replicas-cli 0.2.712 → 0.2.714

package/dist/index.cjs

@@ -7363,9 +7363,9 @@ var require_dist = __commonJS({
 
 // src/index.ts
 var import_config22 = require("dotenv/config");
-var import_node_child_process2 = require("child_process");
+var import_node_child_process3 = require("child_process");
 var import_commander = require("commander");
-var import_chalk23 = __toESM(require("chalk"));
+var import_chalk24 = __toESM(require("chalk"));
 
 // ../shared/src/urls.ts
 var DEFAULT_WEB_APP_URL = "https://app.replicas.dev";
@@ -24685,6 +24685,10 @@ In agent mode the CLI hides commands that don't make sense for in-workspace agen
 | Command | What it does |
 | --- | --- |
 | \`replicas whoami\` | Print the workspace + org identity |
+| \`replicas identity token [--audience <aud>]\` | Print the current short-lived workspace identity token for an audience |
+| \`replicas identity token --format gcp --audience <aud>\` | Supply a current token to Google's executable credential source |
+| \`replicas identity aws-credentials --role-arn <arn> [--region <region>]\` | Exchange the current token for AWS credential_process JSON (requires AWS CLI) |
+| \`replicas identity exec [--audience <aud>] -- <command>\` | Run a command with the current token and audience in its environment |
 | \`replicas init\` | Create a \`replicas.json\` / \`replicas.yaml\` in the current directory |
 | \`replicas connect <name>\` | SSH into another workspace (requires user creds \u2014 usually only useful when scripting locally) |
 | \`replicas repos\` | List repos connected to the org |
@@ -27435,7 +27439,7 @@ var headlessFilesystemAgentResultSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.712";
+var CLI_VERSION = "0.2.714";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -28100,6 +28104,54 @@ async function readSseStream(body, onEvent, shouldContinue = () => true) {
 // ../shared/src/frontmatter.ts
 var import_yaml2 = __toESM(require_dist());
 
+// ../shared/src/workspace-identity.ts
+var WORKSPACE_IDENTITY_AUDIENCE = "replicas:workspace";
+var WORKSPACE_TOKEN_TTL_SECONDS = 15 * 60;
+var WORKSPACE_TOKEN_FILE = `${SANDBOX_PATHS.REPLICAS_DIR}/credentials/tokens.json`;
+var WORKSPACE_TOKEN_ENV = {
+  TOKEN: "REPLICAS_WORKSPACE_TOKEN",
+  TOKEN_FILE: "REPLICAS_WORKSPACE_TOKEN_FILE",
+  AUDIENCE: "REPLICAS_WORKSPACE_TOKEN_AUDIENCE",
+  ISSUER: "REPLICAS_WORKSPACE_IDENTITY_ISSUER"
+};
+var workspaceTokenClaimsSchema = external_exports.object({
+  iss: external_exports.string(),
+  sub: external_exports.string(),
+  aud: external_exports.string(),
+  iat: external_exports.number().int(),
+  nbf: external_exports.number().int(),
+  exp: external_exports.number().int(),
+  jti: external_exports.string(),
+  organization_id: external_exports.string().uuid(),
+  workspace_id: external_exports.string().uuid(),
+  environment_id: external_exports.string().uuid(),
+  creator_id: external_exports.string().uuid().nullable()
+}).passthrough();
+var workspaceTokenBundleSchema = external_exports.strictObject({
+  version: external_exports.literal(1),
+  issuer: external_exports.string(),
+  default_audience: external_exports.string(),
+  tokens: external_exports.record(
+    external_exports.string(),
+    external_exports.strictObject({ token: external_exports.string(), expires_at: external_exports.string() })
+  )
+});
+var workloadAudienceInput = external_exports.strictObject({
+  name: external_exports.string().trim().min(1).max(64),
+  audience: external_exports.string().min(1).max(255).regex(/^[\x21-\x7e]+$/, "Audience must be a single printable token without spaces").refine((value) => value !== WORKSPACE_IDENTITY_AUDIENCE, "Reserved audience"),
+  enabled: external_exports.boolean(),
+  is_default: external_exports.boolean()
+});
+var mcpWorkloadAuthSchema = external_exports.strictObject({
+  type: external_exports.literal("workspace_identity"),
+  audience: external_exports.string().min(1)
+});
+function currentWorkspaceToken(bundle, audience = bundle.default_audience, now = Date.now()) {
+  const entry = bundle.tokens[audience];
+  if (!entry || Date.parse(entry.expires_at) <= now) return null;
+  return entry.token;
+}
+
 // src/lib/monolith-url.ts
 var MONOLITH_URL = process.env.REPLICAS_MONOLITH_URL || process.env.MONOLITH_URL || "https://api.replicas.dev";
 
@@ -28595,8 +28647,119 @@ async function whoamiCommand() {
   }
 }
 
+// src/commands/identity.ts
+var import_node_fs = require("fs");
+var import_node_child_process = require("child_process");
+var import_node_os = require("os");
+var import_node_path = require("path");
+var import_chalk5 = __toESM(require("chalk"));
+function readToken(audience) {
+  const file2 = process.env[WORKSPACE_TOKEN_ENV.TOKEN_FILE] ?? WORKSPACE_TOKEN_FILE;
+  let bundle;
+  try {
+    bundle = workspaceTokenBundleSchema.parse(JSON.parse((0, import_node_fs.readFileSync)(file2, "utf8")));
+  } catch {
+    return createErrorResult({ message: `No valid workspace token bundle at ${file2}. Check that workspace identity is enabled.` });
+  }
+  const selected = audience ?? bundle.default_audience;
+  const token = currentWorkspaceToken(bundle, selected);
+  const expiresAt = Date.parse(bundle.tokens[selected]?.expires_at);
+  if (!token || !Number.isFinite(expiresAt)) {
+    return createErrorResult({
+      message: bundle.tokens[selected] ? `The workspace token for ${selected} has expired or has an invalid expiry and has not been renewed yet.` : `No workspace token is issued for audience ${selected}. Registered: ${Object.keys(bundle.tokens).join(", ")}`
+    });
+  }
+  return createSuccessResult({ token, audience: selected, expiresAt });
+}
+function identityTokenCommand(options) {
+  const result = readToken(options.audience);
+  if (!result.ok) {
+    if (options.format === "gcp") {
+      process.stdout.write(`${JSON.stringify({ version: 1, success: false, code: "TOKEN_UNAVAILABLE", message: result.error.message })}
+`);
+    } else {
+      console.error(import_chalk5.default.red(result.error.message));
+    }
+    process.exitCode = 1;
+    return;
+  }
+  const { token, expiresAt } = result.data;
+  const output = options.format === "gcp" ? JSON.stringify({
+    version: 1,
+    success: true,
+    token_type: "urn:ietf:params:oauth:token-type:jwt",
+    id_token: token,
+    expiration_time: Math.floor(expiresAt / 1e3)
+  }) : token;
+  process.stdout.write(`${output}
+`);
+}
+function identityExecCommand(command, options) {
+  if (command.length === 0) {
+    console.error(import_chalk5.default.red("Provide a command to run: replicas identity exec -- <command>"));
+    process.exit(1);
+  }
+  const tokenResult = readToken(options.audience);
+  if (!tokenResult.ok) {
+    console.error(import_chalk5.default.red(tokenResult.error.message));
+    process.exitCode = 1;
+    return;
+  }
+  const { token, audience } = tokenResult.data;
+  const result = (0, import_node_child_process.spawnSync)(command[0], command.slice(1), {
+    stdio: "inherit",
+    env: { ...process.env, [WORKSPACE_TOKEN_ENV.TOKEN]: token, [WORKSPACE_TOKEN_ENV.AUDIENCE]: audience }
+  });
+  process.exit(result.status ?? 1);
+}
+function identityAwsCredentialsCommand(options) {
+  const result = readToken(options.audience);
+  if (!result.ok) {
+    console.error(import_chalk5.default.red(result.error.message));
+    process.exitCode = 1;
+    return;
+  }
+  const directory = (0, import_node_fs.mkdtempSync)((0, import_node_path.join)((0, import_node_os.tmpdir)(), "replicas-aws-identity-"));
+  try {
+    const file2 = (0, import_node_path.join)(directory, "request.json");
+    (0, import_node_fs.writeFileSync)(file2, JSON.stringify({
+      RoleArn: options.roleArn,
+      RoleSessionName: options.sessionName,
+      WebIdentityToken: result.data.token
+    }), { mode: 384 });
+    const env = {
+      ...process.env,
+      AWS_CONFIG_FILE: "/dev/null",
+      AWS_SHARED_CREDENTIALS_FILE: "/dev/null",
+      AWS_PAGER: ""
+    };
+    delete env.AWS_PROFILE;
+    delete env.AWS_DEFAULT_PROFILE;
+    const credentials = (0, import_node_child_process.spawnSync)("aws", [
+      "sts",
+      "assume-role-with-web-identity",
+      "--cli-input-json",
+      `file://${file2}`,
+      "--no-sign-request",
+      "--query",
+      "Credentials.{Version: `1`, AccessKeyId: AccessKeyId, SecretAccessKey: SecretAccessKey, SessionToken: SessionToken, Expiration: Expiration}",
+      "--output",
+      "json",
+      ...options.region ? ["--region", options.region] : []
+    ], { env, encoding: "utf8", timeout: 3e4 });
+    if (credentials.error || credentials.status !== 0) {
+      console.error(credentials.error ? `AWS credential exchange failed: ${credentials.error.message}. Ensure the AWS CLI is installed.` : credentials.stderr.trim());
+      process.exitCode = credentials.status || 1;
+      return;
+    }
+    process.stdout.write(credentials.stdout);
+  } finally {
+    (0, import_node_fs.rmSync)(directory, { recursive: true, force: true });
+  }
+}
+
 // src/commands/connect.ts
-var import_chalk6 = __toESM(require("chalk"));
+var import_chalk7 = __toESM(require("chalk"));
 
 // src/lib/ssh.ts
 var import_child_process = require("child_process");
@@ -28634,7 +28797,7 @@ async function connectSSH(token, host, proxyCommand, localForward) {
 }
 
 // src/lib/workspace-connection.ts
-var import_chalk5 = __toESM(require("chalk"));
+var import_chalk6 = __toESM(require("chalk"));
 var import_prompts5 = __toESM(require("prompts"));
 
 // src/lib/api.ts
@@ -28736,7 +28899,7 @@ async function resolveWorkspaceRecord(workspaceName) {
     const exactWorkspace = await fetchWorkspaceById(workspaceName);
     if (exactWorkspace) return exactWorkspace;
   }
-  console.log(import_chalk5.default.blue(workspaceName ? `
+  console.log(import_chalk6.default.blue(workspaceName ? `
 Searching for workspace: ${workspaceName}...` : "\nLoading workspaces..."));
   const params = new URLSearchParams({ limit: "100" });
   if (workspaceName) params.set("name", workspaceName);
@@ -28755,7 +28918,7 @@ Searching for workspace: ${workspaceName}...` : "\nLoading workspaces..."));
     selectedWorkspace = workspaces[0];
   } else {
     if (workspaceName) {
-      console.log(import_chalk5.default.yellow(`
+      console.log(import_chalk6.default.yellow(`
 Found ${workspaces.length} workspaces matching "${workspaceName}":`));
     }
     const selectResponse = await (0, import_prompts5.default)({
@@ -28777,9 +28940,9 @@ Found ${workspaces.length} workspaces matching "${workspaceName}":`));
     }
     selectedWorkspace = selected;
   }
-  console.log(import_chalk5.default.green(`
+  console.log(import_chalk6.default.green(`
 \u2713 Selected workspace: ${selectedWorkspace.name}`));
-  console.log(import_chalk5.default.gray(`  Status: ${selectedWorkspace.status || "unknown"}`));
+  console.log(import_chalk6.default.gray(`  Status: ${selectedWorkspace.status || "unknown"}`));
   return selectedWorkspace;
 }
 async function prepareWorkspaceConnection(workspaceName) {
@@ -28789,12 +28952,12 @@ async function prepareWorkspaceConnection(workspaceName) {
       `Workspace is currently ${selectedWorkspace.status}. Wake it at ${DEFAULT_WEB_APP_URL}`
     );
   }
-  console.log(import_chalk5.default.blue("\nRequesting SSH access token..."));
+  console.log(import_chalk6.default.blue("\nRequesting SSH access token..."));
   const tokenResponse = await orgAuthenticatedFetch(
     `/v1/workspaces/${selectedWorkspace.id}/ssh-token`,
     { method: "POST" }
   );
-  console.log(import_chalk5.default.green("\u2713 SSH token received"));
+  console.log(import_chalk6.default.green("\u2713 SSH token received"));
   let repoName = null;
   if (isInsideGitRepo()) {
     try {
@@ -28814,27 +28977,27 @@ async function prepareWorkspaceConnection(workspaceName) {
 // src/commands/connect.ts
 async function connectCommand(workspaceName) {
   if (!isAuthenticated()) {
-    console.log(import_chalk6.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk7.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
     const { workspace, sshToken, sshHost, sshProxyCommand } = await prepareWorkspaceConnection(workspaceName);
-    console.log(import_chalk6.default.blue(`
+    console.log(import_chalk7.default.blue(`
 Connecting to ${workspace.name}...`));
     const sshCommand = `ssh ${sshToken}@${sshHost}`;
-    console.log(import_chalk6.default.gray(`SSH command: ${sshCommand}`));
-    console.log(import_chalk6.default.gray("\nPress Ctrl+D to disconnect.\n"));
+    console.log(import_chalk7.default.gray(`SSH command: ${sshCommand}`));
+    console.log(import_chalk7.default.gray("\nPress Ctrl+D to disconnect.\n"));
     await connectSSH(sshToken, sshHost, sshProxyCommand);
-    console.log(import_chalk6.default.green("\n\u2713 Disconnected from workspace.\n"));
+    console.log(import_chalk7.default.green("\n\u2713 Disconnected from workspace.\n"));
   } catch (error51) {
-    console.error(import_chalk6.default.red(`
+    console.error(import_chalk7.default.red(`
 Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 
 // src/commands/code.ts
-var import_chalk7 = __toESM(require("chalk"));
+var import_chalk8 = __toESM(require("chalk"));
 var import_child_process3 = require("child_process");
 
