));
         rows3.push({ text: `\u2570${edge}\u256F`, color: border, inset }, "");
-      } else rows3.push(...wrapCells(field2.value, panelWidth).map((line3) => pointerLine(line3, action2)));
-      if (field2.options) rows3.push({ text: "\u2039 Previous   Next \u203A", inset, spans: [
+      } else rows3.push(...wrapCells(field3.value, panelWidth).map((line3) => pointerLine(line3, action2)));
+      if (field3.options) rows3.push({ text: "\u2039 Previous   Next \u203A", inset, spans: [
         { text: "\u2039 Previous", action: { ...action2, activate: true, name: "left" } },
         { text: "   " },
         { text: "Next \u203A", action: { ...action2, activate: true, name: "right" } }
@@ -95079,11 +95958,11 @@ function overlayLines(state, width, height) {
     return rows3;
   }
   const rows2 = [form.title, ""];
-  for (const [index, field2] of form.fields.entries()) {
-    const action2 = { kind: "select", target: "form-field", index, id: field2.name };
-    rows2.push(pointerLine(`${index === form.fieldIndex ? ">" : " "} ${field2.label}${field2.options ? " [\u2190/\u2192]" : ""}`, action2));
-    rows2.push(...wrapCells(`  ${field2.secret ? "\u2022".repeat(Array.from(field2.value).length) : field2.value || "(empty)"}${index === form.fieldIndex && !form.busy ? "_" : ""}`, width).map((line3) => pointerLine(line3, action2)));
-    if (field2.options) rows2.push({ text: "\u2039 Previous   Next \u203A", spans: [
+  for (const [index, field3] of form.fields.entries()) {
+    const action2 = { kind: "select", target: "form-field", index, id: field3.name };
+    rows2.push(pointerLine(`${index === form.fieldIndex ? ">" : " "} ${field3.label}${field3.options ? " [\u2190/\u2192]" : ""}`, action2));
+    rows2.push(...wrapCells(`  ${field3.secret ? "\u2022".repeat(Array.from(field3.value).length) : field3.value || "(empty)"}${index === form.fieldIndex && !form.busy ? "_" : ""}`, width).map((line3) => pointerLine(line3, action2)));
+    if (field3.options) rows2.push({ text: "\u2039 Previous   Next \u203A", spans: [
       { text: "\u2039 Previous", action: { ...action2, activate: true, name: "left" } },
       { text: "   " },
       { text: "Next \u203A", action: { ...action2, activate: true, name: "right" } }
@@ -95099,7 +95978,7 @@ function overlayLines(state, width, height) {
   return rows2;
 }
 function renderWorkspaceFrame(state, rawWidth, rawHeight, body, options = {}) {
-  const { width, gutter, sidebarWidth, paneWidth, contentWidth, inset, composerWidth, composerInset, settingsSplit, settingsFullscreen } = workspaceGeometry(state, rawWidth);
+  const { width, gutter, sidebarWidth, paneWidth, contentWidth, inset, composerWidth, composerInset, settingsWidth, settingsSplit, settingsFullscreen } = workspaceGeometry(state, rawWidth);
   const height = Math.max(1, Math.floor(rawHeight));
   beginPointerFrame(state, Math.max(1, Math.floor(rawWidth)), height);
   const modal = Boolean(state.form || state.paletteOpen || state.questionEditor || state.chrome);
@@ -95107,7 +95986,7 @@ function renderWorkspaceFrame(state, rawWidth, rawHeight, body, options = {}) {
   const mode = options.colorMode ?? "none";
   const ascii = options.ascii ?? false;
   const line3 = ascii ? "-" : "\u2500", vertical = ascii ? "|" : "\u2502";
-  const place = (rendered, side2 = " ".repeat(sidebarWidth)) => " ".repeat(gutter) + side2 + " ".repeat(inset) + rendered + " ".repeat(paneWidth - inset - contentWidth + gutter);
+  const place = (rendered, side2 = " ".repeat(sidebarWidth), settings = " ".repeat(settingsWidth)) => " ".repeat(gutter) + side2 + " ".repeat(inset) + rendered + " ".repeat(paneWidth - inset - contentWidth) + settings + " ".repeat(gutter);
   const navParts = [{ text: "OpenMates  ", color: "#cfcfcf", bold: true, action: { kind: "command", command: "/chats" } }, ...WORKSPACES.map((workspace, index) => {
     const focused = state.focus === "navigation" && index === state.navigationIndex;
     const label3 = state.workspace === workspace ? `[${titleCase(workspace)}]` : titleCase(workspace);
@@ -95197,21 +96076,24 @@ function renderWorkspaceFrame(state, rawWidth, rawHeight, body, options = {}) {
   const heroRows = options.headerRows ?? 0;
   const category = state.screen === "example" ? state.activeExample?.chat.category : state.activeChat?.category;
   const background = chatBackground(category);
-  const allSide = settingsSplit ? renderTuiSettings(state.settings, sidebarWidth - 2) : sidebarWidth ? pointerSidebarLines(state) : [];
+  const allSide = sidebarWidth ? pointerSidebarLines(state) : [];
+  const allSettings = settingsSplit ? renderTuiSettings(state.settings, settingsWidth - 2) : [];
   const sideMarker = allSide.findIndex((row3) => /(?:^|\s)› /.test(lineText(row3)) || lineText(row3).startsWith("> "));
   let sideStart = Math.max(0, sideMarker - bodyHeight + 3);
-  let side = sideStart ? [allSide[0], "", ...allSide.slice(sideStart)] : allSide;
+  const side = sideStart ? [allSide[0], "", ...allSide.slice(sideStart)] : allSide;
+  let settingsRows = [];
   if (settingsSplit) {
-    const panel2 = state.settings, fixed2 = allSide.slice(0, 4), scrolling = allSide.slice(4), available2 = Math.max(1, bodyHeight - fixed2.length);
+    const panel2 = state.settings, fixed2 = allSettings.slice(0, 4), scrolling = allSettings.slice(4), available2 = Math.max(1, bodyHeight - fixed2.length);
+    const settingsMarker = allSettings.findIndex((row3) => /(?:^|\s)› /.test(lineText(row3)));
     sideStart = Math.min(Math.max(0, scrolling.length - available2), Math.max(0, panel2.scrollOffset));
     if (panel2.followSelection) {
-      const marker = Math.max(-1, sideMarker - 4);
+      const marker = Math.max(-1, settingsMarker - 4);
       if (marker >= sideStart + available2) sideStart = Math.min(Math.max(0, scrolling.length - available2), Math.max(0, marker - available2 + 3));
       if (marker >= 0 && marker < sideStart) sideStart = marker;
     }
     panel2.scrollOffset = sideStart;
     panel2.followSelection = false;
-    side = [...fixed2, ...scrolling.slice(sideStart)];
+    settingsRows = [...fixed2, ...scrolling.slice(sideStart)];
   }
   const rows2 = [];
   for (let i = 0; i < bodyHeight; i++) {
@@ -95247,25 +96129,29 @@ function renderWorkspaceFrame(state, rawWidth, rawHeight, body, options = {}) {
     } else if (!overlay2 && !sidebarOverlay && index < heroRows) rendered = backgroundLine(raw, contentWidth, background, mode);
     else if (raw.startsWith("> ") || raw.includes("\u203A")) rendered = foreground(rendered, "#ff553b", mode, true);
     else if (/^(You|Sophia|Tasks|Projects|Workflows|Recent chats|Suggestions|Actions)$/.test(raw)) rendered = foreground(rendered, "#5a85eb", mode, true);
-    const sideValue = side[i], sideText = sideValue ? lineText(sideValue) : "";
-    let sidebarRow;
-    if (sidebarWidth) {
-      const style2 = typeof sideValue === "string" ? void 0 : sideValue;
-      if (style2?.action) addPointerTarget(state, gutter, i + 2, Math.min(cells(sideText), sidebarWidth - 2), style2.action);
+    const renderSide = (value2, sideWidth, column, dividerAtEnd) => {
+      const text7 = value2 ? lineText(value2) : "";
+      const style2 = typeof value2 === "string" ? void 0 : value2;
+      const usable = sideWidth - 2;
+      if (style2?.action) addPointerTarget(state, column, i + 2, Math.min(cells(text7), usable), style2.action);
+      let renderedSide = "";
       if (style2?.spans) {
         let used = 0;
-        sidebarRow = "";
         for (const part of style2.spans) {
-          const text7 = truncateCells(part.text, Math.max(0, sidebarWidth - 2 - used)), size = cells(text7);
-          if (part.action) addPointerTarget(state, gutter + used, i + 2, size, part.action);
-          sidebarRow += foreground(text7, part.color ?? "#cfcfcf", mode, part.bold);
+          const partText = truncateCells(part.text, Math.max(0, usable - used)), size = cells(partText);
+          if (part.action) addPointerTarget(state, column + used, i + 2, size, part.action);
+          renderedSide += foreground(partText, part.color ?? "#cfcfcf", mode, part.bold);
           used += size;
         }
-        sidebarRow += " ".repeat(Math.max(0, sidebarWidth - 2 - used));
-      } else sidebarRow = foreground(padCells(sideText, sidebarWidth - 2), style2?.color ?? "#cfcfcf", mode, style2?.bold);
-      sidebarRow += foreground(`${vertical} `, "#626878", mode);
-    }
-    rows2.push(place(rendered, sidebarRow));
+        renderedSide += " ".repeat(Math.max(0, usable - used));
+      } else renderedSide = foreground(padCells(text7, usable), style2?.color ?? "#cfcfcf", mode, style2?.bold);
+      const border = foreground(`${vertical} `, "#626878", mode);
+      return dividerAtEnd ? renderedSide + border : border + renderedSide;
+    };
+    const sidebarRow = sidebarWidth ? renderSide(side[i], sidebarWidth, gutter, true) : void 0;
+    const settingsColumn2 = gutter + sidebarWidth + paneWidth + 2;
+    const settingsRow = settingsWidth ? renderSide(settingsRows[i], settingsWidth, settingsColumn2, false) : void 0;
+    rows2.push(place(rendered, sidebarRow, settingsRow));
   }
   if (state.modelSelector?.open && showComposer && aiComposer && !modal && !settingsFullscreen && bodyHeight > 0) {
     const popWidth = Math.max(1, Math.min(46, composerWidth));
@@ -95292,14 +96178,14 @@ function renderWorkspaceFrame(state, rawWidth, rawHeight, body, options = {}) {
   const hintColor = state.focus === "composer" ? "#a0a0a0" : "#ff553b";
   const composer = [];
   if (showComposer) {
-    if (!modal && !sidebarOverlay) for (let i = 0; i < input.count; i++) addPointerTarget(
+    if (!modal && !sidebarOverlay && !state.settings) for (let i = 0; i < input.count; i++) addPointerTarget(
       state,
       gutter + sidebarWidth + composerInset + (composerWidth < 6 ? 0 : 2),
       2 + bodyHeight + (composerWidth < 6 ? 0 : 1) + i,
