@bike4mind/cli 0.2.82 → 0.3.0

package/dist/{ConfigStore-DTyUBb3A.mjs → ConfigStore-o5AblHqQ.mjs}

@@ -6,7 +6,7 @@ import os, { homedir } from "os";
 import path from "path";
 import { v4 } from "uuid";
 import * as z$2 from "zod";
-import z$1, { z } from "zod";
+import z$1, { ZodError, z } from "zod";
 import dayjs from "dayjs";
 import timezone from "dayjs/plugin/timezone.js";
 import utc from "dayjs/plugin/utc.js";
@@ -23,9 +23,41 @@ let CollectionType = /* @__PURE__ */ function(CollectionType) {
 }({});
 //#endregion
 //#region ../../b4m-core/common/dist/index.mjs
+var HTTPError = class extends Error {
+	constructor(statusCode, message, additionalInfo) {
+		super(message);
+		this.statusCode = statusCode;
+		this.additionalInfo = additionalInfo;
+		this.name = "HTTPError";
+	}
+};
+var InternalServerError = class extends HTTPError {
+	constructor(message, additionalInfo) {
+		super(500, message, additionalInfo);
+		this.additionalInfo = additionalInfo;
+		this.name = "InternalServerError";
+	}
+};
+var NotFoundError = class extends HTTPError {
+	constructor(message, additionalInfo) {
+		super(404, message, additionalInfo);
+		this.additionalInfo = additionalInfo;
+		this.name = "NotFoundError";
+	}
+};
+var UnprocessableEntityError = class extends HTTPError {
+	constructor(message, additionalInfo) {
+		super(422, message, additionalInfo);
+		this.additionalInfo = additionalInfo;
+		this.name = "UnprocessableEntityError";
+	}
+};
+function isZodError(err) {
+	return Boolean(err && (err instanceof ZodError || err.name === "ZodError"));
+}
 /**
-* Error thrown when user denies permission for a tool
-* This should break the agent loop immediately and return control to the user
+* Error thrown when user denies permission for a tool.
+* This should break the agent loop immediately and return control to the user.
 */
 var PermissionDeniedError = class extends Error {
 	constructor(toolName, toolArgs) {
@@ -35,6 +67,18 @@ var PermissionDeniedError = class extends Error {
 		this.name = "PermissionDeniedError";
 	}
 };
+function secureParameters(params, schema) {
+	try {
+		return schema.parse(params);
+	} catch (e) {
+		if (isZodError(e)) throw new UnprocessableEntityError(e.issues.map((err) => `${err.path.join(".")}: ${err.message}`).join(", "));
+		throw new InternalServerError();
+	}
+}
+function obfuscateApiKey(apiKey) {
+	if (!apiKey) return apiKey;
+	return `${apiKey.slice(0, 3)}${"*".repeat(apiKey.length - 6)}${apiKey.slice(-3)}`;
+}
 /**
 * Model backends
 */
@@ -57,6 +101,7 @@ let ImageModels = /* @__PURE__ */ function(ImageModels) {
 	ImageModels["GPT_IMAGE_1"] = "gpt-image-1";
 	ImageModels["GPT_IMAGE_1_5"] = "gpt-image-1.5";
 	ImageModels["GPT_IMAGE_1_MINI"] = "gpt-image-1-mini";
+	ImageModels["GPT_IMAGE_2"] = "gpt-image-2";
 	ImageModels["DALL_E_2"] = "dall-e-2";
 	ImageModels["FLUX_PRO"] = "flux-pro";
 	ImageModels["FLUX_PRO_1_1"] = "flux-pro-1.1";
@@ -105,6 +150,7 @@ let ChatModels = /* @__PURE__ */ function(ChatModels) {
 	ChatModels["GPT5_4"] = "gpt-5.4";
 	ChatModels["GPT5_4_MINI"] = "gpt-5.4-mini";
 	ChatModels["GPT5_4_NANO"] = "gpt-5.4-nano";
+	ChatModels["GPT5_5"] = "gpt-5.5";
 	ChatModels["LLAMA3_INSTRUCT_8B_V1"] = "meta.llama3-8b-instruct-v1:0";
 	ChatModels["LLAMA3_INSTRUCT_70B_V1"] = "meta.llama3-70b-instruct-v1:0";
 	ChatModels["LLAMA4_MAVERICK_17B_INSTRUCT_BEDROCK"] = "us.meta.llama4-maverick-17b-instruct-v1:0";
@@ -176,27 +222,30 @@ const supportedChatModels = z.enum(ChatModels);
 * o1-preview and o1-mini do NOT support reasoning_effort.
 */
 const REASONING_SUPPORTED_MODELS = new Set([
-	ChatModels.O1,
-	ChatModels.O3_MINI,
-	ChatModels.O3,
-	ChatModels.O4_MINI,
-	ChatModels.GPT5,
-	ChatModels.GPT5_MINI,
-	ChatModels.GPT5_NANO,
-	ChatModels.GPT5_1,
-	ChatModels.GPT5_2
+	"o1-2024-12-17",
+	"o3-mini-2025-01-31",
+	"o3-2025-04-16",
+	"o4-mini-2025-04-16",
+	"gpt-5",
+	"gpt-5-mini",
+	"gpt-5-nano",
+	"gpt-5.1",
+	"gpt-5.2"
 ]);
 /**
 * Models that only support temperature=1 (no custom temperature).
-* Includes all reasoning models (OpenAI requires temp=1 when reasoning is active)
-* plus chat-latest variants that also enforce this constraint.
+* Includes:
+*  - All reasoning models (OpenAI requires temp=1 when reasoning is active)
+*  - chat-latest variants that enforce this constraint
+*  - GPT-5.5, which rejects custom temperature even though it does not expose
+*    reasoning controls
 */
 const FIXED_TEMPERATURE_MODELS = new Set([
 	...REASONING_SUPPORTED_MODELS,
-	ChatModels.GPT5_1_CHAT_LATEST,
-	ChatModels.GPT5_2_CHAT_LATEST
+	"gpt-5.1-chat-latest",
+	"gpt-5.2-chat-latest",
+	"gpt-5.5"
 ]);
-new Set([ChatModels.CLAUDE_4_7_OPUS, ChatModels.CLAUDE_4_7_OPUS_BEDROCK]);
 /**
 * Speech to Text Models
 *
@@ -250,49 +299,62 @@ z$1.enum([
 	"gemini"
 ]);
 z$1.enum(["openai"]);
-VideoModels.SORA_2, VideoModels.SORA_2_PRO;
 VIDEO_SIZE_CONSTRAINTS.SORA.durations;
 VIDEO_SIZE_CONSTRAINTS.SORA.sizes;
 z.object({
+	/** Text description of the video to generate */
 	prompt: z.string().min(1).max(1e4),
-	model: z.enum(VideoModels).prefault(VideoModels.SORA_2),
+	/** Model to use for generation */
+	model: z.enum(VideoModels).prefault("sora-2"),
+	/** Video duration in seconds: 4, 8, or 12 */
 	seconds: z.union([
 		z.literal(4),
 		z.literal(8),
 		z.literal(12)
 	]).prefault(4),
+	/** Video resolution */
 	size: z.enum([
 		"720x1280",
 		"1280x720",
 		"1024x1792",
 		"1792x1024"
 	]).prefault(VIDEO_SIZE_CONSTRAINTS.SORA.defaultSize),
+	/** Optional user identifier for abuse tracking */
 	user: z.string().optional()
 });
 z.object({
+	/** Unique identifier for the video generation job */
 	id: z.string(),
+	/** Current status of the job */
 	status: z.enum([
 		"queued",
 		"in_progress",
 		"completed",
 		"failed"
 	]),
+	/** Error message if the job failed */
 	error: z.object({
 		message: z.string(),
 		code: z.string().optional()
 	}).optional(),
+	/** Timestamp when the job was created */
 	created_at: z.number().optional()
 });
 z.object({
+	/** Unique identifier for the video */
 	id: z.string(),
+	/** Status should be 'completed' */
 	status: z.literal("completed"),
+	/** URL to download the video (temporary, expires after a period) */
 	video_url: z.url().optional(),
+	/** Video duration in seconds */
 	duration: z.number().optional(),
+	/** Video resolution */
 	resolution: z.string().optional()
 });
 z.object({
 	prompt: z.string().min(1),
-	model: z.enum(VideoModels).optional().prefault(VideoModels.SORA_2),
+	model: z.enum(VideoModels).optional().prefault("sora-2"),
 	seconds: z.union([
 		z.literal(4),
 		z.literal(8),
@@ -681,8 +743,14 @@ const groupShareSchema = z.object({
 const userShareSchema = z.object({
 	userId: z.string(),
 	permissions: z.array(z.enum(Permission)),
+	/** The project ID if the user is shared from a project */
 	projectId: z.string().optional(),
-	extraData: z.object({ lastExportDate: z.date().optional() }).optional(),
+	extraData: z.object({ 
+	/** The last time the user exported data */
+lastExportDate: z.date().optional() }).optional(),
+	/**
+	* TODO: To be replaced with proper user zod schema
+	*/
 	user: z.any().optional()
 });
 const shareableDocumentSchema = z.object({
@@ -691,7 +759,6 @@ const shareableDocumentSchema = z.object({
 	users: z.array(userShareSchema),
 	groups: z.array(groupShareSchema)
 });
-ChatModels.GPT4o_MINI;
 let ApiKeyScope = /* @__PURE__ */ function(ApiKeyScope) {
 	ApiKeyScope["READ_NOTEBOOKS"] = "notebooks:read";
 	ApiKeyScope["WRITE_NOTEBOOKS"] = "notebooks:write";
@@ -732,6 +799,9 @@ const BaseCreditTransaction = z.object({
 	id: z.string().optional(),
 	ownerId: z.string(),
 	ownerType: z.enum(CreditHolderType),