 // src/lib/ssh-config.ts
@@ -28928,32 +29091,32 @@ function getWorkspaceHostAlias(workspaceName) {
 // src/commands/code.ts
 async function codeCommand(workspaceName) {
   if (!isAuthenticated()) {
-    console.log(import_chalk7.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk8.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   if (!workspaceName && !process.stdin.isTTY) {
-    console.error(import_chalk7.default.red('Pass a workspace name or ID, or run "replicas code" in an interactive terminal.'));
+    console.error(import_chalk8.default.red('Pass a workspace name or ID, or run "replicas code" in an interactive terminal.'));
     process.exit(1);
   }
   try {
     const { workspace, sshToken, sshHost, sshProxyCommand, repoName } = await prepareWorkspaceConnection(workspaceName);
     const hostAlias = getWorkspaceHostAlias(workspace.name);
-    console.log(import_chalk7.default.blue("\nConfiguring SSH connection..."));
+    console.log(import_chalk8.default.blue("\nConfiguring SSH connection..."));
     addOrUpdateSSHConfigEntry({
       host: hostAlias,
       hostname: sshHost,
       user: sshToken,
       proxyCommand: sshProxyCommand
     });
-    console.log(import_chalk7.default.green(`\u2713 SSH config entry created: ${hostAlias}`));
+    console.log(import_chalk8.default.green(`\u2713 SSH config entry created: ${hostAlias}`));
     const paths = SANDBOX_PATHS;
     const remotePath = repoName ? `${paths.WORKSPACES_DIR}/${repoName}` : paths.HOME_DIR;
     const ideCommand = getIdeCommand();
     const fullCommand = `${ideCommand} --remote ssh-remote+${hostAlias} ${remotePath}`;
-    console.log(import_chalk7.default.blue(`
+    console.log(import_chalk8.default.blue(`
 Opening ${ideCommand} for workspace ${workspace.name}...`));
-    console.log(import_chalk7.default.gray(`Command: ${fullCommand}`));
-    console.log(import_chalk7.default.yellow(`
+    console.log(import_chalk8.default.gray(`Command: ${fullCommand}`));
+    console.log(import_chalk8.default.yellow(`
 Note: SSH tokens expire after 3 hours. Run this command again to refresh.`));
     const ide = (0, import_child_process3.spawn)(ideCommand, [
       "--remote",
@@ -28964,29 +29127,29 @@ Note: SSH tokens expire after 3 hours. Run this command again to refresh.`));
       detached: false
     });
     ide.on("error", (error51) => {
-      console.error(import_chalk7.default.red(`
+      console.error(import_chalk8.default.red(`
 Failed to launch ${ideCommand}: ${error51.message}`));
-      console.log(import_chalk7.default.yellow(`
+      console.log(import_chalk8.default.yellow(`
 Make sure ${ideCommand} is installed and available in your PATH.`));
-      console.log(import_chalk7.default.gray(`You can configure a different IDE with: replicas config set ide <command>`));
+      console.log(import_chalk8.default.gray(`You can configure a different IDE with: replicas config set ide <command>`));
       process.exit(1);
     });
     ide.on("close", (code) => {
       if (code === 0) {
-        console.log(import_chalk7.default.green(`
+        console.log(import_chalk8.default.green(`
 \u2713 ${ideCommand} closed successfully.
 `));
       }
     });
   } catch (error51) {
-    console.error(import_chalk7.default.red(`
+    console.error(import_chalk8.default.red(`
 Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 
 // src/commands/tunnel.ts
-var import_chalk8 = __toESM(require("chalk"));
+var import_chalk9 = __toESM(require("chalk"));
 async function tunnelCommand(workspaceName, options) {
   if (!isAuthenticated()) {
     throw new Error('Not logged in. Please run "replicas login" first.');
@@ -28994,32 +29157,32 @@ async function tunnelCommand(workspaceName, options) {
   const remotePort = parsePort(options.port);
   const localPort = options.localPort ? parsePort(options.localPort) : remotePort;
   const { workspace, sshToken, sshHost, sshProxyCommand } = await prepareWorkspaceConnection(workspaceName);
-  console.log(import_chalk8.default.green(`
+  console.log(import_chalk9.default.green(`
 \u2713 Forwarding localhost:${localPort} to ${workspace.name}:${remotePort}`));
-  console.log(import_chalk8.default.gray("  Press Ctrl+C to stop.\n"));
+  console.log(import_chalk9.default.gray("  Press Ctrl+C to stop.\n"));
   await connectSSH(sshToken, sshHost, sshProxyCommand, { localPort, remotePort });
 }
 
 // src/commands/org.ts
-var import_chalk9 = __toESM(require("chalk"));
+var import_chalk10 = __toESM(require("chalk"));
 async function orgCommand() {
   if (!isAuthenticated()) {
-    console.log(import_chalk9.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk10.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
     const currentOrgId = getConfirmedOrganizationId();
     const organizations = await fetchOrganizations();
     if (!currentOrgId) {
-      console.log(import_chalk9.default.yellow("\n  No organization selected."));
-      console.log(import_chalk9.default.gray('  Run "replicas org switch" to select one.\n'));
+      console.log(import_chalk10.default.yellow("\n  No organization selected."));
+      console.log(import_chalk10.default.gray('  Run "replicas org switch" to select one.\n'));
       return;
     }
     const currentOrg = organizations.find((org2) => org2.id === currentOrgId);
     if (!currentOrg) {
       clearOrganizationId();
-      console.log(import_chalk9.default.yellow("\n  The selected organization is no longer available to you."));
-      console.log(import_chalk9.default.gray('  Run "replicas org switch" to select another.\n'));
+      console.log(import_chalk10.default.yellow("\n  The selected organization is no longer available to you."));
+      console.log(import_chalk10.default.gray('  Run "replicas org switch" to select another.\n'));
       return;
     }
     const [account, role] = await Promise.all([
@@ -29030,26 +29193,26 @@ async function orgCommand() {
     renderIdentity({ account, role, organizationName: currentOrg.name });
     if (organizations.length > 1) {
       console.log(
-        import_chalk9.default.gray(`
+        import_chalk10.default.gray(`
     ${organizations.length} organizations available. "replicas org switch" to change.`)
       );
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk9.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk10.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function orgSwitchCommand() {
   if (!isAuthenticated()) {
-    console.log(import_chalk9.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk10.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
     const organizations = await fetchOrganizations();
     if (organizations.length === 0) {
-      console.log(import_chalk9.default.yellow("\n  You are not a member of any organization."));
-      console.log(import_chalk9.default.gray("  Please contact support.\n"));
+      console.log(import_chalk10.default.yellow("\n  You are not a member of any organization."));
+      console.log(import_chalk10.default.gray("  Please contact support.\n"));
       return;
     }
     const currentOrgId = getConfirmedOrganizationId();
@@ -29057,7 +29220,7 @@ async function orgSwitchCommand() {
     if (organizations.length > 1) {
       const chosen = await promptForOrganization(organizations, currentOrgId);
       if (!chosen) {
-        console.log(import_chalk9.default.yellow("\n  Cancelled. The active organization is unchanged.\n"));
+        console.log(import_chalk10.default.yellow("\n  Cancelled. The active organization is unchanged.\n"));
         return;
       }
       selectedId = chosen.id;
@@ -29072,72 +29235,72 @@ async function orgSwitchCommand() {
     renderIdentity({ account, role, organizationName: selected?.name });
     console.log();
   } catch (error51) {
-    console.error(import_chalk9.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk10.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 
 // src/commands/config.ts
-var import_chalk10 = __toESM(require("chalk"));
+var import_chalk11 = __toESM(require("chalk"));
 async function configGetCommand(key) {
   if (!isAuthenticated()) {
-    console.log(import_chalk10.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk11.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
     if (key === "ide") {
       const ideCommand = getIdeCommand();
-      console.log(import_chalk10.default.green(`
+      console.log(import_chalk11.default.green(`
 IDE command: ${ideCommand}
 `));
     } else {
-      console.log(import_chalk10.default.red(`Unknown config key: ${key}`));
-      console.log(import_chalk10.default.gray("Available keys: ide"));
+      console.log(import_chalk11.default.red(`Unknown config key: ${key}`));
+      console.log(import_chalk11.default.gray("Available keys: ide"));
       process.exit(1);
     }
   } catch (error51) {
-    console.error(import_chalk10.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk11.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function configSetCommand(key, value) {
   if (!isAuthenticated()) {
-    console.log(import_chalk10.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk11.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
     if (key === "ide") {
       setIdeCommand(value);
-      console.log(import_chalk10.default.green(`
+      console.log(import_chalk11.default.green(`
 \u2713 IDE command set to: ${value}
 `));
     } else {
-      console.log(import_chalk10.default.red(`Unknown config key: ${key}`));
-      console.log(import_chalk10.default.gray("Available keys: ide"));
+      console.log(import_chalk11.default.red(`Unknown config key: ${key}`));
+      console.log(import_chalk11.default.gray("Available keys: ide"));
       process.exit(1);
     }
   } catch (error51) {
-    console.error(import_chalk10.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk11.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function configListCommand() {
   if (!isAuthenticated()) {
-    console.log(import_chalk10.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk11.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
     const config3 = readConfig();
     if (!config3) {
-      console.log(import_chalk10.default.red("No config found. Please login first."));
+      console.log(import_chalk11.default.red("No config found. Please login first."));
       process.exit(1);
     }
-    console.log(import_chalk10.default.green("\nCurrent configuration:"));
-    console.log(import_chalk10.default.gray(`  Organization ID: ${config3.organization_id || "(not set)"}`));
-    console.log(import_chalk10.default.gray(`  IDE command: ${config3.ide_command || "code (default)"}`));
+    console.log(import_chalk11.default.green("\nCurrent configuration:"));
+    console.log(import_chalk11.default.gray(`  Organization ID: ${config3.organization_id || "(not set)"}`));
+    console.log(import_chalk11.default.gray(`  IDE command: ${config3.ide_command || "code (default)"}`));
     console.log();
   } catch (error51) {
-    console.error(import_chalk10.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk11.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -29300,7 +29463,7 @@ async function runCodexOAuthFlow(totalSteps, save) {
 }
 
 // src/lib/credential-upload.ts
-var import_chalk11 = __toESM(require("chalk"));
+var import_chalk12 = __toESM(require("chalk"));
 var UPLOAD_STEPS = 1;
 async function withAuthRecovery(operation, afterReauthentication) {
   try {
@@ -29310,11 +29473,11 @@ async function withAuthRecovery(operation, afterReauthentication) {
       throw error51;
     }
     const message = error51 instanceof NotAuthenticatedError ? "You're not signed in to Replicas. Signing in..." : "Your Replicas session expired. Re-authenticating...";
-    console.log(import_chalk11.default.yellow(`
+    console.log(import_chalk12.default.yellow(`
   ${message}`));
     await loginCommand();
     await afterReauthentication?.();
-    console.log(import_chalk11.default.gray("  Retrying..."));
+    console.log(import_chalk12.default.gray("  Retrying..."));
     return { result: await operation(), reauthenticated: true };
   }
 }
@@ -29388,7 +29551,7 @@ async function runCredentialAuthFlow(options, flow) {
       return completionUrl.toString();
     });
   } catch (error51) {
-    console.log(import_chalk11.default.red("\n  \u2717 Error:"), error51 instanceof Error ? error51.message : error51);
+    console.log(import_chalk12.default.red("\n  \u2717 Error:"), error51 instanceof Error ? error51.message : error51);
     process.exit(1);
   }
 }
@@ -29414,7 +29577,7 @@ async function codexAuthCommand(options = {}) {
 
 // src/lib/claude-oauth.ts
 var import_readline = __toESM(require("readline"));
-var import_chalk12 = __toESM(require("chalk"));
+var import_chalk13 = __toESM(require("chalk"));
 var DEFAULT_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
 var CLAUDE_CLIENT_ID = process.env.CLAUDE_OAUTH_CLIENT_ID || DEFAULT_CLIENT_ID;
 var AUTHORIZATION_ENDPOINT2 = "https://claude.ai/oauth/authorize";
@@ -29443,7 +29606,7 @@ async function promptForAuthorizationCode() {
   const rl = import_readline.default.createInterface({ input: process.stdin, output: process.stdout });
   return new Promise((resolve2) => {
     rl.on("close", () => resolve2(""));
-    rl.question(import_chalk12.default.gray("       Paste code here: "), (answer) => {
+    rl.question(import_chalk13.default.gray("       Paste code here: "), (answer) => {
       resolve2(answer.trim());
       rl.close();
     });
@@ -29637,7 +29800,7 @@ async function museAuthCommand(options = {}) {
 }
 
 // src/commands/init.ts
-var import_chalk13 = __toESM(require("chalk"));
+var import_chalk14 = __toESM(require("chalk"));
 var import_fs3 = __toESM(require("fs"));
 var import_path4 = __toESM(require("path"));
 function getDefaultConfig() {
@@ -29669,11 +29832,11 @@ function initCommand(options) {
     const existingPath = import_path4.default.join(process.cwd(), filename);
     if (import_fs3.default.existsSync(existingPath) && !options.force) {
       console.log(
-        import_chalk13.default.yellow(
+        import_chalk14.default.yellow(
           `${filename} already exists in this directory.`
         )
       );
-      console.log(import_chalk13.default.gray("Use --force to overwrite the existing file."));
+      console.log(import_chalk14.default.gray("Use --force to overwrite the existing file."));
       return;
     }
   }
@@ -29686,31 +29849,31 @@ function initCommand(options) {
   }
   try {
     import_fs3.default.writeFileSync(configPath, configContent, "utf-8");
-    console.log(import_chalk13.default.green(`\u2713 Created ${targetFilename}`));
+    console.log(import_chalk14.default.green(`\u2713 Created ${targetFilename}`));
     for (const filename of REPLICAS_CONFIG_FILENAMES) {
       if (filename === targetFilename) break;
       const higherPath = import_path4.default.join(process.cwd(), filename);
       if (import_fs3.default.existsSync(higherPath)) {
         console.log("");
         console.log(
-          import_chalk13.default.yellow(
+          import_chalk14.default.yellow(
             `Warning: ${filename} already exists and takes priority over ${targetFilename}.`
           )
         );
-        console.log(import_chalk13.default.gray(`Remove or rename ${filename} for ${targetFilename} to take effect.`));
+        console.log(import_chalk14.default.gray(`Remove or rename ${filename} for ${targetFilename} to take effect.`));
       }
     }
     console.log("");
-    console.log(import_chalk13.default.gray("Configuration options:"));
+    console.log(import_chalk14.default.gray("Configuration options:"));
     console.log(
-      import_chalk13.default.gray("  systemPrompt - Custom instructions for AI coding assistants")
+      import_chalk14.default.gray("  systemPrompt - Custom instructions for AI coding assistants")
     );
     console.log(
-      import_chalk13.default.gray("  startHook   - Commands to run on workspace startup")
+      import_chalk14.default.gray("  startHook   - Commands to run on workspace startup")
     );
     if (!isYaml) {
       console.log("");
-      console.log(import_chalk13.default.gray("Tip: Use --yaml for YAML format with multiline system prompt support."));
+      console.log(import_chalk14.default.gray("Tip: Use --yaml for YAML format with multiline system prompt support."));
     }
   } catch (error51) {
     throw new Error(
@@ -29720,7 +29883,7 @@ function initCommand(options) {
 }
 