       Math.max(1, composerWidth - (composerWidth < 6 ? 0 : 4)),
       { kind: "focus", focus: "composer" }
     );
-    const placeInput = (rendered) => " ".repeat(gutter + sidebarWidth + composerInset) + rendered + " ".repeat(paneWidth - composerInset - composerWidth + gutter);
+    const placeInput = (rendered) => " ".repeat(gutter + sidebarWidth + composerInset) + rendered + " ".repeat(paneWidth - composerInset - composerWidth + settingsWidth + gutter);
     const inputRows = input.lines.map((text7, i) => `${i ? "  " : "> "}${text7 || (!state.input ? placeholder : "")}`);
     if (composerWidth < 6) composer.push(...inputRows.map((text7) => placeInput(padCells(text7, composerWidth))), ...aiComposer ? [placeInput(padCells("AI", composerWidth))] : [], placeInput(foreground(padCells(hint, composerWidth), hintColor, mode)), placeInput(" ".repeat(composerWidth)), placeInput(" ".repeat(composerWidth)));
     else {
@@ -96156,7 +97042,7 @@ function prepareSkillInput(schema, input, timezone, now = /* @__PURE__ */ new Da
 function validateSkillInput(schema, input) {
   const issues = [];
   function walk(node, value, path2, required3) {
-    const field2 = resolveSkillSchema(node, schema);
+    const field3 = resolveSkillSchema(node, schema);
     if (value === null) {
       const nullable = node.type === "null" || (node.anyOf ?? node.oneOf)?.some((part) => part.type === "null");
       if (!nullable) issues.push({ path: path2, code: required3 ? "required" : "type" });
@@ -96166,40 +97052,40 @@ function validateSkillInput(schema, input) {
       if (required3) issues.push({ path: path2, code: "required" });
       return;
     }
-    if (field2.enum && !field2.enum.some((item) => item === value)) issues.push({ path: path2, code: "enum" });
-    if (field2.type === "object" || field2.properties) {
+    if (field3.enum && !field3.enum.some((item) => item === value)) issues.push({ path: path2, code: "enum" });
+    if (field3.type === "object" || field3.properties) {
       if (!value || typeof value !== "object" || Array.isArray(value)) {
         issues.push({ path: path2, code: "type" });
         return;
       }
-      for (const [name, child] of Object.entries(field2.properties ?? {})) walk(child, object3(value)[name], path2 ? `${path2}.${name}` : name, (field2.required ?? []).includes(name));
-    } else if (field2.type === "array") {
+      for (const [name, child] of Object.entries(field3.properties ?? {})) walk(child, object3(value)[name], path2 ? `${path2}.${name}` : name, (field3.required ?? []).includes(name));
+    } else if (field3.type === "array") {
       if (!Array.isArray(value)) {
         issues.push({ path: path2, code: "type" });
         return;
       }
-      if (field2.minItems !== void 0 && value.length < field2.minItems) issues.push({ path: path2, code: "minItems" });
-      if (field2.maxItems !== void 0 && value.length > field2.maxItems) issues.push({ path: path2, code: "maxItems" });
-      value.forEach((item, index) => walk(field2.items ?? {}, item, `${path2}[${index}]`, true));
-    } else if (field2.type === "integer" || field2.type === "number") {
-      if (typeof value !== "number" || !Number.isFinite(value) || field2.type === "integer" && !Number.isInteger(value)) {
+      if (field3.minItems !== void 0 && value.length < field3.minItems) issues.push({ path: path2, code: "minItems" });
+      if (field3.maxItems !== void 0 && value.length > field3.maxItems) issues.push({ path: path2, code: "maxItems" });
+      value.forEach((item, index) => walk(field3.items ?? {}, item, `${path2}[${index}]`, true));
+    } else if (field3.type === "integer" || field3.type === "number") {
+      if (typeof value !== "number" || !Number.isFinite(value) || field3.type === "integer" && !Number.isInteger(value)) {
         issues.push({ path: path2, code: "type" });
         return;
       }
-      if (field2.minimum !== void 0 && value < field2.minimum) issues.push({ path: path2, code: "minimum" });
-      if (field2.maximum !== void 0 && value > field2.maximum) issues.push({ path: path2, code: "maximum" });
-    } else if (field2.type === "boolean") {
+      if (field3.minimum !== void 0 && value < field3.minimum) issues.push({ path: path2, code: "minimum" });
+      if (field3.maximum !== void 0 && value > field3.maximum) issues.push({ path: path2, code: "maximum" });
+    } else if (field3.type === "boolean") {
       if (typeof value !== "boolean") issues.push({ path: path2, code: "type" });
-    } else if (field2.type === "string" || !field2.type) {
+    } else if (field3.type === "string" || !field3.type) {
       if (typeof value !== "string") {
         issues.push({ path: path2, code: "type" });
         return;
       }
-      if (field2.minLength !== void 0 && value.length < field2.minLength) issues.push({ path: path2, code: "minLength" });
-      if (field2.maxLength !== void 0 && value.length > field2.maxLength) issues.push({ path: path2, code: "maxLength" });
-      if (field2.pattern) {
+      if (field3.minLength !== void 0 && value.length < field3.minLength) issues.push({ path: path2, code: "minLength" });
+      if (field3.maxLength !== void 0 && value.length > field3.maxLength) issues.push({ path: path2, code: "maxLength" });
+      if (field3.pattern) {
         try {
-          if (!new RegExp(field2.pattern).test(value)) issues.push({ path: path2, code: "pattern" });
+          if (!new RegExp(field3.pattern).test(value)) issues.push({ path: path2, code: "pattern" });
         } catch {
         }
       }
@@ -96453,9 +97339,9 @@ function renderTuiAppsSkill(skill, options) {
   if (options.tab === "overview") {
     lines.push("Use this skill manually. Your mates can also use it in chats.", "");
     for (const path2 of skillLeafPaths(skill.schema)) {
-      const field2 = schemaForPath(skill.schema, path2);
+      const field3 = schemaForPath(skill.schema, path2);
       const value = getSkillPath(skill.defaults, path2);
-      lines.push(truncateCells(`${path2}${isRequired(skill.schema, path2) ? " *" : ""} \xB7 ${field2?.type ?? "value"}${value !== void 0 ? ` \xB7 ${typeof value === "string" ? value : JSON.stringify(value)}` : ""}`, width));
+      lines.push(truncateCells(`${path2}${isRequired(skill.schema, path2) ? " *" : ""} \xB7 ${field3?.type ?? "value"}${value !== void 0 ? ` \xB7 ${typeof value === "string" ? value : JSON.stringify(value)}` : ""}`, width));
     }
     lines.push("", skill.executionAvailable && options.pointer ? pointerLine("Enter opens the input form. Running may spend credits.", { kind: "command", command: "/app-run" }) : skill.executionAvailable ? "Enter opens the input form. Running may spend credits." : `Unavailable: ${skill.unavailableReason ?? "This skill cannot run here."}`);
     const fixed = skill.pricing?.fixed;
@@ -96508,8 +97394,8 @@ function buildTuiAppsSkillForm(skill) {
   };
 }
 function parseField(raw, schema) {
-  const field2 = schema ?? {};
-  const type = field2.type;
+  const field3 = schema ?? {};
+  const type = field3.type;
   if (!raw.trim()) return void 0;
   if (type === "number" || type === "integer") {
     const parsed = Number(raw);
@@ -96527,16 +97413,16 @@ function prepareTuiAppsSkillRun(skill, form, timezone = Intl.DateTimeFormat().re
   if (form.kind !== "app-skill-input" || form.contextId !== `${skill.appId}/${skill.skillId}`) throw new Error("App skill form context changed.");
   if (!skill.executionAvailable) throw new Error(skill.unavailableReason ?? "This skill is unavailable.");
   let input = structuredClone(skill.defaults);
-  for (const field2 of form.fields) {
-    const previous = getSkillPath(input, field2.name);
-    if (!field2.value.trim() && previous === void 0) continue;
+  for (const field3 of form.fields) {
+    const previous = getSkillPath(input, field3.name);
+    if (!field3.value.trim() && previous === void 0) continue;
     let value;
     try {
-      value = parseField(field2.value, schemaForPath(skill.schema, field2.name));
+      value = parseField(field3.value, schemaForPath(skill.schema, field3.name));
     } catch (error) {
-      throw new Error(`${field2.label}: ${error instanceof Error ? error.message : "Invalid value"}`);
+      throw new Error(`${field3.label}: ${error instanceof Error ? error.message : "Invalid value"}`);
     }
-    input = setSkillPath(input, field2.name, value);
+    input = setSkillPath(input, field3.name, value);
   }
   input = prepareSkillInput(skill.schema, input, timezone);
   const issues = validateSkillInput(skill.schema, input);
@@ -97065,6 +97951,9 @@ function createInitialTuiState() {
     embedAliases: {},
     chatSelectedEmbedId: null,
     username: null,
+    currentUserHash: null,
+    activeTeamId: null,
+    activeTeamName: null,
     inspirations: [],
     inspirationIndices: {},
     homeLoading: false,
@@ -97164,7 +98053,8 @@ function createInitialTuiState() {
     chatContextAuthoringJobs: {},
     chatContextAuthoringControls: {},
     status: null,
-    isBusy: false
+    isBusy: false,
+    isAwaitingAi: false
   };
 }
 function programmaticQuickstart() {
@@ -97209,12 +98099,13 @@ function rankExamples(examples, interests) {
     return { example, index, score };
   }).sort((a, b) => b.score - a.score || a.index - b.index).map((entry) => entry.example);
 }
+var TUI_SESSION_ENDED_STATUS = "Session ended. Sign in to reopen your work.";
 function resetEndedTuiSession(state, hasSession) {
   if (!state.signedIn || hasSession) return false;
   state.homeAbortController?.abort();
   Object.values(state.chatContextAuthoringControls).forEach((control) => control.stop());
   const routeVersion = state.routeVersion + 1, homeLoadVersion = state.homeLoadVersion + 1;
-  Object.assign(state, createInitialTuiState(), { routeVersion, homeLoadVersion, status: "Session ended. Sign in to reopen your work." });
+  Object.assign(state, createInitialTuiState(), { routeVersion, homeLoadVersion, status: TUI_SESSION_ENDED_STATUS });