+	/**
+	* Credits used or added
+	*/
 	credits: z.number(),
 	description: z.string().optional(),
 	metadata: z.record(z.string(), z.any()).optional(),
@@ -743,6 +813,9 @@ const BaseCreditTransaction = z.object({
 */
 const PurchaseTransaction = BaseCreditTransaction.extend({
 	type: z.literal("purchase"),
+	/**
+	* @deprecated Use ownerId and ownerType instead
+	*/
 	userId: z.string().optional(),
 	status: z.enum(CreditPurchaseStatus),
 	stripePaymentIntentId: z.string(),
@@ -768,7 +841,13 @@ const ReceivedCreditTransaction = BaseCreditTransaction.extend({
 */
 const GenericCreditAddTransaction = BaseCreditTransaction.extend({
 	type: z.literal("generic_add"),
+	/**
+	* @deprecated Use ownerId and ownerType instead
+	*/
 	userId: z.string().optional(),
+	/**
+	* Optional reason/source for the transaction (e.g., 'admin_grant', 'refund', 'adjustment', 'legacy_purchase')
+	*/
 	reason: z.string().optional()
 });
 /**
@@ -778,7 +857,13 @@ const GenericCreditAddTransaction = BaseCreditTransaction.extend({
 */
 const GenericCreditDeductTransaction = BaseCreditTransaction.extend({
 	type: z.literal("generic_deduct"),
+	/**
+	* @deprecated Use ownerId and ownerType instead
+	*/
 	userId: z.string().optional(),
+	/**
+	* Optional reason/source for the transaction (e.g., 'admin_adjustment', 'legacy_usage', 'manual_deduction')
+	*/
 	reason: z.string().optional()
 });
 const TextGenerationUsageTransaction = BaseCreditTransaction.extend({
@@ -899,6 +984,15 @@ let TagType = /* @__PURE__ */ function(TagType) {
 	TagType["SESSION"] = "session";
 	return TagType;
 }({});
+const SRE_BLOCKED_FILE_DEFAULTS = [
+	"infra/**",
+	"*.secret*",
+	"*.env*",
+	"*migration*",
+	".github/workflows/**",
+	"**/package.json",
+	"pnpm-lock.yaml"
+];
 const SRE_GATE_DEFAULTS = {
 	enabled: true,
 	autoThreshold: 85,
@@ -914,38 +1008,68 @@ const SreGateConfigSchema = z.object({
 	message: "autoThreshold must be >= askThreshold",
 	path: ["autoThreshold"]
 });
-/** Base allowed patterns — always merged into stored config.
-*  Keep in sync with scripts/apply-sre-fix.cjs ALLOWED_PATTERNS */
-const SRE_BASE_ALLOWED_PATTERNS = [
-	"apps/client/**",
-	"b4m-core/services/**",
-	"b4m-core/common/src/**",
-	"b4m-core/utils/src/llm/**",
-	"packages/database/src/**"
-];
-const SreAgentConfigSchema = z.object({
+/**
+* Each repo is a completely independent, self-contained configuration unit.
+* No defaults, no inheritance — every project is different.
+*/
+const SreRepoConfigSchema = z.object({
+	/** GitHub org/user that owns the target repo */
+	owner: z.string().min(1),
+	/** Repository name */
+	repo: z.string().min(1),
+	/** Whether this repo's SRE pipeline is active */
 	enabled: z.boolean().default(false),
-	maxFixesPerDay: z.number().min(0).default(5),
-	maxDiffLines: z.number().min(1).default(50),
+	/** LLM model ID for Diagnostician */
 	modelId: z.string().default("claude-sonnet-4-20250514"),
-	slack: z.object({
-		workspaceId: z.string().optional(),
-		channelId: z.string().optional(),
-		approverIds: z.string().default("")
-	}).default({ approverIds: "" }),
-	github: z.object({
-		owner: z.string().default(""),
-		repo: z.string().default(""),
-		reviewers: z.string().default(""),
-		webhookSecret: z.string().default(""),
-		callbackToken: z.string().default("")
+	/** Max diff lines per fix */
+	maxDiffLines: z.number().min(1).default(50),
+	/** Max fixes dispatched per day for this repo */
+	maxFixesPerDay: z.number().min(0).default(5),
+	/** Max revision attempts before escalating to human */
+	maxRevisions: z.number().int().min(0).max(10).default(2),
+	/** Log actions without dispatching */
+	dryRun: z.boolean().default(false),
+	/** Comma-separated GitHub usernames to request as PR reviewers */
+	reviewers: z.string().default(""),
+	/** Default branch name (auto-detected via GitHub API if empty) */
+	defaultBranch: z.string().default(""),
+	/** Build command for the workflow */
+	buildCommand: z.string().default(""),
+	/** Files the Surgeon can modify (glob patterns). Base patterns always merged in. */
+	allowedFilePatterns: z.array(z.string()).default([]),
+	/** Files never auto-fixed (glob patterns) */
+	blockedFilePatterns: z.array(z.string()).default([...SRE_BLOCKED_FILE_DEFAULTS]),
+	/** HMAC secret for webhook verification (encrypted at rest) */
+	webhookSecret: z.string().default(""),
+	/** Bearer token for workflow callback auth (encrypted at rest) */
+	callbackToken: z.string().default(""),
+	/** Human-in-the-loop approval gates */
+	gates: z.object({
+		sentinelToDiagnostician: SreGateConfigSchema.default({ ...SRE_GATE_DEFAULTS }),
+		diagnosticianToSurgeon: SreGateConfigSchema.default({ ...SRE_GATE_DEFAULTS })
+	}).default({
+		sentinelToDiagnostician: { ...SRE_GATE_DEFAULTS },
+		diagnosticianToSurgeon: { ...SRE_GATE_DEFAULTS }
+	}),
+	/** Circuit breaker */
+	circuitBreaker: z.object({
+		failureThreshold: z.number().min(1).default(3),
+		cooldownMinutes: z.number().min(1).default(30)
+	}).default({
+		failureThreshold: 3,
+		cooldownMinutes: 30
+	}),
+	/** Token budget per analysis */
+	tokenBudget: z.object({
+		maxInputTokens: z.number().default(5e4),
+		maxOutputTokens: z.number().default(8e3),
+		maxGithubApiCalls: z.number().default(20)
 	}).default({
-		owner: "",
-		repo: "",
-		reviewers: "",
-		webhookSecret: "",
-		callbackToken: ""
+		maxInputTokens: 5e4,
+		maxOutputTokens: 8e3,
+		maxGithubApiCalls: 20
 	}),
+	/** Error sources */
 	sources: z.object({
 		cloudwatch: z.object({ enabled: z.boolean().default(false) }).default({ enabled: false }),
 		github: z.object({
@@ -974,32 +1098,7 @@ const SreAgentConfigSchema = z.object({
 			}
 		}
 	}),
-	gates: z.object({
-		sentinelToDiagnostician: SreGateConfigSchema.default({ ...SRE_GATE_DEFAULTS }),
-		diagnosticianToSurgeon: SreGateConfigSchema.default({ ...SRE_GATE_DEFAULTS })
-	}).default({
-		sentinelToDiagnostician: { ...SRE_GATE_DEFAULTS },
-		diagnosticianToSurgeon: { ...SRE_GATE_DEFAULTS }
-	}),
-	allowedFilePatterns: z.array(z.string()).default([...SRE_BASE_ALLOWED_PATTERNS]).transform((patterns) => {
-		return [...new Set([...SRE_BASE_ALLOWED_PATTERNS, ...patterns])];
-	}),
-	blockedFilePatterns: z.array(z.string()).default([
-		"infra/**",
-		"*.secret*",
-		"*.env*",
-		"*migration*",
-		".github/workflows/**",
-		"**/package.json",
-		"pnpm-lock.yaml"
-	]),
-	circuitBreaker: z.object({
-		failureThreshold: z.number().min(1).default(3),
-		cooldownMinutes: z.number().min(1).default(30)
-	}).default({
-		failureThreshold: 3,
-		cooldownMinutes: 30
-	}),
+	/** Recurrence guard */
 	recurrence: z.object({
 		enabled: z.boolean().default(true),
 		windowDays: z.number().int().min(1).max(30).default(14),
@@ -1009,15 +1108,7 @@ const SreAgentConfigSchema = z.object({
 		windowDays: 14,
 		threshold: 1
 	}),
-	tokenBudget: z.object({
-		maxInputTokens: z.number().default(5e4),
-		maxOutputTokens: z.number().default(8e3),
-		maxGithubApiCalls: z.number().default(20)
-	}).default({
-		maxInputTokens: 5e4,
-		maxOutputTokens: 8e3,
-		maxGithubApiCalls: 20
-	}),
+	/** Pattern library */
 	patternLibrary: z.object({
 		enabled: z.boolean().default(true),
 		minConfidence: z.number().min(0).max(100).default(80)
@@ -1025,10 +1116,48 @@ const SreAgentConfigSchema = z.object({
 		enabled: true,
 		minConfidence: 80
 	}),
-	dryRun: z.boolean().default(false),
-	maxRevisions: z.number().int().min(0).max(10).default(2)
+	/** Slack integration */
+	slack: z.object({
+		workspaceId: z.string().optional(),
+		channelId: z.string().optional(),
+		approverIds: z.string().default("")
+	}).default({ approverIds: "" })
 });
 /**
+* SRE Agent Config — stored in AdminSettings.