 // src/lib/version-check.ts
-var import_chalk14 = __toESM(require("chalk"));
+var import_chalk15 = __toESM(require("chalk"));
 var VERSION_CHECK_TIMEOUT = 2e3;
 function startUpdateCheck(currentVersion) {
   let notice = null;
@@ -29741,7 +29904,7 @@ function startUpdateCheck(currentVersion) {
       }
       const latestVersion = payload.version;
       if (compareVersions(latestVersion, currentVersion) > 0) {
-        notice = import_chalk14.default.dim(
+        notice = import_chalk15.default.dim(
           `
 Replicas CLI ${currentVersion} \u2192 ${latestVersion} available. Update: npm install -g replicas-cli@latest
 `
@@ -29753,7 +29916,7 @@ Replicas CLI ${currentVersion} \u2192 ${latestVersion} available. Update: npm in
 }
 
 // src/commands/replica.ts
-var import_chalk15 = __toESM(require("chalk"));
+var import_chalk16 = __toESM(require("chalk"));
 var import_prompts6 = __toESM(require("prompts"));
 var CLI_CODING_AGENT_LABEL = getCodingAgentDisplayNames();
 function parseReplicaAgent(value) {
@@ -29762,15 +29925,15 @@ function parseReplicaAgent(value) {
   if (isValidCodingAgentProvider(normalized)) {
     return normalized;
   }
-  console.log(import_chalk15.default.red(`Invalid coding agent: ${value}. Must be one of: ${CLI_CODING_AGENT_LABEL}`));
+  console.log(import_chalk16.default.red(`Invalid coding agent: ${value}. Must be one of: ${CLI_CODING_AGENT_LABEL}`));
   process.exit(1);
 }
 function formatDate(dateString) {
   return new Date(dateString).toLocaleString();
 }
 function formatStatus(status) {
-  if (status === "active") return import_chalk15.default.green(status);
-  if (isWorkspaceSuspendedStatus(status)) return import_chalk15.default.gray(status);
+  if (status === "active") return import_chalk16.default.green(status);
+  if (isWorkspaceSuspendedStatus(status)) return import_chalk16.default.gray(status);
   return status;
 }
 function truncate(text, maxLength) {
@@ -29781,95 +29944,95 @@ function formatDisplayMessage(message) {
   const time3 = new Date(message.timestamp).toLocaleTimeString();
   switch (message.type) {
     case "user":
-      console.log(import_chalk15.default.blue(`
+      console.log(import_chalk16.default.blue(`
 [${time3}] USER:`));
-      console.log(import_chalk15.default.white(`  ${truncate(message.content, 500)}`));
+      console.log(import_chalk16.default.white(`  ${truncate(message.content, 500)}`));
       break;
     case "agent":
-      console.log(import_chalk15.default.green(`
+      console.log(import_chalk16.default.green(`
 [${time3}] ASSISTANT:`));
-      console.log(import_chalk15.default.white(`  ${truncate(message.content, 500)}`));
+      console.log(import_chalk16.default.white(`  ${truncate(message.content, 500)}`));
       break;
     case "reasoning":
-      console.log(import_chalk15.default.gray(`
+      console.log(import_chalk16.default.gray(`
 [${time3}] THINKING:`));
-      console.log(import_chalk15.default.gray(`  ${truncate(message.content, 300)}`));
+      console.log(import_chalk16.default.gray(`  ${truncate(message.content, 300)}`));
       break;
     case "command":
-      console.log(import_chalk15.default.magenta(`
+      console.log(import_chalk16.default.magenta(`
 [${time3}] COMMAND:`));
-      console.log(import_chalk15.default.white(`  $ ${message.command}`));
+      console.log(import_chalk16.default.white(`  $ ${message.command}`));
       if (message.output) {
-        console.log(import_chalk15.default.gray(`  ${truncate(message.output, 200)}`));
+        console.log(import_chalk16.default.gray(`  ${truncate(message.output, 200)}`));
       }
       if (message.exitCode !== void 0) {
-        const exitColor = message.exitCode === 0 ? import_chalk15.default.green : import_chalk15.default.red;
+        const exitColor = message.exitCode === 0 ? import_chalk16.default.green : import_chalk16.default.red;
         console.log(exitColor(`  Exit code: ${message.exitCode}`));
       }
       break;
     case "file_change":
-      console.log(import_chalk15.default.yellow(`
+      console.log(import_chalk16.default.yellow(`
 [${time3}] FILE CHANGES:`));
       for (const change of message.changes) {
         const icon = change.kind === "add" ? "+" : change.kind === "delete" ? "-" : "~";
-        const color = change.kind === "add" ? import_chalk15.default.green : change.kind === "delete" ? import_chalk15.default.red : import_chalk15.default.yellow;
+        const color = change.kind === "add" ? import_chalk16.default.green : change.kind === "delete" ? import_chalk16.default.red : import_chalk16.default.yellow;
         console.log(color(`  ${icon} ${change.path}`));
       }
       break;
     case "patch":
-      console.log(import_chalk15.default.yellow(`
+      console.log(import_chalk16.default.yellow(`
 [${time3}] PATCH:`));
       for (const op of message.operations) {
         const icon = op.action === "add" ? "+" : op.action === "delete" ? "-" : "~";
-        const color = op.action === "add" ? import_chalk15.default.green : op.action === "delete" ? import_chalk15.default.red : import_chalk15.default.yellow;
+        const color = op.action === "add" ? import_chalk16.default.green : op.action === "delete" ? import_chalk16.default.red : import_chalk16.default.yellow;
         console.log(color(`  ${icon} ${op.path}`));
       }
       break;
     case "tool_call":
-      console.log(import_chalk15.default.cyan(`
+      console.log(import_chalk16.default.cyan(`
 [${time3}] TOOL: ${message.tool}`));
       if (message.output) {
-        console.log(import_chalk15.default.gray(`  ${truncate(message.output, 200)}`));
+        console.log(import_chalk16.default.gray(`  ${truncate(message.output, 200)}`));
       }
       break;
     case "web_search":
-      console.log(import_chalk15.default.cyan(`
+      console.log(import_chalk16.default.cyan(`
 [${time3}] WEB SEARCH:`));
-      console.log(import_chalk15.default.white(`  "${message.query}"`));
+      console.log(import_chalk16.default.white(`  "${message.query}"`));
       break;
     case "todo_list":
-      console.log(import_chalk15.default.blue(`
+      console.log(import_chalk16.default.blue(`
 [${time3}] PLAN:`));
       for (const item of message.items) {
-        const icon = item.completed ? import_chalk15.default.green("[x]") : import_chalk15.default.gray("[ ]");
+        const icon = item.completed ? import_chalk16.default.green("[x]") : import_chalk16.default.gray("[ ]");
         console.log(`  ${icon} ${item.text}`);
       }
       break;
     case "subagent":
-      console.log(import_chalk15.default.magenta(`
+      console.log(import_chalk16.default.magenta(`
 [${time3}] SUBAGENT: ${message.description}`));
       if (message.output) {
-        console.log(import_chalk15.default.gray(`  ${truncate(message.output, 200)}`));
+        console.log(import_chalk16.default.gray(`  ${truncate(message.output, 200)}`));
       }
       break;
     case "subagent_followup":
-      console.log(import_chalk15.default.magenta(`
+      console.log(import_chalk16.default.magenta(`
 [${time3}] MESSAGE SUBAGENT: ${message.targetTitle ?? message.chatId}`));
-      console.log(import_chalk15.default.white(`  ${truncate(message.message, 500)}`));
+      console.log(import_chalk16.default.white(`  ${truncate(message.message, 500)}`));
       if (message.output) {
-        console.log(import_chalk15.default.gray(`  ${truncate(message.output, 200)}`));
+        console.log(import_chalk16.default.gray(`  ${truncate(message.output, 200)}`));
       }
       break;
     case "error":
-      console.log(import_chalk15.default.red(`
+      console.log(import_chalk16.default.red(`
 [${time3}] ERROR:`));
-      console.log(import_chalk15.default.red(`  ${message.message}`));
+      console.log(import_chalk16.default.red(`  ${message.message}`));
       break;
   }
 }
 async function replicaListCommand(options) {
   if (!canCallOrgApi()) {
-    console.log(import_chalk15.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk16.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
@@ -29881,86 +30044,86 @@ async function replicaListCommand(options) {
       `/v1/replica${query ? "?" + query : ""}`
     );
     if (response.replicas.length === 0) {
-      console.log(import_chalk15.default.yellow("\nNo replicas found.\n"));
+      console.log(import_chalk16.default.yellow("\nNo replicas found.\n"));
       return;
     }
-    console.log(import_chalk15.default.green(`
+    console.log(import_chalk16.default.green(`
 Replicas (Page ${response.page} of ${response.total_pages}, Total: ${response.total}):
 `));
     for (const replica of response.replicas) {
-      console.log(import_chalk15.default.white(`  ${replica.name}`));
-      console.log(import_chalk15.default.gray(`    ID: ${replica.id}`));
+      console.log(import_chalk16.default.white(`  ${replica.name}`));
+      console.log(import_chalk16.default.gray(`    ID: ${replica.id}`));
       if (replica.repositories.length > 0) {
-        console.log(import_chalk15.default.gray(`    Repositories: ${replica.repositories.map((repository) => repository.name).join(", ")}`));
+        console.log(import_chalk16.default.gray(`    Repositories: ${replica.repositories.map((repository) => repository.name).join(", ")}`));
       }
-      console.log(import_chalk15.default.gray(`    Status: ${formatStatus(replica.status)}`));
-      console.log(import_chalk15.default.gray(`    Created: ${formatDate(replica.created_at)}`));
+      console.log(import_chalk16.default.gray(`    Status: ${formatStatus(replica.status)}`));
+      console.log(import_chalk16.default.gray(`    Created: ${formatDate(replica.created_at)}`));
       if (replica.pull_requests && replica.pull_requests.length > 0) {
-        console.log(import_chalk15.default.gray(`    Pull Requests:`));
+        console.log(import_chalk16.default.gray(`    Pull Requests:`));
         for (const pr of replica.pull_requests) {
-          console.log(import_chalk15.default.cyan(`      - ${pr.repository} #${pr.number}: ${pr.url}`));
+          console.log(import_chalk16.default.cyan(`      - ${pr.repository} #${pr.number}: ${pr.url}`));
         }
       }
       console.log();
     }
   } catch (error51) {
-    console.error(import_chalk15.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk16.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function replicaGetCommand(id) {
   if (!isAuthenticated()) {
-    console.log(import_chalk15.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk16.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
     const response = await orgAuthenticatedFetch(`/v1/replica/${id}`);
     const replica = response.replica;
-    console.log(import_chalk15.default.green(`
+    console.log(import_chalk16.default.green(`
 Replica: ${replica.name}
 `));
-    console.log(import_chalk15.default.gray(`  ID: ${replica.id}`));
+    console.log(import_chalk16.default.gray(`  ID: ${replica.id}`));
     if (replica.repositories.length > 0) {
-      console.log(import_chalk15.default.gray(`  Repositories: ${replica.repositories.map((repository) => repository.name).join(", ")}`));
+      console.log(import_chalk16.default.gray(`  Repositories: ${replica.repositories.map((repository) => repository.name).join(", ")}`));
     }
-    console.log(import_chalk15.default.gray(`  Status: ${formatStatus(replica.status)}`));
-    console.log(import_chalk15.default.gray(`  Created: ${formatDate(replica.created_at)}`));
+    console.log(import_chalk16.default.gray(`  Status: ${formatStatus(replica.status)}`));
+    console.log(import_chalk16.default.gray(`  Created: ${formatDate(replica.created_at)}`));
     if (replica.waking) {
-      console.log(import_chalk15.default.yellow("\n  Workspace is waking from sleep. Retry in 30-90 seconds for full details.\n"));
+      console.log(import_chalk16.default.yellow("\n  Workspace is waking from sleep. Retry in 30-90 seconds for full details.\n"));
     } else {
       if (replica.coding_agent) {
-        console.log(import_chalk15.default.gray(`  Coding Agent: ${replica.coding_agent}`));
+        console.log(import_chalk16.default.gray(`  Coding Agent: ${replica.coding_agent}`));
       }
       if (replica.repository_statuses && replica.repository_statuses.length > 0) {
-        console.log(import_chalk15.default.gray("  Repository Statuses:"));
+        console.log(import_chalk16.default.gray("  Repository Statuses:"));
         for (const repositoryStatus of replica.repository_statuses) {
-          const changeText = repositoryStatus.git_diff ? ` (${import_chalk15.default.green(`+${repositoryStatus.git_diff.added}`)} / ${import_chalk15.default.red(`-${repositoryStatus.git_diff.removed}`)})` : "";
-          console.log(import_chalk15.default.gray(`    - ${repositoryStatus.repository}: ${repositoryStatus.branch || "unknown"}${changeText}`));
+          const changeText = repositoryStatus.git_diff ? ` (${import_chalk16.default.green(`+${repositoryStatus.git_diff.added}`)} / ${import_chalk16.default.red(`-${repositoryStatus.git_diff.removed}`)})` : "";
+          console.log(import_chalk16.default.gray(`    - ${repositoryStatus.repository}: ${repositoryStatus.branch || "unknown"}${changeText}`));
         }
       }
     }
     if (replica.pull_requests && replica.pull_requests.length > 0) {
-      console.log(import_chalk15.default.gray(`  Pull Requests:`));
+      console.log(import_chalk16.default.gray(`  Pull Requests:`));
       for (const pr of replica.pull_requests) {
-        console.log(import_chalk15.default.cyan(`    - ${pr.repository} #${pr.number}: ${pr.url}`));
+        console.log(import_chalk16.default.cyan(`    - ${pr.repository} #${pr.number}: ${pr.url}`));
       }
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk15.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk16.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function replicaCreateCommand(name, options) {
   if (!isAuthenticated()) {
-    console.log(import_chalk15.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk16.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
     const envResponse = await orgAuthenticatedFetch("/v1/environments");
     const environments = envResponse.environments;
     if (environments.length === 0) {
-      console.log(import_chalk15.default.red("No environments found. Please create an environment first."));
+      console.log(import_chalk16.default.red("No environments found. Please create an environment first."));
       process.exit(1);
     }
     let replicaName = name;
@@ -29968,7 +30131,7 @@ async function replicaCreateCommand(name, options) {
     let selectedEnvironmentId = options.environment?.trim();
     let codingAgent = parseReplicaAgent(options.agent);
     if (replicaName && /\s/.test(replicaName)) {
-      console.log(import_chalk15.default.red("Replica name cannot contain spaces."));
+      console.log(import_chalk16.default.red("Replica name cannot contain spaces."));
       process.exit(1);
     }
     if (!replicaName) {
@@ -29983,7 +30146,7 @@ async function replicaCreateCommand(name, options) {
         }
       });
       if (!response2.name) {
-        console.log(import_chalk15.default.yellow("\nCancelled."));
+        console.log(import_chalk16.default.yellow("\nCancelled."));
         return;
       }
       replicaName = response2.name;
@@ -30000,7 +30163,7 @@ async function replicaCreateCommand(name, options) {
         }))
       });
       if (!response2.environment) {
-        console.log(import_chalk15.default.yellow("\nCancelled."));
+        console.log(import_chalk16.default.yellow("\nCancelled."));
         return;
       }
       selectedEnvironmentId = response2.environment;
@@ -30013,7 +30176,7 @@ async function replicaCreateCommand(name, options) {
         validate: (value) => value.trim() ? true : "Message is required"
       });
       if (!response2.message) {
-        console.log(import_chalk15.default.yellow("\nCancelled."));
+        console.log(import_chalk16.default.yellow("\nCancelled."));
         return;
       }
       message = response2.message;
@@ -30027,7 +30190,7 @@ async function replicaCreateCommand(name, options) {
         initial: 0
       });
       if (!response2.agent) {
-        console.log(import_chalk15.default.yellow("\nCancelled."));
+        console.log(import_chalk16.default.yellow("\nCancelled."));
         return;
       }
       codingAgent = parseReplicaAgent(response2.agent);
@@ -30038,28 +30201,28 @@ async function replicaCreateCommand(name, options) {
       environment_id: selectedEnvironmentId,
       coding_agent: codingAgent
     };
-    console.log(import_chalk15.default.gray("\nCreating replica..."));
+    console.log(import_chalk16.default.gray("\nCreating replica..."));
     const response = await orgAuthenticatedFetch("/v1/replica", {
       method: "POST",
       body
     });
     const replica = response.replica;
-    console.log(import_chalk15.default.green(`
+    console.log(import_chalk16.default.green(`
 Created replica: ${replica.name}`));
-    console.log(import_chalk15.default.gray(`  ID: ${replica.id}`));
-    console.log(import_chalk15.default.gray(`  Status: ${formatStatus(replica.status)}`));
+    console.log(import_chalk16.default.gray(`  ID: ${replica.id}`));
+    console.log(import_chalk16.default.gray(`  Status: ${formatStatus(replica.status)}`));
     if (replica.repositories.length > 0) {
-      console.log(import_chalk15.default.gray(`  Repositories: ${replica.repositories.map((repository) => repository.name).join(", ")}`));
+      console.log(import_chalk16.default.gray(`  Repositories: ${replica.repositories.map((repository) => repository.name).join(", ")}`));
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk15.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk16.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function replicaSendCommand(id, options) {
   if (!isAuthenticated()) {
-    console.log(import_chalk15.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk16.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
@@ -30072,7 +30235,7 @@ async function replicaSendCommand(id, options) {
         validate: (value) => value.trim() ? true : "Message is required"
       });
       if (!response2.message) {
-        console.log(import_chalk15.default.yellow("\nCancelled."));
+        console.log(import_chalk16.default.yellow("\nCancelled."));
         return;
       }
       message = response2.message;
@@ -30090,21 +30253,21 @@ async function replicaSendCommand(id, options) {
         body
       }
     );
-    const statusColor = response.status === "sent" ? import_chalk15.default.green : import_chalk15.default.yellow;
+    const statusColor = response.status === "sent" ? import_chalk16.default.green : import_chalk16.default.yellow;
     console.log(statusColor(`
 Message ${response.status}`));
     if (response.position !== void 0 && response.position > 0) {
-      console.log(import_chalk15.default.gray(`  Queue position: ${response.position}`));
+      console.log(import_chalk16.default.gray(`  Queue position: ${response.position}`));
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk15.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk16.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function replicaDeleteCommand(id, options) {
   if (!isAuthenticated()) {
-    console.log(import_chalk15.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk16.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
@@ -30116,24 +30279,24 @@ async function replicaDeleteCommand(id, options) {
         initial: false
       });
       if (!response.confirm) {
-        console.log(import_chalk15.default.yellow("\nCancelled."));
+        console.log(import_chalk16.default.yellow("\nCancelled."));
         return;
       }
     }
     await orgAuthenticatedFetch(`/v1/replica/${id}`, {
       method: "DELETE"
     });
-    console.log(import_chalk15.default.green(`
+    console.log(import_chalk16.default.green(`
 Replica ${id} deleted.
 `));
   } catch (error51) {
-    console.error(import_chalk15.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk16.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function replicaReadCommand(id, options) {
   if (!isAuthenticated()) {
-    console.log(import_chalk15.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk16.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
   try {
@@ -30145,53 +30308,53 @@ async function replicaReadCommand(id, options) {
       `/v1/replica/${id}/read${query ? "?" + query : ""}`
     );
     if (response.waking) {
-      console.log(import_chalk15.default.yellow("\nWorkspace is waking from sleep. Retry in 30-90 seconds.\n"));
+      console.log(import_chalk16.default.yellow("\nWorkspace is waking from sleep. Retry in 30-90 seconds.\n"));
       return;
     }
-    console.log(import_chalk15.default.green(`
+    console.log(import_chalk16.default.green(`
 Conversation History
 `));
     if (response.coding_agent) {
-      console.log(import_chalk15.default.gray(`  Agent: ${response.coding_agent}`));
+      console.log(import_chalk16.default.gray(`  Agent: ${response.coding_agent}`));
     }
     if (response.thread_id) {
-      console.log(import_chalk15.default.gray(`  Thread ID: ${response.thread_id}`));
+      console.log(import_chalk16.default.gray(`  Thread ID: ${response.thread_id}`));
     }
-    console.log(import_chalk15.default.gray(`  Total Events: ${response.total}`));
-    console.log(import_chalk15.default.gray(`  Showing: ${response.events.length} events`));
+    console.log(import_chalk16.default.gray(`  Total Events: ${response.total}`));
+    console.log(import_chalk16.default.gray(`  Showing: ${response.events.length} events`));
     if (response.has_more) {
-      console.log(import_chalk15.default.gray(`  Has More: yes (--before-event ${response.eventsStartIndex} for the previous page)`));
+      console.log(import_chalk16.default.gray(`  Has More: yes (--before-event ${response.eventsStartIndex} for the previous page)`));
     }
     console.log();
     if (response.events.length === 0) {
-      console.log(import_chalk15.default.yellow("  No events found.\n"));
+      console.log(import_chalk16.default.yellow("  No events found.\n"));
       return;
     }
-    console.log(import_chalk15.default.gray("-".repeat(60)));
+    console.log(import_chalk16.default.gray("-".repeat(60)));
     const agentType = response.coding_agent || "claude";
     const displayMessages = parseDisplayMessages(response.events, agentType);
     for (const message of displayMessages) {
       formatDisplayMessage(message);
     }
-    console.log(import_chalk15.default.gray("\n" + "-".repeat(60)));
+    console.log(import_chalk16.default.gray("\n" + "-".repeat(60)));
     console.log();
   } catch (error51) {
-    console.error(import_chalk15.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk16.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 
 // src/commands/repositories.ts
-var import_chalk17 = __toESM(require("chalk"));
+var import_chalk18 = __toESM(require("chalk"));
 