   return true;
 }
 function renderTuiFrame(state, width, height, options = {}) {
@@ -97223,16 +98114,21 @@ function renderTuiFrame(state, width, height, options = {}) {
   if (state.startup || state.privacyOffer) return renderStartupFrame(state, width, height, options.colorMode ?? "none");
   const bodyWidth = workspaceGeometry(state, width).contentWidth;
   const header2 = fullscreenHeaderLines(state, bodyWidth);
+  const teamBanner = state.signedIn && state.activeTeamId ? [{ text: teamIdentityLabel(state), color: "#5a85eb", bold: true }] : [];
   const embedHero = state.screen === "embed" ? renderEmbedHero(state, bodyWidth, height) : null;
   const stickyRows = state.screen === "embed" ? embedHero.length + 1 : state.screen === "results-view" ? 2 : state.screen === "project" && state.activeProject ? renderProjectIdentity(state.activeProject, { width: bodyWidth }).length + renderProjectTabs(state.projectTab, bodyWidth).length : state.screen === "app" && state.activeApp ? renderTuiAppIdentity(state.activeApp, bodyWidth).length + renderTuiAppTabs(state.appTab, bodyWidth).length : state.screen === "app-skill" && state.activeAppSkill ? renderTuiAppsSkillIdentity(state.activeAppSkill, bodyWidth).length + renderTuiAppsSkillTabs(state.appSkillTab, bodyWidth).length : state.screen === "workflow" && state.activeWorkflow ? renderWorkflowIdentity(state.activeWorkflow, { width: bodyWidth, run: state.workflowTab === "runs" ? state.workflowRuns[state.selectedWorkflowRunIndex] : void 0 }).length + (bodyWidth < 36 ? 7 : 4) : 0;
   return renderWorkspaceFrame(
     state,
     width,
     height,
-    [...header2, ...renderBody(state, bodyWidth, height, embedHero ?? void 0)],
-    { ...options, stickyRows: stickyRows + header2.length, stickyFallbackRows: embedHero ? header2.length : void 0 }
+    [...header2, ...teamBanner, ...renderBody(state, bodyWidth, height, embedHero ?? void 0)],
+    { ...options, stickyRows: stickyRows + header2.length + teamBanner.length, stickyFallbackRows: embedHero ? header2.length + teamBanner.length : void 0 }
   );
 }
+function teamIdentityLabel(state) {
+  const name = terminalText(state.activeTeamName?.trim() || "Team").replace(/\s+/g, " ").slice(0, 80);
+  return `[${Array.from(name)[0]?.toLocaleUpperCase() || "?"}] Team \xB7 ${name}`;
+}
 function renderStartupFrame(state, width, height, colorMode) {
   width = Math.max(1, Math.floor(width));
   height = Math.max(1, Math.floor(height));
@@ -97302,7 +98198,7 @@ function renderScreenBody(state, width, height, embedHero) {
     case "chat":
       return renderChat(state, width, height);
     case "chats":
-      return renderHomeChatCards(state, width, height);
+      return [...renderHomeChatCards(state, width, height), ...state.signedIn && state.activeTeamId ? ["", teamAiReminder()] : []];
     case "apps": {
       const apps = homeTuiApps(state.apps, state.filter, state.homeShowAll);
       return [
@@ -97376,7 +98272,7 @@ function renderScreenBody(state, width, height, embedHero) {
       return renderTaskDetail2(state, width);
     case "start":
     default:
-      return renderHomeChatCards(state, width, height);
+      return [...renderHomeChatCards(state, width, height), ...state.signedIn && state.activeTeamId ? ["", teamAiReminder()] : []];
   }
 }
 function renderHelp(width) {
@@ -97535,7 +98431,7 @@ function renderChat(state, width, height) {
       lines.push("");
       continue;
     }
-    lines.push({ text: messageLabel(message.role, message.title, message.category, state.activeChat), color: "#5a85eb", bold: true });
+    lines.push({ text: messageLabel(message.role, message.title, message.category, state.activeChat, message.remoteUser), color: "#5a85eb", bold: true });
     const embeds = new Map(Object.entries(state.chatEmbeds));
     lines.push(...renderMessageContentStyled(message.content, width, embeds, state, message.role === "assistant" ? message.embedIds : void 0, viewOffset, questionOffset, message.role === "assistant"));
     viewOffset += messageResultsViews(message.content).length;
@@ -97543,11 +98439,15 @@ function renderChat(state, width, height) {
     lines.push("");
   }
   if (state.projectFocusPending) lines.push("Project access starts after the countdown. /project-focus-reject to cancel.");
-  if (state.isBusy) lines.push(`${messageLabel("assistant", null, null, state.activeChat)} is typing...`);
+  if (state.isAwaitingAi) lines.push(`${messageLabel("assistant", null, null, state.activeChat)} is typing...`);
+  if (state.signedIn && state.activeTeamId) lines.push(teamAiReminder());
   if (state.followUpSuggestions.length) lines.push("", "Suggestions", ...state.followUpSuggestions.slice(0, 3).map((s, i) => `  ${i + 1}. ${s}`));
   if (state.status) lines.push("", state.status);
   return lines.flatMap((line3) => typeof line3 === "string" ? wrap(line3, width) : [line3]);
 }
+function teamAiReminder() {
+  return "To ask AI, mention @openmates or a configured Mate.";
+}
 function renderEmbedHero(state, width, height) {
   const app = state.detailEmbed?.appId ?? "", gradient = APP_GRADIENTS[app] ?? PRIMARY_GRADIENT;
   const title = state.detailTitle || "Embed";
@@ -97675,8 +98575,13 @@ function interestScore(haystack, interest) {
   }
   return score;
 }
-function messageLabel(role, sender, category, chat) {
-  if (role === "user") return "You";
+function messageLabel(role, sender, category, chat, remoteUser = false) {
+  if (role === "user") {
+    if (!remoteUser) return "You";
+    const name = terminalText(sender?.trim() || "Team member").replace(/\s+/g, " ").slice(0, 80);
+    const initial = Array.from(name)[0]?.toLocaleUpperCase() || "?";
+    return `[${initial}] ${name}`;
+  }
   if (role === "system") return "System";
   if (sender && !/^(assistant|ai assistant|ai|openmates)$/i.test(sender.trim())) return sender;
   return MATE_NAMES[category ?? ""] || chat?.mateName || MATE_NAMES[chat?.category ?? ""] || "Assistant";
@@ -97873,6 +98778,128 @@ async function persistCliProjectAuthoringJob(client2, job, approvedDigest) {
   });
 }
 
+// src/tuiTeamChat.ts
+import { createHash as createHash25 } from "crypto";
+function tuiChatMessages(messages, teamId, username, currentUserHash) {
+  const ownName = username?.trim().toLocaleLowerCase();
+  return messages.map((message) => {
+    const role = message.role === "user" ? "user" : message.role === "system" ? "system" : "assistant";
+    const name = message.senderName ? terminalText(message.senderName).trim() : "";
+    const remoteUser = !!teamId && role === "user" && (message.hashedSenderUserId ? !currentUserHash || message.hashedSenderUserId !== currentUserHash : !!name && (!ownName || name.toLocaleLowerCase() !== ownName));
+    return {
+      id: message.clientMessageId || message.id,
+      role,
+      content: message.content,
+      title: name || null,
+      remoteUser,
+      senderUserHash: message.hashedSenderUserId ?? null,
+      category: message.category,
+      embedIds: message.embedIds
+    };
+  });
+}
+function mergeTuiTeamChatWindow(existing, latest, hasMoreBefore) {
+  if (!hasMoreBefore) return { messages: latest, hasGap: false };
+  const existingById = new Map(existing.flatMap((message, index) => message.id ? [[message.id, index]] : []));
+  const overlap = latest.findIndex((message) => !!message.id && existingById.has(message.id));
+  if (overlap < 0) return { messages: [...existing, ...latest], hasGap: true };
+  const older = existing.slice(0, existingById.get(latest[overlap].id));
+  const trailing = existing.slice(older.length).filter((message) => !message.id);
+  return { messages: [...older, ...latest, ...trailing], hasGap: false };
+}
+function reconcileTuiTeamSenderLabels(state) {
+  if (!state.currentUserHash || state.screen !== "chat" || state.isBusy) return;
+  for (const message of state.messages) {
+    if (message.role === "user" && message.senderUserHash)
+      message.remoteUser = message.senderUserHash !== state.currentUserHash;
+  }
+}
+async function loadTuiTeamIdentity(state, client2, render, isCurrent = () => true) {
+  const teamId = client2.getActiveTeamId();
+  if (!client2.hasSession() || !teamId) return null;
+  const ownerCurrent = captureTuiWorkspaceOwner(client2);
+  const [profile, team] = await Promise.allSettled([
+    typeof client2.whoAmI === "function" ? client2.whoAmI() : Promise.reject(new Error("Profile unavailable")),
+    typeof client2.getTeamDetails === "function" ? client2.getTeamDetails(teamId) : Promise.reject(new Error("Team unavailable"))
+  ]);
+  if (!isCurrent() || !ownerCurrent() || client2.getActiveTeamId() !== teamId) return null;
+  let profileLoaded = false;
+  if (profile.status === "fulfilled") {
+    const user2 = profile.value;
+    const id = String(user2.id ?? "");
+    if (id) {
+      state.currentUserHash = createHash25("sha256").update(id).digest("hex");
+      profileLoaded = true;
+    }
+    if (typeof user2.username === "string") state.username = terminalText(user2.username);
+  }
+  if (team.status === "fulfilled") state.activeTeamName = terminalText(team.value.name).trim() || null;
+  reconcileTuiTeamSenderLabels(state);
+  render();
+  return { profileLoaded, teamLoaded: team.status === "fulfilled" };
+}
+function createTuiTeamChatRefresh(state, client2, render, pollIntervalMs = 5e3) {
+  let closed = false, inFlight = false, pending = false;
+  let timer = null;
+  const poll = setInterval(() => request(), pollIntervalMs);
+  poll.unref?.();
+  const eligible = () => !closed && state.signedIn && client2.hasSession() && state.workspace === "chats" && state.screen === "chat" && !!state.activeChatId && !!state.activeTeamId && state.activeTeamId === client2.getActiveTeamId();
+  const refresh = async () => {
+    timer = null;
+    if (!pending || inFlight || !eligible()) return;
+    if (state.isBusy) {
+      request();
+      return;
+    }