+*
+* Structure: `{ repos[] }`. Each repo is fully self-contained.
+* v1 (flat) configs are transparently migrated via `z.preprocess`.
+*/
+const SreAgentConfigSchema = z.preprocess((raw) => {
+	const obj = raw && typeof raw === "object" ? raw : {};
+	if (obj.repos) return obj;
+	const github = obj.github ?? {};
+	const legacyRepo = github.owner && github.repo ? {
+		owner: github.owner,
+		repo: github.repo,
+		reviewers: github.reviewers || "",
+		webhookSecret: github.webhookSecret || "",
+		callbackToken: github.callbackToken || "",
+		...obj.enabled !== void 0 ? { enabled: obj.enabled } : {},
+		...obj.modelId !== void 0 ? { modelId: obj.modelId } : {},
+		...obj.maxDiffLines !== void 0 ? { maxDiffLines: obj.maxDiffLines } : {},
+		...obj.maxFixesPerDay !== void 0 ? { maxFixesPerDay: obj.maxFixesPerDay } : {},
+		...obj.maxRevisions !== void 0 ? { maxRevisions: obj.maxRevisions } : {},
+		...obj.dryRun !== void 0 ? { dryRun: obj.dryRun } : {},
+		...obj.gates ? { gates: obj.gates } : {},
+		...obj.circuitBreaker ? { circuitBreaker: obj.circuitBreaker } : {},
+		...obj.tokenBudget ? { tokenBudget: obj.tokenBudget } : {},
+		...obj.recurrence ? { recurrence: obj.recurrence } : {},
+		...obj.patternLibrary ? { patternLibrary: obj.patternLibrary } : {},
+		...obj.allowedFilePatterns ? { allowedFilePatterns: obj.allowedFilePatterns } : {},
+		...obj.blockedFilePatterns ? { blockedFilePatterns: obj.blockedFilePatterns } : {},
+		...obj.sources ? { sources: obj.sources } : {},
+		...obj.slack ? { slack: obj.slack } : {}
+	} : null;
+	return { repos: legacyRepo ? [legacyRepo] : [] };
+}, z.object({ repos: z.array(SreRepoConfigSchema).default([]) }));
+/**
 * Configuration schema for the SecOps Triage feature.
 *
 * Controls automatic GitHub issue creation for critical/high ZAP scan findings.
@@ -1037,9 +1166,13 @@ const SreAgentConfigSchema = z.object({
 * Setting name: 'secopsTriageConfig'
 */
 const SecopsTriageConfigSchema = z.object({
+	/** Master kill switch */
 	enabled: z.boolean().default(false),
+	/** GitHub repository to create issues in (e.g. 'MillionOnMars/lumina5') */
 	githubRepo: z.string().default("MillionOnMars/lumina5"),
+	/** Minimum ZAP severity level that triggers issue creation */
 	severityThreshold: z.enum(["critical", "high"]).default("high"),
+	/** Map ZAP severity levels to GitHub issue priority labels */
 	severityToPriority: z.object({
 		critical: z.enum(["P0", "P1"]).default("P0"),
 		high: z.enum(["P0", "P1"]).default("P1")
@@ -1047,11 +1180,17 @@ const SecopsTriageConfigSchema = z.object({
 		critical: "P0",
 		high: "P1"
 	}),
+	/** Maximum number of issues to create per scan (sorted by severity, highest first) */
 	maxIssuesPerScan: z.number().min(1).max(100).default(20),
+	/** Slack workspace ID to use for posting (must match an active workspace in Admin → Slack Workspaces). Falls back to first active workspace if not set. */
 	slackWorkspaceId: z.string().optional(),
+	/** Slack channel ID to post triage summary to (optional) */
 	slackChannelId: z.string().optional(),
+	/** Enable LLM enrichment: per-finding remediation guidance + overall health assessment */
 	llmEnrichment: z.boolean().default(false),
+	/** LLM model ID to use for enrichment (e.g. 'claude-3-5-haiku-20241022') */
 	modelId: z.string().optional(),
+	/** Log actions without creating real GitHub issues or posting to Slack */
 	dryRun: z.boolean().default(false)
 }).refine((data) => !data.llmEnrichment || !!data.modelId, {
 	message: "modelId is required when llmEnrichment is enabled",
@@ -1100,7 +1239,6 @@ let SupportedFabFileMimeTypes = /* @__PURE__ */ function(SupportedFabFileMimeTyp
 	SupportedFabFileMimeTypes["CONF"] = "text/plain";
 	return SupportedFabFileMimeTypes;
 }({});
-SupportedFabFileMimeTypes.TS, SupportedFabFileMimeTypes.JS, SupportedFabFileMimeTypes.CSS, SupportedFabFileMimeTypes.PY, SupportedFabFileMimeTypes.JAVA, SupportedFabFileMimeTypes.CPP, SupportedFabFileMimeTypes.CS, SupportedFabFileMimeTypes.PHP, SupportedFabFileMimeTypes.RUBY, SupportedFabFileMimeTypes.GO, SupportedFabFileMimeTypes.SWIFT, SupportedFabFileMimeTypes.KOTLIN, SupportedFabFileMimeTypes.RUST;
 /**
 * ========================================
 * Client to Server Actions
@@ -1873,6 +2011,7 @@ const TavernHeartbeatLogAction = z.object({
 /** Server → Client: real-time quest board update (replaces polling) */
 const TavernQuestUpdateAction = z.object({
 	action: z.literal("tavern_quest_update"),
+	/** The full refreshed quest list (top-level only, no sub-quests) */
 	quests: z.array(z.object({
 		_id: z.string(),
 		title: z.string(),
@@ -1936,6 +2075,26 @@ const CcAgentStatus = z.enum([
 	"disconnected"
 ]);
 /**
+* Engine behind a code agent. Drives chip color in the Tavern and gates which
+* command shapes the server will dispatch to the bridge.
+*  - `claude`: the official Claude Code CLI, surfaced via hooks + transcript
+*    tail (observer+). Read-only — no interactive commands.
+*  - `sdk-embedded`: Claude Agent SDK hosted in-process inside cc-bridge.
+*    Interactive — prompt composer + permission resolver + abort.
+*  - `b4m-cli`: the in-house `@bike4mind/cli` announcing over cc-bridge
+*    loopback. Interactive.
+*/
+const CcAgentSource = z.enum([
+	"claude",
+	"sdk-embedded",
+	"b4m-cli"
+]);
+/**
+* Capabilities an agent exposes. Gates interactive UI in `CodeAgentModal`.
+* Open-ended for forward-compat; v1 recognises `interactive` only.
+*/
+const CcAgentCapability = z.enum(["interactive"]);
+/**
 * Bridge → Server: announce a new Claude Code session.
