replicas-cli 0.2.752 → 0.2.753

package/dist/index.cjs

@@ -111,17 +111,17 @@ var require_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    function visit_(key, node, visitor, path6) {
-      const ctrl = callVisitor(key, node, visitor, path6);
+    function visit_(key, node, visitor, path7) {
+      const ctrl = callVisitor(key, node, visitor, path7);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path6, ctrl);
-        return visit_(key, ctrl, visitor, path6);
+        replaceNode(key, path7, ctrl);
+        return visit_(key, ctrl, visitor, path7);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path6 = Object.freeze(path6.concat(node));
+          path7 = Object.freeze(path7.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = visit_(i, node.items[i], visitor, path6);
+            const ci = visit_(i, node.items[i], visitor, path7);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -132,13 +132,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path6 = Object.freeze(path6.concat(node));
-          const ck = visit_("key", node.key, visitor, path6);
+          path7 = Object.freeze(path7.concat(node));
+          const ck = visit_("key", node.key, visitor, path7);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = visit_("value", node.value, visitor, path6);
+          const cv = visit_("value", node.value, visitor, path7);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -159,17 +159,17 @@ var require_visit = __commonJS({
     visitAsync.BREAK = BREAK;
     visitAsync.SKIP = SKIP;
     visitAsync.REMOVE = REMOVE;
-    async function visitAsync_(key, node, visitor, path6) {
-      const ctrl = await callVisitor(key, node, visitor, path6);
+    async function visitAsync_(key, node, visitor, path7) {
+      const ctrl = await callVisitor(key, node, visitor, path7);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path6, ctrl);
-        return visitAsync_(key, ctrl, visitor, path6);
+        replaceNode(key, path7, ctrl);
+        return visitAsync_(key, ctrl, visitor, path7);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path6 = Object.freeze(path6.concat(node));
+          path7 = Object.freeze(path7.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = await visitAsync_(i, node.items[i], visitor, path6);
+            const ci = await visitAsync_(i, node.items[i], visitor, path7);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -180,13 +180,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path6 = Object.freeze(path6.concat(node));
-          const ck = await visitAsync_("key", node.key, visitor, path6);
+          path7 = Object.freeze(path7.concat(node));
+          const ck = await visitAsync_("key", node.key, visitor, path7);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = await visitAsync_("value", node.value, visitor, path6);
+          const cv = await visitAsync_("value", node.value, visitor, path7);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -213,23 +213,23 @@ var require_visit = __commonJS({
       }
       return visitor;
     }
-    function callVisitor(key, node, visitor, path6) {
+    function callVisitor(key, node, visitor, path7) {
       if (typeof visitor === "function")
-        return visitor(key, node, path6);
+        return visitor(key, node, path7);
       if (identity.isMap(node))
-        return visitor.Map?.(key, node, path6);
+        return visitor.Map?.(key, node, path7);
       if (identity.isSeq(node))
-        return visitor.Seq?.(key, node, path6);
+        return visitor.Seq?.(key, node, path7);
       if (identity.isPair(node))
-        return visitor.Pair?.(key, node, path6);
+        return visitor.Pair?.(key, node, path7);
       if (identity.isScalar(node))
-        return visitor.Scalar?.(key, node, path6);
+        return visitor.Scalar?.(key, node, path7);
       if (identity.isAlias(node))
-        return visitor.Alias?.(key, node, path6);
+        return visitor.Alias?.(key, node, path7);
       return void 0;
     }
-    function replaceNode(key, path6, node) {
-      const parent = path6[path6.length - 1];
+    function replaceNode(key, path7, node) {
+      const parent = path7[path7.length - 1];
       if (identity.isCollection(parent)) {
         parent.items[key] = node;
       } else if (identity.isPair(parent)) {
@@ -839,10 +839,10 @@ var require_Collection = __commonJS({
     var createNode = require_createNode();
     var identity = require_identity();
     var Node = require_Node();
-    function collectionFromPath(schema, path6, value) {
+    function collectionFromPath(schema, path7, value) {
       let v = value;
-      for (let i = path6.length - 1; i >= 0; --i) {
-        const k = path6[i];
+      for (let i = path7.length - 1; i >= 0; --i) {
+        const k = path7[i];
         if (typeof k === "number" && Number.isInteger(k) && k >= 0) {
           const a = [];
           a[k] = v;
@@ -861,7 +861,7 @@ var require_Collection = __commonJS({
         sourceObjects: /* @__PURE__ */ new Map()
       });
     }
-    var isEmptyPath = (path6) => path6 == null || typeof path6 === "object" && !!path6[Symbol.iterator]().next().done;
+    var isEmptyPath = (path7) => path7 == null || typeof path7 === "object" && !!path7[Symbol.iterator]().next().done;
     var Collection = class extends Node.NodeBase {
       constructor(type, schema) {
         super(type);
@@ -891,11 +891,11 @@ var require_Collection = __commonJS({
        * be a Pair instance or a `{ key, value }` object, which may not have a key
        * that already exists in the map.
        */
-      addIn(path6, value) {
-        if (isEmptyPath(path6))
+      addIn(path7, value) {
+        if (isEmptyPath(path7))
           this.add(value);
         else {
-          const [key, ...rest] = path6;
+          const [key, ...rest] = path7;
           const node = this.get(key, true);
           if (identity.isCollection(node))
             node.addIn(rest, value);
@@ -909,8 +909,8 @@ var require_Collection = __commonJS({
        * Removes a value from the collection.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path6) {
-        const [key, ...rest] = path6;
+      deleteIn(path7) {
+        const [key, ...rest] = path7;
         if (rest.length === 0)
           return this.delete(key);
         const node = this.get(key, true);
@@ -924,8 +924,8 @@ var require_Collection = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path6, keepScalar) {
-        const [key, ...rest] = path6;
+      getIn(path7, keepScalar) {
+        const [key, ...rest] = path7;
         const node = this.get(key, true);
         if (rest.length === 0)
           return !keepScalar && identity.isScalar(node) ? node.value : node;
@@ -943,8 +943,8 @@ var require_Collection = __commonJS({
       /**
        * Checks if the collection includes a value with the key `key`.
        */
-      hasIn(path6) {
-        const [key, ...rest] = path6;
+      hasIn(path7) {
+        const [key, ...rest] = path7;
         if (rest.length === 0)
           return this.has(key);
         const node = this.get(key, true);
@@ -954,8 +954,8 @@ var require_Collection = __commonJS({
        * Sets a value in this collection. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path6, value) {
-        const [key, ...rest] = path6;
+      setIn(path7, value) {
+        const [key, ...rest] = path7;
         if (rest.length === 0) {
           this.set(key, value);
         } else {
@@ -3470,9 +3470,9 @@ var require_Document = __commonJS({
           this.contents.add(value);
       }
       /** Adds a value to the document. */
-      addIn(path6, value) {
+      addIn(path7, value) {
         if (assertCollection(this.contents))
-          this.contents.addIn(path6, value);
+          this.contents.addIn(path7, value);
       }
       /**
        * Create a new `Alias` node, ensuring that the target `node` has the required anchor.
@@ -3547,14 +3547,14 @@ var require_Document = __commonJS({
        * Removes a value from the document.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path6) {
-        if (Collection.isEmptyPath(path6)) {
+      deleteIn(path7) {
+        if (Collection.isEmptyPath(path7)) {
           if (this.contents == null)
             return false;
           this.contents = null;
           return true;
         }
-        return assertCollection(this.contents) ? this.contents.deleteIn(path6) : false;
+        return assertCollection(this.contents) ? this.contents.deleteIn(path7) : false;
       }
       /**
        * Returns item at `key`, or `undefined` if not found. By default unwraps
@@ -3569,10 +3569,10 @@ var require_Document = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path6, keepScalar) {
-        if (Collection.isEmptyPath(path6))
+      getIn(path7, keepScalar) {
+        if (Collection.isEmptyPath(path7))
           return !keepScalar && identity.isScalar(this.contents) ? this.contents.value : this.contents;
-        return identity.isCollection(this.contents) ? this.contents.getIn(path6, keepScalar) : void 0;
+        return identity.isCollection(this.contents) ? this.contents.getIn(path7, keepScalar) : void 0;
       }
       /**
        * Checks if the document includes a value with the key `key`.
@@ -3583,10 +3583,10 @@ var require_Document = __commonJS({
       /**
        * Checks if the document includes a value at `path`.
        */
-      hasIn(path6) {
-        if (Collection.isEmptyPath(path6))
+      hasIn(path7) {
+        if (Collection.isEmptyPath(path7))
           return this.contents !== void 0;
-        return identity.isCollection(this.contents) ? this.contents.hasIn(path6) : false;
+        return identity.isCollection(this.contents) ? this.contents.hasIn(path7) : false;
       }
       /**
        * Sets a value in this document. For `!!set`, `value` needs to be a
@@ -3603,13 +3603,13 @@ var require_Document = __commonJS({
        * Sets a value in this document. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path6, value) {
-        if (Collection.isEmptyPath(path6)) {
+      setIn(path7, value) {
+        if (Collection.isEmptyPath(path7)) {
           this.contents = value;
         } else if (this.contents == null) {
-          this.contents = Collection.collectionFromPath(this.schema, Array.from(path6), value);
+          this.contents = Collection.collectionFromPath(this.schema, Array.from(path7), value);
         } else if (assertCollection(this.contents)) {
-          this.contents.setIn(path6, value);
+          this.contents.setIn(path7, value);
         }
       }
       /**
@@ -5569,9 +5569,9 @@ var require_cst_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    visit.itemAtPath = (cst, path6) => {
+    visit.itemAtPath = (cst, path7) => {
       let item = cst;
-      for (const [field2, index] of path6) {
+      for (const [field2, index] of path7) {
         const tok = item?.[field2];
         if (tok && "items" in tok) {
           item = tok.items[index];
@@ -5580,23 +5580,23 @@ var require_cst_visit = __commonJS({
       }
       return item;
     };
-    visit.parentCollection = (cst, path6) => {
-      const parent = visit.itemAtPath(cst, path6.slice(0, -1));
-      const field2 = path6[path6.length - 1][0];
+    visit.parentCollection = (cst, path7) => {
+      const parent = visit.itemAtPath(cst, path7.slice(0, -1));
+      const field2 = path7[path7.length - 1][0];
       const coll = parent?.[field2];
       if (coll && "items" in coll)
         return coll;
       throw new Error("Parent collection not found");
     };
-    function _visit(path6, item, visitor) {
-      let ctrl = visitor(item, path6);
+    function _visit(path7, item, visitor) {
+      let ctrl = visitor(item, path7);
       if (typeof ctrl === "symbol")
         return ctrl;
       for (const field2 of ["key", "value"]) {
         const token = item[field2];
         if (token && "items" in token) {
           for (let i = 0; i < token.items.length; ++i) {
-            const ci = _visit(Object.freeze(path6.concat([[field2, i]])), token.items[i], visitor);
+            const ci = _visit(Object.freeze(path7.concat([[field2, i]])), token.items[i], visitor);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -5607,10 +5607,10 @@ var require_cst_visit = __commonJS({
             }
           }
           if (typeof ctrl === "function" && field2 === "key")
-            ctrl = ctrl(item, path6);
+            ctrl = ctrl(item, path7);
         }
       }
-      return typeof ctrl === "function" ? ctrl(item, path6) : ctrl;
+      return typeof ctrl === "function" ? ctrl(item, path7) : ctrl;
     }
     exports2.visit = visit;
   }
@@ -6912,14 +6912,14 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs6 = this.flowScalar(this.type);
+              const fs7 = this.flowScalar(this.type);
               if (atNextItem || it.value) {
-                map2.items.push({ start, key: fs6, sep: [] });
+                map2.items.push({ start, key: fs7, sep: [] });
                 this.onKeyLine = true;
               } else if (it.sep) {
-                this.stack.push(fs6);
+                this.stack.push(fs7);
               } else {
-                Object.assign(it, { key: fs6, sep: [] });
+                Object.assign(it, { key: fs7, sep: [] });
                 this.onKeyLine = true;
               }
               return;
@@ -7047,13 +7047,13 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs6 = this.flowScalar(this.type);
+              const fs7 = this.flowScalar(this.type);
               if (!it || it.value)
-                fc.items.push({ start: [], key: fs6, sep: [] });
+                fc.items.push({ start: [], key: fs7, sep: [] });
               else if (it.sep)
-                this.stack.push(fs6);
+                this.stack.push(fs7);
               else
-                Object.assign(it, { key: fs6, sep: [] });
+                Object.assign(it, { key: fs7, sep: [] });
               return;
             }
             case "flow-map-end":
@@ -7362,10 +7362,10 @@ var require_dist = __commonJS({
 });
 
 // src/index.ts
-var import_config22 = require("dotenv/config");
+var import_config23 = require("dotenv/config");
 var import_node_child_process3 = require("child_process");
 var import_commander = require("commander");
-var import_chalk24 = __toESM(require("chalk"));
+var import_chalk25 = __toESM(require("chalk"));
 
 // ../shared/src/urls.ts
 var DEFAULT_WEB_APP_URL = "https://app.replicas.dev";
@@ -7376,6 +7376,7 @@ var WEB_APP_PATHS = {
   home: "/",
   onboarding: "/onboarding",
   workspaces: "/workspace",
+  environmentSetup: "/workspace/setup",
   automations: "/automations",
   environment: "/environment",
   analytics: "/analytics",
@@ -7534,6 +7535,9 @@ function isAgentMode() {
     return false;
   }
 }
+function isEnvironmentSetupWorkspace() {
+  return isAgentMode() && !!process.env.REPLICAS_ENVIRONMENT_SETUP_RUN_ID;
+}
 function readAgentConfig() {
   if (!import_fs.default.existsSync(CONFIG_FILE)) {
     return null;
@@ -7649,6 +7653,9 @@ var import_prompts3 = __toESM(require("prompts"));
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
 
 // ../shared/src/json.ts
 function safeJsonParse(str, fallback) {
@@ -8657,10 +8664,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path6) {
-  if (!path6)
+function getElementAtPath(obj, path7) {
+  if (!path7)
     return obj;
-  return path6.reduce((acc, key) => acc?.[key], obj);
+  return path7.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -9069,11 +9076,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path6, issues) {
+function prefixIssues(path7, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path6);
+    iss.path.unshift(path7);
     return iss;
   });
 }
@@ -9220,16 +9227,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path6 = []) => {
+  const processError = (error52, path7 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path6, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path7, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path6, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path7, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path6, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path7, ...issue2.path]);
       } else {
-        const fullpath = [...path6, ...issue2.path];
+        const fullpath = [...path7, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -9256,17 +9263,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path6 = []) => {
+  const processError = (error52, path7 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path6, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path7, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path6, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path7, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path6, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path7, ...issue2.path]);
       } else {
-        const fullpath = [...path6, ...issue2.path];
+        const fullpath = [...path7, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -9298,8 +9305,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path6 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path6) {
+  const path7 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path7) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -21991,13 +21998,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path6 = ref.slice(1).split("/").filter(Boolean);
-  if (path6.length === 0) {
+  const path7 = ref.slice(1).split("/").filter(Boolean);
+  if (path7.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path6[0] === defsKey) {
-    const key = path6[1];
+  if (path7[0] === defsKey) {
+    const key = path7[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -23206,11 +23213,11 @@ function parseShellScript(script, cwd) {
   parseUntil(scope, 0, false);
   return scope.commands;
 }
-function resolveShellPath(dir, path6) {
-  if (path6.includes(SHELL_OPAQUE) || path6.startsWith("~")) return null;
-  if (!path6.startsWith("/") && dir === null) return null;
+function resolveShellPath(dir, path7) {
+  if (path7.includes(SHELL_OPAQUE) || path7.startsWith("~")) return null;
+  if (!path7.startsWith("/") && dir === null) return null;
   const parts = [];
-  for (const part of (path6.startsWith("/") ? path6 : `${dir}/${path6}`).split("/")) {
+  for (const part of (path7.startsWith("/") ? path7 : `${dir}/${path7}`).split("/")) {
     if (part === "..") parts.pop();
     else if (part && part !== ".") parts.push(part);
   }
@@ -23560,16 +23567,16 @@ function parseSkillName(tool, input) {
   const skillName = parsedInput.skill ?? parsedInput.name;
   return typeof skillName === "string" && skillName ? skillName : null;
 }
-function skillNameFromFilePath(path6) {
-  const skillName = skillNameFromSkillRootPath(path6);
+function skillNameFromFilePath(path7) {
+  const skillName = skillNameFromSkillRootPath(path7);
   if (skillName) return skillName;
-  const parts = path6.split(/[\\/]+/).filter(Boolean);
+  const parts = path7.split(/[\\/]+/).filter(Boolean);
   if (parts.length < 2 || parts[parts.length - 1].toLowerCase() !== "skill.md") return null;
   const fallbackSkillName = parts[parts.length - 2];
   return fallbackSkillName && fallbackSkillName.toLowerCase() !== "skills" ? fallbackSkillName : null;
 }
-function skillNameFromSkillRootPath(path6) {
-  const parts = path6.split(/[\\/]+/).filter(Boolean);
+function skillNameFromSkillRootPath(path7) {
+  const parts = path7.split(/[\\/]+/).filter(Boolean);
   const skillsIndex = parts.findLastIndex((part) => part.toLowerCase() === "skills");
   if (skillsIndex === -1) return null;
   const firstSkillPart = parts[skillsIndex + 1];
@@ -23579,9 +23586,9 @@ function skillNameFromSkillRootPath(path6) {
 function parseSkillFilePath(input) {
   const parsedInput = typeof input === "string" ? safeJsonParse(input, null) : input;
   if (!isRecord(parsedInput)) return null;
-  const path6 = [parsedInput.path, parsedInput.filePath, parsedInput.file_path].find((value) => typeof value === "string" && value.length > 0);
-  if (!path6) return null;
-  return skillNameFromFilePath(path6);
+  const path7 = [parsedInput.path, parsedInput.filePath, parsedInput.file_path].find((value) => typeof value === "string" && value.length > 0);
+  if (!path7) return null;
+  return skillNameFromFilePath(path7);
 }
 function skillNameFromToolCall(tool, input) {
   const directSkillName = parseSkillName(tool, input);
@@ -23893,8 +23900,451 @@ var DOCKER_ABILITY = {
   referenceFile: { name: "DOCKER.md", content: REFERENCE2 }
 };
 