+    pending = false;
+    inFlight = true;
+    const chatId = state.activeChatId, teamId = client2.getActiveTeamId();
+    const route2 = state.routeVersion, messages = state.messages;
+    const ownerCurrent = captureTuiWorkspaceOwner(client2);
+    const current2 = () => eligible() && ownerCurrent() && state.routeVersion === route2 && state.activeChatId === chatId && client2.getActiveTeamId() === teamId && state.messages === messages && !state.isBusy;
+    try {
+      const window = typeof client2.getChatMessagesWindow === "function" ? await client2.getChatMessagesWindow(chatId, {
+        teamId,
+        direction: "latest",
+        limit: 100,
+        respectCompressionBoundary: false,
+        preferCache: true
+      }) : null;
+      const result = window ?? await client2.getChatMessages(chatId, { teamId });
+      if (!current2() || result.chat.id !== chatId) return;
+      const fetched = tuiChatMessages(result.messages, teamId, state.username, state.currentUserHash);
+      const merged = window ? mergeTuiTeamChatWindow(messages, fetched, window.hasMoreBefore) : { messages: fetched, hasGap: false };
+      const next = merged.messages;
+      if (merged.hasGap) state.status = "Some older Team messages may be missing. Use /refresh to load full history.";
+      if (next.length === messages.length && next.every((message, index) => message.id === messages[index].id && message.role === messages[index].role && message.content === messages[index].content && message.category === messages[index].category && message.title === messages[index].title && message.remoteUser === messages[index].remoteUser && message.senderUserHash === messages[index].senderUserHash && (message.embedIds ?? []).length === (messages[index].embedIds ?? []).length && (message.embedIds ?? []).every((id, embedIndex) => id === messages[index].embedIds?.[embedIndex]))) return;
+      state.messages = next;
+      state.activeChat = result.chat;
+      registerChatEmbedAliases(state);
+      if (typeof client2.getEmbed === "function") void hydrateChatEmbedPreviews(state, client2, render);
+      render();
+    } catch {
+    } finally {
+      inFlight = false;
+      if (state.isBusy && eligible()) pending = true;
+      if (pending && eligible()) request();
+    }
+  };
+  const request = () => {
+    if (!eligible()) return;
+    pending = true;
+    if (timer || inFlight) return;
+    timer = setTimeout(() => {
+      void refresh();
+    }, state.isBusy ? Math.min(1e3, pollIntervalMs) : 250);
+  };
+  return { request, dispose: () => {
+    closed = true;
+    clearInterval(poll);
+    if (timer) clearTimeout(timer);
+    timer = null;
+  } };
+}
+
 // src/tuiWorkspaceController.ts
 function chatDraftKey(state) {
   return state.screen === "example" ? `example:${state.activeExample?.chat.id}` : state.activeChatId ?? "new";
@@ -97972,7 +98999,7 @@ async function openSavedChat(context, id) {
     state.activeChat = result.chat;
     state.activeExample = null;
     state.selectedProjectId = null;
-    state.messages = result.messages.map((m) => ({ id: m.id, role: m.role === "user" ? "user" : m.role === "system" ? "system" : "assistant", content: m.content, title: m.senderName, category: m.category, embedIds: m.embedIds }));
+    state.messages = tuiChatMessages(result.messages, client2.getActiveTeamId?.() ?? null, state.username, state.currentUserHash);
     registerChatEmbedAliases(state);
     if (typeof client2.getEmbed === "function") void hydrateChatEmbedPreviews(state, client2, render);
     state.projectFocusPending = null;
@@ -98068,7 +99095,7 @@ async function projectFiles(context, project, options = {}) {
 }
 async function projectTasks(context, id) {
   const { state, client: client2, render } = context, request = state.routeVersion;
-  await loadCachedTuiWorkspace(client2, `project:${id}:tasks`, async () => decryptUserTasks(await client2.listUserTasks({ projectId: id }), client2.getMasterKeyBytes()), (tasks) => {
+  await loadTuiTaskList(client2, `project:${id}:tasks`, { projectId: id }, (tasks, source, complete) => {
     if (request !== state.routeVersion || state.activeProject?.id !== id || state.projectTab !== "tasks") return;
     const selected = filterTasks(state.tasks, state.filter)[state.selectedIndex]?.taskId;
     state.tasks = tasks;
@@ -98076,9 +99103,13 @@ async function projectTasks(context, id) {
       const index = filterTasks(tasks, state.filter).findIndex((task) => task.taskId === selected);
       if (index >= 0) state.selectedIndex = index;
     }
-    state.status = null;
+    state.status = complete ? null : source === "cache" ? "Showing saved Project Tasks. Syncing\u2026" : `Loading more Project Tasks\u2026 ${tasks.length} available.`;
     render();
-  }, (error, cached) => workspaceLoadError(context, request, "Project Tasks", error, cached));
+  }, (error, cached) => {
+    if (request !== state.routeVersion || state.activeProject?.id !== id || state.projectTab !== "tasks") return;
+    state.status = cached ? "Showing saved or partially synced Project Tasks. Refresh failed." : `Could not load Project Tasks: ${error instanceof Error ? error.message : String(error)}`;
+    render();
+  });
 }
 async function refreshOpenProject(context) {
   const { state, client: client2, render } = context, id = state.activeProject.id;
@@ -99043,8 +100074,8 @@ async function handleWorkspaceKey(context, chunk, key) {
     return true;
   }
   if (state.form) {
-    const form = state.form, field2 = form.fields[form.fieldIndex];
-    if (!field2) {
+    const form = state.form, field3 = form.fields[form.fieldIndex];
+    if (!field3) {
       if (key.name === "escape" && !form.busy) state.form = null;
       else if (key.name === "return" || key.ctrl && key.name === "s") await saveForm(context);
       render();
@@ -99054,16 +100085,16 @@ async function handleWorkspaceKey(context, chunk, key) {
     else if (key.ctrl && key.name === "s") await saveForm(context);
     else if (form.busy) return true;
     else if (key.name === "tab") form.fieldIndex = (form.fieldIndex + (key.shift ? -1 : 1) + form.fields.length) % form.fields.length;
-    else if ((key.name === "left" || key.name === "right") && field2.options) {
-      const index = field2.options.indexOf(field2.value);
-      field2.value = field2.options[(index + (key.name === "left" ? -1 : 1) + field2.options.length) % field2.options.length];
-    } else if (key.name === "backspace") field2.value = eraseGrapheme(field2.value);
+    else if ((key.name === "left" || key.name === "right") && field3.options) {
+      const index = field3.options.indexOf(field3.value);
+      field3.value = field3.options[(index + (key.name === "left" ? -1 : 1) + field3.options.length) % field3.options.length];
+    } else if (key.name === "backspace") field3.value = eraseGrapheme(field3.value);
     else if (key.name === "return") {
-      if (key.meta && field2.multiline) field2.value += "\n";
+      if (key.meta && field3.multiline) field3.value += "\n";
       else if (form.fieldIndex < form.fields.length - 1) form.fieldIndex++;
       else await saveForm(context);
-    } else if (key.ctrl && key.name === "u") field2.value = "";
-    else if (!key.ctrl && !key.meta && chunk && !field2.options) field2.value += terminalText(chunk);
+    } else if (key.ctrl && key.name === "u") field3.value = "";
+    else if (!key.ctrl && !key.meta && chunk && !field3.options) field3.value += terminalText(chunk);
     render();
     return true;
   }
@@ -99710,7 +100741,7 @@ async function handleTuiPointer(context, action2, keyboard) {
     case "form-field": {
       const form = state.form;
       if (!form || form.busy) return;
-      index = action2.id ? form.fields.findIndex((field2) => field2.name === action2.id) : index;
+      index = action2.id ? form.fields.findIndex((field3) => field3.name === action2.id) : index;
       if (index < 0 || !form.fields[index]) return;
       form.fieldIndex = index;
       state.focus = "content";
@@ -100170,11 +101201,18 @@ async function runTui(client2, terminal = new TuiTerminal(), startupServices) {
   let stopActivity;
   let activityTimer;
   let refreshingActivity = false;
+  let identityScope = "";
+  let identityEpoch = 0;
+  let identityRetryTimer = null;
+  let workspaceScope = null;
+  const scopedDrafts = /* @__PURE__ */ new Map();
+  let teamChatRefresh = null;
   let modelShell = null;
   const modelPreferences = createChatModelPreferences(client2);
   const refreshActivity = async () => {
     if (closed || state.startup || refreshingActivity || !state.signedIn) return;
     refreshingActivity = true;
+    teamChatRefresh?.request();
     try {
       await refreshTuiChatSidebar(state, client2, render);
     } catch {
@@ -100205,6 +101243,65 @@ async function runTui(client2, terminal = new TuiTerminal(), startupServices) {
   const render = () => {
     if (closed) return;
     syncSessionView();
+    const teamId = state.signedIn ? client2.getActiveTeamId?.() ?? null : null;
+    const session = state.signedIn && typeof client2.getSession === "function" ? client2.getSession() : null;
+    const nextScope = session ? JSON.stringify([session.apiUrl, session.hashedEmail, session.createdAt, session.masterKeyExportedB64, teamId]) : null;
+    if (workspaceScope !== null && nextScope !== workspaceScope) {
+      const endedStatus = !session && state.status === TUI_SESSION_ENDED_STATUS ? TUI_SESSION_ENDED_STATUS : null;
+      identityEpoch++;
+      identityScope = "";
+      if (identityRetryTimer) clearTimeout(identityRetryTimer);
+      identityRetryTimer = null;
+      if (session) {
+        rememberDraft(state);
+        scopedDrafts.set(workspaceScope, { ...state.drafts });
+      } else scopedDrafts.clear();
+      state.homeAbortController?.abort();
+      Object.values(state.chatContextAuthoringControls).forEach((control) => control.stop());
+      client2.clearInteractiveChatViewer();