 *
 * The server persists an ActiveCodeAgent record keyed by instanceId, picks a
@@ -1949,12 +2108,27 @@ const CcBridgeAccessTokenSchema = z.string().max(512).optional();
 const CcAgentRegisterAction = z.object({
 	action: z.literal("cc_agent_register"),
 	accessToken: CcBridgeAccessTokenSchema,
+	/** Stable ID the bridge generates per CC session (uuid). */
 	instanceId: z.string().min(1).max(128),
+	/** ID of the paired device (from `CcBridgeDevice`). */
 	deviceId: z.string().min(1).max(128),
+	/** Display name — typically the basename of workspacePath. */
 	workspaceName: z.string().min(1).max(200),
+	/** Absolute cwd of the CC session on the user's machine. Bound below
+	*  Linux PATH_MAX (4096) to keep broadcasts and Mongo docs small. */
 	workspacePath: z.string().max(1024),
+	/** Claude Code CLI version if the bridge can detect it. */
 	claudeVersion: z.string().max(32).optional(),
-	startedAt: z.string().max(40)
+	/** ISO timestamp the CC session started. */
+	startedAt: z.string().max(40),
+	/** Engine behind this session. Drives chip color + command dispatch. Older
+	*  bridges that predate the interactive path don't send this; server defaults
+	*  to `'claude'` (observer+) to preserve their current behavior. */
+	source: CcAgentSource.optional(),
+	/** Capabilities this session supports. Gates interactive UI affordances in
+	*  the modal. Absent == read-only (observer+). `max(8)` is a belt-and-braces
+	*  bound; we only recognise `'interactive'` today. */
+	capabilities: z.array(CcAgentCapability).max(8).optional()
 });
 /**
 * Bridge → Server: stream an event for an already-registered session.
@@ -1964,39 +2138,68 @@ const CcAgentRegisterAction = z.object({
 *  2. Tailing the session's transcript.jsonl in `~/.claude/projects/`
 *     (observer+ mode) → `message`, `tool_use`, `tool_result`.
 *
-* A future SDK-embed path (`b4m-claude`) will emit the same shapes but from
-* an in-process session rather than a tailed file; `permission_request` and
-* `artifact` variants will land with that mode.
+* The interactive SDK-embed path (inside cc-bridge, per D13) and B4M CLI
+* announces emit the same shapes plus the `permission_request` /
+* `permission_resolved` variants below for the prompt-the-user flow.
 */
 const CcAgentEventPayload = z.discriminatedUnion("type", [
 	z.object({
 		type: z.literal("status"),
 		status: CcAgentStatus,
+		/** Optional human-readable reason for the status change. Bounded here
+		*  to defend against oversized broadcasts; the server also truncates to
+		*  MAX_SUMMARY_LEN before persisting. */
 		text: z.string().max(4e3).optional()
 	}),
 	z.object({
 		type: z.literal("message"),
 		role: z.enum(["user", "assistant"]),
+		/** Full message text (bridge clamps to this cap before sending). */
 		text: z.string().max(4e3)
 	}),
 	z.object({
 		type: z.literal("tool_use"),
+		/** Tool name as emitted by Claude (e.g. `Bash`, `Read`, `Edit`). */
 		tool: z.string().min(1).max(128),
+		/** Stable ID so a later `tool_result` can be matched back. */
 		toolUseId: z.string().min(1).max(128),
+		/** Human-readable summary of the tool input (e.g. command, file path).
+		*  Bridge pre-summarizes rich inputs; we don't store raw JSON blobs. */
 		text: z.string().max(4e3).optional()
 	}),
 	z.object({
 		type: z.literal("tool_result"),
 		tool: z.string().min(1).max(128).optional(),
 		toolUseId: z.string().min(1).max(128),
+		/** Result body (truncated by the bridge to this cap). */
 		text: z.string().max(4e3).optional(),
 		isError: z.boolean().optional()
+	}),
+	z.object({
+		type: z.literal("permission_request"),
+		/** Opaque id the agent generated. The resolve command must echo it. */
+		requestId: z.string().min(1).max(128),
+		/** Tool (or broader capability) the agent wants to use, e.g. `Bash`. */
+		toolName: z.string().min(1).max(128),
+		/** Human-readable summary of what the agent wants to do. Bridge/CLI
+		*  pre-summarizes rich input blobs; this is display-safe. */
+		input: z.string().max(4e3).optional()
+	}),
+	z.object({
+		type: z.literal("permission_resolved"),
+		requestId: z.string().min(1).max(128),
+		allow: z.boolean(),
+		/** Who resolved it; `'auto'` covers SDK/CLI local rules. */
+		resolvedBy: z.enum(["user", "auto"]).optional()
 	})
 ]);
 const CcAgentEventAction = z.object({
 	action: z.literal("cc_agent_event"),
 	accessToken: CcBridgeAccessTokenSchema,
 	instanceId: z.string().min(1).max(128),
+	/** ISO timestamp when the event occurred on the user's machine. `.datetime()`
+	*  gives an explicit first-line validator; the handler still defends with a
+	*  `new Date()` fallback for older bridges. */
 	timestamp: z.string().datetime().max(40),
 	event: CcAgentEventPayload
 });
@@ -2012,6 +2215,38 @@ const CcAgentDisconnectAction = z.object({
 	instanceId: z.string().min(1).max(128),
 	reason: z.string().max(200).optional()
 });
+/**
+* Server → Bridge: a user-driven command the bridge should apply to one of
+* its active sessions. Dispatched by `POST /api/cc-bridge/command` after the
+* server validates ownership + rate-limits, pushed over the bridge's WS via
+* the existing `sendToConnection` mechanism.
+*
+* The bridge is responsible for routing to the right local session and (for
+* external engines like the B4M CLI) forwarding over its loopback back-channel.
+*/
+const CcAgentCommandPayload = z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("send_prompt"),
+		/** Full prompt text. Same cap as user-turn messages; UI will enforce. */
+		text: z.string().min(1).max(4e3)
+	}),
+	z.object({
+		type: z.literal("resolve_permission"),
+		/** Must match the `requestId` from a prior `permission_request` event. */
+		requestId: z.string().min(1).max(128),
+		allow: z.boolean()
+	}),
+	z.object({ type: z.literal("abort") })
+]);
+const CcAgentCommandAction = z.object({
+	action: z.literal("cc_agent_command"),
+	/** Target session on the bridge; bridge looks it up in its session map. */
+	instanceId: z.string().min(1).max(128),
+	/** Server-minted correlation id so the client can follow up on failures
+	*  without racing against the eventual event echo. */
+	requestId: z.string().min(1).max(128),
+	command: CcAgentCommandPayload
+});
 const SessionCreatedAction = shareableDocumentSchema.extend({
 	action: z.literal("session.created"),
 	id: z.string(),
@@ -2102,7 +2337,8 @@ z.discriminatedUnion("action", [
 	TavernQuestUpdateAction,
 	TavernStockUpdateAction,
 	JupyterNotebookProgressAction,
-	DataLakeBatchProgressAction
+	DataLakeBatchProgressAction,
+	CcAgentCommandAction
 ]);
 z.object({
 	model: z.string(),
@@ -2618,10 +2854,15 @@ z$1.object({
 	fileName: z$1.string(),
 	mimeType: z$1.string(),
 	fileSize: z$1.number(),
+	/** The path to the file */
 	path: z$1.string().optional(),
+	/** SHA-256 content hash for deduplication */
 	contentHash: z$1.string().optional(),
+	/** Batch ID for data lake uploads */
 	batchId: z$1.string().optional(),
+	/** Original relative path from folder upload */
 	relativePath: z$1.string().optional(),
+	/** Tags to apply to the file on creation */
 	tags: z$1.array(z$1.object({
 		name: z$1.string(),
 		strength: z$1.number()
@@ -2633,7 +2874,9 @@ z$1.object({