 // src/lib/command-utils.ts
-var import_chalk16 = __toESM(require("chalk"));
+var import_chalk17 = __toESM(require("chalk"));
 function formatDate2(dateString) {
   return new Date(dateString).toLocaleString();
 }
 function ensureOrgApiAuthenticated() {
   if (!canCallOrgApi()) {
-    console.log(import_chalk16.default.red('Not logged in. Please run "replicas login" first.'));
+    console.log(import_chalk17.default.red('Not logged in. Please run "replicas login" first.'));
     process.exit(1);
   }
 }
@@ -30205,36 +30368,36 @@ async function repositoriesListCommand() {
   try {
     const response = await orgAuthenticatedFetch("/v1/repositories");
     if (response.repositories.length === 0) {
-      console.log(import_chalk17.default.yellow("\nNo repositories found.\n"));
+      console.log(import_chalk18.default.yellow("\nNo repositories found.\n"));
       return;
     }
-    console.log(import_chalk17.default.green(`
+    console.log(import_chalk18.default.green(`
 Repositories (${response.repositories.length}):
 `));
     for (const repo of response.repositories) {
-      console.log(import_chalk17.default.white(`  ${repo.name}`));
-      console.log(import_chalk17.default.gray(`    URL: ${repo.url}`));
-      console.log(import_chalk17.default.gray(`    Default Branch: ${repo.default_branch}`));
-      console.log(import_chalk17.default.gray(`    Created: ${formatDate2(repo.created_at)}`));
+      console.log(import_chalk18.default.white(`  ${repo.name}`));
+      console.log(import_chalk18.default.gray(`    URL: ${repo.url}`));
+      console.log(import_chalk18.default.gray(`    Default Branch: ${repo.default_branch}`));
+      console.log(import_chalk18.default.gray(`    Created: ${formatDate2(repo.created_at)}`));
       if (repo.github_repository_id) {
-        console.log(import_chalk17.default.gray(`    GitHub ID: ${repo.github_repository_id}`));
+        console.log(import_chalk18.default.gray(`    GitHub ID: ${repo.github_repository_id}`));
       }
       console.log();
     }
   } catch (error51) {
-    console.error(import_chalk17.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk18.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 
 // src/commands/automation.ts
-var import_chalk18 = __toESM(require("chalk"));
+var import_chalk19 = __toESM(require("chalk"));
 var import_prompts7 = __toESM(require("prompts"));
 function parseScopeFilter(value) {
   if (!value) return void 0;
   if (value === "org" || value === "user" || value === "all") return value;
-  console.log(import_chalk18.default.red(`Invalid --owner: ${value}`));
-  console.log(import_chalk18.default.gray("Valid options: org, user, all"));
+  console.log(import_chalk19.default.red(`Invalid --owner: ${value}`));
+  console.log(import_chalk19.default.gray("Valid options: org, user, all"));
   process.exit(1);
 }
 function parseAgentProviderOption(value) {
@@ -30243,8 +30406,8 @@ function parseAgentProviderOption(value) {
   if (trimmed === "" || trimmed.toLowerCase() === "none") return null;
   const lower = trimmed.toLowerCase();
   if (!isValidAgentProvider(lower)) {
-    console.log(import_chalk18.default.red(`Invalid --agent-provider: ${value}`));
-    console.log(import_chalk18.default.gray(`Valid options: ${VALID_AGENT_PROVIDERS.join(", ")}, none`));
+    console.log(import_chalk19.default.red(`Invalid --agent-provider: ${value}`));
+    console.log(import_chalk19.default.gray(`Valid options: ${VALID_AGENT_PROVIDERS.join(", ")}, none`));
     process.exit(1);
   }
   return lower;
@@ -30255,8 +30418,8 @@ function parseThinkingLevelOption(value) {
   if (trimmed === "" || trimmed.toLowerCase() === "none") return null;
   const lower = trimmed.toLowerCase();
   if (!isValidThinkingLevel(lower)) {
-    console.log(import_chalk18.default.red(`Invalid --thinking-level: ${value}`));
-    console.log(import_chalk18.default.gray(`Valid options: ${VALID_THINKING_LEVELS.join(", ")}, none`));
+    console.log(import_chalk19.default.red(`Invalid --thinking-level: ${value}`));
+    console.log(import_chalk19.default.gray(`Valid options: ${VALID_THINKING_LEVELS.join(", ")}, none`));
     process.exit(1);
   }
   return lower;
@@ -30273,8 +30436,8 @@ function isAutomationLifecyclePolicy(value) {
 function parseWorkspaceLifecyclePolicyOption(value) {
   if (!value) return void 0;
   if (isAutomationLifecyclePolicy(value)) return value;
-  console.log(import_chalk18.default.red(`Invalid lifecycle policy: ${value}`));
-  console.log(import_chalk18.default.gray(`Valid options: ${AUTOMATION_LIFECYCLE_POLICIES.join(", ")}`));
+  console.log(import_chalk19.default.red(`Invalid lifecycle policy: ${value}`));
+  console.log(import_chalk19.default.gray(`Valid options: ${AUTOMATION_LIFECYCLE_POLICIES.join(", ")}`));
   process.exit(1);
 }
 function parseExcludedActorsOption(value) {
@@ -30293,7 +30456,7 @@ function withExcludedActors(config3, excludedActors) {
 }
 function parseAutomationLifecycleOptions(options) {
   if (options.sleepWhenDone && options.lifecycle && options.lifecycle !== "sleep_when_done") {
-    console.log(import_chalk18.default.red("--sleep-when-done cannot be combined with a different --lifecycle value"));
+    console.log(import_chalk19.default.red("--sleep-when-done cannot be combined with a different --lifecycle value"));
     process.exit(1);
   }
   if (options.sleepWhenDone) return "sleep_when_done";
@@ -30302,7 +30465,7 @@ function parseAutomationLifecycleOptions(options) {
 function applyAgentSelection(body, existing) {
   const result = validateAgentSelection(body, existing);
   if (!result.ok) {
-    console.log(import_chalk18.default.red(result.error.message));
+    console.log(import_chalk19.default.red(result.error.message));
     process.exit(1);
   }
   const out = {};
@@ -30343,8 +30506,8 @@ function resolveTriggerRepositoryIds(repositories, repoNamesInput, provider) {
   for (const repoName of repoNames) {
     const repo = providerRepos.find((r) => r.name === repoName);
     if (!repo) {
-      console.log(import_chalk18.default.red(`Repository not found for ${provider} trigger filter: ${repoName}`));
-      console.log(import_chalk18.default.gray(`Available: ${providerRepos.map((r) => r.name).join(", ")}`));
+      console.log(import_chalk19.default.red(`Repository not found for ${provider} trigger filter: ${repoName}`));
+      console.log(import_chalk19.default.gray(`Available: ${providerRepos.map((r) => r.name).join(", ")}`));
       process.exit(1);
     }
     repoIds.push(repo.id);
@@ -30377,43 +30540,43 @@ function formatModeSummary(automation2) {
 function resolveSelectableEnvironmentId(envInput, selectableEnvs) {
   const resolved = resolveByNameOrId(envInput, selectableEnvs);
   if (!resolved) {
-    console.log(import_chalk18.default.red(`Environment not found: ${envInput}`));
+    console.log(import_chalk19.default.red(`Environment not found: ${envInput}`));
     const available = selectableEnvs.map((e) => e.name).join(", ");
-    console.log(import_chalk18.default.gray(`Available: ${available || "(none)"}`));
+    console.log(import_chalk19.default.gray(`Available: ${available || "(none)"}`));
     process.exit(1);
   }
   return resolved.id;
 }
 function printAutomation(automation2) {
-  console.log(import_chalk18.default.white(`  ${automation2.name}`));
-  console.log(import_chalk18.default.gray(`    ID: ${automation2.id}`));
-  console.log(import_chalk18.default.gray(`    Owner: ${automation2.user_id ? "personal" : "organization"}`));
+  console.log(import_chalk19.default.white(`  ${automation2.name}`));
+  console.log(import_chalk19.default.gray(`    ID: ${automation2.id}`));
+  console.log(import_chalk19.default.gray(`    Owner: ${automation2.user_id ? "personal" : "organization"}`));
   if (automation2.description) {
-    console.log(import_chalk18.default.gray(`    Description: ${automation2.description}`));
+    console.log(import_chalk19.default.gray(`    Description: ${automation2.description}`));
   }
-  console.log(import_chalk18.default.gray(`    Enabled: ${automation2.enabled ? import_chalk18.default.green("yes") : import_chalk18.default.red("no")}`));
+  console.log(import_chalk19.default.gray(`    Enabled: ${automation2.enabled ? import_chalk19.default.green("yes") : import_chalk19.default.red("no")}`));
   if (automation2.triggers.length > 0) {
-    console.log(import_chalk18.default.gray(`    Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
+    console.log(import_chalk19.default.gray(`    Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
   }
   if (automation2.github_check_names.length > 0) {
-    console.log(import_chalk18.default.gray(`    GitHub checks: ${automation2.github_check_names.join(", ")}`));
+    console.log(import_chalk19.default.gray(`    GitHub checks: ${automation2.github_check_names.join(", ")}`));
   }
-  console.log(import_chalk18.default.gray(`    Prompt: ${truncate2(automation2.prompt, 80)}`));
+  console.log(import_chalk19.default.gray(`    Prompt: ${truncate2(automation2.prompt, 80)}`));
   if (automation2.cron_next_fire_at) {
-    console.log(import_chalk18.default.gray(`    Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
+    console.log(import_chalk19.default.gray(`    Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
   }
   if (automation2.workspace_lifecycle_policy && automation2.workspace_lifecycle_policy !== "default") {
-    console.log(import_chalk18.default.gray(`    Lifecycle: ${automation2.workspace_lifecycle_policy}`));
+    console.log(import_chalk19.default.gray(`    Lifecycle: ${automation2.workspace_lifecycle_policy}`));
   }
   if (automation2.agent_provider || automation2.model || automation2.thinking_level) {
-    console.log(import_chalk18.default.gray(`    Agent: ${formatAgentSummary(automation2)}`));
+    console.log(import_chalk19.default.gray(`    Agent: ${formatAgentSummary(automation2)}`));
   }
   if (automation2.plan_mode || automation2.goal_mode || automation2.fast_mode) {
-    console.log(import_chalk18.default.gray(`    Modes: ${formatModeSummary(automation2)}`));
+    console.log(import_chalk19.default.gray(`    Modes: ${formatModeSummary(automation2)}`));
   }
-  console.log(import_chalk18.default.gray(`    PR Follow-ups: ${automation2.config.capabilities?.pr_followups === true ? import_chalk18.default.green("managed") : "read-only"}`));
-  console.log(import_chalk18.default.gray(`    Created: ${formatDate2(automation2.created_at)}`));
-  console.log(import_chalk18.default.gray(`    Updated: ${formatDate2(automation2.updated_at)}`));
+  console.log(import_chalk19.default.gray(`    PR Follow-ups: ${automation2.config.capabilities?.pr_followups === true ? import_chalk19.default.green("managed") : "read-only"}`));
+  console.log(import_chalk19.default.gray(`    Created: ${formatDate2(automation2.created_at)}`));
+  console.log(import_chalk19.default.gray(`    Updated: ${formatDate2(automation2.updated_at)}`));
   console.log();
 }
 async function automationListCommand(options) {
@@ -30432,17 +30595,17 @@ async function automationListCommand(options) {
       `/v1/automations${query ? "?" + query : ""}`
     );
     if (response.automations.length === 0) {
-      console.log(import_chalk18.default.yellow("\nNo automations found.\n"));
+      console.log(import_chalk19.default.yellow("\nNo automations found.\n"));
       return;
     }
-    console.log(import_chalk18.default.green(`
+    console.log(import_chalk19.default.green(`
 Automations (Page ${response.page} of ${response.totalPages}, Total: ${response.total}):
 `));
     for (const automation2 of response.automations) {
       printAutomation(automation2);
     }
   } catch (error51) {
-    console.error(import_chalk18.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -30451,50 +30614,50 @@ async function automationGetCommand(id) {
   try {
     const response = await orgAuthenticatedFetch(`/v1/automations/${id}`);
     const automation2 = response.automation;
-    console.log(import_chalk18.default.green(`
+    console.log(import_chalk19.default.green(`
 Automation: ${automation2.name}
 `));
-    console.log(import_chalk18.default.gray(`  ID: ${automation2.id}`));
+    console.log(import_chalk19.default.gray(`  ID: ${automation2.id}`));
     if (automation2.description) {
-      console.log(import_chalk18.default.gray(`  Description: ${automation2.description}`));
+      console.log(import_chalk19.default.gray(`  Description: ${automation2.description}`));
     }
-    console.log(import_chalk18.default.gray(`  Enabled: ${automation2.enabled ? import_chalk18.default.green("yes") : import_chalk18.default.red("no")}`));
+    console.log(import_chalk19.default.gray(`  Enabled: ${automation2.enabled ? import_chalk19.default.green("yes") : import_chalk19.default.red("no")}`));
     if (automation2.triggers.length > 0) {
-      console.log(import_chalk18.default.gray(`  Triggers:`));
+      console.log(import_chalk19.default.gray(`  Triggers:`));
       for (const trigger of automation2.triggers) {
-        console.log(import_chalk18.default.gray(`    - ${formatTrigger(trigger)}`));
+        console.log(import_chalk19.default.gray(`    - ${formatTrigger(trigger)}`));
       }
     }
     if (automation2.github_check_names.length > 0) {
-      console.log(import_chalk18.default.gray(`  GitHub checks: ${automation2.github_check_names.join(", ")}`));
+      console.log(import_chalk19.default.gray(`  GitHub checks: ${automation2.github_check_names.join(", ")}`));
     }
-    console.log(import_chalk18.default.gray(`  Prompt: ${automation2.prompt}`));
-    console.log(import_chalk18.default.gray(`  Environment: ${automation2.environment_id}`));
+    console.log(import_chalk19.default.gray(`  Prompt: ${automation2.prompt}`));
+    console.log(import_chalk19.default.gray(`  Environment: ${automation2.environment_id}`));
     if (automation2.cron_expression) {
-      console.log(import_chalk18.default.gray(`  Cron: ${automation2.cron_expression}`));
+      console.log(import_chalk19.default.gray(`  Cron: ${automation2.cron_expression}`));
     }
     if (automation2.cron_timezone) {
-      console.log(import_chalk18.default.gray(`  Timezone: ${automation2.cron_timezone}`));
+      console.log(import_chalk19.default.gray(`  Timezone: ${automation2.cron_timezone}`));
     }
     if (automation2.cron_next_fire_at) {
-      console.log(import_chalk18.default.gray(`  Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
+      console.log(import_chalk19.default.gray(`  Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
     }
     if (automation2.workspace_lifecycle_policy) {
-      console.log(import_chalk18.default.gray(`  Lifecycle Policy: ${automation2.workspace_lifecycle_policy}`));
+      console.log(import_chalk19.default.gray(`  Lifecycle Policy: ${automation2.workspace_lifecycle_policy}`));
     }
     if (automation2.workspace_auto_stop_minutes) {
-      console.log(import_chalk18.default.gray(`  Auto-stop: ${automation2.workspace_auto_stop_minutes} minutes`));
-    }
-    console.log(import_chalk18.default.gray(`  Agent: ${automation2.agent_provider ? getProviderDisplayName(automation2.agent_provider) : "organization default"}`));
-    console.log(import_chalk18.default.gray(`  Model: ${automation2.model ? MODEL_LABELS[automation2.model] ?? automation2.model : "agent default"}`));
-    console.log(import_chalk18.default.gray(`  Thinking Level: ${automation2.thinking_level ?? "agent default"}`));
-    console.log(import_chalk18.default.gray(`  Modes: ${formatModeSummary(automation2)}`));
-    console.log(import_chalk18.default.gray(`  PR Follow-ups: ${automation2.config.capabilities?.pr_followups === true ? "managed" : "read-only"}`));
-    console.log(import_chalk18.default.gray(`  Created: ${formatDate2(automation2.created_at)}`));
-    console.log(import_chalk18.default.gray(`  Updated: ${formatDate2(automation2.updated_at)}`));
+      console.log(import_chalk19.default.gray(`  Auto-stop: ${automation2.workspace_auto_stop_minutes} minutes`));
+    }
+    console.log(import_chalk19.default.gray(`  Agent: ${automation2.agent_provider ? getProviderDisplayName(automation2.agent_provider) : "organization default"}`));
+    console.log(import_chalk19.default.gray(`  Model: ${automation2.model ? MODEL_LABELS[automation2.model] ?? automation2.model : "agent default"}`));
+    console.log(import_chalk19.default.gray(`  Thinking Level: ${automation2.thinking_level ?? "agent default"}`));
+    console.log(import_chalk19.default.gray(`  Modes: ${formatModeSummary(automation2)}`));
+    console.log(import_chalk19.default.gray(`  PR Follow-ups: ${automation2.config.capabilities?.pr_followups === true ? "managed" : "read-only"}`));
+    console.log(import_chalk19.default.gray(`  Created: ${formatDate2(automation2.created_at)}`));
+    console.log(import_chalk19.default.gray(`  Updated: ${formatDate2(automation2.updated_at)}`));
     console.log();
   } catch (error51) {
-    console.error(import_chalk18.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -30619,22 +30782,22 @@ async function automationCreateCommand(name, options) {
   ensureOrgApiAuthenticated();
   const lifecyclePolicy = parseAutomationLifecycleOptions(options);
   if (options.autoStopMinutes && !lifecyclePolicySupportsAutoStop(lifecyclePolicy ?? "default")) {
-    console.log(import_chalk18.default.red("--auto-stop-minutes requires --lifecycle default"));
+    console.log(import_chalk19.default.red("--auto-stop-minutes requires --lifecycle default"));
     process.exit(1);
   }
   if (options.autoStopMinutes) {
     const minutes = parseInt(options.autoStopMinutes, 10);
     if (isNaN(minutes) || minutes < 3 || minutes > 1440) {
-      console.log(import_chalk18.default.red("--auto-stop-minutes must be between 3 and 1440"));
+      console.log(import_chalk19.default.red("--auto-stop-minutes must be between 3 and 1440"));
       process.exit(1);
     }
   }
   if (options.triggerGithubExcludeUsers !== void 0 && !options.triggerGithub) {
-    console.log(import_chalk18.default.red("--trigger-github-exclude-users requires --trigger-github"));
+    console.log(import_chalk19.default.red("--trigger-github-exclude-users requires --trigger-github"));
     process.exit(1);
   }
   if (options.triggerGitlabExcludeUsers !== void 0 && !options.triggerGitlab) {
-    console.log(import_chalk18.default.red("--trigger-gitlab-exclude-users requires --trigger-gitlab"));
+    console.log(import_chalk19.default.red("--trigger-gitlab-exclude-users requires --trigger-gitlab"));
     process.exit(1);
   }
   const hasConfirmation = options.confirmationChannel || options.confirmationThread || options.confirmationMessageTs || options.confirmationUser;
@@ -30661,7 +30824,7 @@ async function automationCreateCommand(name, options) {
     );
     const selectableEnvs = envResponse.environments;
     if (selectableEnvs.length === 0) {
-      console.log(import_chalk18.default.red("No environments found. Please create an environment first."));
+      console.log(import_chalk19.default.red("No environments found. Please create an environment first."));
       process.exit(1);
     }
     const repoResponse = await orgAuthenticatedFetch("/v1/repositories");
@@ -30675,7 +30838,7 @@ async function automationCreateCommand(name, options) {
         validate: (value) => value.trim() ? true : "Name is required"
       });
       if (!response2.name) {
-        console.log(import_chalk18.default.yellow("\nCancelled."));
+        console.log(import_chalk19.default.yellow("\nCancelled."));
         return;
       }
       automationName = response2.name;
@@ -30689,7 +30852,7 @@ async function automationCreateCommand(name, options) {
         validate: (value) => value.trim() ? true : "Prompt is required"
       });
       if (!response2.prompt) {
-        console.log(import_chalk18.default.yellow("\nCancelled."));
+        console.log(import_chalk19.default.yellow("\nCancelled."));
         return;
       }
       automationPrompt = response2.prompt;
@@ -30709,7 +30872,7 @@ async function automationCreateCommand(name, options) {
         }))
       });
       if (!envResponse2.env) {
-        console.log(import_chalk18.default.yellow("\nCancelled."));
+        console.log(import_chalk19.default.yellow("\nCancelled."));
         return;
       }
       selectedEnvironmentId = envResponse2.env;
@@ -30751,7 +30914,7 @@ async function automationCreateCommand(name, options) {
     if (triggers.length === 0) {
       triggers = await promptForTriggers(repositories.map((r) => ({ id: r.id, name: r.name, provider: r.provider })));
       if (triggers.length === 0) {
-        console.log(import_chalk18.default.red("At least one trigger is required."));
+        console.log(import_chalk19.default.red("At least one trigger is required."));
         process.exit(1);
       }
     }
@@ -30782,25 +30945,25 @@ async function automationCreateCommand(name, options) {
       ...agentSelection,
       ...mothershipConfirmation ? { mothership_confirmation: mothershipConfirmation } : {}
     };
-    console.log(import_chalk18.default.gray("\nCreating automation..."));
+    console.log(import_chalk19.default.gray("\nCreating automation..."));
     const response = await orgAuthenticatedFetch("/v1/automations", {
       method: "POST",
       body
     });
     const automation2 = response.automation;
-    console.log(import_chalk18.default.green(`
+    console.log(import_chalk19.default.green(`
 Created automation: ${automation2.name}`));
-    console.log(import_chalk18.default.gray(`  ID: ${automation2.id}`));
-    console.log(import_chalk18.default.gray(`  Enabled: ${automation2.enabled ? "yes" : "no"}`));
+    console.log(import_chalk19.default.gray(`  ID: ${automation2.id}`));
+    console.log(import_chalk19.default.gray(`  Enabled: ${automation2.enabled ? "yes" : "no"}`));
     if (automation2.triggers.length > 0) {
-      console.log(import_chalk18.default.gray(`  Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
+      console.log(import_chalk19.default.gray(`  Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
     }
     if (automation2.cron_next_fire_at) {
-      console.log(import_chalk18.default.gray(`  Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
+      console.log(import_chalk19.default.gray(`  Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk18.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -30810,17 +30973,17 @@ async function automationEditCommand(id, options) {
   if (options.autoStopMinutes) {
     const minutes = parseInt(options.autoStopMinutes, 10);
     if (isNaN(minutes) || minutes < 3 || minutes > 1440) {
-      console.log(import_chalk18.default.red("--auto-stop-minutes must be between 3 and 1440"));
+      console.log(import_chalk19.default.red("--auto-stop-minutes must be between 3 and 1440"));
       process.exit(1);
     }
   }
   const replacingTriggers = Boolean(options.triggerCron || options.triggerGithub || options.triggerGitlab);
   if (replacingTriggers && options.triggerGithubExcludeUsers !== void 0 && !options.triggerGithub) {
-    console.log(import_chalk18.default.red("--trigger-github-exclude-users requires --trigger-github when replacing triggers"));
+    console.log(import_chalk19.default.red("--trigger-github-exclude-users requires --trigger-github when replacing triggers"));
     process.exit(1);
   }
   if (replacingTriggers && options.triggerGitlabExcludeUsers !== void 0 && !options.triggerGitlab) {
-    console.log(import_chalk18.default.red("--trigger-gitlab-exclude-users requires --trigger-gitlab when replacing triggers"));
+    console.log(import_chalk19.default.red("--trigger-gitlab-exclude-users requires --trigger-gitlab when replacing triggers"));
     process.exit(1);
   }
   const parsedAgent = {
@@ -30832,7 +30995,7 @@ async function automationEditCommand(id, options) {
     const existing = await orgAuthenticatedFetch(`/v1/automations/${id}`);
     const autoStopLifecyclePolicy = lifecyclePolicy ?? toAutomationLifecyclePolicy(existing.automation.workspace_lifecycle_policy);
     if (options.autoStopMinutes && !lifecyclePolicySupportsAutoStop(autoStopLifecyclePolicy)) {
-      console.log(import_chalk18.default.red("--auto-stop-minutes requires --lifecycle default"));
+      console.log(import_chalk19.default.red("--auto-stop-minutes requires --lifecycle default"));
       process.exit(1);
     }
     const agentSelection = applyAgentSelection(parsedAgent, {
@@ -30972,11 +31135,11 @@ async function automationEditCommand(id, options) {
           return trigger;
         });
         if (!matchedGithub) {
-          console.log(import_chalk18.default.red("No existing GitHub trigger found. Pass --trigger-github to create one."));
+          console.log(import_chalk19.default.red("No existing GitHub trigger found. Pass --trigger-github to create one."));
           process.exit(1);
         }
         if (!matchedGitlab) {
-          console.log(import_chalk18.default.red("No existing GitLab trigger found. Pass --trigger-gitlab to create one."));
+          console.log(import_chalk19.default.red("No existing GitLab trigger found. Pass --trigger-gitlab to create one."));
           process.exit(1);
         }
       }
@@ -31001,25 +31164,25 @@ async function automationEditCommand(id, options) {
       Object.assign(body, agentSelection);
     }
     if (Object.keys(body).length === 0) {
-      console.log(import_chalk18.default.yellow("\nNo changes made.\n"));
+      console.log(import_chalk19.default.yellow("\nNo changes made.\n"));
       return;
     }
-    console.log(import_chalk18.default.gray("\nUpdating automation..."));
+    console.log(import_chalk19.default.gray("\nUpdating automation..."));
     const response = await orgAuthenticatedFetch(`/v1/automations/${id}`, {
       method: "PATCH",
       body
     });
     const automation2 = response.automation;
-    console.log(import_chalk18.default.green(`
+    console.log(import_chalk19.default.green(`
 Updated automation: ${automation2.name}`));
-    console.log(import_chalk18.default.gray(`  ID: ${automation2.id}`));
-    console.log(import_chalk18.default.gray(`  Enabled: ${automation2.enabled ? "yes" : "no"}`));
+    console.log(import_chalk19.default.gray(`  ID: ${automation2.id}`));
+    console.log(import_chalk19.default.gray(`  Enabled: ${automation2.enabled ? "yes" : "no"}`));
     if (automation2.triggers.length > 0) {
-      console.log(import_chalk18.default.gray(`  Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
+      console.log(import_chalk19.default.gray(`  Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk18.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -31030,12 +31193,12 @@ async function automationRunCommand(id) {
     const automation2 = existing.automation;
     const hasCronTrigger = automation2.triggers.some((t) => t.type === "cron");
     if (!hasCronTrigger) {
-      console.log(import_chalk18.default.red("\nManual run is only allowed for automations with a cron trigger."));
-      console.log(import_chalk18.default.gray(`This automation has triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
+      console.log(import_chalk19.default.red("\nManual run is only allowed for automations with a cron trigger."));
+      console.log(import_chalk19.default.gray(`This automation has triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
       console.log();
       process.exit(1);
     }
-    console.log(import_chalk18.default.gray(`
+    console.log(import_chalk19.default.gray(`
 Triggering automation "${automation2.name}"...`));
     const response = await orgAuthenticatedFetch(
       `/v1/automations/${id}/trigger`,
@@ -31045,20 +31208,20 @@ Triggering automation "${automation2.name}"...`));
       }
     );
     if (!response.execution_id) {
-      console.log(import_chalk18.default.red(`
+      console.log(import_chalk19.default.red(`
 Automation trigger returned no execution ID. The automation may not have started.`));
       console.log();
       process.exit(1);
     }
-    console.log(import_chalk18.default.green(`
+    console.log(import_chalk19.default.green(`
 Automation triggered successfully.`));
-    console.log(import_chalk18.default.gray(`  Execution ID: ${response.execution_id}`));
+    console.log(import_chalk19.default.gray(`  Execution ID: ${response.execution_id}`));
     if (response.workspace_id) {
-      console.log(import_chalk18.default.gray(`  Workspace ID: ${response.workspace_id}`));
+      console.log(import_chalk19.default.gray(`  Workspace ID: ${response.workspace_id}`));
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk18.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -31075,38 +31238,38 @@ async function automationDeleteCommand(id, options) {
         initial: false
       });
       if (!response.confirm) {
-        console.log(import_chalk18.default.yellow("\nCancelled."));
+        console.log(import_chalk19.default.yellow("\nCancelled."));
         return;
       }
     }
     await orgAuthenticatedFetch(`/v1/automations/${id}`, {
       method: "DELETE"
     });
-    console.log(import_chalk18.default.green(`
+    console.log(import_chalk19.default.green(`
 Automation "${automationName}" (${id}) deleted.
 `));
   } catch (error51) {
-    console.error(import_chalk18.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function automationCheckCommand(checkRunId, options) {
   const id = Number(checkRunId);
   if (!Number.isSafeInteger(id)) {
-    console.error(import_chalk18.default.red("Error: check run ID must be an integer"));
+    console.error(import_chalk19.default.red("Error: check run ID must be an integer"));
     process.exit(1);
   }
   if (!options.token) {
-    console.error(import_chalk18.default.red("Error: --token is required"));
+    console.error(import_chalk19.default.red("Error: --token is required"));
     process.exit(1);
   }
   const { conclusion } = options;
   if (!isAutomationCheckConclusion(conclusion)) {
-    console.error(import_chalk18.default.red(`Error: --conclusion must be one of ${AUTOMATION_CHECK_CONCLUSIONS.join(", ")}`));
+    console.error(import_chalk19.default.red(`Error: --conclusion must be one of ${AUTOMATION_CHECK_CONCLUSIONS.join(", ")}`));
     process.exit(1);
   }
   if (!options.title?.trim()) {
-    console.error(import_chalk18.default.red("Error: --title is required"));
+    console.error(import_chalk19.default.red("Error: --title is required"));
     process.exit(1);
   }
   const body = {
@@ -31120,19 +31283,19 @@ async function automationCheckCommand(checkRunId, options) {
       `/v1/automations/checks/${id}`,
       { method: "POST", body }
     );
-    console.log(response.reported ? import_chalk18.default.green(`
+    console.log(response.reported ? import_chalk19.default.green(`
 Reported ${conclusion} for "${response.name}".
-`) : import_chalk18.default.yellow(`
+`) : import_chalk19.default.yellow(`
 Skipped "${response.name}" \u2014 a newer run of this automation owns it and will report the verdict.
 `));
   } catch (error51) {
-    console.error(import_chalk18.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 
 // src/commands/preview.ts
-var import_chalk19 = __toESM(require("chalk"));
+var import_chalk20 = __toESM(require("chalk"));
 