+      const routeVersion = state.routeVersion + 1, homeLoadVersion = state.homeLoadVersion + 1;
+      Object.assign(state, createInitialTuiState(), {
+        signedIn: !!session,
+        activeTeamId: teamId,
+        drafts: nextScope ? { ...scopedDrafts.get(nextScope) ?? {} } : {},
+        routeVersion,
+        homeLoadVersion,
+        status: endedStatus
+      });
+      state.input = state.drafts.new ?? "";
+      if (!session) hydrateExamples(state);
+      if (session) queueMicrotask(() => {
+        if (closed || workspaceScope !== nextScope) return;
+        void loadHomeData(state, client2, render);
+        void refreshTuiChatSidebar(state, client2, render, true).catch(() => {
+        });
+      });
+    }
+    workspaceScope = nextScope;
+    state.activeTeamId = teamId;
+    if (teamId && state.signedIn && nextScope) {
+      if (nextScope !== identityScope) {
+        identityScope = nextScope;
+        const epoch = ++identityEpoch;
+        const loadIdentity = (attempt) => {
+          void loadTuiTeamIdentity(state, client2, render, () => !closed && identityEpoch === epoch && workspaceScope === nextScope).then((result2) => {
+            if (!result2 || closed || identityEpoch !== epoch || workspaceScope !== nextScope) return;
+            if ((!result2.profileLoaded || !result2.teamLoaded) && attempt < 2) {
+              identityRetryTimer = setTimeout(() => {
+                identityRetryTimer = null;
+                loadIdentity(attempt + 1);
+              }, attempt === 0 ? 1e3 : 4e3);
+            }
+          });
+        };
+        loadIdentity(0);
+      }
+    } else {
+      identityScope = "";
+      identityEpoch++;
+      if (identityRetryTimer) clearTimeout(identityRetryTimer);
+      identityRetryTimer = null;
+    }
     modelShell?.sync();
     if (state.screen !== "chat") client2.clearInteractiveChatViewer();
     if (renderTimer) return;
@@ -100215,6 +101312,7 @@ async function runTui(client2, terminal = new TuiTerminal(), startupServices) {
       terminal.render(renderTuiFrame(state, terminal.width, terminal.height, { colorMode: terminal.colorMode, ascii: terminal.ascii }), tuiComposerCursor(state, terminal.width, terminal.height), state.textSelection);
     }, 16);
   };
+  teamChatRefresh = createTuiTeamChatRefresh(state, client2, render);
   modelShell = createTuiModelSelectorShell({ state, client: client2, preferences: modelPreferences, render });
   const stopHomeSync = startHomeSync(state, client2, render, () => closed);
   const finish = (result2) => {
@@ -100223,9 +101321,11 @@ async function runTui(client2, terminal = new TuiTerminal(), startupServices) {
     Object.values(state.chatContextAuthoringControls).forEach((control) => control.stop());
     stopHomeSync();
     stopActivity?.();
+    teamChatRefresh?.dispose();
     clearTimeout(activityTimer);
     clearInterval(activityPoll);
     clearInterval(activityAnimation);
+    if (identityRetryTimer) clearTimeout(identityRetryTimer);
     modelShell?.dispose();
     client2.endInteractiveViewerSession();
     if (renderTimer) clearTimeout(renderTimer);
@@ -100248,6 +101348,7 @@ async function runTui(client2, terminal = new TuiTerminal(), startupServices) {
       warmTuiWorkspaceLists(client2);
       if (state.signedIn && typeof client2.observeChatActivity === "function") {
         void client2.observeChatActivity(() => {
+          teamChatRefresh?.request();
           clearTimeout(activityTimer);
           activityTimer = setTimeout(() => {
             void refreshActivity();
@@ -100637,49 +101738,63 @@ async function handleCommand(params) {
 async function sendTuiMessage(params) {
   const { state, client: client2, render } = params;
   if (state.isBusy) return;
+  const preparingOwner = client2.hasSession() ? captureTuiWorkspaceOwner(client2) : () => !client2.hasSession();
+  const preparingRoute = state.routeVersion;
+  const preparingMessages = state.messages;
+  const preparingChatId = state.activeChatId;
+  const ownsPreparation = () => preparingOwner() && state.routeVersion === preparingRoute && state.messages === preparingMessages && state.activeChatId === preparingChatId;
   const resolved = !params.questionAnswer && params.modelShell ? await params.modelShell.consumeMention(params.message, true) : { message: params.message, blocked: false };
-  if (resolved.blocked) return;
+  if (resolved.blocked || !ownsPreparation() || state.isBusy) return;
   const message = resolved.message.trim();
   if (!message) return;
-  const modelSelection = !params.questionAnswer && isTuiAiComposer(state) && client2.hasSession() ? params.modelShell?.selectionForSend() ?? null : "auto";
-  if (modelSelection === null) {
-    state.status = "Model selection is loading. Retry or choose Auto before sending.";
-    render();
-    return;
-  }
-  const separator = modelSelection.indexOf("/");
-  const modelDirective = separator > 0 ? `@ai-model:${modelSelection.slice(separator + 1)}:${modelSelection.slice(0, separator)} ` : "";
   client2.clearInteractiveChatViewer();
   state.isBusy = true;
   state.status = "Preparing message\u2026";
   render();
-  const preparingRoute = state.routeVersion;
+  if (!ownsPreparation()) return;
   let prepared;
   try {
     prepared = params.questionAnswer ? { message, preparedEmbeds: [], displayNames: [] } : await prepareTuiMessage(client2, message);
   } catch (error) {
-    state.isBusy = false;
-    if (preparingRoute === state.routeVersion) {
+    if (ownsPreparation()) {
+      state.isBusy = false;
+      if (client2.getActiveTeamId?.()) reconcileTuiTeamSenderLabels(state);
       state.input = message;
       state.inputCursor = null;
       rememberDraft(state);
       state.status = error instanceof Error ? error.message : String(error);
+      render();
     }
-    render();
     return;
   }
-  if (preparingRoute !== state.routeVersion) {
-    state.isBusy = false;
-    render();
+  if (!ownsPreparation()) return;
+  const sendTeamId = client2.getActiveTeamId?.() ?? null;
+  const waitForAi = !client2.hasSession() || shouldWaitForTeamAi(prepared.message, sendTeamId);
+  const modelSelection = waitForAi && !params.questionAnswer && isTuiAiComposer(state) && client2.hasSession() ? params.modelShell?.selectionForSend() ?? null : "auto";
+  if (modelSelection === null) {
+    if (ownsPreparation()) {
+      state.isBusy = false;
+      state.input = message;
+      state.inputCursor = null;
+      rememberDraft(state);
+      if (sendTeamId) reconcileTuiTeamSenderLabels(state);
+      state.status = "Model selection is loading. Retry or choose Auto before sending.";
+      render();
+    }
     return;
   }
+  const separator = modelSelection.indexOf("/");
+  const modelDirective = separator > 0 ? `@ai-model:${modelSelection.slice(separator + 1)}:${modelSelection.slice(0, separator)} ` : "";
   const previousMessages = state.messages, previousActiveChat = state.activeChat, previousHeaderState = state.headerState;
+  const previousScreen = state.screen;
   const sourceExample = state.screen === "example" ? state.activeExample : null;
   const history = sourceExample ? buildExampleContinuationHistory(sourceExample) : void 0;
   if (sourceExample) state.messages = sourceExample.messages.map((m) => ({ role: m.role === "user" ? "user" : "assistant", content: m.content, title: m.senderName }));
   const messages = state.messages;
   const existingChatId = sourceExample ? null : state.activeChatId;
   const chatId = existingChatId ?? randomUUID21();
+  let ownedMessages = messages, ownedChatId = chatId;
+  const ownsSend = () => preparingOwner() && state.routeVersion === preparingRoute && state.messages === ownedMessages && state.activeChatId === ownedChatId;
   const draftKey = sourceExample ? `example:${sourceExample.chat.id}` : existingChatId ?? "new";
   state.drafts[draftKey] = "";
   state.input = "";
@@ -100688,7 +101803,7 @@ async function sendTuiMessage(params) {
   state.activeChatId = chatId;
   state.headerState = existingChatId ? "ready" : "loading";
   state.headerError = null;
-  if (!existingChatId) params.modelShell?.adoptNewChat(chatId);
+  if (!existingChatId && waitForAi) params.modelShell?.adoptNewChat(chatId);
   if (!existingChatId) state.activeChat = null;
   state.screen = "chat";
   state.aiTaskId = null;
@@ -100697,18 +101812,21 @@ async function sendTuiMessage(params) {
   state.messages.push(userMessage);
   const privacyCallbacks = {
     onPrivacyPrepared: (safe2) => {
-      userMessage.content = safe2.replace(/^@ai-model:[^\s]+\s*/, "");
-      render();
+      if (ownsSend()) {
+        userMessage.content = safe2.replace(/^@ai-model:[^\s]+\s*/, "");
+        render();
+      }
     },
     onPrivacyProgress: (done, total) => {
-      if (state.messages === messages) {
+      if (ownsSend()) {
         state.status = `Offline personal-data scan: ${Math.floor(done * 100 / total)}%`;
         render();
       }
     }
   };
-  const assistantMessage = { role: "assistant", content: "", title: "Assistant" };
-  state.messages.push(assistantMessage);
+  const assistantMessage = waitForAi ? { role: "assistant", content: "", title: "Assistant" } : null;
+  if (assistantMessage) state.messages.push(assistantMessage);
+  state.isAwaitingAi = waitForAi;
   render();
   let questionSendError = null;
   try {
@@ -100718,12 +101836,13 @@ async function sendTuiMessage(params) {
         ...privacyCallbacks,
         messageHistory: anonymousHistory
       });
-      assistantMessage.content = result.assistant;
-      if (state.messages === messages) {
+      if (assistantMessage) assistantMessage.content = result.assistant;
+      if (ownsSend()) {
+        ownedChatId = result.chatId;
         state.activeChatId = result.chatId;
         state.activeChat = { id: result.chatId, shortId: result.chatId.slice(0, 8), title: null, summary: null, updatedAt: null, createdAt: Math.floor(Date.now() / 1e3), category: result.category, mateName: result.mateName };