+// ../shared/src/uuid.ts
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+// ../shared/src/routes/environment-setups.ts
+var ENVIRONMENT_SETUP_STEPS = [
+  { key: "understand", label: "Understand the codebase" },
+  { key: "install", label: "Install dependencies and run the app" },
+  { key: "verify", label: "Verify checks and record a walkthrough" },
+  { key: "configure", label: "Draft hooks, system prompt, and automations" },
+  { key: "propose", label: "Propose the configuration for review" }
+];
+var ENVIRONMENT_SETUP_STEP_STATUSES = ["pending", "in_progress", "completed", "skipped"];
+function isEnvironmentSetupStepKey(value) {
+  return ENVIRONMENT_SETUP_STEPS.some((step) => step.key === value);
+}
+function isEnvironmentSetupStepStatus(value) {
+  return ENVIRONMENT_SETUP_STEP_STATUSES.some((status) => status === value);
+}
+var ENVIRONMENT_SETUP_RUN_STATUSES = ["running", "proposed", "applied", "failed", "cancelled"];
+var ENVIRONMENT_SETUP_AUTOMATION_ACTIONS = ["create", "update", "keep", "disable"];
+var ENVIRONMENT_SETUP_VERIFICATION_STATUSES = ["passed", "failed", "skipped"];
+var ENVIRONMENT_SETUP_LIMITS = {
+  summaryChars: 600,
+  stackItems: 30,
+  nameChars: 120,
+  descriptionChars: 1e3,
+  systemPromptChars: 2e4,
+  hookChars: 5e4,
+  variables: 50,
+  variableKeyChars: 128,
+  variableDescriptionChars: 500,
+  automations: 8,
+  automationKeyChars: 80,
+  automationPromptChars: 1e4,
+  automationTriggers: 5,
+  automationNoteChars: 300,
+  verificationItems: 8,
+  verificationDetailChars: 300,
+  mediaItems: 8,
+  repositories: 20
+};
+var ENVIRONMENT_SETUP_VARIABLE_WAIT = { defaultMs: 5 * 6e4, maxMs: 15 * 6e4, pollMs: 5e3 };
+var VARIABLE_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+var text = (max) => max === void 0 ? external_exports.string().trim() : external_exports.string().trim().max(max);
+var requiredText = (max) => text(max).min(1, "must not be empty");
+var optionalText = (max) => text(max).nullish().transform((value) => value || null);
+var clearableText = (max) => text(max).nullish().transform((value) => value === void 0 ? void 0 : value || null);
+var list = (item, max) => max === void 0 ? external_exports.array(item) : external_exports.array(item).max(max);
+var ENVIRONMENT_SETUP_AUTHORED_TRIGGER_TYPES = ["cron", "github", "gitlab"];
+function isEnvironmentSetupAuthoredTriggerType(type) {
+  return ENVIRONMENT_SETUP_AUTHORED_TRIGGER_TYPES.some((authored) => authored === type);
+}
+var repositoryTriggerConfigSchema = external_exports.object({
+  event: external_exports.string(),
+  repository_ids: external_exports.array(external_exports.string().regex(UUID_RE, "must be a repository id")).optional(),
+  group_pr_events: external_exports.boolean().optional(),
+  excluded_actors: external_exports.array(external_exports.string()).optional()
+});
+var proposalTriggerSchema = external_exports.discriminatedUnion("type", [
+  external_exports.object({ type: external_exports.literal("cron"), config: external_exports.object({ schedule: external_exports.string(), timezone: external_exports.string().optional() }) }),
+  external_exports.object({ type: external_exports.literal("github"), config: repositoryTriggerConfigSchema }),
+  external_exports.object({ type: external_exports.literal("gitlab"), config: repositoryTriggerConfigSchema })
+]);
+var existingTriggerSchema = external_exports.custom(
+  (value) => isRecord(value) && typeof value.type === "string" && isRecord(value.config),
+  "must be an automation trigger"
+);
+var carriedTriggerSchema = existingTriggerSchema.refine(
+  (trigger) => !isEnvironmentSetupAuthoredTriggerType(trigger.type)
+);
+function automationSchema(limits) {
+  const authored = external_exports.object({
+    name: text(limits.nameChars),
+    description: text(limits.descriptionChars),
+    prompt: text(limits.automationPromptChars),
+    triggers: list(proposalTriggerSchema, limits.automationTriggers)
+  });
+  const updated = authored.extend({ triggers: list(external_exports.union([proposalTriggerSchema, carriedTriggerSchema]), limits.automationTriggers) });
+  return external_exports.object({
+    key: requiredText(limits.automationKeyChars),
+    action: external_exports.enum(ENVIRONMENT_SETUP_AUTOMATION_ACTIONS).default("create"),
+    automation_id: external_exports.string().regex(UUID_RE, "must be an automation id").nullable().default(null),
+    name: text().default(""),
+    description: optionalText().transform((value) => value ?? ""),
+    prompt: text().default(""),
+    triggers: list(existingTriggerSchema).default([]),
+    note: optionalText(limits.automationNoteChars)
+  }).superRefine((automation2, ctx) => {
+    if (automation2.action === "create" && automation2.automation_id) {
+      ctx.addIssue({ code: "custom", path: ["automation_id"], message: "belongs on an update, keep, or disable entry" });
+    }
+    if (automation2.action !== "create" && !automation2.automation_id) {
+      ctx.addIssue({ code: "custom", path: ["automation_id"], message: "must be the id of an automation attached to this environment" });
+    }
+    if (automation2.action === "create" || automation2.action === "update") {
+      if (!automation2.name) ctx.addIssue({ code: "custom", path: ["name"], message: "must not be empty" });
+      if (!automation2.prompt) ctx.addIssue({ code: "custom", path: ["prompt"], message: "must not be empty" });
+      if (automation2.triggers.length === 0) ctx.addIssue({ code: "custom", path: ["triggers"], message: "must not be empty" });
+    }
+  }).transform((automation2, ctx) => {
+    if (automation2.action === "keep" || automation2.action === "disable") return automation2;
+    const content = (automation2.action === "update" ? updated : authored).safeParse(automation2);
+    if (content.success) return { ...automation2, ...content.data };
+    for (const issue2 of content.error.issues) ctx.addIssue({ ...issue2, code: "custom" });
+    return external_exports.NEVER;
+  });
+}
+function automationListSchema(limits) {
+  return list(automationSchema(limits)).default([]).superRefine((automations, ctx) => {
+    if (new Set(automations.map((automation2) => automation2.key)).size !== automations.length) {
+      ctx.addIssue({ code: "custom", message: "must have unique keys" });
+    }
+    const targets = automations.flatMap((automation2) => automation2.automation_id ?? []);
+    if (new Set(targets).size !== targets.length) {
+      ctx.addIssue({ code: "custom", message: "must mention each existing automation once" });
+    }
+    if (limits.automations !== void 0 && automations.filter((automation2) => automation2.action === "create").length > limits.automations) {
+      ctx.addIssue({ code: "custom", message: `must create at most ${limits.automations} new automations` });
+    }
+  });
+}
+function environmentSchema(limits) {
+  return external_exports.object({
+    name: optionalText(limits.nameChars).transform((value) => value ?? void 0),
+    description: clearableText(limits.descriptionChars),
+    system_prompt: clearableText(limits.systemPromptChars),
+    start_hook: clearableText(limits.hookChars),
+    warm_hook: clearableText(limits.hookChars)
+  });
+}
+function variableSchema(limits, requiredDefault) {
+  return external_exports.object({
+    key: external_exports.string().regex(VARIABLE_KEY_RE, "must be a valid environment variable name").max(limits.variableKeyChars ?? Number.POSITIVE_INFINITY),
+    description: optionalText(limits.variableDescriptionChars).transform((value) => value ?? ""),
+    required: external_exports.boolean().default(requiredDefault)
+  });
+}
+function proposalSchema(limits) {
+  return external_exports.object({
+    summary: requiredText(limits.summaryChars),
+    stack: list(text(), limits.stackItems).default([]).transform((items) => items.filter(Boolean)),
+    environment: environmentSchema(limits),
+    variables: list(variableSchema(limits, false), limits.variables).default([]),
+    automations: automationListSchema(limits),
+    verification: list(external_exports.object({
+      label: requiredText(limits.nameChars),
+      status: external_exports.enum(ENVIRONMENT_SETUP_VERIFICATION_STATUSES),
+      detail: optionalText(limits.verificationDetailChars).transform((value) => value ?? void 0)
+    }), limits.verificationItems).default([]),
+    media: list(external_exports.object({
+      media_id: external_exports.string().regex(UUID_RE, "must be a media id"),
+      title: requiredText(limits.nameChars)
+    }), limits.mediaItems).default([])
+  });
+}
+var environmentSetupProposalSchema = proposalSchema({});
+var environmentSetupProposalSubmissionSchema = proposalSchema(ENVIRONMENT_SETUP_LIMITS);
+var environmentSetupVariableRequestSchema = variableSchema({}, false).extend({
+  status: external_exports.enum(["pending", "provided", "skipped"]),
+  requested_at: external_exports.string(),
+  resolved_at: external_exports.string().nullable().default(null)
+});
+var environmentSetupRunStateSchema = external_exports.object({
+  status: external_exports.enum(ENVIRONMENT_SETUP_RUN_STATUSES),
+  steps: external_exports.partialRecord(external_exports.enum(ENVIRONMENT_SETUP_STEPS.map((step) => step.key)), external_exports.enum(ENVIRONMENT_SETUP_STEP_STATUSES)).default({}),
+  proposal: environmentSetupProposalSchema.nullable().default(null),
+  applied: external_exports.object({
+    applied_at: external_exports.string(),
+    automation_ids: external_exports.array(external_exports.string())
+  }).nullable().default(null),
+  variable_requests: external_exports.array(environmentSetupVariableRequestSchema).default([])
+});
+var applyEnvironmentSetupRequestSchema = external_exports.object({
+  environment: environmentSchema(ENVIRONMENT_SETUP_LIMITS).extend({ name: requiredText(ENVIRONMENT_SETUP_LIMITS.nameChars) }),
+  variables: list(external_exports.object({ key: external_exports.string().regex(VARIABLE_KEY_RE), value: external_exports.string() }), ENVIRONMENT_SETUP_LIMITS.variables).default([]).refine((variables) => new Set(variables.map((variable) => variable.key)).size === variables.length, "must have unique keys").transform((variables) => variables.filter((variable) => variable.value.length > 0)),
+  automations: automationListSchema(ENVIRONMENT_SETUP_LIMITS)
+});
+var requestEnvironmentSetupVariablesSchema = external_exports.object({
+  variables: list(variableSchema(ENVIRONMENT_SETUP_LIMITS, true), ENVIRONMENT_SETUP_LIMITS.variables).min(1, "must not be empty")
+}).superRefine(({ variables }, ctx) => {
+  if (new Set(variables.map((variable) => variable.key)).size !== variables.length) {
+    ctx.addIssue({ code: "custom", path: ["variables"], message: "must have unique keys" });
+  }
+});
+var respondEnvironmentSetupVariablesSchema = external_exports.object({
+  values: external_exports.record(external_exports.string().regex(VARIABLE_KEY_RE), external_exports.string()).default({}),
+  skipped: external_exports.array(external_exports.string().regex(VARIABLE_KEY_RE)).default([])
+});
+
+// ../shared/src/default-skills/replicas-agent/abilities/environment-setup.ts
+var SECTION3 = `### Environment setup (agent-led)
+Explore a codebase, get it running in this workspace, verify it end to end, and propose the Replicas environment configuration (start hook, warm hook, system prompt, variables) plus a few automations for the user to review and save.
+
+**Reference:** \`references/ENVIRONMENT-SETUP.md\`
+
+Use this when:
+- This workspace was started as an environment setup run (\`replicas environment-setup status\` succeeds)
+- The user asks you to set up, configure, audit, or improve a Replicas environment for a repository
+- The user asks what should go in a start hook, warm hook, or environment system prompt`;
+var REFERENCE3 = `# Environment setup (agent-led)
+
+Use this workflow to make a repository fully usable by Replicas background agents: agents booted from the environment should be able to install, run, test, verify, and demo changes without a human babysitting them. The result of the workflow is a **proposal**, never a direct change: the user reviews, edits, and saves it in the Environment panel next to the chat.
+
+## Mental model
+
+Every Replicas workspace is a remote Linux VM. Repositories are cloned under \`~/workspaces/<repo-name>\`. An **environment** is the org-scoped template a workspace is built from. It binds one repository (or a repository set for monorepos and multi-repo stacks) and carries:
+
+| Piece | When it runs | Put here |
+| --- | --- | --- |
+| **Warm hook** | Once, while Replicas builds the warm-pool snapshot for the environment. Its *filesystem* state is baked into every new workspace; its *processes* are not. Default timeout 60 minutes. | Slow, deterministic setup: dependency installs from the lockfile, toolchain downloads, \`docker pull\`, one-time builds, code generation. |
+| **Start hook** | On every workspace boot, before the agent starts working. Default timeout 5 minutes. | Fast per-boot reconciliation: start daemons and databases, run migrations against local services, launch dev servers with \`replicas service start\`, health checks. Must be idempotent. |
+| **System prompt** | Injected into the agent's instructions for every workspace in the environment. | Only what an agent cannot learn from the repository itself: team conventions, review expectations, how to verify, gotchas you hit while setting up. |
+| **Variables** | Exported into every workspace (and available inside hooks). Values are encrypted. | API keys, tokens, feature flags, local service URLs. |
+| **Files** | Materialized on the workspace filesystem at boot. | \`.env\` files, dotfiles, config that must not be committed. |
+| **Automations** | Saved prompts fired by triggers (cron, pull request events, Slack, Sentry, webhooks). Each run creates a workspace in an environment. | Recurring engineering work that fits this repository. |
+
+Hooks run with \`bash -lc\` from \`~/workspaces\` (the parent of every repository checkout), so start scripts with \`cd ~/workspaces/<repo-name>\`. A repository may also ship its own \`replicas.json\` / \`replicas.yaml\` with \`startHook\`, \`warmHook\`, and \`systemPrompt\`; repository hooks run after the environment hooks. Prefer proposing environment hooks unless the repository already manages its own.
+
+The Global environment applies to every workspace in the organization; never propose putting repository-specific setup there.
+
+## Progress and the setup run
+
+When this workspace was started as a setup run, the dashboard shows a live checklist next to the chat. Keep it honest with:
+
+\`\`\`bash
+replicas environment-setup status
+replicas environment-setup step <key> <status>
+replicas environment-setup request-variables -f <path>
+replicas environment-setup wait-variables [-t 5m]
+\`\`\`
+
+\`status\` prints the environment, repositories, current steps, and variable requests. \`request-variables\` returns immediately; \`wait-variables\` blocks until the required values arrive, are skipped, or the time runs out. Step statuses are \`pending\`, \`in_progress\`, \`completed\`, and \`skipped\`. Step keys, in order: \`understand\`, \`install\`, \`verify\`, \`configure\`, \`propose\`. Mark the first step \`in_progress\` before your first tool call, keep exactly one step \`in_progress\`, and mark a step \`completed\` only after its work actually succeeded. Use \`skipped\` when something genuinely cannot run (for example no browser UI to record) and say so in the proposal.
+
+If \`replicas environment-setup status\` reports that there is no active setup run, the user asked for this in an ordinary workspace. Follow the same discovery and verification steps, then present the configuration in chat; apply it with \`replicas environment ...\` and \`replicas automation ...\` only when the user explicitly asks you to.
+
+## 1. Understand the codebase
+
+Investigate in parallel before changing anything:
+
+1. Identify the products and services in the repository. Separate what is required for an end-to-end development flow from what is optional.
+2. Read setup entry points: \`README\`, \`CONTRIBUTING\`, \`AGENTS.md\`, \`CLAUDE.md\`, package-manager files, tool-version files (\`.nvmrc\`, \`.tool-versions\`, \`.python-version\`), Makefiles, setup scripts, devcontainer and Docker Compose files, CI workflows.
+3. Find the canonical install, dev-server, lint, type-check, test, and build commands. CI workflows and pre-commit hooks encode the checks that matter.
+4. Learn the team's conventions from history: \`git log --oneline -50\`, and \`gh pr list --state merged --limit 20\` plus \`gh pr view <n>\` on a few merged pull requests (or the GitLab equivalents). Note branch naming, commit style, review expectations, and recurring chores that could become automations.
+5. Identify required secrets, test accounts, databases, queues, browser dependencies, and external services. Check \`.env.example\`, config loaders, and CI secrets for variable names. Never read or print secret values. As soon as you know the names, ask for them (see "Asking for variables") and keep going.
+6. Inspect any existing \`replicas.json\` and the current environment (\`replicas environment get <name>\`, \`replicas environment start-hooks get <name>\`, \`replicas environment warm-hooks get <name>\`) so the proposal builds on what exists instead of competing with it. List the organization's automations with \`replicas automation list --owner org\` and read each one attached to this environment with \`replicas automation get <id>\` (the environment id is in \`replicas environment-setup status\`); every one of them needs a decision in the proposal.
+
+Use subagents for broad, independent analysis when available, but read the files and run the commands yourself before adopting their conclusions.
+
+## Asking for variables
+
+The user may be watching the panel or may have walked away, so ask early and wait late:
+
+1. Right after step 1, request every secret you found in one batch. \`required\` means the app cannot run locally without it; leave it \`false\` for anything you can work around.
+
+\`\`\`bash
+replicas environment-setup request-variables --file /tmp/variables.json
+\`\`\`
+
+\`\`\`json
+{
+  "variables": [
+    { "key": "DATABASE_URL", "description": "Postgres connection string; a local docker compose database works", "required": false },
+    { "key": "STRIPE_SECRET_KEY", "description": "Stripe test-mode key; checkout cannot run without it", "required": true }
+  ]
+}
+\`\`\`
+
+2. Keep working on everything that does not need the values. The request appears in the Environment panel next to the chat; the user types values there (stored encrypted on the environment, never in chat) or skips them.
+3. At the point you actually need a value, block on it:
+
+\`\`\`bash
+replicas environment-setup wait-variables --timeout 5m
+replicas environment-setup wait-variables --keys STRIPE_SECRET_KEY
+\`\`\`
+
+Without \`--keys\` it waits for every pending required key. It returns when the keys are provided or skipped, or when the time runs out, and prints which happened. Provided keys are exported for every new shell; restart anything you started with \`replicas service start\` before that point so it picks them up. Never print the values.
+4. For anything skipped or unanswered, use the safest local substitute (local database, mock, documented test value), say so in the verification rows, and list the key as required in the proposal. A key the user skipped is not asked again; do not resend it.
+5. Values the user provided are already saved on the environment. Still list those keys in the proposal so the review shows them as set.
+6. Requests are only accepted before you propose. Anything still missing after that goes into the proposal as a required variable, which the user fills in at review.
+
+## 2. Install and run
+
+Work from the smallest failing layer, in this workspace:
+
+1. Install system dependencies and toolchains the repository pins.
+2. Run the install command to completion, then run it a second time to prove idempotence.
+3. Start infrastructure and long-running processes with \`replicas service start <name> "<command>"\` so they survive turn boundaries (see \`REPLICAS.md\`). Start the Docker daemon first if Compose is involved (see \`DOCKER.md\`).
+4. Run the canonical lint, type-check, test, and build commands for the agreed scope. Record what passed, what failed, and why.
+
+Use the repository's pinned package manager and lockfile. Do not upgrade dependencies, rewrite lockfiles, or change application code to make setup pass; environment configuration and narrowly necessary fixes to setup scripts are in scope. Do not deploy, publish, or touch production resources.
+
+When something needs a secret you do not have, request it and run \`wait-variables\` at the point you need it (see "Asking for variables"). If it is skipped or unanswered, use the safest local substitute, keep going, and record the variable as required in the proposal with a clear description. Never invent or paste secret values anywhere.
+
+## 3. Verify and record
+
+Loading a page is not verification. Perform a representative real action through the product: create a record, submit a form, run a CLI command against the running service, call an endpoint and check the response.
+
+For anything with a UI, record it:
+
+\`\`\`bash
+replicas computer record start /tmp/walkthrough.mp4
+replicas computer launch chrome http://localhost:<port>
+replicas computer browser-state /tmp/state.png --full
+replicas computer browser-click "<button that starts the core flow>"
+replicas computer record stop
+replicas media upload /tmp/walkthrough.mp4 --name "<Project> walkthrough"
+\`\`\`
+
+Keep the recording short (one to three minutes) and focused on the flow that proves the environment works. \`replicas media upload\` prints a chat embed line and a \`View in Replicas\` link ending in \`?media=<media-id>\`; keep both. The media id goes into the proposal, and the embed line goes into your final message. Follow \`MEDIA.md\` for anything shared outside the dashboard.
+
+Add screenshots of important states (a passing test run, the running app) with \`replicas computer screenshot\` and upload them the same way when they help the user trust the result.
+
+## 4. Draft the configuration
+
+Design from what you verified, not from what the README promises.
+
+**Warm hook** \u2014 everything slow and deterministic that produced files on disk during step 2: dependency install, toolchain setup, \`docker compose pull\`, one-time builds, code generation. Non-interactive, \`set -euo pipefail\`, safe to rerun.
+
+**Start hook** \u2014 everything that must be alive when an agent starts: start Docker, start databases and caches, run migrations, launch dev servers with \`replicas service start\`, then wait for readiness (poll a health endpoint) and exit 0. Guard every step so a second run is a no-op. Keep it under a couple of minutes; anything heavier belongs in the warm hook.
+
+**System prompt** \u2014 short, and only for what is not obvious from the repository. Agents read the README, CONTRIBUTING, AGENTS.md, and CLAUDE.md themselves, so do not repeat what the product is, how the code is organized, or the standard commands. Include what you learned from history and from running the app: commit and pull request style, review expectations, what to run before opening a pull request, how to verify a change (ports, non-secret test accounts), and gotchas that cost you time. Aim for under 200 words. Use \`null\` when the repository docs already cover everything. Never include secrets or anything Replicas already tells the agent.
+
+**Variables** \u2014 every key the application or hooks need, with a one-line description and whether it is required to run locally. Keys only, never values.
+
+**Automations** \u2014 the set that should exist for this repository after saving, usually two to four. Each entry has a \`key\` and an \`action\`. \`create\` (the default) adds a new automation and needs a name, one-sentence description, a complete prompt an agent can execute unattended, and triggers. For an automation that already exists, pass its \`automation_id\` and a one-sentence \`note\` the reviewer sees next to it, then choose: \`update\` rewrites it with the full new content (also how you replace it with something better, under a new name if needed), \`keep\` leaves it untouched, \`disable\` turns it off. Every automation already attached to the environment must appear with one of those three; ones you leave out are not shown to the reviewer. Good candidates for new ones: pull request review focused on this codebase's conventions (\`pull_request.opened\` + \`pull_request.synchronize\`), nightly or weekly health checks (cron), documentation sync when code changes, dependency or security review, flaky-test triage. Only propose what the repository evidence supports.
+
+Trigger shapes:
+
+\`\`\`json
+{ "type": "github", "config": { "event": "pull_request.opened" } }
+{ "type": "github", "config": { "event": "pull_request.synchronize", "excluded_actors": ["dependabot[bot]"] } }
+{ "type": "gitlab", "config": { "event": "merge_request.opened" } }
+{ "type": "cron", "config": { "schedule": "0 9 * * 1-5", "timezone": "UTC" } }
+\`\`\`
+
+GitHub events: \`pull_request.opened\`, \`pull_request.synchronize\`, \`pull_request.merged\`, \`pull_request.closed\`. GitLab events: \`merge_request.opened\`, \`merge_request.updated\`, \`merge_request.merged\`, \`merge_request.closed\`. Use one trigger type family per automation and pick the code host the repositories actually live on.
+
+Test the hooks before proposing them: run the drafted warm hook and start hook scripts in this workspace (from \`~/workspaces\`) and fix the earliest failure until both exit 0 on a second run.
+
+## 5. Propose
+
+The \`summary\` and \`verification\` fields are read by a person in the Environment panel, so write them for a person:
+
+- \`summary\`: two or three plain sentences. What the product is, what it takes to run it, and anything notable you found. No command names, file paths, or version numbers; those belong in the system prompt or in verification details.
+- \`verification\`: three to six rows, one per outcome, in plain words. Group related commands into one row ("Installed and built the app", "Ran the unit and browser tests") and keep each \`detail\` to one sentence with the specifics. Never use a raw command as a label.
+- Limits, enforced by \`propose\`: \`summary\` ${ENVIRONMENT_SETUP_LIMITS.summaryChars} characters; \`verification\` ${ENVIRONMENT_SETUP_LIMITS.verificationItems} rows with \`detail\` ${ENVIRONMENT_SETUP_LIMITS.verificationDetailChars} characters each; \`stack\` ${ENVIRONMENT_SETUP_LIMITS.stackItems} items; \`variables\` ${ENVIRONMENT_SETUP_LIMITS.variables}, descriptions ${ENVIRONMENT_SETUP_LIMITS.variableDescriptionChars} characters; \`automations\` ${ENVIRONMENT_SETUP_LIMITS.automations} new ones (decisions on existing automations do not count), each with ${ENVIRONMENT_SETUP_LIMITS.automationTriggers} triggers, a ${ENVIRONMENT_SETUP_LIMITS.automationPromptChars}-character prompt, and a ${ENVIRONMENT_SETUP_LIMITS.automationNoteChars}-character note; \`media\` ${ENVIRONMENT_SETUP_LIMITS.mediaItems} items; \`system_prompt\` ${ENVIRONMENT_SETUP_LIMITS.systemPromptChars} characters; each hook ${ENVIRONMENT_SETUP_LIMITS.hookChars} characters; names ${ENVIRONMENT_SETUP_LIMITS.nameChars} and \`description\` ${ENVIRONMENT_SETUP_LIMITS.descriptionChars} characters.
+
+Write the proposal to a file and submit it:
+
+\`\`\`bash
+replicas environment-setup propose --file /tmp/proposal.json
+\`\`\`
+
+\`\`\`json
+{
+  "summary": "An online storefront: a Next.js site backed by a small Bun API and a Postgres database. Everything runs locally with Docker Compose and no external accounts. Payments are optional and stay disabled without a Stripe test key.",
+  "stack": ["Bun", "Next.js", "Postgres", "Docker Compose", "Vitest"],
+  "environment": {
+    "description": "Storefront web app and API",
+    "system_prompt": "Pull requests use conventional commit titles (feat:, fix:, chore:) and need a passing \`bun run check\` before review. Verify UI changes in the browser at http://localhost:3000 with the seeded account listed in docs/testing.md; the API is on port 4000. Database changes go through a migration in db/migrations, never a direct schema edit.",
+    "start_hook": "#!/usr/bin/env bash\\nset -euo pipefail\\n...",
+    "warm_hook": "#!/usr/bin/env bash\\nset -euo pipefail\\n..."
+  },
+  "variables": [
+    { "key": "STRIPE_SECRET_KEY", "description": "Stripe test-mode key used by checkout; omit to run with payments disabled", "required": false }
+  ],
+  "automations": [
+    {
+      "key": "pr-review",
+      "name": "Review pull requests",
+      "description": "Reviews every PR against this repository's conventions and leaves inline comments.",
+      "prompt": "Review this pull request...",
+      "triggers": [
+        { "type": "github", "config": { "event": "pull_request.opened" } },
+        { "type": "github", "config": { "event": "pull_request.synchronize" } }
+      ]
+    }
+  ],
+  "verification": [
+    { "label": "Installed and built the app", "status": "passed", "detail": "A second install made no changes." },
+    { "label": "Ran lint, type checks, and unit tests", "status": "passed", "detail": "142 tests passed, matching CI." },
+    { "label": "Completed a checkout in the browser", "status": "passed", "detail": "Added an item and placed a test order." },
+    { "label": "Payment webhooks", "status": "skipped", "detail": "Needs a Stripe test key." }
+  ],
+  "media": [
+    { "media_id": "<media-id from replicas media upload>", "title": "Checkout walkthrough" }
+  ]
+}
+\`\`\`
+
+When the environment already has automations, their entries look like this:
+
+\`\`\`json
+{ "key": "nightly-tests", "action": "keep", "automation_id": "<id from replicas automation list>", "note": "Already runs the full suite on the schedule CI uses." },
+{ "key": "pr-review", "action": "update", "automation_id": "<id>", "name": "Review pull requests", "description": "...", "prompt": "...", "triggers": [ ... ], "note": "Adds the migration checklist reviewers keep asking for." },
+{ "key": "docs-sync", "action": "disable", "automation_id": "<id>", "note": "The docs folder it watched was removed in May." }
+\`\`\`
+
+Rules:
+- Omit \`description\`, \`system_prompt\`, \`start_hook\`, or \`warm_hook\` to keep the environment's current value. Set one to \`null\` to remove it when the repository genuinely needs none; explain why in \`summary\` or \`verification\`.
+- Omit \`environment.name\` unless the current name is misleading.
+- Every verification row must reflect something you actually ran. Do not list checks you did not run as passed.
+- A proposal does not change anything. Do not call \`replicas environment edit\`, \`vars set\`, \`files set\`, \`start-hooks save\`, \`warm-hooks save\`, or \`replicas automation create\` during a setup run.
+- If the user asks for changes after reviewing, revise and run \`propose\` again; the panel shows the latest proposal.
+
+## 6. Final message
+
+After \`propose\` succeeds, mark the \`propose\` step completed and send one message with this shape:
+
+\`\`\`text
+<Project> is running and ready to review.
+
+**What I tested**
+- <outcome in plain words> \u2014 <one-sentence result>
+- <outcome in plain words> \u2014 <one-sentence result>
+
+**What I found**
+- <two to four findings about the codebase that shaped the configuration, written for a person>
+
+![<Project> walkthrough](<chat embed URL printed by replicas media upload>)
+[View in Canvas](<View in Replicas URL>)
+
+**Proposed configuration**
+Review the start hook, warm hook, system prompt, variables, and automations in the Environment panel on the right. Edit anything inline, then select **Save configuration**. Ask me here if you want changes and I will revise the proposal.
+\`\`\`
+
+Keep it under 250 words plus the lists. Do not paste the hooks or system prompt into chat; the panel shows them. Never imply the configuration was saved: saving is the user's action.
+
+## Safety
+
+- Never put tokens, passwords, or private keys in hooks, prompts, files, logs, or chat. Values that arrive through \`wait-variables\` are exported to your shell; never echo, cat, or paste them.
+- Do not weaken network, certificate, or package-integrity settings to make setup pass.
+- Do not run destructive git operations, force pushes, or anything against production endpoints.
+- Do not change application code to hide an environment problem. Report it instead.
+`;
+var ENVIRONMENT_SETUP_ABILITY = {
+  label: "Environment setup",
+  description: "Explore a codebase, verify it runs, and propose environment hooks, a system prompt, variables, and automations for review.",
+  bullet: "- Setting up, auditing, or improving a Replicas environment for a repository (hooks, system prompt, variables, automations)",
+  section: SECTION3,
+  referenceFile: { name: "ENVIRONMENT-SETUP.md", content: REFERENCE3 }
+};
+
 // ../shared/src/default-skills/replicas-agent/abilities/github.ts
-var SECTION3 = `### GitHub
+var SECTION4 = `### GitHub
 Use the pre-authenticated \`gh\` CLI for repository workflows and the workspace-scoped TypeScript SDK for GitHub API calls.
 