 // src/lib/agent-api.ts
 var ENGINE_PORT = process.env.REPLICAS_ENGINE_PORT || "3737";
@@ -31226,11 +31389,11 @@ async function previewListCommand(workspaceId) {
       `/v1/workspaces/${workspaceId}/previews`
     );
     if (result.previews.length === 0) {
-      console.log(import_chalk19.default.dim("No active previews"));
+      console.log(import_chalk20.default.dim("No active previews"));
       return;
     }
     for (const preview2 of result.previews) {
-      console.log(`  ${import_chalk19.default.cyan(String(preview2.port))} \u2192 ${import_chalk19.default.underline(preview2.publicUrl)}`);
+      console.log(`  ${import_chalk20.default.cyan(String(preview2.port))} \u2192 ${import_chalk20.default.underline(preview2.publicUrl)}`);
     }
   }
 }
@@ -31243,7 +31406,7 @@ async function previewAddCommand(workspaceId, options) {
       body: { port: portNum, authenticated: options.authenticated ?? false }
     }
   );
-  console.log(import_chalk19.default.green(`Preview created: ${result.preview.publicUrl}`));
+  console.log(import_chalk20.default.green(`Preview created: ${result.preview.publicUrl}`));
 }
 async function previewDeleteCommand(port) {
   const portNum = parsePreviewPort(port);
@@ -31256,7 +31419,7 @@ async function previewRemoveCommand(workspaceId, options) {
     `/v1/workspaces/${workspaceId}/previews/${portNum}`,
     { method: "DELETE" }
   );
-  console.log(import_chalk19.default.green(`Preview deleted on port ${portNum}`));
+  console.log(import_chalk20.default.green(`Preview deleted on port ${portNum}`));
 }
 