         state.followUpSuggestions = result.followUpSuggestions ?? [];
-        if (result.mateName) assistantMessage.title = result.mateName;
+        if (result.mateName && assistantMessage) assistantMessage.title = result.mateName;
       }
     } else {
       const result = await client2.sendMessage({
@@ -100737,36 +101856,39 @@ async function sendTuiMessage(params) {
         preparedEmbeds: prepared.preparedEmbeds,
         messageHistory: history,
         onProjectFocusPending: (countdown) => {
-          if (state.messages === messages) {
+          if (ownsSend()) {
             state.projectFocusPending = countdown;
             render();
           }
         },
         onChatContextApplied: (event) => {
-          if (state.messages !== messages || messages.some((message2) => message2.id === event.event_id || message2.role === "system" && parseChatContextContent(message2.content)?.event_id === event.event_id)) return;
+          if (!ownsSend() || messages.some((message2) => message2.id === event.event_id || message2.role === "system" && parseChatContextContent(message2.content)?.event_id === event.event_id)) return;
           messages.push({ id: event.event_id, role: "system", content: JSON.stringify(event) });
           render();
         },
         onStream: (event) => {
-          if (state.messages === messages && event.taskId) state.aiTaskId = event.taskId;
-          if (event.kind === "chunk" || event.kind === "done") {
+          if (!ownsSend()) return;
+          if (event.taskId) state.aiTaskId = event.taskId;
+          if (assistantMessage && (event.kind === "chunk" || event.kind === "done")) {
             assistantMessage.content = event.content;
-            if (state.messages === messages && event.category) state.activeChat = { id: chatId, shortId: chatId.slice(0, 8), title: state.activeChat?.title ?? null, summary: state.activeChat?.summary ?? null, updatedAt: null, createdAt: state.activeChat?.createdAt ?? Math.floor(Date.now() / 1e3), category: event.category, mateName: null };
+            if (event.category) state.activeChat = { id: chatId, shortId: chatId.slice(0, 8), title: state.activeChat?.title ?? null, summary: state.activeChat?.summary ?? null, updatedAt: null, createdAt: state.activeChat?.createdAt ?? Math.floor(Date.now() / 1e3), category: event.category, mateName: null };
             render();
           }
         }
       });
-      assistantMessage.content = result.assistant;
-      if (state.messages === messages) {
+      if (assistantMessage) assistantMessage.content = result.assistant;
+      if (ownsSend()) {
+        ownedChatId = result.chatId;
         state.activeChatId = result.chatId;
         state.followUpSuggestions = result.followUpSuggestions ?? [];
+        if (result.userMessageId) userMessage.id = result.userMessageId;
         if (!existingChatId) void params.modelShell?.persistCreatedChat(result.chatId, modelSelection);
         if (state.screen === "chat") void client2.setInteractiveChatViewer(result.chatId).catch(() => {
         });
-        if (result.mateName) assistantMessage.title = result.mateName;
+        if (result.mateName && assistantMessage) assistantMessage.title = result.mateName;
         if (typeof client2.getChatMetadata === "function") {
           const completedLength = messages.length;
-          const ownsMetadata = () => state.routeVersion === preparingRoute && state.messages === messages && state.activeChatId === result.chatId && messages.length === completedLength;
+          const ownsMetadata = () => ownsSend() && state.activeChatId === result.chatId && messages.length === completedLength;
           void (async () => {
             try {
               const metadata = await client2.getChatMetadata(result.chatId);
@@ -100782,40 +101904,58 @@ async function sendTuiMessage(params) {
         }
       }
     }
-    if (state.messages === messages) {
+    if (ownsSend()) {
       state.status = null;
       state.headerState = "ready";
     }
   } catch (error) {
     if (params.questionAnswer) {
       questionSendError = error instanceof Error ? error : new Error(String(error));
-      for (const optimistic of [userMessage, assistantMessage]) {
+      for (const optimistic of [userMessage, assistantMessage].filter((item) => item !== null)) {
         const index = messages.indexOf(optimistic);
         if (index >= 0) messages.splice(index, 1);
       }
-      if (state.messages === messages && state.routeVersion === preparingRoute) {
+      if (ownsSend()) {
         state.messages = previousMessages;
         state.activeChatId = existingChatId;
         state.activeChat = previousActiveChat;
+        ownedMessages = previousMessages;
+        ownedChatId = existingChatId;
         state.headerState = previousHeaderState;
         state.screen = sourceExample ? "example" : "chat";
         state.status = null;
       }
-    } else {
+    } else if (assistantMessage) {
       assistantMessage.title = "Error";
       assistantMessage.content = error instanceof Error ? error.message : String(error);
-      if (state.messages === messages) {
+      if (ownsSend()) {
         state.headerState = "error";
         state.headerError = /credit/i.test(assistantMessage.content) ? "Not enough credits" : assistantMessage.content;
       }
+    } else if (ownsSend()) {
+      state.messages = previousMessages;
+      state.activeChatId = existingChatId;
+      state.activeChat = previousActiveChat;
+      ownedMessages = previousMessages;
+      ownedChatId = existingChatId;
+      state.headerState = previousHeaderState;
+      state.screen = previousScreen;
+      state.input = message;
+      state.inputCursor = null;
+      rememberDraft(state);
+      state.status = error instanceof Error ? error.message : String(error);
     }
   } finally {
-    state.isBusy = false;
-    state.projectFocusPending = null;
-    state.aiTaskId = null;
-    registerChatEmbedAliases(state);
-    if (state.screen === "chat" && typeof client2.getEmbed === "function") void hydrateChatEmbedPreviews(state, client2, render);
-    render();
+    if (ownsSend()) {
+      state.isBusy = false;
+      if (sendTeamId) reconcileTuiTeamSenderLabels(state);
+      state.isAwaitingAi = false;
+      state.projectFocusPending = null;
+      state.aiTaskId = null;
+      registerChatEmbedAliases(state);
+      if (state.screen === "chat" && typeof client2.getEmbed === "function") void hydrateChatEmbedPreviews(state, client2, render);
+      render();
+    }
   }
   if (questionSendError) throw questionSendError;
 }
@@ -100901,13 +102041,8 @@ function warmTuiWorkspaceLists(client2) {
   void Promise.allSettled([
     loadCachedTuiWorkspace(client2, "projects:list", () => loadTuiProjects(client2), () => {
     }),
-    loadCachedTuiWorkspace(
-      client2,
-      tasksListCacheKey,
-      async () => decryptUserTasks(await client2.listUserTasks(), client2.getMasterKeyBytes()),
-      () => {
-      }
-    ),
+    loadTuiTaskList(client2, tasksListCacheKey, {}, () => {
+    }),
     loadCachedTuiWorkspace(client2, workflowsListCacheKey, () => client2.listWorkflows(), () => {
     })
   ]);
@@ -100955,33 +102090,31 @@ async function openTaskList(params) {
   state.screen = "status";
   state.status = "Loading tasks...";
   render();
-  const current2 = () => state.routeVersion === routeVersion && (state.screen === "status" || state.screen === "tasks");
-  await loadCachedTuiWorkspace(
-    client2,
-    tasksListCacheKey,
-    async () => decryptUserTasks(await client2.listUserTasks(), client2.getMasterKeyBytes()),
-    (tasks) => {
-      if (!current2()) return;
-      const opening = state.screen === "status";
-      const selectedId = opening ? null : state.tasks[state.selectedIndex]?.taskId;
-      state.tasks = tasks;
-      const selectedIndex = selectedId ? tasks.findIndex((task) => task.taskId === selectedId) : -1;
-      state.selectedIndex = selectedIndex >= 0 ? selectedIndex : clamp(state.selectedIndex, 0, Math.max(0, tasks.length - 1));
-      if (opening) {
-        state.scrollOffset = 0;
-        state.activeTask = null;
-      }
-      state.status = null;
-      state.screen = "tasks";
-      render();
-    },
-    (error, hasCached) => {
-      if (!current2()) return;
-      state.status = hasCached ? "Showing cached tasks. Refresh failed." : workflowError(error, "Could not load tasks. Use /login first if you are not signed in.");
-      if (!hasCached) state.screen = "status";
-      render();
+  const ownerCurrent = captureTuiWorkspaceOwner(client2);
+  const current2 = () => ownerCurrent() && state.routeVersion === routeVersion && (state.screen === "status" || state.screen === "tasks");
+  await loadTuiTaskList(client2, tasksListCacheKey, {}, (tasks, source, complete) => {
+    if (!current2()) return;
+    const opening = state.screen === "status";
+    const selectedId = opening ? null : state.tasks[state.selectedIndex]?.taskId;
+    state.tasks = tasks;
+    const selectedIndex = selectedId ? tasks.findIndex((task) => task.taskId === selectedId) : -1;
+    state.selectedIndex = selectedIndex >= 0 ? selectedIndex : clamp(state.selectedIndex, 0, Math.max(0, tasks.length - 1));
+    if (opening) {
+      state.scrollOffset = 0;
+      state.activeTask = null;
     }
-  );
+    state.status = complete ? null : source === "cache" ? "Showing saved tasks. Syncing\u2026" : `Loading more tasks\u2026 ${tasks.length} available.`;
+    state.screen = "tasks";
+    render();
+  }, (error, hasCached) => {
+    if (!current2()) return;
+    state.status = hasCached ? "Showing saved or partially synced tasks. Refresh failed." : workflowError(
+      error,
+      client2.hasSession() ? "Could not load tasks. Use /refresh to retry." : "Could not load tasks. Use /login first."