 	mimeType: z$1.string(),
 	fileSize: z$1.number(),
 	fileContent: z$1.string().optional(),
+	/** Set to true if the file should be publicly accessible */
 	public: z$1.boolean().optional(),
+	/** The prefix to use for the file path */
 	prefix: z$1.string().optional()
 });
 /**
@@ -2648,12 +2891,12 @@ const BFL_SAFETY_TOLERANCE = {
 * List of image models supported by BlackForest Labs
 */
 const BFL_IMAGE_MODELS = [
-	ImageModels.FLUX_PRO_1_1,
-	ImageModels.FLUX_PRO,
-	ImageModels.FLUX_PRO_ULTRA,
-	ImageModels.FLUX_PRO_FILL,
-	ImageModels.FLUX_KONTEXT_PRO,
-	ImageModels.FLUX_KONTEXT_MAX
+	"flux-pro-1.1",
+	"flux-pro",
+	"flux-pro-1.1-ultra",
+	"flux-pro-1.0-fill",
+	"flux-kontext-pro",
+	"flux-kontext-max"
 ];
 const CommonBFLParams = z.object({
 	prompt: z.string().nullable().optional(),
@@ -2689,12 +2932,12 @@ CommonBFLParams.extend({
 * XAI/Grok Image Models
 * Based on https://docs.x.ai/docs/guides/image-generations
 */
-const XAI_IMAGE_MODELS = [ImageModels.GROK_2_IMAGE];
+const XAI_IMAGE_MODELS = ["grok-2-image"];
 /**
 * Gemini Image Models (Nano Banana)
 * Based on https://ai.google.dev/gemini-api/docs/image-generation
 */
-const GEMINI_IMAGE_MODELS = [ImageModels.GEMINI_2_5_FLASH_IMAGE, ImageModels.GEMINI_3_PRO_IMAGE_PREVIEW];
+const GEMINI_IMAGE_MODELS = ["gemini-2.5-flash-image", "gemini-3-pro-image-preview"];
 z.object({
 	prompt: z.string().min(1),
 	n: z.number().min(1).max(8).prefault(1).optional(),
@@ -2736,9 +2979,10 @@ const ChatCompletionCreateInputSchema = z.object({
 	})).optional()
 });
 const OPENAI_IMAGE_MODELS = [
-	ImageModels.GPT_IMAGE_1,
-	ImageModels.GPT_IMAGE_1_5,
-	ImageModels.GPT_IMAGE_1_MINI
+	"gpt-image-1",
+	"gpt-image-1.5",
+	"gpt-image-1-mini",
+	"gpt-image-2"
 ];
 const ALL_IMAGE_MODELS = [
 	...OPENAI_IMAGE_MODELS,
@@ -2751,9 +2995,23 @@ const OPENAI_GPT_IMAGE_1_IMAGE_SIZES = [
 	"1024x1536",
 	"1536x1024"
 ];
+const OPENAI_GPT_IMAGE_2_IMAGE_SIZES = [
+	"1024x1024",
+	"1536x1024",
+	"1024x1536",
+	"2048x2048",
+	"2048x1152",
+	"3840x2160",
+	"2160x3840",
+	"auto"
+];
 const BFL_IMAGE_SIZES = ["1024x768"];
 const OPENAI_IMAGE_SIZES = [...OPENAI_GPT_IMAGE_1_IMAGE_SIZES];
-const ALL_IMAGE_SIZES = [...OPENAI_IMAGE_SIZES, ...BFL_IMAGE_SIZES];
+const ALL_IMAGE_SIZES = [
+	...OPENAI_IMAGE_SIZES,
+	...OPENAI_GPT_IMAGE_2_IMAGE_SIZES,
+	...BFL_IMAGE_SIZES
+];
 z.enum(OPENAI_IMAGE_SIZES);
 const ImageSizeSchema = z.union([z.enum(ALL_IMAGE_SIZES), z.string().regex(/^\d+x\d+$/, { error: "Size must be in format 'widthxheight'" })]);
 const OpenAIImageQualitySchema = z.enum([
@@ -2761,7 +3019,8 @@ const OpenAIImageQualitySchema = z.enum([
 	"hd",
 	"low",
 	"medium",
-	"high"
+	"high",
+	"auto"
 ]);
 const OpenAIImageStyleSchema = z.enum(["vivid", "natural"]);
 /**
@@ -2769,8 +3028,8 @@ const OpenAIImageStyleSchema = z.enum(["vivid", "natural"]);
 * Prevents Zod validation failures when clients send stale persisted model names.
 */
 const LEGACY_IMAGE_MODEL_MAP = {
-	"dall-e-3": ImageModels.GPT_IMAGE_1,
-	"dall-e-2": ImageModels.GPT_IMAGE_1
+	"dall-e-3": "gpt-image-1",
+	"dall-e-2": "gpt-image-1"
 };
 const OpenAIImageGenerationInput = z.object({
 	prompt: z.string(),
@@ -2939,6 +3198,9 @@ z.enum([
 	"WolframAlphaKey",
 	"FmpApiKey",
 	"EnableFmpFinancialData",
+	"PotionQuestApiKey",
+	"EnablePotionQuest",
+	"EnableTavernQuestBoardContext",
 	"VectorThreshold",
 	"bflApiKey",
 	"EnableMCPServer",
@@ -3211,7 +3473,13 @@ const WhatsNewSyncConfigSchema = z.object({
 		"failed"
 	]).optional(),
 	lastSyncModalId: z.string().optional(),
+	/** Error message from last sync attempt (only populated when lastSyncResult is 'failed') */
 	lastSyncError: z.string().max(500).optional(),
+	/**
+	* Admin override for distribution URL.
+	* Must be validated against domain allowlist (CloudFront/S3 only) before saving.
+	* Takes precedence over SST secret when set.
+	*/
 	distributionUrlOverride: z.url().nullable().optional()
 });
 const CONTEXT_TELEMETRY_VALIDATION_LIMITS = {
@@ -3302,31 +3570,57 @@ const CONTEXT_TELEMETRY_VALIDATION_LIMITS = {
 };
 const CT = CONTEXT_TELEMETRY_VALIDATION_LIMITS;
 const ContextTelemetryAlertsSchema = z.object({
+	/** Whether telemetry alerts are enabled */
 	enabled: z.boolean().default(false),
+	/** MongoDB ObjectId of the Slack workspace to use */
 	slackWorkspaceId: z.string().optional(),
+	/** Slack channel ID for posting anomaly alerts */
 	slackChannelId: z.string().optional(),
+	/** GitHub repository owner (user or organization) */
 	githubOwner: z.string().optional(),
+	/** GitHub repository name */
 	githubRepo: z.string().optional(),
+	/** Whether to automatically create GitHub issues for anomalies that meet the threshold */
 	autoCreateIssues: z.boolean().default(false),
+	/** Model ID for priority analysis (e.g., 'gpt-4o-mini', 'claude-3-haiku') */
 	modelId: z.string().optional(),
+	/** Temperature for LLM responses (lower = more deterministic) */
 	temperature: z.number().min(CT.temperature.min).max(CT.temperature.max).default(CT.temperature.default),
+	/** Maximum tokens for LLM response */
 	maxTokens: z.number().min(CT.maxTokens.min).max(CT.maxTokens.max).default(CT.maxTokens.default),
+	/** Timeout for LLM calls in milliseconds */
 	timeoutMs: z.number().min(CT.timeoutMs.min).max(CT.timeoutMs.max).default(CT.timeoutMs.default),
+	/** Minimum anomaly score to use LLM analysis. Lower scores use rule-based analysis (saves cost). */
 	llmAnalysisThreshold: z.number().min(CT.llmAnalysisThreshold.min).max(CT.llmAnalysisThreshold.max).default(CT.llmAnalysisThreshold.default),
+	/** Minimum anomaly score to trigger alerts (default: 30) */
 	alertThreshold: z.number().min(CT.alertThreshold.min).max(CT.alertThreshold.max).default(CT.alertThreshold.default),
+	/** Score threshold that triggers @here mentions (default: 50) */
 	criticalThreshold: z.number().min(CT.criticalThreshold.min).max(CT.criticalThreshold.max).default(CT.criticalThreshold.default),
+	/** Deduplication window in minutes (default: 5) - for Slack alerts */
 	dedupWindowMinutes: z.number().min(CT.dedupWindowMinutes.min).max(CT.dedupWindowMinutes.max).default(CT.dedupWindowMinutes.default),
+	/** Days to look back for closed issues when checking for regressions (default: 30) */
 	regressionLookbackDays: z.number().min(CT.regressionLookbackDays.min).max(CT.regressionLookbackDays.max).default(CT.regressionLookbackDays.default),
+	/** Hours after issue closure before same fingerprint is considered regression (default: 48) */
 	regressionGracePeriodHours: z.number().min(CT.regressionGracePeriodHours.min).max(CT.regressionGracePeriodHours.max).default(CT.regressionGracePeriodHours.default),
+	/** Hours before re-alerting Slack for same fingerprint - duplicate cooldown (default: 24) */
 	duplicateAlertCooldownHours: z.number().min(CT.duplicateAlertCooldownHours.min).max(CT.duplicateAlertCooldownHours.max).default(CT.duplicateAlertCooldownHours.default),
+	/** Whether to use LLM for priority determination (falls back to rule-based if disabled/fails) */
 	enableLlmPriority: z.boolean().default(false),
+	/** Custom prompt template for LLM priority analysis (optional) */