 **Reference:** \`references/GITHUB.md\`
@@ -23904,7 +24354,7 @@ Use this when:
 - You need to interact with GitHub issues or actions
 - You need to use the GitHub API for advanced operations
 - You need to include images in PR descriptions`;
-var REFERENCE3 = `# GitHub Integration
+var REFERENCE4 = `# GitHub Integration
 
 This guide covers how to interact with GitHub from within your Replicas workspace. Prefer \`@replicas/sdk\` for API calls so batching and data processing stay in one TypeScript program. The \`gh\` CLI remains useful for ergonomic pull request and git-adjacent workflows.
 
@@ -24033,12 +24483,12 @@ var GITHUB_ABILITY = {
   label: "GitHub",
   description: "GitHub workflows through gh and API calls through @replicas/sdk.",
   bullet: "- Interacting with GitHub (creating PRs, managing issues, using the API, etc.)",
-  section: SECTION3,
-  referenceFile: { name: "GITHUB.md", content: REFERENCE3 }
+  section: SECTION4,
+  referenceFile: { name: "GITHUB.md", content: REFERENCE4 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/gitlab.ts
-var SECTION4 = `### GitLab
+var SECTION5 = `### GitLab
 Use plain git for repository traffic and the workspace-scoped TypeScript SDK for GitLab API operations.
 
 **Reference:** \`references/GITLAB.md\`
@@ -24047,7 +24497,7 @@ Use this when:
 - A repository remote is on gitlab.com or a self-managed GitLab instance
 - You need to open or update a merge request
 - You need GitLab issues, pipelines, comments, or other API data`;
-var REFERENCE4 = `# GitLab Integration
+var REFERENCE5 = `# GitLab Integration
 
 Git credentials are preconfigured for fetch, pull, and push. Use \`@replicas/sdk\` for API traffic; never inspect \`~/.git-credentials\`, request a token, or send a credential with curl.
 
@@ -24095,12 +24545,12 @@ var GITLAB_ABILITY = {
   label: "GitLab",
   description: "Git for repository traffic and @replicas/sdk for the GitLab API.",
   bullet: "- Interacting with GitLab (pushing to GitLab repos, opening merge requests)",
-  section: SECTION4,
-  referenceFile: { name: "GITLAB.md", content: REFERENCE4 }
+  section: SECTION5,
+  referenceFile: { name: "GITLAB.md", content: REFERENCE5 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/linear.ts
-var SECTION5 = `### Linear
+var SECTION6 = `### Linear
 Create tickets, fetch issues, update state, add comments, and search through \`replicas.linear.graphql\` in \`@replicas/sdk\`. This works without a Linear MCP server and refreshes authentication automatically.
 
 **Reference:** \`references/LINEAR.md\`
@@ -24111,7 +24561,7 @@ Use this when:
 - You need to update an issue's state or add a comment
 - You need to search Linear issues
 - A Linear request failed with an authentication error`;
-var REFERENCE5 = `# Linear Integration
+var REFERENCE6 = `# Linear Integration
 
 Use \`@replicas/sdk\`; never request or handle a Linear OAuth token. Replicas refreshes the organization credential behind the gateway.
 
@@ -24200,12 +24650,12 @@ var LINEAR_ABILITY = {
   label: "Linear",
   description: "Create tickets, fetch issues, comment, and update state through @replicas/sdk.",
   bullet: "- Interacting with Linear (creating tickets, fetching issues, updating state, commenting, or troubleshooting authentication): use replicas.linear.graphql from @replicas/sdk, which refreshes tokens automatically and needs no Linear MCP server. Read references/LINEAR.md before treating a rejected workspace token as a disconnected integration.",
-  section: SECTION5,
-  referenceFile: { name: "LINEAR.md", content: REFERENCE5 }
+  section: SECTION6,
+  referenceFile: { name: "LINEAR.md", content: REFERENCE6 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/media.ts
-var SECTION6 = `### Media
+var SECTION7 = `### Media
 Deliver screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages to the Replicas dashboard and, when applicable, inline in the destination workflow.
 
 **Reference:** \`references/MEDIA.md\`
@@ -24216,7 +24666,7 @@ Use this when:
 - You produce a self-contained HTML report that should be linked from a pull request
 - You record video output (browser automation, screen capture) \u2014 including the recommended aspect ratio and FPS
 - You need to embed media in a Slack/Linear/GitHub/GitLab message AND keep a referenceable copy in the Replicas dashboard`;
-var REFERENCE6 = `# Media (Screenshots, Recordings, Audio, HTML)
+var REFERENCE7 = `# Media (Screenshots, Recordings, Audio, HTML)
 
 This is the single source of truth for delivering screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages through Replicas and external surfaces (Slack, Linear, GitHub, GitLab).
 
@@ -24541,8 +24991,8 @@ var MEDIA_ABILITY = {
   label: "Media",
   description: "Deliver media to Replicas and destination workflows with inline uploads.",
   bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips, or HTML recap pages \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms",
-  section: SECTION6,
-  referenceFile: { name: "MEDIA.md", content: REFERENCE6 }
+  section: SECTION7,
+  referenceFile: { name: "MEDIA.md", content: REFERENCE7 }
 };
 
 // ../shared/src/sandbox.ts
@@ -24590,7 +25040,7 @@ var memoryGenerationManifestSchema = external_exports.object({
 });
 
 // ../shared/src/default-skills/replicas-agent/abilities/memory.ts
-var SECTION7 = `### Memory
+var SECTION8 = `### Memory
 Check relevant long-term memory before substantive work when historical context could improve the result.
 
 **Reference:** \`references/MEMORY.md\`
@@ -24602,7 +25052,7 @@ Use this when:
 - Related work may explain an error or implementation choice
 
 When uncertain whether prior context could help, check memory. If you decide something is worth remembering for future sessions, follow the marker guidance in references/MEMORY.md.`;
-var REFERENCE7 = `# Long-term memory
+var REFERENCE8 = `# Long-term memory
 
 Replicas memory is installed under \`~/.replicas/memories\`:
 
@@ -24625,13 +25075,13 @@ var MEMORY_ABILITY = {
   label: "Memory",
   description: "Check private and organization memory before substantive work.",
   bullet: "",
-  section: SECTION7,
-  referenceFile: { name: "MEMORY.md", content: REFERENCE7 },
+  section: SECTION8,
+  referenceFile: { name: "MEMORY.md", content: REFERENCE8 },
   locked: true
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/previews.ts
-var SECTION8 = `### Previews
+var SECTION9 = `### Previews
 Expose locally running services (web apps, APIs, databases) as public preview URLs so humans can interact with them directly.
 
 **Reference:** \`references/PREVIEWS.md\`
@@ -24640,7 +25090,7 @@ Use this when:
 - You need to start a service that a human should view or interact with
 - The task involves UI work that benefits from human review
 - You are verifying frontend/backend integrations visually`;
-var REFERENCE8 = `# Preview URLs
+var REFERENCE9 = `# Preview URLs
 
 When you run services on ports \u2014 such as a web app, API server, or database \u2014 humans may want to interact with them directly. You can expose your locally running services as public preview URLs.
 
@@ -24716,12 +25166,12 @@ var PREVIEWS_ABILITY = {
   label: "Previews",
   description: "Expose locally running services on public preview URLs for humans.",
   bullet: "- Creating preview URLs for locally running services",
-  section: SECTION8,
-  referenceFile: { name: "PREVIEWS.md", content: REFERENCE8 }
+  section: SECTION9,
+  referenceFile: { name: "PREVIEWS.md", content: REFERENCE9 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/plugins.ts
-var SECTION9 = `### Plugins
+var SECTION10 = `### Plugins
 Discover and execute installed marketplace tools through the workspace-scoped TypeScript SDK.
 
 **Reference:** \`references/PLUGINS.md\`
@@ -24737,7 +25187,7 @@ Use this when:
 - The user asks to query or update a connected turbopuffer namespace
 - The user asks for PlanetScale organizations, databases, branches, or Insights data
 - The user asks to analyze text with Pangram`;
-var REFERENCE9 = `# Plugins
+var REFERENCE10 = `# Plugins
 
 Plugins are TypeScript libraries, not MCP servers. Import \`@replicas/sdk\`; Replicas authenticates the workspace and selects the most specific environment the workspace inherits from, then Global. Provider credentials, sessions, and project keys are never exposed.
 
@@ -24908,12 +25358,12 @@ var PLUGINS_ABILITY = {
   label: "Plugins",
   description: "Use installed marketplace tools through @replicas/sdk.",
   bullet: "- Interacting with installed marketplace plugins through TypeScript",
-  section: SECTION9,
-  referenceFile: { name: "PLUGINS.md", content: REFERENCE9 }
+  section: SECTION10,
+  referenceFile: { name: "PLUGINS.md", content: REFERENCE10 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/replicas.ts
-var SECTION10 = `### Replicas (in-workspace CLI)
+var SECTION11 = `### Replicas (in-workspace CLI)
 Take action *with* Replicas itself \u2014 manage automations, environments (variables, files), repos, and \`replicas.json\` config \u2014 using the pre-installed, pre-authenticated \`replicas\` CLI.
 