+    );
+    if (!hasCached) state.screen = "status";
+    render();
+  });
 }
 var workflowOpenRequests = /* @__PURE__ */ new WeakMap();
 function nextWorkflowOpenRequest(state) {
@@ -101151,7 +102284,7 @@ async function saveWorkflowNodeTitle(params) {
   }
   render();
 }
-function startWorkflowNodeEdit(state, field2) {
+function startWorkflowNodeEdit(state, field3) {
   const workflow = state.activeWorkflow;
   if (!workflow || state.workflowTab !== "graph") {
     state.status = "Switch to the Graph tab before editing node details.";
@@ -101161,11 +102294,11 @@ function startWorkflowNodeEdit(state, field2) {
   if (!node) return;
   state.workflowEdit = {
     nodeId: node.id,
-    field: field2,
-    value: field2 === "config" ? JSON.stringify(node.config ?? {}) : node.title ?? ""
+    field: field3,
+    value: field3 === "config" ? JSON.stringify(node.config ?? {}) : node.title ?? ""
   };
   state.expandedWorkflowNodeId = node.id;
-  state.status = `Editing ${field2} for ${node.id}.`;
+  state.status = `Editing ${field3} for ${node.id}.`;
 }
 async function runActiveWorkflow(params) {
   const { state, client: client2, render } = params;
@@ -101249,7 +102382,7 @@ function clamp(value, min, max) {
 }
 
 // src/codexTaskBridge.ts
-import { createHash as createHash25 } from "crypto";
+import { createHash as createHash26 } from "crypto";
 import { spawn as spawn3 } from "child_process";
 import { existsSync as existsSync14, readFileSync as readFileSync18, readdirSync as readdirSync7 } from "fs";
 import { isAbsolute as isAbsolute4, join as join20, resolve as resolve12 } from "path";
@@ -101292,7 +102425,7 @@ async function flushCodexChatDeletions(client2, teamId, stateRoot, notice) {
   const session = client2.getSession();
   const scope2 = [session.apiUrl, session.hashedEmail, teamId || "personal"];
   const account = JSON.stringify(scope2);
-  const directory = join20(stateRoot, "codex-chat-deletions", createHash25("sha256").update(account).digest("hex"));
+  const directory = join20(stateRoot, "codex-chat-deletions", createHash26("sha256").update(account).digest("hex"));
   if (!existsSync14(directory)) return;
   const release2 = await lockfile6.lock(directory, { retries: 0, stale: 24e4 });
   try {
@@ -101326,14 +102459,14 @@ async function flushCodexChatDeletions(client2, teamId, stateRoot, notice) {
 }
 
 // src/taskCommandDelivery.ts
-import { createHash as createHash26 } from "crypto";
+import { createHash as createHash27 } from "crypto";
 import { existsSync as existsSync15, readFileSync as readFileSync19, readdirSync as readdirSync8 } from "fs";
 import { join as join21 } from "path";
 import lockfile7 from "proper-lockfile";
 async function flushTaskCommands(client2, teamId, root = resolveStateDir(), onNotice) {
   const session = client2.getSession();
   const scope2 = [session.apiUrl, session.hashedEmail, teamId || "personal"];
-  const directory = join21(root, "task-command-delivery", createHash26("sha256").update(JSON.stringify(scope2)).digest("hex"));
+  const directory = join21(root, "task-command-delivery", createHash27("sha256").update(JSON.stringify(scope2)).digest("hex"));
   if (!existsSync15(directory)) return;
   const release2 = await lockfile7.lock(directory, { retries: 0, stale: 24e4 });
   try {
@@ -101443,7 +102576,7 @@ import {
   writeFileSync as writeFileSync16
 } from "fs";
 import { spawn as spawn7 } from "child_process";
-import { createHash as createHash32 } from "crypto";
+import { createHash as createHash33 } from "crypto";
 import { extname as extname4, join as join28, resolve as resolve18, relative as relative11 } from "path";
 
 // src/projectSourceRootPolicy.ts
@@ -101478,7 +102611,7 @@ function isEqualOrInside(parent, candidate) {
 }
 
 // src/projectPathPolicy.ts
-import { createHash as createHash27, randomBytes as randomBytes11 } from "crypto";
+import { createHash as createHash28, randomBytes as randomBytes11 } from "crypto";
 import {
   chmodSync as chmodSync10,
   closeSync as closeSync6,
@@ -101759,7 +102892,7 @@ function isInside2(root, candidate) {
   return relation === "" || !relation.startsWith("..") && !isAbsolute5(relation);
 }
 function sha2562(value) {
-  return createHash27("sha256").update(value).digest("hex");
+  return createHash28("sha256").update(value).digest("hex");
 }
 function stableJson2(value) {
   return JSON.stringify(value, (_key, item) => {
@@ -101769,7 +102902,7 @@ function stableJson2(value) {
 }
 
 // src/remoteFileWrites.ts
-import { createHash as createHash28, randomBytes as randomBytes12 } from "crypto";
+import { createHash as createHash29, randomBytes as randomBytes12 } from "crypto";
 import {
   chmodSync as chmodSync11,
   closeSync as closeSync8,
@@ -102034,7 +103167,7 @@ var MAX_FILE_BYTES4 = 200 * 1024;
 var LOCK_ROOT = join24(tmpdir5(), `openmates-remote-file-locks-${typeof process.getuid === "function" ? process.getuid() : "user"}`);
 var DEFAULT_JOURNAL_ROOT = join24(tmpdir5(), `openmates-remote-file-journal-${typeof process.getuid === "function" ? process.getuid() : "user"}`);
 function sha256ProjectFile(content) {
-  return createHash28("sha256").update(content).digest("hex");
+  return createHash29("sha256").update(content).digest("hex");
 }
 async function executeRemoteFileMutation(options) {
   const mutation = validateMutation(options.mutation);
@@ -102722,13 +103855,13 @@ import { existsSync as existsSync22, realpathSync as realpathSync11, statSync as
 import { basename as basename9, dirname as dirname16, relative as relative10, resolve as resolve17 } from "path";
 
 // src/remoteCommandRuntime.ts
-import { createHash as createHash30, randomUUID as randomUUID22 } from "crypto";
+import { createHash as createHash31, randomUUID as randomUUID22 } from "crypto";
 import { spawn as spawn6, spawnSync as spawnSync5 } from "child_process";
 import { existsSync as existsSync20, lstatSync as lstatSync10, readdirSync as readdirSync11, realpathSync as realpathSync8, statSync as statSync8 } from "fs";
 import { isAbsolute as isAbsolute8, join as join25, relative as relative7, resolve as resolve16, sep } from "path";
 
 // src/remoteCommandAppArmor.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash30 } from "crypto";
 import { spawn as spawn5 } from "child_process";
 import { lstatSync as lstatSync9, readFileSync as readFileSync21, realpathSync as realpathSync7, statSync as statSync7 } from "fs";
 import { isAbsolute as isAbsolute7, relative as relative6 } from "path";
@@ -102945,7 +104078,7 @@ function hasControl2(value) {
   });
 }
 function sha2563(value) {
-  return createHash29("sha256").update(value).digest("hex");
+  return createHash30("sha256").update(value).digest("hex");
 }
 
 // src/remoteCommandRuntime.ts
@@ -103786,7 +104919,7 @@ function stableJson4(value) {
   return JSON.stringify(value);
 }
 function sha2564(value) {
-  return createHash30("sha256").update(value).digest("hex");
+  return createHash31("sha256").update(value).digest("hex");
 }
 function deepFreeze(value) {
   if (value && typeof value === "object") {
@@ -104064,7 +105197,7 @@ function capabilityError(message) {
 }
 
 // src/remoteCommandResourceGrants.ts
-import { createHash as createHash31 } from "crypto";
+import { createHash as createHash32 } from "crypto";
 import { chmodSync as chmodSync13, existsSync as existsSync21, lstatSync as lstatSync11, mkdirSync as mkdirSync21, readFileSync as readFileSync22, realpathSync as realpathSync10, renameSync as renameSync12, statSync as statSync10, writeFileSync as writeFileSync15 } from "fs";
 import { isAbsolute as isAbsolute10, join as join27, relative as relative9 } from "path";
 var STORE_FILE = "remote-command-resource-grants.json";
@@ -104159,7 +105292,7 @@ function resolveRemoteCommandResourceGrants(context) {
   return { writable_targets, network_profiles, credential_profiles };
 }
 function definitionDigest(kind, definition) {
-  return createHash31("sha256").update(JSON.stringify(["openmates-command-resource-v1", kind, definition])).digest("hex");
+  return createHash32("sha256").update(JSON.stringify(["openmates-command-resource-v1", kind, definition])).digest("hex");
 }
 function upsert(grant) {
   validateIdentity(grant.project_id, grant.source_id, grant.profile_id);
@@ -105329,7 +106462,7 @@ function readRemoteAccessTextFile(options) {
       truncated,
       sizeBytes: stats.size,
       lineCount: countTextLines(content),
-      expected_base: truncated ? null : createHash32("sha256").update(bytes2.subarray(0, bytesRead)).digest("hex")
+      expected_base: truncated ? null : createHash33("sha256").update(bytes2.subarray(0, bytesRead)).digest("hex")
     };
   } catch (error) {
     const code = error.code;
@@ -105379,7 +106512,7 @@ function readRemoteAccessImageChunk(options) {
       mime_type: mimeType,
       size_bytes: stats.size,
       offset: options.offset,
-      content_hash: createHash32("sha256").update(bytes2).digest("hex")
+      content_hash: createHash33("sha256").update(bytes2).digest("hex")
     };
   } catch (error) {
     if (error.code === "ELOOP") throw new Error("Remote source path is a symbolic link");
@@ -105427,8 +106560,8 @@ function readRemoteAccessFileChunk(options) {
       content_base64: bytes2.toString("base64"),
       size_bytes: stats.size,
       offset: options.offset,
-      file_identity: createHash32("sha256").update(`${stats.dev}:${stats.ino}:${stats.size}:${stats.mtimeMs}:${stats.ctimeMs}`).digest("hex"),