 	promptTemplate: z.string().min(CT.promptTemplate.min, `Prompt template must be at least ${CT.promptTemplate.min} characters`).max(CT.promptTemplate.max, `Prompt template cannot exceed ${CT.promptTemplate.max.toLocaleString()} characters`).trim().optional(),
+	/** Number of days to look back for historical baseline computation (default: 7) */
 	baselineWindowDays: z.number().min(CT.baselineWindowDays.min).max(CT.baselineWindowDays.max).default(CT.baselineWindowDays.default),
+	/** P95 response time target in milliseconds (default: 60000 = 60s) */
 	sloResponseTimeP95Ms: z.number().min(CT.sloResponseTimeP95Ms.min).max(CT.sloResponseTimeP95Ms.max).default(CT.sloResponseTimeP95Ms.default),
+	/** Time to first token target in milliseconds (default: 5000 = 5s) */
 	sloFirstTokenTimeMs: z.number().min(CT.sloFirstTokenTimeMs.min).max(CT.sloFirstTokenTimeMs.max).default(CT.sloFirstTokenTimeMs.default),
+	/** Acceptable error rate percentage (default: 2%) */
 	sloErrorRatePercent: z.number().min(CT.sloErrorRatePercent.min).max(CT.sloErrorRatePercent.max).default(CT.sloErrorRatePercent.default),
+	/** Maximum acceptable context utilization percentage (default: 85%) */
 	sloContextUtilizationPercent: z.number().min(CT.sloContextUtilizationPercent.min).max(CT.sloContextUtilizationPercent.max).default(CT.sloContextUtilizationPercent.default),
+	/** Maximum GitHub issues to create per hour (prevents runaway automation) */
 	maxIssuesPerHour: z.number().min(CT.maxIssuesPerHour.min).max(CT.maxIssuesPerHour.max).default(CT.maxIssuesPerHour.default),
+	/** When enabled, logs what would happen without creating issues or sending alerts */
 	dryRun: z.boolean().default(false)
 });
 const LT = {
@@ -3702,6 +3996,10 @@ const API_SERVICE_GROUPS = {
 			{
 				key: "FmpApiKey",
 				order: 3
+			},
+			{
+				key: "PotionQuestApiKey",
+				order: 4
 			}
 		]
 	},
@@ -3882,6 +4180,14 @@ const API_SERVICE_GROUPS = {
 			{
 				key: "EnableFmpFinancialData",
 				order: 22
+			},
+			{
+				key: "EnablePotionQuest",
+				order: 23
+			},
+			{
+				key: "EnableTavernQuestBoardContext",
+				order: 24
 			}
 		]
 	},
@@ -4090,7 +4396,7 @@ const API_SERVICE_GROUPS = {
 makeStringSetting({
 	key: "DefaultAPIModel",
 	name: "Default API Model",
-	defaultValue: ChatModels.GPT5,
+	defaultValue: "gpt-5",
 	description: "The default AI model to use for API requests when no model is specified.",
 	options: CHAT_MODELS,
 	category: "AI",
@@ -4478,7 +4784,7 @@ makeStringSetting({
 }), makeStringSetting({
 	key: "serverStatus",
 	name: "Server Status",
-	defaultValue: ServerStatusEnum.Live,
+	defaultValue: "live",
 	description: "The current status of the server.",
 	category: "Admin",
 	group: API_SERVICE_GROUPS.ADMIN.id,
@@ -4650,6 +4956,31 @@ makeStringSetting({
 	category: "Experimental",
 	group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
 	order: 13
+}), makeStringSetting({
+	key: "PotionQuestApiKey",
+	name: "PotionQuest API Key",
+	defaultValue: "",
+	description: "API key for PotionQuest (procedural RPG content: NPCs, encounters, quests, loot, prophecies, legendary affixes, dice rolls). Get one at potionquest.com.",
+	category: "Tools",
+	group: API_SERVICE_GROUPS.SEARCH.id,
+	order: 4,
+	isSensitive: true
+}), makeBooleanSetting({
+	key: "EnablePotionQuest",
+	name: "Enable PotionQuest Tools",
+	defaultValue: false,
+	description: "Whether to expose the PotionQuest dice + content generators as tools to tavern agents. Requires PotionQuestApiKey to be set.",
+	category: "Experimental",
+	group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+	order: 14
+}), makeBooleanSetting({
+	key: "EnableTavernQuestBoardContext",
+	name: "Inject Quest Board Into Heartbeat Prompt",
+	defaultValue: true,
+	description: "Whether agent heartbeats see the quest board and their claimed quests in the system prompt. Toggle OFF for diagnostic isolation: when disabled, agents only see user @mentions and direct context, removing the pull from previously-claimed quests. The quest board itself still functions; only the prompt context is suppressed.",
+	category: "Experimental",
+	group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+	order: 15
 }), makeNumberSetting({
 	key: "VectorThreshold",
 	name: "Vector Threshold",
@@ -4795,7 +5126,7 @@ makeStringSetting({
 }), makeStringSetting({
 	key: "defaultEmbeddingModel",
 	name: "Default Embedding Model",
-	defaultValue: OpenAIEmbeddingModel.TEXT_EMBEDDING_ADA_002,
+	defaultValue: "text-embedding-ada-002",
 	description: "The default embedding model to use",
 	category: "AI",
 	group: API_SERVICE_GROUPS.EMBEDDING.id,
@@ -4967,7 +5298,7 @@ makeStringSetting({
 }), makeStringSetting({
 	key: "EmailAnalysisModel",
 	name: "Email Analysis Model",
-	defaultValue: ChatModels.CLAUDE_4_5_HAIKU_BEDROCK,
+	defaultValue: "us.anthropic.claude-haiku-4-5-20251001-v1:0",
 	description: "The AI model to use for email analysis. Defaults to Claude 4.5 Haiku via Bedrock.",
 	options: CHAT_MODELS,
 	category: "AI",
@@ -5201,11 +5532,15 @@ z.preprocess((val) => {
 	return val;
 }, z.boolean());
 const AnonymousSessionIdSchema = z.object({
+	/** SHA256(userId|orgId|dailySalt|date) - cannot be reversed */
 	hash: z.string(),
+	/** YYYY-MM-DD for salt lookup during deletion */
 	dateKey: z.string()
 });
 const SpanContextSchema = z.object({
+	/** gen_ai.trace_id */
 	traceId: z.string(),
+	/** gen_ai.span_id */
 	spanId: z.string()
 });
 const OperationSchema = z.object({
@@ -5223,6 +5558,7 @@ const OperationSchema = z.object({
 	]).optional()
 });
 const ModelTelemetrySchema = z.object({
+	/** gen_ai.request.model */
 	modelId: z.string(),
 	provider: z.enum([
 		"anthropic",
@@ -5236,6 +5572,7 @@ const ModelTelemetrySchema = z.object({
 	fallbackReason: z.string().optional(),
 	originalModelId: z.string().optional(),
 	usedThinking: z.boolean(),
+	/** Extended thinking tokens */
 	thinkingTokensUsed: z.number().optional(),
 	usedTools: z.boolean()
 });
@@ -5248,6 +5585,7 @@ const SystemPromptDetailSchema = z.object({
 		"session",
 		"org"
 	]),
+	/** e.g., "date_context", "tool_guidance" */
 	name: z.string(),
 	tokenCount: z.number(),
 	wasIncluded: z.boolean(),
@@ -5263,6 +5601,7 @@ const SystemPromptsTelemetrySchema = z.object({
 	duplicateCount: z.number()
 });
 const FeatureContributionSchema = z.object({
+	/** e.g., "mementos", "quest_master", "deep_research" */
 	featureName: z.string(),
 	messagesAdded: z.number(),
 	tokenCount: z.number(),
@@ -5281,18 +5620,24 @@ const TokensBySourceSchema = z.object({
 	userPrompt: z.number()
 });
 z.object({
+	/** gen_ai.usage.input_tokens */
 	inputTokens: z.number(),
+	/** gen_ai.usage.output_tokens */
 	outputTokens: z.number(),
 	contextWindowLimit: z.number(),
 	utilizationPercentage: z.number(),
 	reservedOutputTokens: z.number(),
 	overflowDetected: z.boolean(),
 	overflowAmount: z.number().optional(),
+	/** Token breakdown by source */
 	tokensBySource: TokensBySourceSchema
 });
 const CacheTelemetrySchema = z.object({
+	/** Anthropic cache_read_input_tokens */
 	cacheReadTokens: z.number(),
+	/** Anthropic cache_creation_input_tokens */
 	cacheWriteTokens: z.number(),
+	/** 0-100% */
 	cacheHitRate: z.number(),
 	costSavingsPercent: z.number().optional()