 **Reference:** \`references/REPLICAS.md\`
@@ -24924,7 +25374,7 @@ Use this when:
 - The user asks "what envs / repos / automations do I have?"
 - The user asks you to scaffold a \`replicas.json\` / \`replicas.yaml\` in a repo
 - You need to run a long-lived service (dev server, daemon) \u2014 always use \`replicas service start\` so it survives workspace sleep/wake`;
-var REFERENCE10 = `# Replicas (in-workspace CLI)
+var REFERENCE11 = `# Replicas (in-workspace CLI)
 
 This guide covers how to take action *with* Replicas itself from inside a Replicas workspace \u2014 managing automations, environments (and their variables/files), repos, previews, and the user's \`replicas.json\` config \u2014 using the pre-installed \`replicas\` CLI.
 
@@ -24962,6 +25412,7 @@ In agent mode the CLI hides commands that don't make sense for in-workspace agen
 | \`replicas repos\` | List repos connected to the org |
 | \`replicas environment ...\` | Manage environments, env vars, env files |
 | \`replicas automation ...\` | Manage automations (cron + GitHub/GitLab event triggers) |
+| \`replicas environment-setup ...\` | Report progress and propose configuration during an agent-led environment setup run (covered in \`ENVIRONMENT-SETUP.md\`) |
 | \`replicas preview ...\` | Register / list preview URLs (covered in \`PREVIEWS.md\`) |
 | \`replicas service ...\` | Run long-lived services detached so they survive workspace sleep/wake (see below) |
 | \`replicas media ...\` | Upload, list, share, revoke, or delete workspace media; follow \`MEDIA.md\` for destination embedding |
@@ -25155,13 +25606,13 @@ var REPLICAS_ABILITY = {
   description: "Teach the agent about Replicas itself \u2014 automations, environments, the in-workspace CLI.",
   // No bullet — help_instructions covers the `replicas` CLI surface in detail.
   bullet: "",
-  section: SECTION10,
-  referenceFile: { name: "REPLICAS.md", content: REFERENCE10 },
+  section: SECTION11,
+  referenceFile: { name: "REPLICAS.md", content: REFERENCE11 },
   locked: true
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/sentry.ts
-var SECTION11 = `### Sentry
+var SECTION12 = `### Sentry
 Read issues and project data through the workspace-scoped TypeScript SDK.
 
 **Reference:** \`references/SENTRY.md\`
@@ -25169,7 +25620,7 @@ Read issues and project data through the workspace-scoped TypeScript SDK.
 Use this when:
 - You need to inspect Sentry projects or issues
 - A user asks for error-monitoring context outside a webhook-triggered task`;
-var REFERENCE11 = `# Sentry Integration
+var REFERENCE12 = `# Sentry Integration
 
 Use \`@replicas/sdk\`; never request or read a Sentry token. Sentry access is organization-scoped and read-only.
 
@@ -25187,8 +25638,8 @@ var SENTRY_ABILITY = {
   label: "Sentry",
   description: "Read Sentry projects and issues through @replicas/sdk.",
   bullet: "- Interacting with Sentry (reading projects, issues, and error context)",
-  section: SECTION11,
-  referenceFile: { name: "SENTRY.md", content: REFERENCE11 }
+  section: SECTION12,
+  referenceFile: { name: "SENTRY.md", content: REFERENCE12 }
 };
 
 // ../shared/src/slack-response-style.ts
@@ -25198,7 +25649,7 @@ var SLACK_BLOCK_KIT_GUIDANCE = "Use Block Kit whenever structure or a link would
 var SLACK_PR_BUTTON_GUIDANCE = 'The first time you share a given pull request or merge request link in a thread \u2014 the message announcing you opened it \u2014 attach a button for it: send `blocks` alongside `text` \u2014 a `section` block holding your message as `mrkdwn`, then an `actions` block with one element per newly shared link, `{"type": "button", "style": "primary", "text": {"type": "plain_text", "text": "View PR"}, "url": "<pr url>", "action_id": "view_pr"}`. Later messages about a pull request you already linked in this thread keep the link in the sentence and get no button, and never re-post a button for a link someone already has. Label it "View MR" for GitLab, and if there are several give each button a unique `action_id` and name its repository in the label ("View PR \xB7 web"). Always keep `text` populated with the same message \u2014 Slack uses it for notifications and fallback \u2014 and keep the link in the sentence too.';
 
 // ../shared/src/default-skills/replicas-agent/abilities/slack.ts
-var SECTION12 = `### Slack
+var SECTION13 = `### Slack
 Send messages, read threads, search conversations, and transfer files through the workspace-scoped TypeScript SDK.
 
 **Reference:** \`references/SLACK.md\`
@@ -25208,7 +25659,7 @@ Use this when:
 - You need to read or search Slack conversations
 - You need to download a file attached to a Slack message
 - You encounter a Slack message link and need its full thread`;
-var REFERENCE12 = `# Slack Integration
+var REFERENCE13 = `# Slack Integration
 
 Use \`@replicas/sdk\`; never read or send a Slack token directly. The SDK calls Replicas, which selects only this workspace's organization connection.
 
@@ -25286,8 +25737,8 @@ var SLACK_ABILITY = {
   label: "Slack",
   description: "Send messages, read threads, search, and transfer files through @replicas/sdk.",
   bullet: "- Interacting with Slack (listing channels, sending messages, reading threads, or searching): use replicas.slack.call from @replicas/sdk. Read references/SLACK.md; no Slack MCP server or provider token in the VM is required.",
-  section: SECTION12,
-  referenceFile: { name: "SLACK.md", content: REFERENCE12 }
+  section: SECTION13,
+  referenceFile: { name: "SLACK.md", content: REFERENCE13 }
 };
 
 // ../shared/src/default-skills/replicas-agent/registry.ts
@@ -25296,6 +25747,7 @@ var REPLICAS_AGENT_ABILITY_REGISTRY = {
   memory: MEMORY_ABILITY,
   computer: COMPUTER_ABILITY,
   docker: DOCKER_ABILITY,
+  environment_setup: ENVIRONMENT_SETUP_ABILITY,
   github: GITHUB_ABILITY,
   gitlab: GITLAB_ABILITY,
   linear: LINEAR_ABILITY,
@@ -26262,7 +26714,7 @@ function parseOpencodeEvents(events) {
         upsertDisplayMessage(messages, {
           id,
           type: "file_change",
-          changes: files.map((path6) => ({ path: path6, kind: "update" })),
+          changes: files.map((path7) => ({ path: path7, kind: "update" })),
           status: "completed",
           timestamp
         });
@@ -27367,6 +27819,75 @@ var EGRESS_WORKSPACE_SHELL_VARS = {
   EGRESS_EXIT_IP_ENDPOINTS: EGRESS_EXIT_IP_ENDPOINTS.join(" ")
 };
 
+// ../shared/src/runtime-env.ts
+function shellQuotePosix(value) {
+  return `'${value.split("'").join("'\\''")}'`;
+}
+function serializePosixEnvFile(env, unsetKeys = []) {
+  return `${[
+    ...[...unsetKeys].map((key) => `unset ${key}`),
+    ...Object.entries(env).filter(([, value]) => value.length > 0).map(([key, value]) => `export ${key}=${shellQuotePosix(value)}`)
+  ].join("\n")}
+`;
+}
+function parsePosixEnvUnsetKeys(content) {
+  return content.split("\n").filter((line) => line.startsWith("unset ")).map((line) => line.slice("unset ".length).trim());
+}
+function parsePosixEnvFile(content) {
+  const result = {};
+  let pos = 0;
+  while (pos < content.length) {
+    let lineStart;
+    if (pos === 0 || content[pos - 1] === "\n") {
+      lineStart = pos;
+    } else {
+      const nl2 = content.indexOf("\n", pos);
+      if (nl2 === -1) break;
+      lineStart = nl2 + 1;
+    }
+    if (!content.startsWith("export ", lineStart)) {
+      const nl2 = content.indexOf("\n", lineStart);
+      if (nl2 === -1) break;
+      pos = nl2 + 1;
+      continue;
+    }
+    const nameStart = lineStart + "export ".length;
+    const eqIdx = content.indexOf("=", nameStart);
+    if (eqIdx === -1) break;
+    const name = content.slice(nameStart, eqIdx).trim();
+    let cursor = eqIdx + 1;
+    if (content[cursor] !== "'") {
+      const nl2 = content.indexOf("\n", cursor);
+      pos = nl2 === -1 ? content.length : nl2 + 1;
+      continue;
+    }
+    cursor += 1;
+    let value = "";
+    let closed = false;
+    while (cursor < content.length) {
+      const ch = content[cursor];
+      if (ch === "'") {
+        if (content.startsWith("\\''", cursor + 1)) {
+          value += "'";
+          cursor += 4;
+          continue;
+        }
+        cursor += 1;
+        closed = true;
+        break;
+      }
+      value += ch;
+      cursor += 1;
+    }
+    if (closed && name) {
+      result[name] = value;
+    }
+    const nl = content.indexOf("\n", cursor);
+    pos = nl === -1 ? content.length : nl + 1;
+  }
+  return result;
+}
+
 // ../shared/src/slash-commands.ts
 var SIDE_CHAT_COMMANDS = ["/btw", "/side"];
 var SLASH_COMMANDS = [
@@ -27418,9 +27939,6 @@ var HOOK_EXEC_MAX_BUFFER_BYTES = 10 * 1024 * 1024;
 // ../shared/src/replicas-config.ts
 var REPLICAS_CONFIG_FILENAMES = ["replicas.json", "replicas.yaml", "replicas.yml"];
 
-// ../shared/src/uuid.ts
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-
 // ../shared/src/terminal.ts
 var CONTROL_CHARACTERS = /[\u0000-\u001F\u007F-\u009F]/g;
 function sanitizeTerminalLine(value) {
@@ -27481,7 +27999,7 @@ var headlessFilesystemAgentResultSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.752";
+var CLI_VERSION = "0.2.753";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -28217,186 +28735,6 @@ function identityTokenUrl() {
   return `http://127.0.0.1:${IDENTITY_PROXY_PORT}${IDENTITY_TOKEN_PATH}`;
 }
 
-// ../shared/src/routes/environment-setups.ts
-var ENVIRONMENT_SETUP_STEPS = [
-  { key: "understand", label: "Understand the codebase" },
-  { key: "install", label: "Install dependencies and run the app" },
-  { key: "verify", label: "Verify checks and record a walkthrough" },
-  { key: "configure", label: "Draft hooks, system prompt, and automations" },
-  { key: "propose", label: "Propose the configuration for review" }
-];
-var ENVIRONMENT_SETUP_STEP_STATUSES = ["pending", "in_progress", "completed", "skipped"];
-var ENVIRONMENT_SETUP_RUN_STATUSES = ["running", "proposed", "applied", "failed", "cancelled"];
-var ENVIRONMENT_SETUP_AUTOMATION_ACTIONS = ["create", "update", "keep", "disable"];
-var ENVIRONMENT_SETUP_VERIFICATION_STATUSES = ["passed", "failed", "skipped"];
-var ENVIRONMENT_SETUP_LIMITS = {
-  summaryChars: 600,
-  stackItems: 30,
-  nameChars: 120,
-  descriptionChars: 1e3,
-  systemPromptChars: 2e4,
-  hookChars: 5e4,
-  variables: 50,
-  variableKeyChars: 128,
-  variableDescriptionChars: 500,
-  automations: 8,
-  automationKeyChars: 80,
-  automationPromptChars: 1e4,
-  automationTriggers: 5,
-  automationNoteChars: 300,
-  verificationItems: 8,
-  verificationDetailChars: 300,
-  mediaItems: 8,
-  repositories: 20
-};
-var ENVIRONMENT_SETUP_VARIABLE_WAIT = { defaultMs: 5 * 6e4, maxMs: 15 * 6e4, pollMs: 5e3 };
-var VARIABLE_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
-var text = (max) => max === void 0 ? external_exports.string().trim() : external_exports.string().trim().max(max);
-var requiredText = (max) => text(max).min(1, "must not be empty");
-var optionalText = (max) => text(max).nullish().transform((value) => value || null);
-var clearableText = (max) => text(max).nullish().transform((value) => value === void 0 ? void 0 : value || null);
-var list = (item, max) => max === void 0 ? external_exports.array(item) : external_exports.array(item).max(max);
-var ENVIRONMENT_SETUP_AUTHORED_TRIGGER_TYPES = ["cron", "github", "gitlab"];
-function isEnvironmentSetupAuthoredTriggerType(type) {
-  return ENVIRONMENT_SETUP_AUTHORED_TRIGGER_TYPES.some((authored) => authored === type);
-}
-var repositoryTriggerConfigSchema = external_exports.object({
-  event: external_exports.string(),
-  repository_ids: external_exports.array(external_exports.string().regex(UUID_RE, "must be a repository id")).optional(),
-  group_pr_events: external_exports.boolean().optional(),
-  excluded_actors: external_exports.array(external_exports.string()).optional()
-});
-var proposalTriggerSchema = external_exports.discriminatedUnion("type", [
-  external_exports.object({ type: external_exports.literal("cron"), config: external_exports.object({ schedule: external_exports.string(), timezone: external_exports.string().optional() }) }),
-  external_exports.object({ type: external_exports.literal("github"), config: repositoryTriggerConfigSchema }),
-  external_exports.object({ type: external_exports.literal("gitlab"), config: repositoryTriggerConfigSchema })
-]);
-var existingTriggerSchema = external_exports.custom(
-  (value) => isRecord(value) && typeof value.type === "string" && isRecord(value.config),
-  "must be an automation trigger"
-);
-var carriedTriggerSchema = existingTriggerSchema.refine(
-  (trigger) => !isEnvironmentSetupAuthoredTriggerType(trigger.type)
-);
-function automationSchema(limits) {
-  const authored = external_exports.object({
-    name: text(limits.nameChars),
-    description: text(limits.descriptionChars),
-    prompt: text(limits.automationPromptChars),
-    triggers: list(proposalTriggerSchema, limits.automationTriggers)
-  });
-  const updated = authored.extend({ triggers: list(external_exports.union([proposalTriggerSchema, carriedTriggerSchema]), limits.automationTriggers) });
-  return external_exports.object({
-    key: requiredText(limits.automationKeyChars),
-    action: external_exports.enum(ENVIRONMENT_SETUP_AUTOMATION_ACTIONS).default("create"),
-    automation_id: external_exports.string().regex(UUID_RE, "must be an automation id").nullable().default(null),
-    name: text().default(""),
-    description: optionalText().transform((value) => value ?? ""),
-    prompt: text().default(""),
-    triggers: list(existingTriggerSchema).default([]),
-    note: optionalText(limits.automationNoteChars)
-  }).superRefine((automation2, ctx) => {
-    if (automation2.action === "create" && automation2.automation_id) {
-      ctx.addIssue({ code: "custom", path: ["automation_id"], message: "belongs on an update, keep, or disable entry" });
-    }
-    if (automation2.action !== "create" && !automation2.automation_id) {
-      ctx.addIssue({ code: "custom", path: ["automation_id"], message: "must be the id of an automation attached to this environment" });
-    }
-    if (automation2.action === "create" || automation2.action === "update") {
-      if (!automation2.name) ctx.addIssue({ code: "custom", path: ["name"], message: "must not be empty" });
-      if (!automation2.prompt) ctx.addIssue({ code: "custom", path: ["prompt"], message: "must not be empty" });
-      if (automation2.triggers.length === 0) ctx.addIssue({ code: "custom", path: ["triggers"], message: "must not be empty" });
-    }
-  }).transform((automation2, ctx) => {
-    if (automation2.action === "keep" || automation2.action === "disable") return automation2;
-    const content = (automation2.action === "update" ? updated : authored).safeParse(automation2);
-    if (content.success) return { ...automation2, ...content.data };
-    for (const issue2 of content.error.issues) ctx.addIssue({ ...issue2, code: "custom" });
-    return external_exports.NEVER;
-  });
-}
-function automationListSchema(limits) {
-  return list(automationSchema(limits)).default([]).superRefine((automations, ctx) => {
-    if (new Set(automations.map((automation2) => automation2.key)).size !== automations.length) {
-      ctx.addIssue({ code: "custom", message: "must have unique keys" });
-    }
-    const targets = automations.flatMap((automation2) => automation2.automation_id ?? []);
-    if (new Set(targets).size !== targets.length) {
-      ctx.addIssue({ code: "custom", message: "must mention each existing automation once" });
-    }
-    if (limits.automations !== void 0 && automations.filter((automation2) => automation2.action === "create").length > limits.automations) {
-      ctx.addIssue({ code: "custom", message: `must create at most ${limits.automations} new automations` });
-    }
-  });
-}
-function environmentSchema(limits) {
-  return external_exports.object({
-    name: optionalText(limits.nameChars).transform((value) => value ?? void 0),
-    description: clearableText(limits.descriptionChars),
-    system_prompt: clearableText(limits.systemPromptChars),
-    start_hook: clearableText(limits.hookChars),
-    warm_hook: clearableText(limits.hookChars)
-  });
-}
-function variableSchema(limits, requiredDefault) {
-  return external_exports.object({
-    key: external_exports.string().regex(VARIABLE_KEY_RE, "must be a valid environment variable name").max(limits.variableKeyChars ?? Number.POSITIVE_INFINITY),
-    description: optionalText(limits.variableDescriptionChars).transform((value) => value ?? ""),
-    required: external_exports.boolean().default(requiredDefault)
-  });
-}
-function proposalSchema(limits) {
-  return external_exports.object({
-    summary: requiredText(limits.summaryChars),
-    stack: list(text(), limits.stackItems).default([]).transform((items) => items.filter(Boolean)),
-    environment: environmentSchema(limits),
-    variables: list(variableSchema(limits, false), limits.variables).default([]),
-    automations: automationListSchema(limits),
-    verification: list(external_exports.object({
-      label: requiredText(limits.nameChars),
-      status: external_exports.enum(ENVIRONMENT_SETUP_VERIFICATION_STATUSES),
-      detail: optionalText(limits.verificationDetailChars).transform((value) => value ?? void 0)
-    }), limits.verificationItems).default([]),
-    media: list(external_exports.object({
-      media_id: external_exports.string().regex(UUID_RE, "must be a media id"),
-      title: requiredText(limits.nameChars)
-    }), limits.mediaItems).default([])
-  });
-}
-var environmentSetupProposalSchema = proposalSchema({});
-var environmentSetupProposalSubmissionSchema = proposalSchema(ENVIRONMENT_SETUP_LIMITS);
-var environmentSetupVariableRequestSchema = variableSchema({}, false).extend({
-  status: external_exports.enum(["pending", "provided", "skipped"]),
-  requested_at: external_exports.string(),
-  resolved_at: external_exports.string().nullable().default(null)
-});
-var environmentSetupRunStateSchema = external_exports.object({
-  status: external_exports.enum(ENVIRONMENT_SETUP_RUN_STATUSES),
-  steps: external_exports.partialRecord(external_exports.enum(ENVIRONMENT_SETUP_STEPS.map((step) => step.key)), external_exports.enum(ENVIRONMENT_SETUP_STEP_STATUSES)).default({}),
-  proposal: environmentSetupProposalSchema.nullable().default(null),
-  applied: external_exports.object({
-    applied_at: external_exports.string(),
-    automation_ids: external_exports.array(external_exports.string())
-  }).nullable().default(null),
-  variable_requests: external_exports.array(environmentSetupVariableRequestSchema).default([])
-});
-var applyEnvironmentSetupRequestSchema = external_exports.object({
-  environment: environmentSchema(ENVIRONMENT_SETUP_LIMITS).extend({ name: requiredText(ENVIRONMENT_SETUP_LIMITS.nameChars) }),
-  variables: list(external_exports.object({ key: external_exports.string().regex(VARIABLE_KEY_RE), value: external_exports.string() }), ENVIRONMENT_SETUP_LIMITS.variables).default([]).refine((variables) => new Set(variables.map((variable) => variable.key)).size === variables.length, "must have unique keys").transform((variables) => variables.filter((variable) => variable.value.length > 0)),
-  automations: automationListSchema(ENVIRONMENT_SETUP_LIMITS)
-});
-var requestEnvironmentSetupVariablesSchema = external_exports.object({
-  variables: list(variableSchema(ENVIRONMENT_SETUP_LIMITS, true), ENVIRONMENT_SETUP_LIMITS.variables).min(1, "must not be empty")
-}).superRefine(({ variables }, ctx) => {
-  if (new Set(variables.map((variable) => variable.key)).size !== variables.length) {
-    ctx.addIssue({ code: "custom", path: ["variables"], message: "must have unique keys" });
-  }
-});
-var respondEnvironmentSetupVariablesSchema = external_exports.object({
-  values: external_exports.record(external_exports.string().regex(VARIABLE_KEY_RE), external_exports.string()).default({}),
-  skipped: external_exports.array(external_exports.string().regex(VARIABLE_KEY_RE)).default([])
-});
-
 // src/lib/monolith-url.ts
 var MONOLITH_URL = process.env.REPLICAS_MONOLITH_URL || process.env.MONOLITH_URL || "https://api.replicas.dev";
 