-      chunk_hash: createHash32("sha256").update(bytes2).digest("hex")
+      file_identity: createHash33("sha256").update(`${stats.dev}:${stats.ino}:${stats.size}:${stats.mtimeMs}:${stats.ctimeMs}`).digest("hex"),
+      chunk_hash: createHash33("sha256").update(bytes2).digest("hex")
     };
   } catch (error) {
     if (error.code === "ELOOP") throw new Error("Remote source path is a symbolic link");
@@ -106702,8 +107835,8 @@ function validateWorkRecoveryDocument(value) {
   const document = value;
   if (document.schema_version !== 1) throw new Error("Unsupported work recovery schema_version.");
   if (!document.project?.project_id) throw new Error("Work recovery document requires project.project_id.");
-  for (const field2 of ["plans", "tasks", "dependencies", "assumptions", "revisions"]) {
-    if (!Array.isArray(document[field2])) throw new Error(`Work recovery document requires ${field2}.`);
+  for (const field3 of ["plans", "tasks", "dependencies", "assumptions", "revisions"]) {
+    if (!Array.isArray(document[field3])) throw new Error(`Work recovery document requires ${field3}.`);
   }
   const plans = document.plans;
   const tasks = document.tasks;
@@ -108684,7 +109817,7 @@ async function handlePlans(client2, subcommand, rest, flags, redactor) {
     if (action2 === "diff") throw new Error("Revision diffs are reviewed in the authenticated web review page; use submit-for-review to print its URL.");
     if (action2 !== "submit-for-review") throw new Error("Usage: openmates plans revisions list|submit-for-review|status|diff <plan-id>");
     const snapshot2 = JSON.stringify(planToJson(plan));
-    const revision = await client2.submitPlanRevision(plan.planId, { fingerprint: createHash33("sha256").update(snapshot2).digest("hex"), encrypted_snapshot: await encryptPlanAssumptionSources(plan, masterKey, snapshot2), created_at: nowSeconds2() });
+    const revision = await client2.submitPlanRevision(plan.planId, { fingerprint: createHash34("sha256").update(snapshot2).digest("hex"), encrypted_snapshot: await encryptPlanAssumptionSources(plan, masterKey, snapshot2), created_at: nowSeconds2() });
     const reviewUrl = `${deriveAppUrl(client2.apiUrl)}/plans/${plan.planId}/review?revision=${revision.revision_id}`;
     if (flags.json === true) printJson2({ revision, review_url: reviewUrl });
     else console.log(`Plan revision submitted for web review: ${reviewUrl}`);
@@ -109604,7 +110737,7 @@ async function handleProjects(client2, subcommand, rest, flags, redactor) {
       encrypted_settings: await encryptWithAesGcmCombined(JSON.stringify({ default_focus: defaultFocus }), projectKey),
       key_wrappers: wrapping.teamId ? [{
         key_type: "team",
-        hashed_team_id: createHash33("sha256").update(wrapping.teamId).digest("hex"),
+        hashed_team_id: createHash34("sha256").update(wrapping.teamId).digest("hex"),
         team_key_epoch: 1,
         encrypted_project_key: await encryptBytesWithAesGcm(projectKey, wrapping.key),
         wrapper_version: 1,
@@ -110208,6 +111341,17 @@ function buyerAddressFromFlags(flags) {
   if (!/^[a-zA-Z]{2}$/.test(String(address.country))) throw new Error("Billing address country must be a two-letter country code.");
   return { ...address, country: String(address.country).toUpperCase() };
 }
+function publicTeamMember(member) {
+  return {
+    user_id: member.user_id,
+    hashed_user_id: member.hashed_user_id,
+    display_name: member.profile?.display_name ?? "",
+    avatar: member.profile?.avatar ?? null,
+    role: member.role,
+    status: member.status ?? "",
+    joined_at: member.joined_at ?? null
+  };
+}
 async function handleTeams(client2, subcommand, rest, flags) {
   if (!subcommand || subcommand === "help" || flags.help === true) {
     printTeamsHelp();
@@ -110237,6 +111381,49 @@ async function handleTeams(client2, subcommand, rest, flags) {
     else printTeamRecord(team, client2.getActiveTeamId());
     return;
   }
+  if (subcommand === "members") {
+    const action2 = rest[0];
+    const teamId = requiredStringFlag(rest[1], "<team-id>");
+    if (action2 === "list") {
+      const members = (await client2.listTeamMembers(teamId)).map(publicTeamMember);
+      if (flags.json === true) printJson2({ members });
+      else if (!members.length) console.log("No Team members.");
+      else for (const member of members) console.log(`${member.display_name || member.user_id}  ${member.role}  ${member.status || ""}  ${member.user_id}`.trim());
+      return;
+    }
+    if (action2 === "show") {
+      const userId = requiredStringFlag(rest[2], "<member-user-id>");
+      const member = publicTeamMember(await client2.getTeamMember(teamId, userId));
+      if (flags.json === true) printJson2({ member });
+      else console.log(`${member.display_name || member.user_id}  ${member.role}  ${member.status || ""}  ${member.user_id}`.trim());
+      return;
+    }
+    throw new Error("Use teams members list <team-id> or teams members show <team-id> <member-user-id>.");
+  }
+  if (subcommand === "profile") {
+    const action2 = rest[0];
+    const teamId = requiredStringFlag(rest[1], "<team-id>");
+    const identity3 = await client2.whoAmI();
+    const ownUserId = requiredStringFlag(typeof identity3.id === "string" ? identity3.id : void 0, "authenticated user ID");
+    if (action2 === "show" || action2 === "get") {
+      const member = publicTeamMember(await client2.getTeamMember(teamId, ownUserId));
+      if (flags.json === true) printJson2({ member });
+      else console.log(`${member.display_name || member.user_id}  ${member.role}  ${member.user_id}`);
+      return;
+    }
+    if (action2 === "edit") {
+      const current2 = await client2.getTeamMember(teamId, ownUserId);
+      if (typeof flags.name !== "string" && typeof flags.avatar !== "string") throw new Error("Provide --name or --avatar.");
+      const member = publicTeamMember(await client2.updateOwnTeamMemberProfile(teamId, {
+        display_name: typeof flags.name === "string" ? flags.name : current2.profile?.display_name,
+        avatar: typeof flags.avatar === "string" ? flags.avatar : current2.profile?.avatar
+      }));
+      if (flags.json === true) printJson2({ member });
+      else console.log(`Team profile saved: ${member.display_name || member.user_id}`);
+      return;
+    }
+    throw new Error("Use teams profile show <team-id> or teams profile edit <team-id> [--name <name>] [--avatar <value>].");
+  }
   if (subcommand === "create") {
     const name = requiredStringFlag(flags.name, "--name <name>");
     const team = await client2.createTeam({
@@ -111070,7 +112257,7 @@ async function createEncryptedRemoteAccessProject(client2, name, rootPath, write
     encrypted_settings: await encryptWithAesGcmCombined(JSON.stringify({ default_focus: defaultFocus }), projectKey),
     key_wrappers: wrapping.teamId ? [{
       key_type: "team",
-      hashed_team_id: createHash33("sha256").update(wrapping.teamId).digest("hex"),
+      hashed_team_id: createHash34("sha256").update(wrapping.teamId).digest("hex"),
       team_key_epoch: 1,
       encrypted_project_key: await encryptBytesWithAesGcm(projectKey, wrapping.key),
       wrapper_version: 1,
@@ -112406,8 +113593,8 @@ function extractApiKeyChatModelName(value, depth = 0) {
   if (!value || typeof value !== "object" || depth > 3) return null;
   const record10 = value;
   for (const key of ["model_name", "modelName", "model"]) {
-    const field2 = record10[key];
-    if (typeof field2 === "string" && field2) return field2;
+    const field3 = record10[key];
+    if (typeof field3 === "string" && field3) return field3;
   }
   return extractApiKeyChatModelName(record10.data, depth + 1) ?? extractApiKeyChatModelName(record10.raw, depth + 1) ?? null;
 }
@@ -112461,7 +113648,7 @@ function normalizeApiKeyLoadedChat(payload) {
   const messages = rawMessages.map((message) => {
     const messageId = String(message.client_message_id ?? message.message_id ?? message.id ?? "");
     const directEmbedIds = Array.isArray(message.embedIds) ? message.embedIds : Array.isArray(message.embed_ids) ? message.embed_ids : [];
-    const hashedMessageId = messageId ? createHash33("sha256").update(messageId).digest("hex") : null;
+    const hashedMessageId = messageId ? createHash34("sha256").update(messageId).digest("hex") : null;
     const matchedEmbedIds = hashedMessageId ? rawEmbeds.filter((embed) => embed.hashed_message_id === hashedMessageId && !embed.parent_embed_id).map((embed) => String(embed.embed_id ?? embed.id ?? "")).filter(Boolean) : [];
     return {
       id: messageId,
@@ -119431,6 +120618,10 @@ function printTeamsHelp() {
   openmates teams approve-access <team-id> <access-request-id> [--encrypted-team-key <value>] [--json]
   openmates teams reject-access <team-id> <access-request-id> [--json]
   openmates teams role <team-id> --user <user-id> --role admin|member|viewer [--json]
+  openmates teams members list <team-id> [--json]
+  openmates teams members show <team-id> <member-user-id> [--json]
+  openmates teams profile show <team-id> [--json]
+  openmates teams profile edit <team-id> [--name <display-name>] [--avatar <value>] [--json]
   openmates teams remove-member <team-id> --user <user-id> [--json]
   openmates teams billing <team-id> [--json]
   openmates teams storage <team-id> [--json]