 });
@@ -5325,14 +5670,18 @@ const ToolErrorCategorySchema = z.enum([
 ]);
 const ToolTelemetrySchema = z.object({
 	toolName: z.string(),
+	/** MCP vs native tool */
 	isMcpTool: z.boolean(),
+	/** For MCP tools */
 	mcpServerName: z.string().optional(),
 	invocationCount: z.number(),
 	successCount: z.number(),
 	failureCount: z.number(),
 	totalDurationMs: z.number(),
 	maxDurationMs: z.number(),
+	/** Retry tracking */
 	retryCount: z.number(),
+	/** Max 200 chars */
 	lastError: z.string().max(200).optional(),
 	errorCategories: z.array(ToolErrorCategorySchema).optional()
 });
@@ -5361,6 +5710,7 @@ const PerformanceTelemetrySchema = z.object({
 	contextRetrievalMs: z.number().optional(),
 	modelInferenceMs: z.number().optional(),
 	toolExecutionMs: z.number().optional(),
+	/** Latency percentiles for trend analysis */
 	latencyPercentiles: LatencyPercentilesSchema.optional()
 });
 const AnomalySeveritySchema = z.enum([
@@ -5380,17 +5730,29 @@ const PrimaryAnomalySchema = z.enum([
 ]);
 const AnomaliesTelemetrySchema = z.object({
 	contextOverflow: z.boolean(),
+	/** >= 90% */
 	highUtilization: z.boolean(),
+	/** >= 95% */
 	criticalUtilization: z.boolean(),
+	/** >= 50% */
 	highTruncation: z.boolean(),
+	/** >= 75% */
 	criticalTruncation: z.boolean(),
+	/** >= 3 failures */
 	toolFailureSpike: z.boolean(),
+	/** > 30s */
 	toolTimeout: z.boolean(),
+	/** > 5min */
 	subagentTimeout: z.boolean(),
+	/** > 10s */
 	slowFirstToken: z.boolean(),
+	/** > 60s */
 	slowTotalResponse: z.boolean(),
+	/** 0-100 */
 	anomalyScore: z.number().min(0).max(100),
+	/** Severity mapping */
 	severity: AnomalySeveritySchema,
+	/** Pattern-based dedup key, e.g., "tool_failure_claude-3-5-sonnet_delegate-to-agent" */
 	dedupKey: z.string(),
 	primaryAnomaly: PrimaryAnomalySchema
 });
@@ -5406,19 +5768,25 @@ const RequestMetadataSchema = z.object({
 	enabledFeatures: z.array(z.string())
 });
 const ContextWindowTelemetryWithOptionalSourceSchema = z.object({
+	/** gen_ai.usage.input_tokens */
 	inputTokens: z.number(),
+	/** gen_ai.usage.output_tokens */
 	outputTokens: z.number(),
 	contextWindowLimit: z.number(),
 	utilizationPercentage: z.number(),
 	reservedOutputTokens: z.number(),
 	overflowDetected: z.boolean(),
 	overflowAmount: z.number().optional(),
+	/** Token breakdown by source (enhanced only) */
 	tokensBySource: TokensBySourceSchema.optional()
 });
 const ContextTelemetrySchema = z.object({
 	schemaVersion: z.enum(["1.0", "1.1"]),
+	/** ISO 8601 */
 	timestamp: z.string(),
+	/** Self-monitoring: time to capture telemetry */
 	captureOverheadMs: z.number(),
+	/** Capture level: basic or enhanced */
 	captureLevel: z.enum(["basic", "enhanced"]).optional(),
 	anonymousSessionId: AnonymousSessionIdSchema,
 	spanContext: SpanContextSchema.optional(),
@@ -5438,7 +5806,9 @@ const ContextTelemetrySchema = z.object({
 	captureErrors: z.array(z.string()).optional()
 });
 const ALERT_THRESHOLDS = {
+	/** Minimum score to trigger any alert */
 	warning: 30,
+	/** Score threshold for @here mentions */
 	critical: 50
 };
 z.object({
@@ -5611,6 +5981,7 @@ const PromptMetaFunctionCallSchema = z.object({
 	success: z.boolean().optional(),
 	error: z.string().optional(),
 	creditsUsed: z.number().optional(),
+	/** Tool use ID for Anthropic API tool pairing (#6181) */
 	id: z.string().optional()
 });
 const PromptMetaPerformanceSchema = z.object({
@@ -5658,24 +6029,33 @@ const ToolHealthSchema = z.object({
 	successRate: z.number().optional()
 });
 const CitableSourceSchema = z.object({
+	/** Unique identifier - can be URL, UUID, or composite key */
 	id: z.string(),
+	/** Source classification for UI rendering */
 	type: z.enum([
 		"web_url",
 		"document",
 		"dataset",
 		"mcp"
 	]),
+	/** Human-readable title/name */
 	title: z.string(),
+	/** Navigation target (external URL, deep link, or hash route) */
 	url: z.string().optional(),
+	/** Brief description or excerpt (1-2 sentences) */
 	description: z.string().optional(),
+	/** ISO 8601 timestamp for freshness indication */
 	timestamp: z.string().optional(),
+	/** Attribution for non-report sources */
 	author: z.string().optional(),
+	/** Processing status for real-time updates */
 	status: z.enum([
 		"pending",
 		"processing",
 		"complete",
 		"error"
 	]).optional(),
+	/** Extensibility metadata */
 	metadata: z.looseObject({
 		sourceSystem: z.string().optional(),
 		icon: z.string().optional(),
@@ -5804,6 +6184,7 @@ let FileEvents = /* @__PURE__ */ function(FileEvents) {
 	FileEvents["DELETE_ALL_FILES"] = "All Files Deleted";
 	FileEvents["UPDATE_FILE"] = "File Updated";
 	FileEvents["GENERATE_FILE_PRESIGNED_URL"] = "File Presigned URL Generated";
+	FileEvents["UNSHARE_FILE"] = "File Unshared";
 	return FileEvents;
 }({});
 let InviteEvents = /* @__PURE__ */ function(InviteEvents) {
@@ -6411,11 +6792,14 @@ const InferTaxonomyFolderEntry = z$1.object({
 	fileName: z$1.string(),
 	fileSize: z$1.number(),
 	mimeType: z$1.string().optional(),
+	/** First ~500 chars of file content for AI analysis */
 	contentSample: z$1.string().max(1e3).optional()
 });
 z$1.object({
 	folderTree: z$1.array(InferTaxonomyFolderEntry).min(1).max(500),
+	/** If re-running for an existing data lake, pass its prefix */
 	existingPrefix: z$1.string().optional(),
+	/** User description of the data (helps the AI) */
 	context: z$1.string().max(2e3).optional()
 });
 z$1.object({ hashes: z$1.array(z$1.string().regex(sha256Regex)).min(1).max(500) });
@@ -6621,6 +7005,7 @@ OpenAIImageGenerationInput.extend({
 	image: z.string()
 });
 z.object({
+	/** Notebook session ID */
 	sessionId: z.string(),
 	historyCount: z.number(),
 	imageConfig: GenerateImageToolCallSchema.optional(),
@@ -6630,9 +7015,11 @@ z.object({
 		searchers: z.array(z.any()).optional()
 	}).optional(),
 	fabFileIds: z.array(z.string()),
+	/** Prompt message */
 	message: z.string(),
 	messageFileIds: z.array(z.string()).prefault([]),
 	questId: z.string().optional(),
+	/** Extra context messages to include in the conversation from external sources */
 	extraContextMessages: z.array(z.object({
 		role: z.enum([
 			"user",
@@ -6644,27 +7031,48 @@ z.object({
 		content: z.union([z.string(), z.array(z.any())]),
 		fabFileIds: z.array(z.string()).optional()
 	})).optional(),
+	/** Dashboard related params */
 	dashboardParams: DashboardParamsSchema.optional(),
+	/** LLM params */
 	params: ChatCompletionCreateInputSchema,
+	/** Whether Quest Master is enabled */
 	enableQuestMaster: z.boolean().optional(),
+	/** Whether Mementos is enabled */
 	enableMementos: z.boolean().optional(),
+	/** Whether Artifacts is enabled */
 	enableArtifacts: z.boolean().optional(),
+	/** Whether Agents is enabled */
 	enableAgents: z.boolean().optional(),
+	/** Whether Lattice (financial pro-forma modeling) is enabled */
 	enableLattice: z.boolean().optional(),
+	/** LLM tools to enable (built-in tools or MCP tool names) */
 	tools: z.array(z.union([b4mLLMTools, z.string()])).optional(),
+	/** Enabled MCP servers */
 	mcpServers: z.array(z.string()).optional(),
+	/** Project ID */
 	projectId: z.string().optional(),
+	/** Organization ID */