@@ -29976,8 +30314,8 @@ async function claudeAuthCommand(options = {}) {
 var CLIENT_ID = "1031625952748946";
 var AUTH_URL = "https://auth.meta.com";
 var API_KEY_URL = "https://api.meta.ai/muse-code/key";
-async function post(path6, body) {
-  return fetch(`${AUTH_URL}${path6}`, {
+async function post(path7, body) {
+  return fetch(`${AUTH_URL}${path7}`, {
     method: "POST",
     headers: { "Content-Type": "application/x-www-form-urlencoded" },
     body
@@ -30652,14 +30990,163 @@ Repositories (${response.repositories.length}):
   }
 }
 
-// src/commands/automation.ts
+// src/commands/environment-setup.ts
+var import_fs4 = __toESM(require("fs"));
+var import_os3 = __toESM(require("os"));
+var import_path5 = __toESM(require("path"));
 var import_chalk19 = __toESM(require("chalk"));
+var STEP_KEYS = ENVIRONMENT_SETUP_STEPS.map((step) => step.key).join(", ");
+async function fetchCurrentRun() {
+  ensureOrgApiAuthenticated();
+  if (!isEnvironmentSetupWorkspace()) {
+    throw new Error("environment-setup commands run inside a Replicas setup workspace");
+  }
+  return orgAuthenticatedFetch("/v1/environment-setups/current");
+}
+async function environmentSetupStatusCommand() {
+  const { run, environment: environment2, repositories } = await fetchCurrentRun();
+  console.log(import_chalk19.default.bold(`
+  Environment setup: ${environment2.name}
+`));
+  console.log(`  Run:          ${run.id}`);
+  console.log(`  Status:       ${run.status}${run.error ? import_chalk19.default.red(` (${run.error})`) : ""}`);
+  console.log(`  Environment:  ${environment2.id}`);
+  console.log(`  Repositories: ${repositories.map((repo) => `${repo.name} (${repo.default_branch})`).join(", ") || "none"}`);
+  console.log("\n  Steps:");
+  for (const step of ENVIRONMENT_SETUP_STEPS) {
+    const status = run.steps[step.key] ?? "pending";
+    const marker = status === "completed" ? import_chalk19.default.green("\u2713") : status === "in_progress" ? import_chalk19.default.cyan("\u25B8") : status === "skipped" ? import_chalk19.default.gray("\u2013") : import_chalk19.default.gray("\u25CB");
+    console.log(`    ${marker} ${step.key.padEnd(11)} ${import_chalk19.default.gray(step.label)} ${import_chalk19.default.gray(`[${status}]`)}`);
+  }
+  if (run.variable_requests.length > 0) {
+    console.log("\n  Variables:");
+    printVariableRequests(run.variable_requests);
+  }
+  console.log(run.proposal ? import_chalk19.default.gray("\n  A proposal has been submitted. Run `propose` again to replace it.\n") : import_chalk19.default.gray("\n  No proposal yet. Submit one with `replicas environment-setup propose --file <path>`.\n"));
+}
+async function environmentSetupStepCommand(key, status) {
+  if (!isEnvironmentSetupStepKey(key)) {
+    throw new Error(`Unknown step "${key}". Use one of: ${STEP_KEYS}`);
+  }
+  if (!isEnvironmentSetupStepStatus(status)) {
+    throw new Error(`Unknown status "${status}". Use one of: ${ENVIRONMENT_SETUP_STEP_STATUSES.join(", ")}`);
+  }
+  const { run } = await fetchCurrentRun();
+  const body = { steps: { [key]: status } };
+  await orgAuthenticatedFetch(`/v1/environment-setups/${run.id}/steps`, {
+    method: "POST",
+    body
+  });
+  console.log(import_chalk19.default.green(`
+\u2713 ${key} \u2192 ${status}
+`));
+}
+function readJsonFile(file2, label) {
+  try {
+    return JSON.parse(import_fs4.default.readFileSync(file2, "utf8"));
+  } catch (error51) {
+    throw new Error(`Could not read ${label} JSON from ${file2}: ${error51 instanceof Error ? error51.message : String(error51)}`);
+  }
+}
+async function environmentSetupProposeCommand(options) {
+  const proposal = readJsonFile(options.file, "proposal");
+  const { run } = await fetchCurrentRun();
+  const result = await orgAuthenticatedFetch(`/v1/environment-setups/${run.id}/proposal`, {
+    method: "POST",
+    body: { proposal }
+  });
+  const submitted = result.run.proposal;
+  console.log(import_chalk19.default.green("\n\u2713 Proposal submitted.\n"));
+  if (submitted) {
+    console.log(`  Automations: ${submitted.automations.length}`);
+    console.log(`  Variables:   ${submitted.variables.length}`);
+    console.log(`  Checks:      ${submitted.verification.length}`);
+    console.log(`  Media:       ${submitted.media.length}`);
+  }
+  console.log(import_chalk19.default.gray("\n  The user reviews and saves it from the Environment panel; nothing has been applied yet.\n"));
+}
+var RUNTIME_ENV_FILE = import_path5.default.join(import_os3.default.homedir(), ".replicas", "runtime-env.sh");
+var EXPORTED_KEYS_FILE = import_path5.default.join(import_os3.default.homedir(), ".replicas", "environment-setup-exported-keys.json");
+function printVariableRequests(requests) {
+  for (const request of requests) {
+    const marker = request.status === "provided" ? import_chalk19.default.green("\u2713") : request.status === "skipped" ? import_chalk19.default.gray("\u2013") : import_chalk19.default.cyan("\u2026");
+    console.log(`    ${marker} ${request.key.padEnd(32)} ${import_chalk19.default.gray(`[${request.status}${request.required ? ", required" : ""}]`)}`);
+  }
+}
+async function environmentSetupRequestVariablesCommand(options) {
+  const request = readJsonFile(options.file, "variable request");
+  const { run } = await fetchCurrentRun();
+  const result = await orgAuthenticatedFetch(`/v1/environment-setups/${run.id}/variable-requests`, {
+    method: "POST",
+    body: request
+  });
+  console.log(import_chalk19.default.green("\n\u2713 Variables requested.\n"));
+  printVariableRequests(result.run.variable_requests);
+  console.log(import_chalk19.default.gray("\n  The user sees this in the Environment panel. Keep working and run `replicas environment-setup wait-variables` when you need a value.\n"));
+}
+function parseWaitTimeoutMs(raw) {
+  if (!raw) return ENVIRONMENT_SETUP_VARIABLE_WAIT.defaultMs;
+  const match = /^(\d+)(s|m)?$/.exec(raw.trim());
+  if (!match) throw new Error(`Invalid timeout "${raw}". Use seconds or minutes, for example 90s or 5m`);
+  const ms = Number(match[1]) * (match[2] === "m" ? 6e4 : 1e3);
+  return Math.min(Math.max(ms, ENVIRONMENT_SETUP_VARIABLE_WAIT.pollMs), ENVIRONMENT_SETUP_VARIABLE_WAIT.maxMs);
+}
+function exportToRuntimeEnv(variables) {
+  import_fs4.default.mkdirSync(import_path5.default.dirname(RUNTIME_ENV_FILE), { recursive: true });
+  const existing = import_fs4.default.existsSync(RUNTIME_ENV_FILE) ? import_fs4.default.readFileSync(RUNTIME_ENV_FILE, "utf8") : "";
+  const exportedKeys = import_fs4.default.existsSync(EXPORTED_KEYS_FILE) ? JSON.parse(import_fs4.default.readFileSync(EXPORTED_KEYS_FILE, "utf8")) : [];
+  const owned = new Set(Array.isArray(exportedKeys) ? exportedKeys.filter(isNonEmptyString) : []);
+  const env = parsePosixEnvFile(existing);
+  for (const key of owned) delete env[key];
+  const exported = variables.filter((variable) => !variable.key.startsWith("REPLICAS_"));
+  for (const variable of exported) env[variable.key] = variable.value;
+  const unsetKeys = new Set([...parsePosixEnvUnsetKeys(existing), ...owned].filter((key) => !env[key]));
+  const content = serializePosixEnvFile(env, unsetKeys);
+  if (content !== existing) {
+    import_fs4.default.writeFileSync(RUNTIME_ENV_FILE, content, { mode: 384 });
+    import_fs4.default.chmodSync(RUNTIME_ENV_FILE, 384);
+  }
+  import_fs4.default.writeFileSync(EXPORTED_KEYS_FILE, JSON.stringify(exported.map((variable) => variable.key)), { mode: 384 });
+  return exported.map((variable) => variable.key);
+}
+var formatDuration = (ms) => ms >= 6e4 ? `${Math.round(ms / 6e4)} minute(s)` : `${Math.round(ms / 1e3)} seconds`;
+async function environmentSetupWaitVariablesCommand(options) {
+  const timeoutMs = parseWaitTimeoutMs(options.timeout);
+  const wanted = options.keys ? new Set(options.keys.split(",").map((key) => key.trim()).filter(Boolean)) : null;
+  const blocking = (requests) => requests.filter((request) => request.status === "pending" && (wanted ? wanted.has(request.key) : request.required));
+  let { run } = await fetchCurrentRun();
+  const before = run.variable_requests;
+  if (blocking(before).length > 0) {
+    console.log(import_chalk19.default.gray(`
+  Waiting up to ${formatDuration(timeoutMs)} for: ${blocking(before).map((request) => request.key).join(", ")}`));
+    const deadline = Date.now() + timeoutMs;
+    while (blocking(run.variable_requests).length > 0 && Date.now() < deadline) {
+      await new Promise((resolve2) => setTimeout(resolve2, ENVIRONMENT_SETUP_VARIABLE_WAIT.pollMs));
+      run = (await fetchCurrentRun()).run;
+    }
+  }
+  const { variables } = await orgAuthenticatedFetch("/v1/environment-setups/current/variables");
+  const exported = exportToRuntimeEnv(variables);
+  const reserved = variables.map((variable) => variable.key).filter((key) => !exported.includes(key));
+  const byStatus = (status) => run.variable_requests.filter((request) => request.status === status).map((request) => request.key);
+  const timedOut = blocking(run.variable_requests).map((request) => request.key);
+  console.log("");
+  if (exported.length > 0) console.log(`  ${import_chalk19.default.green("Available in new shells:")} ${exported.join(", ")}`);
+  if (reserved.length > 0) console.log(`  ${import_chalk19.default.yellow("Reserved by Replicas:")}    ${reserved.join(", ")} (reserved names, not exported; rename these in the proposal)`);
+  if (byStatus("skipped").length > 0) console.log(`  ${import_chalk19.default.gray("Skipped by the user:")}     ${byStatus("skipped").join(", ")}`);
+  if (timedOut.length > 0) console.log(`  ${import_chalk19.default.yellow("Not answered in time:")}    ${timedOut.join(", ")}`);
+  if (variables.length === 0 && byStatus("skipped").length === 0 && timedOut.length === 0) console.log(import_chalk19.default.gray("  No variables were requested."));
+  console.log(import_chalk19.default.gray("\n  Values are never printed. Restart services you started before this command so they pick the variables up. Use a local substitute for anything skipped or unanswered and list it as required in the proposal.\n"));
+}
+
+// src/commands/automation.ts
+var import_chalk20 = __toESM(require("chalk"));
 var import_prompts7 = __toESM(require("prompts"));
 function parseScopeFilter(value) {
   if (!value) return void 0;
   if (value === "org" || value === "user" || value === "all") return value;
-  console.log(import_chalk19.default.red(`Invalid --owner: ${value}`));
-  console.log(import_chalk19.default.gray("Valid options: org, user, all"));
+  console.log(import_chalk20.default.red(`Invalid --owner: ${value}`));
+  console.log(import_chalk20.default.gray("Valid options: org, user, all"));
   process.exit(1);
 }
 function parseAgentProviderOption(value) {
@@ -30668,8 +31155,8 @@ function parseAgentProviderOption(value) {
   if (trimmed === "" || trimmed.toLowerCase() === "none") return null;
   const lower = trimmed.toLowerCase();
   if (!isValidAgentProvider(lower)) {
-    console.log(import_chalk19.default.red(`Invalid --agent-provider: ${value}`));
-    console.log(import_chalk19.default.gray(`Valid options: ${VALID_AGENT_PROVIDERS.join(", ")}, none`));
+    console.log(import_chalk20.default.red(`Invalid --agent-provider: ${value}`));
+    console.log(import_chalk20.default.gray(`Valid options: ${VALID_AGENT_PROVIDERS.join(", ")}, none`));
     process.exit(1);
   }
   return lower;
@@ -30680,8 +31167,8 @@ function parseThinkingLevelOption(value) {
   if (trimmed === "" || trimmed.toLowerCase() === "none") return null;
   const lower = trimmed.toLowerCase();
   if (!isValidThinkingLevel(lower)) {
-    console.log(import_chalk19.default.red(`Invalid --thinking-level: ${value}`));
-    console.log(import_chalk19.default.gray(`Valid options: ${VALID_THINKING_LEVELS.join(", ")}, none`));
+    console.log(import_chalk20.default.red(`Invalid --thinking-level: ${value}`));
+    console.log(import_chalk20.default.gray(`Valid options: ${VALID_THINKING_LEVELS.join(", ")}, none`));
     process.exit(1);
   }
   return lower;
@@ -30698,8 +31185,8 @@ function isAutomationLifecyclePolicy(value) {
 function parseWorkspaceLifecyclePolicyOption(value) {
   if (!value) return void 0;
   if (isAutomationLifecyclePolicy(value)) return value;
-  console.log(import_chalk19.default.red(`Invalid lifecycle policy: ${value}`));
-  console.log(import_chalk19.default.gray(`Valid options: ${AUTOMATION_LIFECYCLE_POLICIES.join(", ")}`));
+  console.log(import_chalk20.default.red(`Invalid lifecycle policy: ${value}`));
+  console.log(import_chalk20.default.gray(`Valid options: ${AUTOMATION_LIFECYCLE_POLICIES.join(", ")}`));
   process.exit(1);
 }
 function parseExcludedActorsOption(value) {
@@ -30718,7 +31205,7 @@ function withExcludedActors(config3, excludedActors) {
 }
 function parseAutomationLifecycleOptions(options) {
   if (options.sleepWhenDone && options.lifecycle && options.lifecycle !== "sleep_when_done") {
-    console.log(import_chalk19.default.red("--sleep-when-done cannot be combined with a different --lifecycle value"));
+    console.log(import_chalk20.default.red("--sleep-when-done cannot be combined with a different --lifecycle value"));
     process.exit(1);
   }
   if (options.sleepWhenDone) return "sleep_when_done";
@@ -30727,7 +31214,7 @@ function parseAutomationLifecycleOptions(options) {
 function applyAgentSelection(body, existing) {
   const result = validateAgentSelection(body, existing, AGENT_MODELS);
   if (!result.ok) {
-    console.log(import_chalk19.default.red(result.error.message));
+    console.log(import_chalk20.default.red(result.error.message));
     process.exit(1);
   }
   const out = {};
@@ -30768,8 +31255,8 @@ function resolveTriggerRepositoryIds(repositories, repoNamesInput, provider) {
   for (const repoName of repoNames) {
     const repo = providerRepos.find((r) => r.name === repoName);
     if (!repo) {
-      console.log(import_chalk19.default.red(`Repository not found for ${provider} trigger filter: ${repoName}`));
-      console.log(import_chalk19.default.gray(`Available: ${providerRepos.map((r) => r.name).join(", ")}`));
+      console.log(import_chalk20.default.red(`Repository not found for ${provider} trigger filter: ${repoName}`));
+      console.log(import_chalk20.default.gray(`Available: ${providerRepos.map((r) => r.name).join(", ")}`));
       process.exit(1);
     }
     repoIds.push(repo.id);
@@ -30802,43 +31289,43 @@ function formatModeSummary(automation2) {
 function resolveSelectableEnvironmentId(envInput, selectableEnvs) {
   const resolved = resolveByNameOrId(envInput, selectableEnvs);
   if (!resolved) {
-    console.log(import_chalk19.default.red(`Environment not found: ${envInput}`));
+    console.log(import_chalk20.default.red(`Environment not found: ${envInput}`));
     const available = selectableEnvs.map((e) => e.name).join(", ");
-    console.log(import_chalk19.default.gray(`Available: ${available || "(none)"}`));
+    console.log(import_chalk20.default.gray(`Available: ${available || "(none)"}`));
     process.exit(1);
   }
   return resolved.id;
 }
 function printAutomation(automation2) {
-  console.log(import_chalk19.default.white(`  ${automation2.name}`));
-  console.log(import_chalk19.default.gray(`    ID: ${automation2.id}`));
-  console.log(import_chalk19.default.gray(`    Owner: ${automation2.user_id ? "personal" : "organization"}`));
+  console.log(import_chalk20.default.white(`  ${automation2.name}`));
+  console.log(import_chalk20.default.gray(`    ID: ${automation2.id}`));
+  console.log(import_chalk20.default.gray(`    Owner: ${automation2.user_id ? "personal" : "organization"}`));
   if (automation2.description) {
-    console.log(import_chalk19.default.gray(`    Description: ${automation2.description}`));
+    console.log(import_chalk20.default.gray(`    Description: ${automation2.description}`));
   }
-  console.log(import_chalk19.default.gray(`    Enabled: ${automation2.enabled ? import_chalk19.default.green("yes") : import_chalk19.default.red("no")}`));
+  console.log(import_chalk20.default.gray(`    Enabled: ${automation2.enabled ? import_chalk20.default.green("yes") : import_chalk20.default.red("no")}`));
   if (automation2.triggers.length > 0) {
-    console.log(import_chalk19.default.gray(`    Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
+    console.log(import_chalk20.default.gray(`    Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
   }
   if (automation2.github_check_names.length > 0) {
-    console.log(import_chalk19.default.gray(`    GitHub checks: ${automation2.github_check_names.join(", ")}`));
+    console.log(import_chalk20.default.gray(`    GitHub checks: ${automation2.github_check_names.join(", ")}`));
   }
-  console.log(import_chalk19.default.gray(`    Prompt: ${truncate2(automation2.prompt, 80)}`));
+  console.log(import_chalk20.default.gray(`    Prompt: ${truncate2(automation2.prompt, 80)}`));
   if (automation2.cron_next_fire_at) {
-    console.log(import_chalk19.default.gray(`    Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
+    console.log(import_chalk20.default.gray(`    Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
   }
   if (automation2.workspace_lifecycle_policy && automation2.workspace_lifecycle_policy !== "default") {
-    console.log(import_chalk19.default.gray(`    Lifecycle: ${automation2.workspace_lifecycle_policy}`));
+    console.log(import_chalk20.default.gray(`    Lifecycle: ${automation2.workspace_lifecycle_policy}`));
   }
   if (automation2.agent_provider || automation2.model || automation2.thinking_level) {
-    console.log(import_chalk19.default.gray(`    Agent: ${formatAgentSummary(automation2)}`));
+    console.log(import_chalk20.default.gray(`    Agent: ${formatAgentSummary(automation2)}`));
   }
   if (automation2.plan_mode || automation2.goal_mode || automation2.fast_mode) {
-    console.log(import_chalk19.default.gray(`    Modes: ${formatModeSummary(automation2)}`));
+    console.log(import_chalk20.default.gray(`    Modes: ${formatModeSummary(automation2)}`));
   }
-  console.log(import_chalk19.default.gray(`    PR Follow-ups: ${automation2.config.capabilities?.pr_followups === true ? import_chalk19.default.green("managed") : "read-only"}`));
-  console.log(import_chalk19.default.gray(`    Created: ${formatDate2(automation2.created_at)}`));
-  console.log(import_chalk19.default.gray(`    Updated: ${formatDate2(automation2.updated_at)}`));
+  console.log(import_chalk20.default.gray(`    PR Follow-ups: ${automation2.config.capabilities?.pr_followups === true ? import_chalk20.default.green("managed") : "read-only"}`));
+  console.log(import_chalk20.default.gray(`    Created: ${formatDate2(automation2.created_at)}`));
+  console.log(import_chalk20.default.gray(`    Updated: ${formatDate2(automation2.updated_at)}`));
   console.log();
 }
 async function automationListCommand(options) {
@@ -30857,17 +31344,17 @@ async function automationListCommand(options) {
       `/v1/automations${query ? "?" + query : ""}`
     );
     if (response.automations.length === 0) {
-      console.log(import_chalk19.default.yellow("\nNo automations found.\n"));
+      console.log(import_chalk20.default.yellow("\nNo automations found.\n"));
       return;
     }
-    console.log(import_chalk19.default.green(`
+    console.log(import_chalk20.default.green(`
 Automations (Page ${response.page} of ${response.totalPages}, Total: ${response.total}):
 `));
     for (const automation2 of response.automations) {
       printAutomation(automation2);
     }
   } catch (error51) {
-    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk20.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -30876,50 +31363,50 @@ async function automationGetCommand(id) {