 // src/commands/media.ts
@@ -31429,7 +31592,7 @@ async function mediaListCommand(options) {
 }
 
 // src/commands/slack.ts
-var import_chalk20 = __toESM(require("chalk"));
+var import_chalk21 = __toESM(require("chalk"));
 function getThreadOptions(options) {
   const channelId = options.channel || process.env.REPLICAS_SLACK_CHANNEL_ID || process.env.SLACK_CHANNEL_ID;
   const threadTs = options.threadTs || process.env.REPLICAS_SLACK_THREAD_TS || process.env.SLACK_THREAD_TS;
@@ -31446,10 +31609,10 @@ async function attachThread(request) {
     method: "POST",
     body: request
   });
-  console.log(import_chalk20.default.green("Slack thread attached."));
-  console.log(import_chalk20.default.gray(`  Channel: ${response.thread.channel_id}`));
-  console.log(import_chalk20.default.gray(`  Thread: ${response.thread.thread_ts}`));
-  console.log(import_chalk20.default.gray(`  Workspace: ${response.workspace.name} (${response.workspace.id})`));
+  console.log(import_chalk21.default.green("Slack thread attached."));
+  console.log(import_chalk21.default.gray(`  Channel: ${response.thread.channel_id}`));
+  console.log(import_chalk21.default.gray(`  Thread: ${response.thread.thread_ts}`));
+  console.log(import_chalk21.default.gray(`  Workspace: ${response.workspace.name} (${response.workspace.id})`));
 }
 async function slackThreadAttachCommand(options) {
   const agentConfig = readAgentConfig();
@@ -31478,12 +31641,12 @@ async function slackThreadSwitchCommand(workspace, options) {
 }
 
 // src/commands/service.ts
-var import_chalk21 = __toESM(require("chalk"));
-var import_node_child_process = require("child_process");
-var import_node_fs = require("fs");
-var import_node_os = require("os");
-var import_node_path = require("path");
-var SERVICES_DIR = (0, import_node_path.join)((0, import_node_os.homedir)(), ".replicas", "services");
+var import_chalk22 = __toESM(require("chalk"));
+var import_node_child_process2 = require("child_process");
+var import_node_fs2 = require("fs");
+var import_node_os2 = require("os");
+var import_node_path2 = require("path");
+var SERVICES_DIR = (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".replicas", "services");
 var NAME_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
 function isValidServiceName(name) {
   return NAME_PATTERN.test(name);
@@ -31494,7 +31657,7 @@ function tailLines(content, lines) {
   return all.slice(-lines).join("\n").trim();
 }
 function statePath(name) {
-  return (0, import_node_path.join)(SERVICES_DIR, `${name}.json`);
+  return (0, import_node_path2.join)(SERVICES_DIR, `${name}.json`);
 }
 function isServiceState(value) {
   if (typeof value !== "object" || value === null) return false;
@@ -31504,7 +31667,7 @@ function isServiceState(value) {
 function readState(name) {
   let parsed;
   try {
-    parsed = JSON.parse((0, import_node_fs.readFileSync)(statePath(name), "utf-8"));
+    parsed = JSON.parse((0, import_node_fs2.readFileSync)(statePath(name), "utf-8"));
   } catch {
     return null;
   }
@@ -31538,7 +31701,7 @@ async function killServiceGroup(pid) {
 }
 function tailLog(logFile, lines) {
   try {
-    return tailLines((0, import_node_fs.readFileSync)(logFile, "utf-8"), lines);
+    return tailLines((0, import_node_fs2.readFileSync)(logFile, "utf-8"), lines);
   } catch {
     return "";
   }
@@ -31556,20 +31719,20 @@ async function serviceStartCommand(name, commandParts, options) {
     console.log(`Stopping existing "${name}" (pid ${existing.pid}) before restart`);
     await killServiceGroup(existing.pid);
   }
-  (0, import_node_fs.mkdirSync)(SERVICES_DIR, { recursive: true });
-  const cwd = (0, import_node_path.resolve)(options.cwd ?? process.cwd());
-  const logFile = (0, import_node_path.join)(SERVICES_DIR, `${name}.log`);
-  const logFd = (0, import_node_fs.openSync)(logFile, "a");
-  (0, import_node_fs.writeFileSync)(logFd, `
+  (0, import_node_fs2.mkdirSync)(SERVICES_DIR, { recursive: true });
+  const cwd = (0, import_node_path2.resolve)(options.cwd ?? process.cwd());
+  const logFile = (0, import_node_path2.join)(SERVICES_DIR, `${name}.log`);
+  const logFd = (0, import_node_fs2.openSync)(logFile, "a");
+  (0, import_node_fs2.writeFileSync)(logFd, `
 === [replicas service] "${name}" started ${(/* @__PURE__ */ new Date()).toISOString()} in ${cwd}: ${command} ===
 `);
-  const child = (0, import_node_child_process.spawn)("bash", ["-lc", command], {
+  const child = (0, import_node_child_process2.spawn)("bash", ["-lc", command], {
     cwd,
     detached: true,
     stdio: ["ignore", logFd, logFd],
     env: process.env
   });
-  (0, import_node_fs.closeSync)(logFd);
+  (0, import_node_fs2.closeSync)(logFd);
   if (child.pid === void 0) {
     throw new Error("Failed to spawn service process");
   }
@@ -31582,11 +31745,11 @@ async function serviceStartCommand(name, commandParts, options) {
     logFile,
     startedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  (0, import_node_fs.writeFileSync)(statePath(name), JSON.stringify(state, null, 2));
+  (0, import_node_fs2.writeFileSync)(statePath(name), JSON.stringify(state, null, 2));
   await sleep(1e3);
   if (!isRunning(child.pid)) {
     const logs = tailLog(logFile, 20);
-    (0, import_node_fs.rmSync)(statePath(name), { force: true });
+    (0, import_node_fs2.rmSync)(statePath(name), { force: true });
     throw new Error(`Service "${name}" exited immediately.${logs ? `
 