   try {
     const response = await orgAuthenticatedFetch(`/v1/automations/${id}`);
     const automation2 = response.automation;
-    console.log(import_chalk19.default.green(`
+    console.log(import_chalk20.default.green(`
 Automation: ${automation2.name}
 `));
-    console.log(import_chalk19.default.gray(`  ID: ${automation2.id}`));
+    console.log(import_chalk20.default.gray(`  ID: ${automation2.id}`));
     if (automation2.description) {
-      console.log(import_chalk19.default.gray(`  Description: ${automation2.description}`));
+      console.log(import_chalk20.default.gray(`  Description: ${automation2.description}`));
     }
-    console.log(import_chalk19.default.gray(`  Enabled: ${automation2.enabled ? import_chalk19.default.green("yes") : import_chalk19.default.red("no")}`));
+    console.log(import_chalk20.default.gray(`  Enabled: ${automation2.enabled ? import_chalk20.default.green("yes") : import_chalk20.default.red("no")}`));
     if (automation2.triggers.length > 0) {
-      console.log(import_chalk19.default.gray(`  Triggers:`));
+      console.log(import_chalk20.default.gray(`  Triggers:`));
       for (const trigger of automation2.triggers) {
-        console.log(import_chalk19.default.gray(`    - ${formatTrigger(trigger)}`));
+        console.log(import_chalk20.default.gray(`    - ${formatTrigger(trigger)}`));
       }
     }
     if (automation2.github_check_names.length > 0) {
-      console.log(import_chalk19.default.gray(`  GitHub checks: ${automation2.github_check_names.join(", ")}`));
+      console.log(import_chalk20.default.gray(`  GitHub checks: ${automation2.github_check_names.join(", ")}`));
     }
-    console.log(import_chalk19.default.gray(`  Prompt: ${automation2.prompt}`));
-    console.log(import_chalk19.default.gray(`  Environment: ${automation2.environment_id}`));
+    console.log(import_chalk20.default.gray(`  Prompt: ${automation2.prompt}`));
+    console.log(import_chalk20.default.gray(`  Environment: ${automation2.environment_id}`));
     if (automation2.cron_expression) {
-      console.log(import_chalk19.default.gray(`  Cron: ${automation2.cron_expression}`));
+      console.log(import_chalk20.default.gray(`  Cron: ${automation2.cron_expression}`));
     }
     if (automation2.cron_timezone) {
-      console.log(import_chalk19.default.gray(`  Timezone: ${automation2.cron_timezone}`));
+      console.log(import_chalk20.default.gray(`  Timezone: ${automation2.cron_timezone}`));
     }
     if (automation2.cron_next_fire_at) {
-      console.log(import_chalk19.default.gray(`  Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
+      console.log(import_chalk20.default.gray(`  Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
     }
     if (automation2.workspace_lifecycle_policy) {
-      console.log(import_chalk19.default.gray(`  Lifecycle Policy: ${automation2.workspace_lifecycle_policy}`));
+      console.log(import_chalk20.default.gray(`  Lifecycle Policy: ${automation2.workspace_lifecycle_policy}`));
     }
     if (automation2.workspace_auto_stop_minutes) {
-      console.log(import_chalk19.default.gray(`  Auto-stop: ${automation2.workspace_auto_stop_minutes} minutes`));
-    }
-    console.log(import_chalk19.default.gray(`  Agent: ${automation2.agent_provider ? getProviderDisplayName(automation2.agent_provider) : "organization default"}`));
-    console.log(import_chalk19.default.gray(`  Model: ${automation2.model ? MODEL_LABELS[automation2.model] ?? automation2.model : "agent default"}`));
-    console.log(import_chalk19.default.gray(`  Thinking Level: ${automation2.thinking_level ?? "agent default"}`));
-    console.log(import_chalk19.default.gray(`  Modes: ${formatModeSummary(automation2)}`));
-    console.log(import_chalk19.default.gray(`  PR Follow-ups: ${automation2.config.capabilities?.pr_followups === true ? "managed" : "read-only"}`));
-    console.log(import_chalk19.default.gray(`  Created: ${formatDate2(automation2.created_at)}`));
-    console.log(import_chalk19.default.gray(`  Updated: ${formatDate2(automation2.updated_at)}`));
+      console.log(import_chalk20.default.gray(`  Auto-stop: ${automation2.workspace_auto_stop_minutes} minutes`));
+    }
+    console.log(import_chalk20.default.gray(`  Agent: ${automation2.agent_provider ? getProviderDisplayName(automation2.agent_provider) : "organization default"}`));
+    console.log(import_chalk20.default.gray(`  Model: ${automation2.model ? MODEL_LABELS[automation2.model] ?? automation2.model : "agent default"}`));
+    console.log(import_chalk20.default.gray(`  Thinking Level: ${automation2.thinking_level ?? "agent default"}`));
+    console.log(import_chalk20.default.gray(`  Modes: ${formatModeSummary(automation2)}`));
+    console.log(import_chalk20.default.gray(`  PR Follow-ups: ${automation2.config.capabilities?.pr_followups === true ? "managed" : "read-only"}`));
+    console.log(import_chalk20.default.gray(`  Created: ${formatDate2(automation2.created_at)}`));
+    console.log(import_chalk20.default.gray(`  Updated: ${formatDate2(automation2.updated_at)}`));
     console.log();
   } catch (error51) {
-    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk20.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -31044,22 +31531,22 @@ async function automationCreateCommand(name, options) {
   ensureOrgApiAuthenticated();
   const lifecyclePolicy = parseAutomationLifecycleOptions(options);
   if (options.autoStopMinutes && !lifecyclePolicySupportsAutoStop(lifecyclePolicy ?? "default")) {
-    console.log(import_chalk19.default.red("--auto-stop-minutes requires --lifecycle default"));
+    console.log(import_chalk20.default.red("--auto-stop-minutes requires --lifecycle default"));
     process.exit(1);
   }
   if (options.autoStopMinutes) {
     const minutes = parseInt(options.autoStopMinutes, 10);
     if (isNaN(minutes) || minutes < 3 || minutes > 1440) {
-      console.log(import_chalk19.default.red("--auto-stop-minutes must be between 3 and 1440"));
+      console.log(import_chalk20.default.red("--auto-stop-minutes must be between 3 and 1440"));
       process.exit(1);
     }
   }
   if (options.triggerGithubExcludeUsers !== void 0 && !options.triggerGithub) {
-    console.log(import_chalk19.default.red("--trigger-github-exclude-users requires --trigger-github"));
+    console.log(import_chalk20.default.red("--trigger-github-exclude-users requires --trigger-github"));
     process.exit(1);
   }
   if (options.triggerGitlabExcludeUsers !== void 0 && !options.triggerGitlab) {
-    console.log(import_chalk19.default.red("--trigger-gitlab-exclude-users requires --trigger-gitlab"));
+    console.log(import_chalk20.default.red("--trigger-gitlab-exclude-users requires --trigger-gitlab"));
     process.exit(1);
   }
   const hasConfirmation = options.confirmationChannel || options.confirmationThread || options.confirmationMessageTs || options.confirmationUser;
@@ -31086,7 +31573,7 @@ async function automationCreateCommand(name, options) {
     );
     const selectableEnvs = envResponse.environments;
     if (selectableEnvs.length === 0) {
-      console.log(import_chalk19.default.red("No environments found. Please create an environment first."));
+      console.log(import_chalk20.default.red("No environments found. Please create an environment first."));
       process.exit(1);
     }
     const repoResponse = await orgAuthenticatedFetch("/v1/repositories");
@@ -31100,7 +31587,7 @@ async function automationCreateCommand(name, options) {
         validate: (value) => value.trim() ? true : "Name is required"
       });
       if (!response2.name) {
-        console.log(import_chalk19.default.yellow("\nCancelled."));
+        console.log(import_chalk20.default.yellow("\nCancelled."));
         return;
       }
       automationName = response2.name;
@@ -31114,7 +31601,7 @@ async function automationCreateCommand(name, options) {
         validate: (value) => value.trim() ? true : "Prompt is required"
       });
       if (!response2.prompt) {
-        console.log(import_chalk19.default.yellow("\nCancelled."));
+        console.log(import_chalk20.default.yellow("\nCancelled."));
         return;
       }
       automationPrompt = response2.prompt;
@@ -31134,7 +31621,7 @@ async function automationCreateCommand(name, options) {
         }))
       });
       if (!envResponse2.env) {
-        console.log(import_chalk19.default.yellow("\nCancelled."));
+        console.log(import_chalk20.default.yellow("\nCancelled."));
         return;
       }
       selectedEnvironmentId = envResponse2.env;
@@ -31176,7 +31663,7 @@ async function automationCreateCommand(name, options) {
     if (triggers.length === 0) {
       triggers = await promptForTriggers(repositories.map((r) => ({ id: r.id, name: r.name, provider: r.provider })));
       if (triggers.length === 0) {
-        console.log(import_chalk19.default.red("At least one trigger is required."));
+        console.log(import_chalk20.default.red("At least one trigger is required."));
         process.exit(1);
       }
     }
@@ -31207,25 +31694,25 @@ async function automationCreateCommand(name, options) {
       ...agentSelection,
       ...mothershipConfirmation ? { mothership_confirmation: mothershipConfirmation } : {}
     };
-    console.log(import_chalk19.default.gray("\nCreating automation..."));
+    console.log(import_chalk20.default.gray("\nCreating automation..."));
     const response = await orgAuthenticatedFetch("/v1/automations", {
       method: "POST",
       body
     });
     const automation2 = response.automation;
-    console.log(import_chalk19.default.green(`
+    console.log(import_chalk20.default.green(`
 Created automation: ${automation2.name}`));
-    console.log(import_chalk19.default.gray(`  ID: ${automation2.id}`));
-    console.log(import_chalk19.default.gray(`  Enabled: ${automation2.enabled ? "yes" : "no"}`));
+    console.log(import_chalk20.default.gray(`  ID: ${automation2.id}`));
+    console.log(import_chalk20.default.gray(`  Enabled: ${automation2.enabled ? "yes" : "no"}`));
     if (automation2.triggers.length > 0) {
-      console.log(import_chalk19.default.gray(`  Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
+      console.log(import_chalk20.default.gray(`  Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
     }
     if (automation2.cron_next_fire_at) {
-      console.log(import_chalk19.default.gray(`  Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
+      console.log(import_chalk20.default.gray(`  Next Run: ${formatDate2(automation2.cron_next_fire_at)}`));
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk20.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -31235,17 +31722,17 @@ async function automationEditCommand(id, options) {
   if (options.autoStopMinutes) {
     const minutes = parseInt(options.autoStopMinutes, 10);
     if (isNaN(minutes) || minutes < 3 || minutes > 1440) {
-      console.log(import_chalk19.default.red("--auto-stop-minutes must be between 3 and 1440"));
+      console.log(import_chalk20.default.red("--auto-stop-minutes must be between 3 and 1440"));
       process.exit(1);
     }
   }
   const replacingTriggers = Boolean(options.triggerCron || options.triggerGithub || options.triggerGitlab);
   if (replacingTriggers && options.triggerGithubExcludeUsers !== void 0 && !options.triggerGithub) {
-    console.log(import_chalk19.default.red("--trigger-github-exclude-users requires --trigger-github when replacing triggers"));
+    console.log(import_chalk20.default.red("--trigger-github-exclude-users requires --trigger-github when replacing triggers"));
     process.exit(1);
   }
   if (replacingTriggers && options.triggerGitlabExcludeUsers !== void 0 && !options.triggerGitlab) {
-    console.log(import_chalk19.default.red("--trigger-gitlab-exclude-users requires --trigger-gitlab when replacing triggers"));
+    console.log(import_chalk20.default.red("--trigger-gitlab-exclude-users requires --trigger-gitlab when replacing triggers"));
     process.exit(1);
   }
   const parsedAgent = {
@@ -31257,7 +31744,7 @@ async function automationEditCommand(id, options) {
     const existing = await orgAuthenticatedFetch(`/v1/automations/${id}`);
     const autoStopLifecyclePolicy = lifecyclePolicy ?? toAutomationLifecyclePolicy(existing.automation.workspace_lifecycle_policy);
     if (options.autoStopMinutes && !lifecyclePolicySupportsAutoStop(autoStopLifecyclePolicy)) {
-      console.log(import_chalk19.default.red("--auto-stop-minutes requires --lifecycle default"));
+      console.log(import_chalk20.default.red("--auto-stop-minutes requires --lifecycle default"));
       process.exit(1);
     }
     const agentSelection = applyAgentSelection(parsedAgent, {
@@ -31397,11 +31884,11 @@ async function automationEditCommand(id, options) {
           return trigger;
         });
         if (!matchedGithub) {
-          console.log(import_chalk19.default.red("No existing GitHub trigger found. Pass --trigger-github to create one."));
+          console.log(import_chalk20.default.red("No existing GitHub trigger found. Pass --trigger-github to create one."));
           process.exit(1);
         }
         if (!matchedGitlab) {
-          console.log(import_chalk19.default.red("No existing GitLab trigger found. Pass --trigger-gitlab to create one."));
+          console.log(import_chalk20.default.red("No existing GitLab trigger found. Pass --trigger-gitlab to create one."));
           process.exit(1);
         }
       }
@@ -31426,25 +31913,25 @@ async function automationEditCommand(id, options) {
       Object.assign(body, agentSelection);
     }
     if (Object.keys(body).length === 0) {
-      console.log(import_chalk19.default.yellow("\nNo changes made.\n"));
+      console.log(import_chalk20.default.yellow("\nNo changes made.\n"));
       return;
     }
-    console.log(import_chalk19.default.gray("\nUpdating automation..."));
+    console.log(import_chalk20.default.gray("\nUpdating automation..."));
     const response = await orgAuthenticatedFetch(`/v1/automations/${id}`, {
       method: "PATCH",
       body
     });
     const automation2 = response.automation;
-    console.log(import_chalk19.default.green(`
+    console.log(import_chalk20.default.green(`
 Updated automation: ${automation2.name}`));
-    console.log(import_chalk19.default.gray(`  ID: ${automation2.id}`));
-    console.log(import_chalk19.default.gray(`  Enabled: ${automation2.enabled ? "yes" : "no"}`));
+    console.log(import_chalk20.default.gray(`  ID: ${automation2.id}`));
+    console.log(import_chalk20.default.gray(`  Enabled: ${automation2.enabled ? "yes" : "no"}`));
     if (automation2.triggers.length > 0) {
-      console.log(import_chalk19.default.gray(`  Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
+      console.log(import_chalk20.default.gray(`  Triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk20.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -31455,12 +31942,12 @@ async function automationRunCommand(id) {
     const automation2 = existing.automation;
     const hasCronTrigger = automation2.triggers.some((t) => t.type === "cron");
     if (!hasCronTrigger) {
-      console.log(import_chalk19.default.red("\nManual run is only allowed for automations with a cron trigger."));
-      console.log(import_chalk19.default.gray(`This automation has triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
+      console.log(import_chalk20.default.red("\nManual run is only allowed for automations with a cron trigger."));
+      console.log(import_chalk20.default.gray(`This automation has triggers: ${automation2.triggers.map(formatTrigger).join(", ")}`));
       console.log();
       process.exit(1);
     }
-    console.log(import_chalk19.default.gray(`
+    console.log(import_chalk20.default.gray(`
 Triggering automation "${automation2.name}"...`));
     const response = await orgAuthenticatedFetch(
       `/v1/automations/${id}/trigger`,
@@ -31470,20 +31957,20 @@ Triggering automation "${automation2.name}"...`));
       }
     );
     if (!response.execution_id) {
-      console.log(import_chalk19.default.red(`
+      console.log(import_chalk20.default.red(`
 Automation trigger returned no execution ID. The automation may not have started.`));
       console.log();
       process.exit(1);
     }
-    console.log(import_chalk19.default.green(`
+    console.log(import_chalk20.default.green(`
 Automation triggered successfully.`));
-    console.log(import_chalk19.default.gray(`  Execution ID: ${response.execution_id}`));
+    console.log(import_chalk20.default.gray(`  Execution ID: ${response.execution_id}`));
     if (response.workspace_id) {
-      console.log(import_chalk19.default.gray(`  Workspace ID: ${response.workspace_id}`));
+      console.log(import_chalk20.default.gray(`  Workspace ID: ${response.workspace_id}`));
     }
     console.log();
   } catch (error51) {
-    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk20.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
@@ -31500,38 +31987,38 @@ async function automationDeleteCommand(id, options) {
         initial: false
       });
       if (!response.confirm) {
-        console.log(import_chalk19.default.yellow("\nCancelled."));
+        console.log(import_chalk20.default.yellow("\nCancelled."));
         return;
       }
     }
     await orgAuthenticatedFetch(`/v1/automations/${id}`, {
       method: "DELETE"
     });
-    console.log(import_chalk19.default.green(`
+    console.log(import_chalk20.default.green(`
 Automation "${automationName}" (${id}) deleted.
 `));
   } catch (error51) {
-    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk20.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 async function automationCheckCommand(checkRunId, options) {
   const id = Number(checkRunId);
   if (!Number.isSafeInteger(id)) {
-    console.error(import_chalk19.default.red("Error: check run ID must be an integer"));
+    console.error(import_chalk20.default.red("Error: check run ID must be an integer"));
     process.exit(1);
   }
   if (!options.token) {
-    console.error(import_chalk19.default.red("Error: --token is required"));
+    console.error(import_chalk20.default.red("Error: --token is required"));
     process.exit(1);
   }
   const { conclusion } = options;
   if (!isAutomationCheckConclusion(conclusion)) {
-    console.error(import_chalk19.default.red(`Error: --conclusion must be one of ${AUTOMATION_CHECK_CONCLUSIONS.join(", ")}`));
+    console.error(import_chalk20.default.red(`Error: --conclusion must be one of ${AUTOMATION_CHECK_CONCLUSIONS.join(", ")}`));
     process.exit(1);
   }
   if (!options.title?.trim()) {
-    console.error(import_chalk19.default.red("Error: --title is required"));
+    console.error(import_chalk20.default.red("Error: --title is required"));
     process.exit(1);
   }
   const body = {
@@ -31545,23 +32032,23 @@ async function automationCheckCommand(checkRunId, options) {
       `/v1/automations/checks/${id}`,
       { method: "POST", body }
     );
-    console.log(response.reported ? import_chalk19.default.green(`
+    console.log(response.reported ? import_chalk20.default.green(`
 Reported ${conclusion} for "${response.name}".
-`) : import_chalk19.default.yellow(`
+`) : import_chalk20.default.yellow(`
 Skipped "${response.name}" \u2014 a newer run of this automation owns it and will report the verdict.
 `));
   } catch (error51) {
-    console.error(import_chalk19.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
+    console.error(import_chalk20.default.red(`Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
 }
 