 Last log output:
@@ -31606,12 +31769,12 @@ async function serviceStopCommand(name) {
   } else {
     console.log(`Service "${name}" was not running`);
   }
-  (0, import_node_fs.rmSync)(statePath(name), { force: true });
+  (0, import_node_fs2.rmSync)(statePath(name), { force: true });
 }
 async function serviceListCommand() {
   let entries;
   try {
-    entries = (0, import_node_fs.readdirSync)(SERVICES_DIR).filter((f) => f.endsWith(".json"));
+    entries = (0, import_node_fs2.readdirSync)(SERVICES_DIR).filter((f) => f.endsWith(".json"));
   } catch {
     entries = [];
   }
@@ -31621,7 +31784,7 @@ async function serviceListCommand() {
     return;
   }
   for (const state of states) {
-    const status = isRunning(state.pid) ? import_chalk21.default.green("running") : import_chalk21.default.red("stopped");
+    const status = isRunning(state.pid) ? import_chalk22.default.green("running") : import_chalk22.default.red("stopped");
     console.log(`${state.name}  ${status}  pid ${state.pid}  started ${state.startedAt}`);
     console.log(`  command: ${state.command}  (cwd: ${state.cwd})`);
     console.log(`  logs: ${state.logFile}`);
@@ -31728,7 +31891,7 @@ Workspace: ${workspaceNameForOutput(result.workspace_name)} (${getWorkspaceDashb
 