 // src/commands/preview.ts
-var import_chalk20 = __toESM(require("chalk"));
+var import_chalk21 = __toESM(require("chalk"));
 
 // src/lib/agent-api.ts
 var ENGINE_PORT = process.env.REPLICAS_ENGINE_PORT || "3737";
-async function agentFetch(path6, options) {
+async function agentFetch(path7, options) {
   const config3 = readAgentConfig();
   if (!config3) {
     throw new Error("Agent mode config not found");
@@ -31575,7 +32062,7 @@ async function agentFetch(path6, options) {
     ...options?.headers || {}
   };
   const body = options?.body === void 0 ? void 0 : isFormData ? options.body : JSON.stringify(options.body);
-  const response = await fetch(`${MONOLITH_URL}${path6}`, {
+  const response = await fetch(`${MONOLITH_URL}${path7}`, {
     ...options,
     headers,
     body
@@ -31586,7 +32073,7 @@ async function agentFetch(path6, options) {
   }
   return response.json();
 }
-async function engineFetch(path6, options) {
+async function engineFetch(path7, options) {
   const config3 = readAgentConfig();
   if (!config3) {
     throw new Error("Agent mode config not found");
@@ -31596,7 +32083,7 @@ async function engineFetch(path6, options) {
     "Content-Type": "application/json",
     ...options?.headers || {}
   };
-  const response = await fetch(`http://localhost:${ENGINE_PORT}${path6}`, {
+  const response = await fetch(`http://localhost:${ENGINE_PORT}${path7}`, {
     ...options,
     headers,
     body: options?.body !== void 0 ? JSON.stringify(options.body) : void 0
@@ -31651,11 +32138,11 @@ async function previewListCommand(workspaceId) {
       `/v1/workspaces/${workspaceId}/previews`
     );
     if (result.previews.length === 0) {
-      console.log(import_chalk20.default.dim("No active previews"));
+      console.log(import_chalk21.default.dim("No active previews"));
       return;
     }
     for (const preview2 of result.previews) {
-      console.log(`  ${import_chalk20.default.cyan(String(preview2.port))} \u2192 ${import_chalk20.default.underline(preview2.publicUrl)}`);
+      console.log(`  ${import_chalk21.default.cyan(String(preview2.port))} \u2192 ${import_chalk21.default.underline(preview2.publicUrl)}`);
     }
   }
 }
@@ -31668,7 +32155,7 @@ async function previewAddCommand(workspaceId, options) {
       body: { port: portNum, authenticated: options.authenticated ?? false }
     }
   );
-  console.log(import_chalk20.default.green(`Preview created: ${result.preview.publicUrl}`));
+  console.log(import_chalk21.default.green(`Preview created: ${result.preview.publicUrl}`));
 }
 async function previewDeleteCommand(port) {
   const portNum = parsePreviewPort(port);
@@ -31681,12 +32168,12 @@ async function previewRemoveCommand(workspaceId, options) {
     `/v1/workspaces/${workspaceId}/previews/${portNum}`,
     { method: "DELETE" }
   );
-  console.log(import_chalk20.default.green(`Preview deleted on port ${portNum}`));
+  console.log(import_chalk21.default.green(`Preview deleted on port ${portNum}`));
 }
 
 // src/commands/media.ts
-var import_fs4 = __toESM(require("fs"));
-var import_path5 = __toESM(require("path"));
+var import_fs5 = __toESM(require("fs"));
+var import_path6 = __toESM(require("path"));
 var MEDIA_ACCESS_VALUES = ["organization", "public"];
 function publicMediaUrl(mediaId, token) {
   return `${MONOLITH_URL}/v1/media/public/${mediaId}/${token}`;
@@ -31726,22 +32213,22 @@ function resolveKind(ext, override) {
   return inferred;
 }
 async function uploadOne(filePath, displayName, kind, options) {
-  const absPath = import_path5.default.resolve(filePath);
-  if (!import_fs4.default.existsSync(absPath)) {
+  const absPath = import_path6.default.resolve(filePath);
+  if (!import_fs5.default.existsSync(absPath)) {
     throw new Error(`File not found: ${absPath}`);
   }
-  const stat = import_fs4.default.statSync(absPath);
+  const stat = import_fs5.default.statSync(absPath);
   if (!stat.isFile()) {
     throw new Error(`Not a file: ${absPath}`);
   }
   if (stat.size === 0) {
     throw new Error("File is empty");
   }
-  const fileName = import_path5.default.basename(absPath);
-  const ext = import_path5.default.extname(absPath).slice(1).toLowerCase();
+  const fileName = import_path6.default.basename(absPath);
+  const ext = import_path6.default.extname(absPath).slice(1).toLowerCase();
   const contentType = mediaInfo(ext)?.contentType ?? "application/octet-stream";
   const form = new FormData();
-  form.append("file", new Blob([import_fs4.default.readFileSync(absPath)], { type: contentType }), fileName);
+  form.append("file", new Blob([import_fs5.default.readFileSync(absPath)], { type: contentType }), fileName);
   form.append("kind", kind);
   if (options.sessionId) form.append("session_id", options.sessionId);
   form.append("display_name", displayName);
@@ -31775,7 +32262,7 @@ async function mediaUploadCommand(filePaths, options) {
   }
   const publicAccess = options.share || options.access === "public";
   const kinds = filePaths.map((filePath) => {
-    const ext = import_path5.default.extname(filePath).slice(1).toLowerCase();
+    const ext = import_path6.default.extname(filePath).slice(1).toLowerCase();
     return resolveKind(ext, options.kind);
   });
   if (publicAccess && kinds.some((kind) => !isPublicMediaKind(kind))) {
@@ -31861,7 +32348,7 @@ async function mediaListCommand(options) {
 }
 
 // src/commands/slack.ts
-var import_chalk21 = __toESM(require("chalk"));
+var import_chalk22 = __toESM(require("chalk"));
 function getThreadOptions(options) {
   const channelId = options.channel || process.env.REPLICAS_SLACK_CHANNEL_ID || process.env.SLACK_CHANNEL_ID;
   const threadTs = options.threadTs || process.env.REPLICAS_SLACK_THREAD_TS || process.env.SLACK_THREAD_TS;
@@ -31878,10 +32365,10 @@ async function attachThread(request) {
     method: "POST",
     body: request
   });
-  console.log(import_chalk21.default.green("Slack thread attached."));
-  console.log(import_chalk21.default.gray(`  Channel: ${response.thread.channel_id}`));
-  console.log(import_chalk21.default.gray(`  Thread: ${response.thread.thread_ts}`));
-  console.log(import_chalk21.default.gray(`  Workspace: ${response.workspace.name} (${response.workspace.id})`));
+  console.log(import_chalk22.default.green("Slack thread attached."));
+  console.log(import_chalk22.default.gray(`  Channel: ${response.thread.channel_id}`));
+  console.log(import_chalk22.default.gray(`  Thread: ${response.thread.thread_ts}`));
+  console.log(import_chalk22.default.gray(`  Workspace: ${response.workspace.name} (${response.workspace.id})`));
 }
 async function slackThreadAttachCommand(options) {
   const agentConfig = readAgentConfig();
@@ -31910,7 +32397,7 @@ async function slackThreadSwitchCommand(workspace, options) {
 }
 
 // src/commands/service.ts
-var import_chalk22 = __toESM(require("chalk"));
+var import_chalk23 = __toESM(require("chalk"));
 var import_node_child_process2 = require("child_process");
 var import_node_fs2 = require("fs");
 var import_node_os2 = require("os");
@@ -32053,7 +32540,7 @@ async function serviceListCommand() {
     return;
   }
   for (const state of states) {
-    const status = isRunning(state.pid) ? import_chalk22.default.green("running") : import_chalk22.default.red("stopped");
+    const status = isRunning(state.pid) ? import_chalk23.default.green("running") : import_chalk23.default.red("stopped");
     console.log(`${state.name}  ${status}  pid ${state.pid}  started ${state.startedAt}`);
     console.log(`  command: ${state.command}  (cwd: ${state.cwd})`);
     console.log(`  logs: ${state.logFile}`);
@@ -32159,8 +32646,8 @@ Workspace: ${workspaceNameForOutput(result.workspace_name)} (${getWorkspaceDashb
 }
 