 // src/commands/environment.ts
 var import_fs5 = __toESM(require("fs"));
-var import_chalk22 = __toESM(require("chalk"));
+var import_chalk23 = __toESM(require("chalk"));
 var import_prompts8 = __toESM(require("prompts"));
 var UUID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function maskValue(value) {
@@ -31741,38 +31904,38 @@ async function resolveEnvironmentId(input) {
   const response = await orgAuthenticatedFetch("/v1/environments");
   const resolved = resolveByNameOrId(input, response.environments);
   if (!resolved) {
-    console.log(import_chalk22.default.red(`Environment not found: ${input}`));
+    console.log(import_chalk23.default.red(`Environment not found: ${input}`));
     const available = response.environments.map((e) => e.name).join(", ");
-    console.log(import_chalk22.default.gray(`Available: ${available || "(none)"}`));
+    console.log(import_chalk23.default.gray(`Available: ${available || "(none)"}`));
     process.exit(1);
   }
   return resolved.id;
 }
 function printEnvironment(env) {
-  console.log(import_chalk22.default.white(`  ${env.name}${env.is_global ? import_chalk22.default.gray(" (global)") : ""}`));
-  console.log(import_chalk22.default.gray(`    ID: ${env.id}`));
+  console.log(import_chalk23.default.white(`  ${env.name}${env.is_global ? import_chalk23.default.gray(" (global)") : ""}`));
+  console.log(import_chalk23.default.gray(`    ID: ${env.id}`));
   if (env.description) {
-    console.log(import_chalk22.default.gray(`    Description: ${env.description}`));
+    console.log(import_chalk23.default.gray(`    Description: ${env.description}`));
   }
   if (env.repository_id) {
-    console.log(import_chalk22.default.gray(`    Repository: ${env.repository_id}`));
+    console.log(import_chalk23.default.gray(`    Repository: ${env.repository_id}`));
   } else if (env.repository_set_id) {
-    console.log(import_chalk22.default.gray(`    Repository Set: ${env.repository_set_id}`));
+    console.log(import_chalk23.default.gray(`    Repository Set: ${env.repository_set_id}`));
   }
   if (env.variable_count !== void 0) {
-    console.log(import_chalk22.default.gray(`    Variables: ${env.variable_count}, Files: ${env.file_count ?? 0}, Skills: ${env.skill_count ?? 0}, MCPs: ${env.mcp_count ?? 0}`));
+    console.log(import_chalk23.default.gray(`    Variables: ${env.variable_count}, Files: ${env.file_count ?? 0}, Skills: ${env.skill_count ?? 0}, MCPs: ${env.mcp_count ?? 0}`));
   }
-  console.log(import_chalk22.default.gray(`    Updated: ${formatDate2(env.updated_at)}`));
+  console.log(import_chalk23.default.gray(`    Updated: ${formatDate2(env.updated_at)}`));
   console.log();
 }
 async function environmentListCommand() {
   ensureOrgApiAuthenticated();
   const response = await orgAuthenticatedFetch("/v1/environments");
   if (response.environments.length === 0) {
-    console.log(import_chalk22.default.yellow("\nNo environments found.\n"));
+    console.log(import_chalk23.default.yellow("\nNo environments found.\n"));
     return;
   }
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Environments (${response.environments.length}):
 `));
   for (const env of response.environments) {
@@ -31783,7 +31946,7 @@ async function environmentGetCommand(idOrName) {
   ensureOrgApiAuthenticated();
   const id = await resolveEnvironmentId(idOrName);
   const response = await orgAuthenticatedFetch(`/v1/environments/${id}`);
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Environment: ${response.environment.name}
 `));
   printEnvironment(response.environment);
@@ -31799,7 +31962,7 @@ async function environmentCreateCommand(name, options) {
       validate: (v) => v.trim() ? true : "Name is required"
     });
     if (!r.name) {
-      console.log(import_chalk22.default.yellow("\nCancelled."));
+      console.log(import_chalk23.default.yellow("\nCancelled."));
       return;
     }
     envName = r.name;
@@ -31812,8 +31975,8 @@ async function environmentCreateCommand(name, options) {
       const repos2 = await orgAuthenticatedFetch("/v1/repositories");
       const repo = repos2.repositories.find((r) => r.name === options.repository);
       if (!repo) {
-        console.log(import_chalk22.default.red(`Repository not found: ${options.repository}`));
-        console.log(import_chalk22.default.gray(`Available: ${repos2.repositories.map((r) => r.name).join(", ")}`));
+        console.log(import_chalk23.default.red(`Repository not found: ${options.repository}`));
+        console.log(import_chalk23.default.gray(`Available: ${repos2.repositories.map((r) => r.name).join(", ")}`));
         process.exit(1);
       }
       repositoryId = repo.id;
@@ -31843,9 +32006,9 @@ async function environmentCreateCommand(name, options) {
     method: "POST",
     body
   });
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Created environment: ${response.environment.name}`));
-  console.log(import_chalk22.default.gray(`  ID: ${response.environment.id}
+  console.log(import_chalk23.default.gray(`  ID: ${response.environment.id}
 `));
 }
 async function environmentEditCommand(idOrName, options) {
@@ -31864,21 +32027,21 @@ async function environmentEditCommand(idOrName, options) {
       const repos2 = await orgAuthenticatedFetch("/v1/repositories");
       const repo = repos2.repositories.find((r) => r.name === options.repository);
       if (!repo) {
-        console.log(import_chalk22.default.red(`Repository not found: ${options.repository}`));
+        console.log(import_chalk23.default.red(`Repository not found: ${options.repository}`));
         process.exit(1);
       }
       body.repository_id = repo.id;
     }
   }
   if (Object.keys(body).length === 0) {
-    console.log(import_chalk22.default.yellow("\nNo changes specified. Pass --name, --description, --repository, or --system-prompt."));
+    console.log(import_chalk23.default.yellow("\nNo changes specified. Pass --name, --description, --repository, or --system-prompt."));
     return;
   }
   const response = await orgAuthenticatedFetch(`/v1/environments/${id}`, {
     method: "PATCH",
     body
   });
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Updated environment: ${response.environment.name}
 `));
 }
@@ -31893,20 +32056,20 @@ async function environmentDeleteCommand(idOrName, options) {
       initial: false
     });
     if (!r.confirm) {
-      console.log(import_chalk22.default.yellow("\nCancelled."));
+      console.log(import_chalk23.default.yellow("\nCancelled."));
       return;
     }
   }
   await orgAuthenticatedFetch(`/v1/environments/${id}`, { method: "DELETE" });
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Deleted environment ${idOrName}.
 `));
 }
 function printVariable(v, reveal) {
-  console.log(import_chalk22.default.white(`  ${v.key}`));
-  console.log(import_chalk22.default.gray(`    ID: ${v.id}`));
-  console.log(import_chalk22.default.gray(`    Value: ${reveal ? v.value : maskValue(v.value)}`));
-  console.log(import_chalk22.default.gray(`    Updated: ${formatDate2(v.updated_at)}`));
+  console.log(import_chalk23.default.white(`  ${v.key}`));
+  console.log(import_chalk23.default.gray(`    ID: ${v.id}`));
+  console.log(import_chalk23.default.gray(`    Value: ${reveal ? v.value : maskValue(v.value)}`));
+  console.log(import_chalk23.default.gray(`    Updated: ${formatDate2(v.updated_at)}`));
   console.log();
 }
 async function envVarsListCommand(envIdOrName, options) {
@@ -31916,14 +32079,14 @@ async function envVarsListCommand(envIdOrName, options) {
     `/v1/environments/${id}/variables`
   );
   if (response.environment_variables.length === 0) {
-    console.log(import_chalk22.default.yellow("\nNo variables.\n"));
+    console.log(import_chalk23.default.yellow("\nNo variables.\n"));
     return;
   }
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Variables (${response.environment_variables.length}):
 `));
   if (!options.reveal) {
-    console.log(import_chalk22.default.gray("  Values are masked. Pass --reveal to show full values.\n"));
+    console.log(import_chalk23.default.gray("  Values are masked. Pass --reveal to show full values.\n"));
   }
   for (const v of response.environment_variables) printVariable(v, !!options.reveal);
 }
@@ -31940,7 +32103,7 @@ async function envVarsSetCommand(envIdOrName, key, value) {
       `/v1/environments/${id}/variables/${match.id}`,
       { method: "PATCH", body: body2 }
     );
-    console.log(import_chalk22.default.green(`
+    console.log(import_chalk23.default.green(`
 Updated variable ${response2.environment_variable.key}.
 `));
     return;
@@ -31954,7 +32117,7 @@ Updated variable ${response2.environment_variable.key}.
     `/v1/environments/${id}/variables`,
     { method: "POST", body }
   );
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Created variable ${response.environment_variable.key}.
 `));
 }
@@ -31968,7 +32131,7 @@ async function envVarsDeleteCommand(envIdOrName, keyOrId, options) {
     );
     const match = existing.environment_variables.find((v) => v.key === keyOrId);
     if (!match) {
-      console.log(import_chalk22.default.red(`Variable not found: ${keyOrId}`));
+      console.log(import_chalk23.default.red(`Variable not found: ${keyOrId}`));
       process.exit(1);
     }
     variableId = match.id;
@@ -31981,23 +32144,23 @@ async function envVarsDeleteCommand(envIdOrName, keyOrId, options) {
       initial: false
     });
     if (!r.confirm) {
-      console.log(import_chalk22.default.yellow("\nCancelled."));
+      console.log(import_chalk23.default.yellow("\nCancelled."));
       return;
     }
   }
   await orgAuthenticatedFetch(`/v1/environments/${id}/variables/${variableId}`, {
     method: "DELETE"
   });
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Deleted variable ${keyOrId}.
 `));
 }
 function printFile(f) {
-  console.log(import_chalk22.default.white(`  ${f.path}`));
-  console.log(import_chalk22.default.gray(`    ID: ${f.id}`));
-  console.log(import_chalk22.default.gray(`    Name: ${f.name}`));
-  console.log(import_chalk22.default.gray(`    Size: ${f.content.length} bytes`));
-  console.log(import_chalk22.default.gray(`    Updated: ${formatDate2(f.updated_at)}`));
+  console.log(import_chalk23.default.white(`  ${f.path}`));
+  console.log(import_chalk23.default.gray(`    ID: ${f.id}`));
+  console.log(import_chalk23.default.gray(`    Name: ${f.name}`));
+  console.log(import_chalk23.default.gray(`    Size: ${f.content.length} bytes`));
+  console.log(import_chalk23.default.gray(`    Updated: ${formatDate2(f.updated_at)}`));
   console.log();
 }
 async function envFilesListCommand(envIdOrName) {
@@ -32007,10 +32170,10 @@ async function envFilesListCommand(envIdOrName) {
     `/v1/environments/${id}/files`
   );
   if (response.environment_files.length === 0) {
-    console.log(import_chalk22.default.yellow("\nNo files.\n"));
+    console.log(import_chalk23.default.yellow("\nNo files.\n"));
     return;
   }
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Files (${response.environment_files.length}):
 `));
   for (const f of response.environment_files) printFile(f);
@@ -32041,7 +32204,7 @@ async function envFilesSetCommand(envIdOrName, destinationPath, options) {
       `/v1/environments/${id}/files/${match.id}`,
       { method: "PATCH", body: body2 }
     );
-    console.log(import_chalk22.default.green(`
+    console.log(import_chalk23.default.green(`
 Updated file ${response2.environment_file.path}.
 `));
     return;
@@ -32056,7 +32219,7 @@ Updated file ${response2.environment_file.path}.
     `/v1/environments/${id}/files`,
     { method: "POST", body }
   );
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Created file ${response.environment_file.path}.
 `));
 }
@@ -32070,7 +32233,7 @@ async function envFilesDeleteCommand(envIdOrName, pathOrId, options) {
     );
     const match = existing.environment_files.find((f) => f.path === pathOrId);
     if (!match) {
-      console.log(import_chalk22.default.red(`File not found: ${pathOrId}`));
+      console.log(import_chalk23.default.red(`File not found: ${pathOrId}`));
       process.exit(1);
     }
     fileId = match.id;
@@ -32083,14 +32246,14 @@ async function envFilesDeleteCommand(envIdOrName, pathOrId, options) {
       initial: false
     });
     if (!r.confirm) {
-      console.log(import_chalk22.default.yellow("\nCancelled."));
+      console.log(import_chalk23.default.yellow("\nCancelled."));
       return;
     }
   }
   await orgAuthenticatedFetch(`/v1/environments/${id}/files/${fileId}`, {
     method: "DELETE"
   });
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Deleted file ${pathOrId}.
 `));
 }
@@ -32099,16 +32262,16 @@ async function envHookGetCommand(envIdOrName, kind) {
   const id = await resolveEnvironmentId(envIdOrName);
   const hook = kind === "warm" ? (await orgAuthenticatedFetch(`/v1/environments/${id}/warm-hooks`)).warm_hook : (await orgAuthenticatedFetch(`/v1/environments/${id}/start-hooks`)).start_hook;
   if (!hook) {
-    console.log(import_chalk22.default.yellow(`
+    console.log(import_chalk23.default.yellow(`
 No ${kind} hook configured.
 `));
     return;
   }
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 ${kind === "warm" ? "Warm" : "Start"} hook (v${hook.version}, ${hook.is_active ? "active" : "inactive"}):
 `));
-  console.log(import_chalk22.default.gray(`  ID: ${hook.id}`));
-  console.log(import_chalk22.default.gray(`  Created: ${formatDate2(hook.created_at)}
+  console.log(import_chalk23.default.gray(`  ID: ${hook.id}`));
+  console.log(import_chalk23.default.gray(`  Created: ${formatDate2(hook.created_at)}
 `));
   console.log(hook.content);
   console.log();
@@ -32123,7 +32286,7 @@ async function envHookSaveCommand(envIdOrName, options, kind) {
       `/v1/environments/${id}/warm-hooks/save`,
       { method: "POST", body: body2 }
     );
-    console.log(import_chalk22.default.green(`
+    console.log(import_chalk23.default.green(`
 Saved warm hook v${response2.warm_hook.version}.
 `));
     return;
@@ -32133,7 +32296,7 @@ Saved warm hook v${response2.warm_hook.version}.
     `/v1/environments/${id}/start-hooks/save`,
     { method: "POST", body }
   );
-  console.log(import_chalk22.default.green(response.start_hook ? `
+  console.log(import_chalk23.default.green(response.start_hook ? `
 Saved start hook v${response.start_hook.version}.
 ` : "\nCleared start hook.\n"));
 }
@@ -32150,7 +32313,7 @@ async function envHookTestCommand(envIdOrName, options, kind) {
       body: kind === "warm" ? { content, mode: options.save ? "save_test" : "test_only" } : { content },
       onEvent: (event) => {
         if (event.type === "progress" && event.message) {
-          console.log(import_chalk22.default.gray(event.message));
+          console.log(import_chalk23.default.gray(event.message));
         } else if (event.type === "output" && event.output) {
           process.stdout.write(event.output);
         } else if (event.type === "complete") {
@@ -32163,23 +32326,23 @@ async function envHookTestCommand(envIdOrName, options, kind) {
     }
   );
   if (errorMessage) {
-    console.log(import_chalk22.default.red(`
+    console.log(import_chalk23.default.red(`
 ${errorMessage}
 `));
     process.exit(1);
   }
   if (timedOut) {
-    console.log(import_chalk22.default.yellow(`
+    console.log(import_chalk23.default.yellow(`
 ${kind === "warm" ? "Warm" : "Start"} hook timed out.
 `));
     process.exit(1);
   }
   if (exitCode === 0) {
-    console.log(import_chalk22.default.green(`
+    console.log(import_chalk23.default.green(`
 ${kind === "warm" ? "Warm" : "Start"} hook passed${options.save ? " and was saved" : ""} (exit code ${exitCode}).
 `));
   } else {
-    console.log(import_chalk22.default.red(`
+    console.log(import_chalk23.default.red(`
 ${kind === "warm" ? "Warm" : "Start"} hook failed (exit code ${exitCode ?? "unknown"}).
 `));
     process.exit(1);
@@ -32194,24 +32357,24 @@ async function envHookRepositoryHooksCommand(envIdOrName, kind) {
     `/v1/environments/${id}/start-hooks/repository-hooks`
   )).repositories.map((repository) => ({ ...repository, hook: repository.start_hook }));
   if (repositories.length === 0) {
-    console.log(import_chalk22.default.yellow("\nNo repositories bound to this environment.\n"));
+    console.log(import_chalk23.default.yellow("\nNo repositories bound to this environment.\n"));
     return;
   }
-  console.log(import_chalk22.default.green(`
+  console.log(import_chalk23.default.green(`
 Repository ${kind} hooks (${repositories.length}):
 `));
   for (const repo of repositories) {
-    console.log(import_chalk22.default.white(`  ${repo.repository_name} @${repo.default_branch}`));
+    console.log(import_chalk23.default.white(`  ${repo.repository_name} @${repo.default_branch}`));
     if (repo.error) {
-      console.log(import_chalk22.default.red(`    Error: ${repo.error}`));
+      console.log(import_chalk23.default.red(`    Error: ${repo.error}`));
     } else if (repo.hook) {
-      console.log(import_chalk22.default.gray(`    Source: ${repo.filename ?? "(unknown)"}`));
-      console.log(import_chalk22.default.gray(`    Commands (${repo.hook.commands.length}):`));
+      console.log(import_chalk23.default.gray(`    Source: ${repo.filename ?? "(unknown)"}`));
+      console.log(import_chalk23.default.gray(`    Commands (${repo.hook.commands.length}):`));
       for (const cmd of repo.hook.commands) {
-        console.log(import_chalk22.default.gray(`      ${cmd}`));
+        console.log(import_chalk23.default.gray(`      ${cmd}`));
       }
     } else {
-      console.log(import_chalk22.default.gray(`    No ${kind}Hook defined.`));
+      console.log(import_chalk23.default.gray(`    No ${kind}Hook defined.`));
     }
     console.log();
   }
@@ -32276,7 +32439,7 @@ program.hook("preAction", async (_command, actionCommand) => {
       throw new Error('No organization selected. Run "replicas org switch" to select one.');
     }
   } catch (error51) {
-    console.error(import_chalk23.default.red(`
+    console.error(import_chalk24.default.red(`
 \u2717 ${error51 instanceof Error ? error51.message : "Unknown error"}
 `));
     process.exit(1);
@@ -32290,7 +32453,7 @@ function registerSlackCommands(parent) {
       await slackThreadAttachCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -32302,7 +32465,7 @@ function registerSlackCommands(parent) {
       await slackThreadSwitchCommand(workspace, options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -32316,7 +32479,7 @@ program.command("login").description("Authenticate with your Replicas account").
     await loginCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32328,7 +32491,7 @@ program.command("init").description("Create a replicas.json or replicas.yaml con
     initCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32340,7 +32503,7 @@ program.command("logout").description("Clear stored credentials").action(() => {
     logoutCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32351,7 +32514,7 @@ program.command("muse-auth").description("Connect your Muse Code subscription to
   try {
     await museAuthCommand(options);
   } catch (error51) {
-    if (error51 instanceof Error) console.error(import_chalk23.default.red(`
+    if (error51 instanceof Error) console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     process.exit(1);
@@ -32362,7 +32525,7 @@ program.command("whoami").description("Display current authenticated user").acti
     await whoamiCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32374,7 +32537,7 @@ program.command("codex-auth").description("Connect your Codex credentials to Rep
     await codexAuthCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32386,7 +32549,7 @@ program.command("claude-auth").description("Connect your Claude Code credentials
     await claudeAuthCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32399,7 +32562,7 @@ org.command("switch").description("Switch to a different organization").action(a
     await orgSwitchCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32411,7 +32574,7 @@ org.action(async () => {
     await orgCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32423,7 +32586,7 @@ program.command("connect <workspace-name...>").description("Connect to a workspa
     await connectCommand(workspaceName.join(" "));
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32434,7 +32597,7 @@ program.command("tunnel <workspace-name...>").description("Forward a workspace p
   try {
     await tunnelCommand(workspaceName.join(" "), options);
   } catch (error51) {
-    console.error(import_chalk23.default.red(`
+    console.error(import_chalk24.default.red(`
 Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
@@ -32444,7 +32607,7 @@ program.command("code [workspace-name...]").description("Open a workspace in VSC
     await codeCommand(workspaceName.join(" "));
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32457,7 +32620,7 @@ config2.command("get <key>").description("Get a configuration value").action(asy
     await configGetCommand(key);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32469,7 +32632,7 @@ config2.command("set <key> <value>").description("Set a configuration value").ac
     await configSetCommand(key, value);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32481,7 +32644,7 @@ config2.command("list").description("List all configuration values").action(asyn
     await configListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32493,7 +32656,7 @@ program.command("list").description("List all replicas").option("-p, --page <pag
     await replicaListCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32505,7 +32668,7 @@ program.command("get <id>").description("Get replica details by ID").action(asyn
     await replicaGetCommand(id);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32517,7 +32680,7 @@ program.command("create [name]").description("Create a new replica").option("-m,
     await replicaCreateCommand(name, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32529,7 +32692,7 @@ program.command("send <id>").description("Send a message to a replica").option("
     await replicaSendCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32541,7 +32704,7 @@ program.command("delete <id>").description("Delete a replica").option("-f, --for
     await replicaDeleteCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32553,7 +32716,7 @@ program.command("read <id>").description("Read conversation history of a replica
     await replicaReadCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32566,7 +32729,7 @@ automation.command("list").description("List all automations").option("-p, --pag
     await automationListCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32578,7 +32741,7 @@ automation.command("get <id>").description("Get automation details by ID").actio
     await automationGetCommand(id);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32593,7 +32756,7 @@ automation.command("create [name]").description("Create a new automation").optio
     });
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32605,7 +32768,7 @@ automation.command("edit <id>").description("Edit an existing automation").optio
     await automationEditCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32617,7 +32780,7 @@ automation.command("run <id>").description("Manually trigger an automation (cron
     await automationRunCommand(id);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32629,7 +32792,7 @@ automation.command("delete <id>").description("Delete an automation").option("-f
     await automationDeleteCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32641,7 +32804,7 @@ automation.command("check <checkRunId>").description("Report this automation run
     await automationCheckCommand(checkRunId, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32653,7 +32816,7 @@ automation.action(async () => {
     await automationListCommand({});
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32666,7 +32829,7 @@ repos.command("list").description("List all repositories").action(async () => {
     await repositoriesListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32678,7 +32841,7 @@ repos.action(async () => {
     await repositoriesListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32691,7 +32854,7 @@ environment.command("list").description("List all environments").action(async ()
     await environmentListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32703,7 +32866,7 @@ environment.command("get <id-or-name>").description('Get an environment by ID or
     await environmentGetCommand(idOrName);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32715,7 +32878,7 @@ environment.command("create [name]").description("Create a new environment").opt
     await environmentCreateCommand(name, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32727,7 +32890,7 @@ environment.command("edit <id-or-name>").description("Edit an environment").opti
     await environmentEditCommand(idOrName, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32739,7 +32902,7 @@ environment.command("delete <id-or-name>").description("Delete an environment").
     await environmentDeleteCommand(idOrName, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32752,7 +32915,7 @@ envVars.command("list <env>").description("List variables in an environment (val
     await envVarsListCommand(env, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32764,7 +32927,7 @@ envVars.command("set <env> <key> <value>").description("Create or update a varia
     await envVarsSetCommand(env, key, value);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32776,7 +32939,7 @@ envVars.command("delete <env> <key-or-id>").description("Delete a variable by ke
     await envVarsDeleteCommand(env, keyOrId, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32789,7 +32952,7 @@ envFiles.command("list <env>").description("List files in an environment").actio
     await envFilesListCommand(env);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32801,7 +32964,7 @@ envFiles.command("set <env> <destination-path>").description("Create or update a
     await envFilesSetCommand(env, destinationPath, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32813,7 +32976,7 @@ envFiles.command("delete <env> <path-or-id>").description("Delete a file by dest
     await envFilesDeleteCommand(env, pathOrId, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32826,7 +32989,7 @@ function registerEnvironmentHookCommands(parent, config3) {
     try {
       await command();
     } catch (error51) {
-      if (error51 instanceof Error) console.error(import_chalk23.default.red(`
+      if (error51 instanceof Error) console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       process.exit(1);
@@ -32862,7 +33025,7 @@ environment.action(async () => {
     await environmentListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32913,7 +33076,7 @@ if (isAgentMode()) {
       await previewAddCommand(workspaceId, options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -32925,7 +33088,7 @@ if (isAgentMode()) {
       await previewListCommand(workspaceId);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -32937,7 +33100,7 @@ if (isAgentMode()) {
       await previewRemoveCommand(workspaceId, options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -32946,6 +33109,10 @@ if (isAgentMode()) {
   });
 }
 if (isAgentMode()) {
+  const identity = program.command("identity").description("Read the short-lived workspace identity token delivered by Replicas");
+  identity.command("token").description("Print the current workspace token for an audience (defaults to the environment default audience)").option("-a, --audience <audience>", "Registered audience to read the token for").addOption(new import_commander.Option("--format <format>", "Output a raw token or Google executable credentials").choices(["text", "gcp"]).default("text")).action(identityTokenCommand);
+  identity.command("aws-credentials").description("Exchange the current token for temporary AWS credentials (for AWS credential_process)").requiredOption("--role-arn <arn>", "IAM role that trusts the Replicas issuer").option("-a, --audience <audience>", "Registered audience accepted by the IAM OIDC provider", "sts.amazonaws.com").option("--region <region>", "AWS region for the STS exchange").option("--session-name <name>", "AWS role session name", "replicas").action(identityAwsCredentialsCommand);
+  identity.command("exec [command...]").description("Run a command with REPLICAS_WORKSPACE_TOKEN set to a fresh token: replicas identity exec -- curl ...").option("-a, --audience <audience>", "Registered audience to read the token for").action((command, options) => identityExecCommand(command, options));
   const service = program.command("service").description("Run long-lived services (dev servers, daemons) detached from the agent session so they survive workspace sleep/wake");
   service.command("start <name> [command...]").description('Start (or restart) a named service as a detached daemon. Quote shell operators: replicas service start web "cd app && bun dev"').option("-d, --cwd <dir>", "Working directory for the service (defaults to the current directory)").action(async (name, commandParts, options) => {
     try {
@@ -32998,7 +33165,7 @@ if (isAgentMode()) {
       await mediaUploadCommand(files, options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33009,7 +33176,7 @@ if (isAgentMode()) {
     try {
       await mediaShareCommand(mediaId);
     } catch (error51) {
-      if (error51 instanceof Error) console.error(import_chalk23.default.red(`
+      if (error51 instanceof Error) console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       process.exit(1);
@@ -33019,7 +33186,7 @@ if (isAgentMode()) {
     try {
       await mediaRevokeCommand(mediaId);
     } catch (error51) {
-      if (error51 instanceof Error) console.error(import_chalk23.default.red(`
+      if (error51 instanceof Error) console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       process.exit(1);
@@ -33030,7 +33197,7 @@ if (isAgentMode()) {
       await mediaListCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33043,7 +33210,7 @@ if (isAgentMode()) {
       await mothershipMonitorChannelCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33055,7 +33222,7 @@ if (isAgentMode()) {
       await mothershipSpawnCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33067,7 +33234,7 @@ if (isAgentMode()) {
       await mothershipRelayCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk23.default.red(`
+        console.error(import_chalk24.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33076,6 +33243,7 @@ if (isAgentMode()) {
   });
   program.command("computer").description("Drive the workspace Linux desktop through replicas-computer");
   const allowed = /* @__PURE__ */ new Set([
+    "identity",
     "init",
     "whoami",
     "list",
@@ -33097,9 +33265,9 @@ if (isAgentMode()) {
 }
 async function main() {
   if (process.argv[2] === "computer" && isAgentMode()) {
-    const result = (0, import_node_child_process2.spawnSync)("replicas-computer", process.argv.slice(3), { stdio: "inherit" });
+    const result = (0, import_node_child_process3.spawnSync)("replicas-computer", process.argv.slice(3), { stdio: "inherit" });
     if (result.error) {
-      console.error(import_chalk23.default.red(`
+      console.error(import_chalk24.default.red(`
 \u2717 replicas-computer is unavailable in this workspace image
 `));
       process.exitCode = 1;
@@ -33108,7 +33276,7 @@ async function main() {
     process.exitCode = result.status ?? 1;
     return;
   }
-  startUpdateCheck(CLI_VERSION);
+  if (process.argv[2] !== "identity") startUpdateCheck(CLI_VERSION);
   program.parse();
 }
 main().catch(() => {