 // src/commands/environment.ts
-var import_fs5 = __toESM(require("fs"));
-var import_chalk23 = __toESM(require("chalk"));
+var import_fs6 = __toESM(require("fs"));
+var import_chalk24 = __toESM(require("chalk"));
 var import_prompts8 = __toESM(require("prompts"));
 function maskValue(value) {
   if (value.length <= 4) return "\u2022\u2022\u2022\u2022";
@@ -32172,38 +32659,38 @@ async function resolveEnvironmentId(input) {
   const response = await orgAuthenticatedFetch("/v1/environments");
   const resolved = resolveByNameOrId(input, response.environments);
   if (!resolved) {
-    console.log(import_chalk23.default.red(`Environment not found: ${input}`));
+    console.log(import_chalk24.default.red(`Environment not found: ${input}`));
     const available = response.environments.map((e) => e.name).join(", ");
-    console.log(import_chalk23.default.gray(`Available: ${available || "(none)"}`));
+    console.log(import_chalk24.default.gray(`Available: ${available || "(none)"}`));
     process.exit(1);
   }
   return resolved.id;
 }
 function printEnvironment(env) {
-  console.log(import_chalk23.default.white(`  ${env.name}${env.is_global ? import_chalk23.default.gray(" (global)") : ""}`));
-  console.log(import_chalk23.default.gray(`    ID: ${env.id}`));
+  console.log(import_chalk24.default.white(`  ${env.name}${env.is_global ? import_chalk24.default.gray(" (global)") : ""}`));
+  console.log(import_chalk24.default.gray(`    ID: ${env.id}`));
   if (env.description) {
-    console.log(import_chalk23.default.gray(`    Description: ${env.description}`));
+    console.log(import_chalk24.default.gray(`    Description: ${env.description}`));
   }
   if (env.repository_id) {
-    console.log(import_chalk23.default.gray(`    Repository: ${env.repository_id}`));
+    console.log(import_chalk24.default.gray(`    Repository: ${env.repository_id}`));
   } else if (env.repository_set_id) {
-    console.log(import_chalk23.default.gray(`    Repository Set: ${env.repository_set_id}`));
+    console.log(import_chalk24.default.gray(`    Repository Set: ${env.repository_set_id}`));
   }
   if (env.variable_count !== void 0) {
-    console.log(import_chalk23.default.gray(`    Variables: ${env.variable_count}, Files: ${env.file_count ?? 0}, Skills: ${env.skill_count ?? 0}, MCPs: ${env.mcp_count ?? 0}`));
+    console.log(import_chalk24.default.gray(`    Variables: ${env.variable_count}, Files: ${env.file_count ?? 0}, Skills: ${env.skill_count ?? 0}, MCPs: ${env.mcp_count ?? 0}`));
   }
-  console.log(import_chalk23.default.gray(`    Updated: ${formatDate2(env.updated_at)}`));
+  console.log(import_chalk24.default.gray(`    Updated: ${formatDate2(env.updated_at)}`));
   console.log();
 }
 async function environmentListCommand() {
   ensureOrgApiAuthenticated();
   const response = await orgAuthenticatedFetch("/v1/environments");
   if (response.environments.length === 0) {
-    console.log(import_chalk23.default.yellow("\nNo environments found.\n"));
+    console.log(import_chalk24.default.yellow("\nNo environments found.\n"));
     return;
   }
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Environments (${response.environments.length}):
 `));
   for (const env of response.environments) {
@@ -32214,7 +32701,7 @@ async function environmentGetCommand(idOrName) {
   ensureOrgApiAuthenticated();
   const id = await resolveEnvironmentId(idOrName);
   const response = await orgAuthenticatedFetch(`/v1/environments/${id}`);
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Environment: ${response.environment.name}
 `));
   printEnvironment(response.environment);
@@ -32230,7 +32717,7 @@ async function environmentCreateCommand(name, options) {
       validate: (v) => v.trim() ? true : "Name is required"
     });
     if (!r.name) {
-      console.log(import_chalk23.default.yellow("\nCancelled."));
+      console.log(import_chalk24.default.yellow("\nCancelled."));
       return;
     }
     envName = r.name;
@@ -32243,8 +32730,8 @@ async function environmentCreateCommand(name, options) {
       const repos2 = await orgAuthenticatedFetch("/v1/repositories");
       const repo = repos2.repositories.find((r) => r.name === options.repository);
       if (!repo) {
-        console.log(import_chalk23.default.red(`Repository not found: ${options.repository}`));
-        console.log(import_chalk23.default.gray(`Available: ${repos2.repositories.map((r) => r.name).join(", ")}`));
+        console.log(import_chalk24.default.red(`Repository not found: ${options.repository}`));
+        console.log(import_chalk24.default.gray(`Available: ${repos2.repositories.map((r) => r.name).join(", ")}`));
         process.exit(1);
       }
       repositoryId = repo.id;
@@ -32274,9 +32761,9 @@ async function environmentCreateCommand(name, options) {
     method: "POST",
     body
   });
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Created environment: ${response.environment.name}`));
-  console.log(import_chalk23.default.gray(`  ID: ${response.environment.id}
+  console.log(import_chalk24.default.gray(`  ID: ${response.environment.id}
 `));
 }
 async function environmentEditCommand(idOrName, options) {
@@ -32295,21 +32782,21 @@ async function environmentEditCommand(idOrName, options) {
       const repos2 = await orgAuthenticatedFetch("/v1/repositories");
       const repo = repos2.repositories.find((r) => r.name === options.repository);
       if (!repo) {
-        console.log(import_chalk23.default.red(`Repository not found: ${options.repository}`));
+        console.log(import_chalk24.default.red(`Repository not found: ${options.repository}`));
         process.exit(1);
       }
       body.repository_id = repo.id;
     }
   }
   if (Object.keys(body).length === 0) {
-    console.log(import_chalk23.default.yellow("\nNo changes specified. Pass --name, --description, --repository, or --system-prompt."));
+    console.log(import_chalk24.default.yellow("\nNo changes specified. Pass --name, --description, --repository, or --system-prompt."));
     return;
   }
   const response = await orgAuthenticatedFetch(`/v1/environments/${id}`, {
     method: "PATCH",
     body
   });
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Updated environment: ${response.environment.name}
 `));
 }
@@ -32324,20 +32811,20 @@ async function environmentDeleteCommand(idOrName, options) {
       initial: false
     });
     if (!r.confirm) {
-      console.log(import_chalk23.default.yellow("\nCancelled."));
+      console.log(import_chalk24.default.yellow("\nCancelled."));
       return;
     }
   }
   await orgAuthenticatedFetch(`/v1/environments/${id}`, { method: "DELETE" });
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Deleted environment ${idOrName}.
 `));
 }
 function printVariable(v, reveal) {
-  console.log(import_chalk23.default.white(`  ${v.key}`));
-  console.log(import_chalk23.default.gray(`    ID: ${v.id}`));
-  console.log(import_chalk23.default.gray(`    Value: ${reveal ? v.value : maskValue(v.value)}`));
-  console.log(import_chalk23.default.gray(`    Updated: ${formatDate2(v.updated_at)}`));
+  console.log(import_chalk24.default.white(`  ${v.key}`));
+  console.log(import_chalk24.default.gray(`    ID: ${v.id}`));
+  console.log(import_chalk24.default.gray(`    Value: ${reveal ? v.value : maskValue(v.value)}`));
+  console.log(import_chalk24.default.gray(`    Updated: ${formatDate2(v.updated_at)}`));
   console.log();
 }
 async function envVarsListCommand(envIdOrName, options) {
@@ -32347,14 +32834,14 @@ async function envVarsListCommand(envIdOrName, options) {
     `/v1/environments/${id}/variables`
   );
   if (response.environment_variables.length === 0) {
-    console.log(import_chalk23.default.yellow("\nNo variables.\n"));
+    console.log(import_chalk24.default.yellow("\nNo variables.\n"));
     return;
   }
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Variables (${response.environment_variables.length}):
 `));
   if (!options.reveal) {
-    console.log(import_chalk23.default.gray("  Values are masked. Pass --reveal to show full values.\n"));
+    console.log(import_chalk24.default.gray("  Values are masked. Pass --reveal to show full values.\n"));
   }
   for (const v of response.environment_variables) printVariable(v, !!options.reveal);
 }
@@ -32371,7 +32858,7 @@ async function envVarsSetCommand(envIdOrName, key, value) {
       `/v1/environments/${id}/variables/${match.id}`,
       { method: "PATCH", body: body2 }
     );
-    console.log(import_chalk23.default.green(`
+    console.log(import_chalk24.default.green(`
 Updated variable ${response2.environment_variable.key}.
 `));
     return;
@@ -32385,7 +32872,7 @@ Updated variable ${response2.environment_variable.key}.
     `/v1/environments/${id}/variables`,
     { method: "POST", body }
   );
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Created variable ${response.environment_variable.key}.
 `));
 }
@@ -32399,7 +32886,7 @@ async function envVarsDeleteCommand(envIdOrName, keyOrId, options) {
     );
     const match = existing.environment_variables.find((v) => v.key === keyOrId);
     if (!match) {
-      console.log(import_chalk23.default.red(`Variable not found: ${keyOrId}`));
+      console.log(import_chalk24.default.red(`Variable not found: ${keyOrId}`));
       process.exit(1);
     }
     variableId = match.id;
@@ -32412,23 +32899,23 @@ async function envVarsDeleteCommand(envIdOrName, keyOrId, options) {
       initial: false
     });
     if (!r.confirm) {
-      console.log(import_chalk23.default.yellow("\nCancelled."));
+      console.log(import_chalk24.default.yellow("\nCancelled."));
       return;
     }
   }
   await orgAuthenticatedFetch(`/v1/environments/${id}/variables/${variableId}`, {
     method: "DELETE"
   });
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Deleted variable ${keyOrId}.
 `));
 }
 function printFile(f) {
-  console.log(import_chalk23.default.white(`  ${f.path}`));
-  console.log(import_chalk23.default.gray(`    ID: ${f.id}`));
-  console.log(import_chalk23.default.gray(`    Name: ${f.name}`));
-  console.log(import_chalk23.default.gray(`    Size: ${f.content.length} bytes`));
-  console.log(import_chalk23.default.gray(`    Updated: ${formatDate2(f.updated_at)}`));
+  console.log(import_chalk24.default.white(`  ${f.path}`));
+  console.log(import_chalk24.default.gray(`    ID: ${f.id}`));
+  console.log(import_chalk24.default.gray(`    Name: ${f.name}`));
+  console.log(import_chalk24.default.gray(`    Size: ${f.content.length} bytes`));
+  console.log(import_chalk24.default.gray(`    Updated: ${formatDate2(f.updated_at)}`));
   console.log();
 }
 async function envFilesListCommand(envIdOrName) {
@@ -32438,20 +32925,20 @@ async function envFilesListCommand(envIdOrName) {
     `/v1/environments/${id}/files`
   );
   if (response.environment_files.length === 0) {
-    console.log(import_chalk23.default.yellow("\nNo files.\n"));
+    console.log(import_chalk24.default.yellow("\nNo files.\n"));
     return;
   }
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Files (${response.environment_files.length}):
 `));
   for (const f of response.environment_files) printFile(f);
 }
 function readFileContent(options) {
   if (options.file) {
-    if (!import_fs5.default.existsSync(options.file)) {
+    if (!import_fs6.default.existsSync(options.file)) {
       throw new Error(`Local file not found: ${options.file}`);
     }
-    return import_fs5.default.readFileSync(options.file, "utf-8");
+    return import_fs6.default.readFileSync(options.file, "utf-8");
   }
   if (options.content !== void 0) return options.content;
   throw new Error('Pass either --content "..." or --file <local-path>');
@@ -32472,7 +32959,7 @@ async function envFilesSetCommand(envIdOrName, destinationPath, options) {
       `/v1/environments/${id}/files/${match.id}`,
       { method: "PATCH", body: body2 }
     );
-    console.log(import_chalk23.default.green(`
+    console.log(import_chalk24.default.green(`
 Updated file ${response2.environment_file.path}.
 `));
     return;
@@ -32487,7 +32974,7 @@ Updated file ${response2.environment_file.path}.
     `/v1/environments/${id}/files`,
     { method: "POST", body }
   );
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Created file ${response.environment_file.path}.
 `));
 }
@@ -32501,7 +32988,7 @@ async function envFilesDeleteCommand(envIdOrName, pathOrId, options) {
     );
     const match = existing.environment_files.find((f) => f.path === pathOrId);
     if (!match) {
-      console.log(import_chalk23.default.red(`File not found: ${pathOrId}`));
+      console.log(import_chalk24.default.red(`File not found: ${pathOrId}`));
       process.exit(1);
     }
     fileId = match.id;
@@ -32514,14 +33001,14 @@ async function envFilesDeleteCommand(envIdOrName, pathOrId, options) {
       initial: false
     });
     if (!r.confirm) {
-      console.log(import_chalk23.default.yellow("\nCancelled."));
+      console.log(import_chalk24.default.yellow("\nCancelled."));
       return;
     }
   }
   await orgAuthenticatedFetch(`/v1/environments/${id}/files/${fileId}`, {
     method: "DELETE"
   });
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Deleted file ${pathOrId}.
 `));
 }
@@ -32530,16 +33017,16 @@ async function envHookGetCommand(envIdOrName, kind) {
   const id = await resolveEnvironmentId(envIdOrName);
   const hook = kind === "warm" ? (await orgAuthenticatedFetch(`/v1/environments/${id}/warm-hooks`)).warm_hook : (await orgAuthenticatedFetch(`/v1/environments/${id}/start-hooks`)).start_hook;
   if (!hook) {
-    console.log(import_chalk23.default.yellow(`
+    console.log(import_chalk24.default.yellow(`
 No ${kind} hook configured.
 `));
     return;
   }
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 ${kind === "warm" ? "Warm" : "Start"} hook (v${hook.version}, ${hook.is_active ? "active" : "inactive"}):
 `));
-  console.log(import_chalk23.default.gray(`  ID: ${hook.id}`));
-  console.log(import_chalk23.default.gray(`  Created: ${formatDate2(hook.created_at)}
+  console.log(import_chalk24.default.gray(`  ID: ${hook.id}`));
+  console.log(import_chalk24.default.gray(`  Created: ${formatDate2(hook.created_at)}
 `));
   console.log(hook.content);
   console.log();
@@ -32554,7 +33041,7 @@ async function envHookSaveCommand(envIdOrName, options, kind) {
       `/v1/environments/${id}/warm-hooks/save`,
       { method: "POST", body: body2 }
     );
-    console.log(import_chalk23.default.green(`
+    console.log(import_chalk24.default.green(`
 Saved warm hook v${response2.warm_hook.version}.
 `));
     return;
@@ -32564,7 +33051,7 @@ Saved warm hook v${response2.warm_hook.version}.
     `/v1/environments/${id}/start-hooks/save`,
     { method: "POST", body }
   );
-  console.log(import_chalk23.default.green(response.start_hook ? `
+  console.log(import_chalk24.default.green(response.start_hook ? `
 Saved start hook v${response.start_hook.version}.
 ` : "\nCleared start hook.\n"));
 }
@@ -32581,7 +33068,7 @@ async function envHookTestCommand(envIdOrName, options, kind) {
       body: kind === "warm" ? { content, mode: options.save ? "save_test" : "test_only" } : { content },
       onEvent: (event) => {
         if (event.type === "progress" && event.message) {
-          console.log(import_chalk23.default.gray(event.message));
+          console.log(import_chalk24.default.gray(event.message));
         } else if (event.type === "output" && event.output) {
           process.stdout.write(event.output);
         } else if (event.type === "complete") {
@@ -32594,23 +33081,23 @@ async function envHookTestCommand(envIdOrName, options, kind) {
     }
   );
   if (errorMessage) {
-    console.log(import_chalk23.default.red(`
+    console.log(import_chalk24.default.red(`
 ${errorMessage}
 `));
     process.exit(1);
   }
   if (timedOut) {
-    console.log(import_chalk23.default.yellow(`
+    console.log(import_chalk24.default.yellow(`
 ${kind === "warm" ? "Warm" : "Start"} hook timed out.
 `));
     process.exit(1);
   }
   if (exitCode === 0) {
-    console.log(import_chalk23.default.green(`
+    console.log(import_chalk24.default.green(`
 ${kind === "warm" ? "Warm" : "Start"} hook passed${options.save ? " and was saved" : ""} (exit code ${exitCode}).
 `));
   } else {
-    console.log(import_chalk23.default.red(`
+    console.log(import_chalk24.default.red(`
 ${kind === "warm" ? "Warm" : "Start"} hook failed (exit code ${exitCode ?? "unknown"}).
 `));
     process.exit(1);
@@ -32625,24 +33112,24 @@ async function envHookRepositoryHooksCommand(envIdOrName, kind) {
     `/v1/environments/${id}/start-hooks/repository-hooks`
   )).repositories.map((repository) => ({ ...repository, hook: repository.start_hook }));
   if (repositories.length === 0) {
-    console.log(import_chalk23.default.yellow("\nNo repositories bound to this environment.\n"));
+    console.log(import_chalk24.default.yellow("\nNo repositories bound to this environment.\n"));
     return;
   }
-  console.log(import_chalk23.default.green(`
+  console.log(import_chalk24.default.green(`
 Repository ${kind} hooks (${repositories.length}):
 `));
   for (const repo of repositories) {
-    console.log(import_chalk23.default.white(`  ${repo.repository_name} @${repo.default_branch}`));
+    console.log(import_chalk24.default.white(`  ${repo.repository_name} @${repo.default_branch}`));
     if (repo.error) {
-      console.log(import_chalk23.default.red(`    Error: ${repo.error}`));
+      console.log(import_chalk24.default.red(`    Error: ${repo.error}`));
     } else if (repo.hook) {
-      console.log(import_chalk23.default.gray(`    Source: ${repo.filename ?? "(unknown)"}`));
-      console.log(import_chalk23.default.gray(`    Commands (${repo.hook.commands.length}):`));
+      console.log(import_chalk24.default.gray(`    Source: ${repo.filename ?? "(unknown)"}`));
+      console.log(import_chalk24.default.gray(`    Commands (${repo.hook.commands.length}):`));
       for (const cmd of repo.hook.commands) {
-        console.log(import_chalk23.default.gray(`      ${cmd}`));
+        console.log(import_chalk24.default.gray(`      ${cmd}`));
       }
     } else {
-      console.log(import_chalk23.default.gray(`    No ${kind}Hook defined.`));
+      console.log(import_chalk24.default.gray(`    No ${kind}Hook defined.`));
     }
     console.log();
   }
@@ -32707,7 +33194,7 @@ program.hook("preAction", async (_command, actionCommand) => {
       throw new Error('No organization selected. Run "replicas org switch" to select one.');
     }
   } catch (error51) {
-    console.error(import_chalk24.default.red(`
+    console.error(import_chalk25.default.red(`
 \u2717 ${error51 instanceof Error ? error51.message : "Unknown error"}
 `));
     process.exit(1);
@@ -32721,7 +33208,7 @@ function registerSlackCommands(parent) {
       await slackThreadAttachCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -32733,7 +33220,7 @@ function registerSlackCommands(parent) {
       await slackThreadSwitchCommand(workspace, options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -32747,7 +33234,7 @@ program.command("login").description("Authenticate with your Replicas account").
     await loginCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32759,7 +33246,7 @@ program.command("init").description("Create a replicas.json or replicas.yaml con
     initCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32771,7 +33258,7 @@ program.command("logout").description("Clear stored credentials").action(() => {
     logoutCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32782,7 +33269,7 @@ program.command("muse-auth").description("Connect your Muse Code subscription to
   try {
     await museAuthCommand(options);
   } catch (error51) {
-    if (error51 instanceof Error) console.error(import_chalk24.default.red(`
+    if (error51 instanceof Error) console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     process.exit(1);
@@ -32793,7 +33280,7 @@ program.command("whoami").description("Display current authenticated user").acti
     await whoamiCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32805,7 +33292,7 @@ program.command("codex-auth").description("Connect your Codex credentials to Rep
     await codexAuthCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32817,7 +33304,7 @@ program.command("claude-auth").description("Connect your Claude Code credentials
     await claudeAuthCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32830,7 +33317,7 @@ org.command("switch").description("Switch to a different organization").action(a
     await orgSwitchCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32842,7 +33329,7 @@ org.action(async () => {
     await orgCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32854,7 +33341,7 @@ program.command("connect <workspace-name...>").description("Connect to a workspa
     await connectCommand(workspaceName.join(" "));
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32865,7 +33352,7 @@ program.command("tunnel <workspace-name...>").description("Forward a workspace p
   try {
     await tunnelCommand(workspaceName.join(" "), options);
   } catch (error51) {
-    console.error(import_chalk24.default.red(`
+    console.error(import_chalk25.default.red(`
 Error: ${error51 instanceof Error ? error51.message : "Unknown error"}`));
     process.exit(1);
   }
@@ -32875,7 +33362,7 @@ program.command("code [workspace-name...]").description("Open a workspace in VSC
     await codeCommand(workspaceName.join(" "));
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32888,7 +33375,7 @@ config2.command("get <key>").description("Get a configuration value").action(asy
     await configGetCommand(key);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32900,7 +33387,7 @@ config2.command("set <key> <value>").description("Set a configuration value").ac
     await configSetCommand(key, value);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32912,7 +33399,7 @@ config2.command("list").description("List all configuration values").action(asyn
     await configListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32924,7 +33411,7 @@ program.command("list").description("List all replicas").option("-p, --page <pag
     await replicaListCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32936,7 +33423,7 @@ program.command("get <id>").description("Get replica details by ID").action(asyn
     await replicaGetCommand(id);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32948,7 +33435,7 @@ program.command("create [name]").description("Create a new replica").option("-m,
     await replicaCreateCommand(name, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32960,7 +33447,7 @@ program.command("send <id>").description("Send a message to a replica").option("
     await replicaSendCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32972,7 +33459,7 @@ program.command("delete <id>").description("Delete a replica").option("-f, --for
     await replicaDeleteCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32984,7 +33471,7 @@ program.command("read <id>").description("Read conversation history of a replica
     await replicaReadCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -32997,7 +33484,7 @@ automation.command("list").description("List all automations").option("-p, --pag
     await automationListCommand(options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33009,7 +33496,7 @@ automation.command("get <id>").description("Get automation details by ID").actio
     await automationGetCommand(id);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33024,7 +33511,7 @@ automation.command("create [name]").description("Create a new automation").optio
     });
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33036,7 +33523,7 @@ automation.command("edit <id>").description("Edit an existing automation").optio
     await automationEditCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33048,7 +33535,7 @@ automation.command("run <id>").description("Manually trigger an automation (cron
     await automationRunCommand(id);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33060,7 +33547,7 @@ automation.command("delete <id>").description("Delete an automation").option("-f
     await automationDeleteCommand(id, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33072,7 +33559,7 @@ automation.command("check <checkRunId>").description("Report this automation run
     await automationCheckCommand(checkRunId, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33084,7 +33571,7 @@ automation.action(async () => {
     await automationListCommand({});
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33097,7 +33584,7 @@ repos.command("list").description("List all repositories").action(async () => {
     await repositoriesListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33109,7 +33596,7 @@ repos.action(async () => {
     await repositoriesListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33122,7 +33609,7 @@ environment.command("list").description("List all environments").action(async ()
     await environmentListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33134,7 +33621,7 @@ environment.command("get <id-or-name>").description('Get an environment by ID or
     await environmentGetCommand(idOrName);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33146,7 +33633,7 @@ environment.command("create [name]").description("Create a new environment").opt
     await environmentCreateCommand(name, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33158,7 +33645,7 @@ environment.command("edit <id-or-name>").description("Edit an environment").opti
     await environmentEditCommand(idOrName, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33170,7 +33657,7 @@ environment.command("delete <id-or-name>").description("Delete an environment").
     await environmentDeleteCommand(idOrName, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33183,7 +33670,7 @@ envVars.command("list <env>").description("List variables in an environment (val
     await envVarsListCommand(env, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33195,7 +33682,7 @@ envVars.command("set <env> <key> <value>").description("Create or update a varia
     await envVarsSetCommand(env, key, value);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33207,7 +33694,7 @@ envVars.command("delete <env> <key-or-id>").description("Delete a variable by ke
     await envVarsDeleteCommand(env, keyOrId, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33220,7 +33707,7 @@ envFiles.command("list <env>").description("List files in an environment").actio
     await envFilesListCommand(env);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33232,7 +33719,7 @@ envFiles.command("set <env> <destination-path>").description("Create or update a
     await envFilesSetCommand(env, destinationPath, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33244,7 +33731,7 @@ envFiles.command("delete <env> <path-or-id>").description("Delete a file by dest
     await envFilesDeleteCommand(env, pathOrId, options);
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33257,7 +33744,7 @@ function registerEnvironmentHookCommands(parent, config3) {
     try {
       await command();
     } catch (error51) {
-      if (error51 instanceof Error) console.error(import_chalk24.default.red(`
+      if (error51 instanceof Error) console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       process.exit(1);
@@ -33293,7 +33780,7 @@ environment.action(async () => {
     await environmentListCommand();
   } catch (error51) {
     if (error51 instanceof Error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
     }
@@ -33344,7 +33831,7 @@ if (isAgentMode()) {
       await previewAddCommand(workspaceId, options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33356,7 +33843,7 @@ if (isAgentMode()) {
       await previewListCommand(workspaceId);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33368,7 +33855,7 @@ if (isAgentMode()) {
       await previewRemoveCommand(workspaceId, options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33376,6 +33863,26 @@ if (isAgentMode()) {
     }
   });
 }
+if (isEnvironmentSetupWorkspace()) {
+  const environmentSetup = program.command("environment-setup").description("Report progress and propose configuration for an agent-led environment setup run");
+  const runEnvironmentSetupCommand = (action) => async () => {
+    try {
+      await action();
+    } catch (error51) {
+      if (error51 instanceof Error) {
+        console.error(import_chalk25.default.red(`
+\u2717 ${error51.message}
+`));
+      }
+      process.exit(1);
+    }
+  };
+  environmentSetup.command("status").description("Show the setup run attached to this workspace").action(runEnvironmentSetupCommand(() => environmentSetupStatusCommand()));
+  environmentSetup.command("step <key> <status>").description("Update a checklist step (understand | install | verify | configure | propose) to pending | in_progress | completed | skipped").action((key, status) => runEnvironmentSetupCommand(() => environmentSetupStepCommand(key, status))());
+  environmentSetup.command("propose").description("Submit the proposed configuration for the user to review and save").requiredOption("-f, --file <path>", "Path to the proposal JSON file").action((options) => runEnvironmentSetupCommand(() => environmentSetupProposeCommand(options))());
+  environmentSetup.command("request-variables").description("Ask the user for variables the app needs; returns immediately so you can keep working").requiredOption("-f, --file <path>", 'Path to a JSON file: { "variables": [{ "key", "description", "required" }] }').action((options) => runEnvironmentSetupCommand(() => environmentSetupRequestVariablesCommand(options))());
+  environmentSetup.command("wait-variables").description("Wait until requested required variables are provided or skipped, then export them for new shells (default 5m)").option("-t, --timeout <duration>", "How long to wait, e.g. 90s or 5m (max 15m)").option("-k, --keys <keys>", "Comma-separated keys to wait for instead of every pending required key").action((options) => runEnvironmentSetupCommand(() => environmentSetupWaitVariablesCommand(options))());
+}
 if (isAgentMode()) {
   const identity = program.command("identity").description("Obtain short-lived workspace identity tokens (OIDC) for the services this workspace calls");
   identity.command("token").description("Print a workspace token for an audience (defaults to replicas:workspace)").option("-a, --audience <audience>", "Audience (`aud`) the receiving service verifies, for example its URL").addOption(new import_commander.Option("--format <format>", "Output a raw token or Google executable credentials").choices(["text", "gcp"]).default("text")).action(identityTokenCommand);
@@ -33433,7 +33940,7 @@ if (isAgentMode()) {
       await mediaUploadCommand(files, options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33444,7 +33951,7 @@ if (isAgentMode()) {
     try {
       await mediaShareCommand(mediaId);
     } catch (error51) {
-      if (error51 instanceof Error) console.error(import_chalk24.default.red(`
+      if (error51 instanceof Error) console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       process.exit(1);
@@ -33454,7 +33961,7 @@ if (isAgentMode()) {
     try {
       await mediaRevokeCommand(mediaId);
     } catch (error51) {
-      if (error51 instanceof Error) console.error(import_chalk24.default.red(`
+      if (error51 instanceof Error) console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       process.exit(1);
@@ -33464,7 +33971,7 @@ if (isAgentMode()) {
     try {
       await mediaDeleteCommand(mediaId);
     } catch (error51) {
-      if (error51 instanceof Error) console.error(import_chalk24.default.red(`
+      if (error51 instanceof Error) console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       process.exit(1);
@@ -33475,7 +33982,7 @@ if (isAgentMode()) {
       await mediaListCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33488,7 +33995,7 @@ if (isAgentMode()) {
       await mothershipMonitorChannelCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33500,7 +34007,7 @@ if (isAgentMode()) {
       await mothershipSpawnCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33512,7 +34019,7 @@ if (isAgentMode()) {
       await mothershipRelayCommand(options);
     } catch (error51) {
       if (error51 instanceof Error) {
-        console.error(import_chalk24.default.red(`
+        console.error(import_chalk25.default.red(`
 \u2717 ${error51.message}
 `));
       }
@@ -33534,6 +34041,7 @@ if (isAgentMode()) {
     "automation",
     "repos",
     "environment",
+    "environment-setup",
     "mothership"
   ]);
   const kept = program.commands.filter((cmd) => allowed.has(cmd.name()));
@@ -33545,7 +34053,7 @@ async function main() {
   if (process.argv[2] === "computer" && isAgentMode()) {
     const result = (0, import_node_child_process3.spawnSync)("replicas-computer", process.argv.slice(3), { stdio: "inherit" });
     if (result.error) {
-      console.error(import_chalk24.default.red(`
+      console.error(import_chalk25.default.red(`
 \u2717 replicas-computer is unavailable in this workspace image
 `));
       process.exitCode = 1;