 	organizationId: z.string().nullable().optional(),
+	/** Tool prompt ID to use for the LLM */
 	toolPromptId: z.string().optional(),
+	/** Quest Master related params */
 	questMaster: QuestMasterParamsSchema.optional(),
+	/** Research Mode related params */
 	researchMode: ResearchModeParamsSchema.optional(),
+	/** Fallback model ID to try if primary model fails */
 	fallbackModel: z.string().optional(),
+	/** Embedding model to use */
 	embeddingModel: z.string().optional(),
+	/** User's timezone (IANA format, e.g., "America/New_York") */
 	timezone: z.string().optional(),
+	/** Persona-based sub-agent filter — only these agent names are available for delegation */
 	allowedAgents: z.array(z.string()).optional(),
+	/** When true, Quest Processor injects Slack-specific tool configs (help, notebooks, curated files) */
 	enableSlackTools: z.boolean().optional()
 }).extend({
+	/** Notebook session ID */
 	sessionId: z.string().optional(),
+	/** Notebook session name */
 	sessionName: z.string().optional()
 });
 z.object({
@@ -6943,20 +7351,35 @@ const ExportFormatSchema = z.enum([
 	"html"
 ]);
 z.object({
-	curationType: CurationTypeSchema.prefault(CurationType.TRANSCRIPT),
+	/** Curation type: transcript (Option 1) or executive_summary (Option 2) */
+	curationType: CurationTypeSchema.prefault("transcript"),
+	/** Include code artifacts in the curated notebook */
 	includeCode: z.boolean().prefault(true),
+	/** Include diagrams (Mermaid, SVG) in the curated notebook */
 	includeDiagrams: z.boolean().prefault(true),
+	/** Include data visualizations (Recharts) in the curated notebook */
 	includeDataViz: z.boolean().prefault(true),
+	/** Include QuestMaster plans in the curated notebook */
 	includeQuestMaster: z.boolean().prefault(true),
+	/** Include Deep Research findings in the curated notebook */
 	includeResearch: z.boolean().prefault(true),
+	/** Include images in the curated notebook */
 	includeImages: z.boolean().prefault(true),
+	/** Token budget for processing (varies by curation type) */
 	tokenBudget: z.number().optional(),
+	/** Export format for the curated notebook */
 	exportFormat: ExportFormatSchema.prefault("markdown"),
+	/** Custom notebook name (optional, defaults to curated-notebook-{sessionId}) */
 	customNotebookName: z.string().optional()
 });
 function isGPTImageModel(model) {
 	if (!model) return false;
-	return OPENAI_IMAGE_MODELS.includes(model) || model.startsWith("gpt-image-1");
+	return OPENAI_IMAGE_MODELS.includes(model) || model.startsWith("gpt-image-");
+}
+/** Returns true specifically for gpt-image-2 (including versioned snapshots like gpt-image-2-2026-04-21). */
+function isGPTImage2Model(model) {
+	if (!model) return false;
+	return model === "gpt-image-2" || model.startsWith("gpt-image-2");
 }
 /**
 * Telemetry Error Sanitizer
@@ -8994,4 +9417,4 @@ var ConfigStore = class {
 	}
 };
 //#endregion
-export { RegInviteEvents as $, ImageGenerationUsageTransaction as A, OpenAIEmbeddingModel as B, FileEvents as C, getViewById as Ct, GenericCreditAddTransaction as D, validateJupyterKernelName as Dt, GenerateImageToolCallSchema as E, sanitizeTelemetryError as Et, KnowledgeType as F, ProjectEvents as G, Permission as H, LLMEvents as I, QuestMasterParamsSchema as J, PromptMetaZodSchema as K, MiscEvents as L, InboxEvents as M, InviteEvents as N, GenericCreditDeductTransaction as O, validateNotebookPath as Ot, InviteType as P, RechartsChartTypeList as Q, ModalEvents as R, FeedbackEvents as S, getMcpProviderMetadata as St, GEMINI_IMAGE_MODELS as T, resolveNavigationIntents as Tt, PermissionDeniedError as U, OpenAIImageGenerationInput as V, ProfileEvents as W, RealtimeVoiceUsageTransaction as X, REASONING_SUPPORTED_MODELS as Y, ReceivedCreditTransaction as Z, CompletionApiUsageTransaction as _, VoyageAIEmbeddingModel as _t, ApiKeyEvents as a, SpeechToTextModels as at, FIXED_TEMPERATURE_MODELS as b, getAccessibleDataLakes as bt, AppFileEvents as c, TagType as ct, BFL_IMAGE_MODELS as d, ToolUsageTransaction as dt, ResearchModeParamsSchema as et, BFL_SAFETY_TOLERANCE as f, TransferCreditTransaction as ft, ChatModels as g, VideoModels as gt, ChatCompletionCreateInputSchema as h, VideoGenerationUsageTransaction as ht, AiEvents as i, SessionEvents as it, ImageModels as j, ImageEditUsageTransaction as k, CollectionType as kt, ArtifactTypeSchema as l, TaskScheduleHandler as lt, CREDIT_DEDUCT_TRANSACTION_TYPES as m, VIDEO_SIZE_CONSTRAINTS as mt, logger as n, ResearchTaskPeriodicFrequencyType as nt, ApiKeyScope as o, SubscriptionCreditTransaction as ot, BedrockEmbeddingModel as p, UiNavigationEvents as pt, PurchaseTransaction as q, ALERT_THRESHOLDS as r, ResearchTaskType as rt, ApiKeyType as s, SupportedFabFileMimeTypes as st, ConfigStore as t, ResearchTaskExecutionType as tt, AuthEvents as u, TextGenerationUsageTransaction as ut, DashboardParamsSchema as v, XAI_IMAGE_MODELS as vt, FriendshipEvents as w, isGPTImageModel as wt, FavoriteDocumentType as x, getDataLakeTags as xt, ElabsEvents as y, b4mLLMTools as yt, ModelBackend as z };
+export { RechartsChartTypeList as $, ImageGenerationUsageTransaction as A, secureParameters as At, NotFoundError as B, FileEvents as C, getMcpProviderMetadata as Ct, GenericCreditAddTransaction as D, obfuscateApiKey as Dt, GenerateImageToolCallSchema as E, isGPTImageModel as Et, KnowledgeType as F, ProfileEvents as G, OpenAIImageGenerationInput as H, LLMEvents as I, PurchaseTransaction as J, ProjectEvents as K, MiscEvents as L, InboxEvents as M, validateNotebookPath as Mt, InviteEvents as N, CollectionType as Nt, GenericCreditDeductTransaction as O, resolveNavigationIntents as Ot, InviteType as P, ReceivedCreditTransaction as Q, ModalEvents as R, FeedbackEvents as S, getDataLakeTags as St, GEMINI_IMAGE_MODELS as T, isGPTImage2Model as Tt, Permission as U, OpenAIEmbeddingModel as V, PermissionDeniedError as W, REASONING_SUPPORTED_MODELS as X, QuestMasterParamsSchema as Y, RealtimeVoiceUsageTransaction as Z, CompletionApiUsageTransaction as _, VideoModels as _t, ApiKeyEvents as a, SessionEvents as at, FIXED_TEMPERATURE_MODELS as b, b4mLLMTools as bt, AppFileEvents as c, SupportedFabFileMimeTypes as ct, BFL_IMAGE_MODELS as d, TextGenerationUsageTransaction as dt, RegInviteEvents as et, BFL_SAFETY_TOLERANCE as f, ToolUsageTransaction as ft, ChatModels as g, VideoGenerationUsageTransaction as gt, ChatCompletionCreateInputSchema as h, VIDEO_SIZE_CONSTRAINTS as ht, AiEvents as i, ResearchTaskType as it, ImageModels as j, validateJupyterKernelName as jt, ImageEditUsageTransaction as k, sanitizeTelemetryError as kt, ArtifactTypeSchema as l, TagType as lt, CREDIT_DEDUCT_TRANSACTION_TYPES as m, UiNavigationEvents as mt, logger as n, ResearchTaskExecutionType as nt, ApiKeyScope as o, SpeechToTextModels as ot, BedrockEmbeddingModel as p, TransferCreditTransaction as pt, PromptMetaZodSchema as q, ALERT_THRESHOLDS as r, ResearchTaskPeriodicFrequencyType as rt, ApiKeyType as s, SubscriptionCreditTransaction as st, ConfigStore as t, ResearchModeParamsSchema as tt, AuthEvents as u, TaskScheduleHandler as ut, DashboardParamsSchema as v, VoyageAIEmbeddingModel as vt, FriendshipEvents as w, getViewById as wt, FavoriteDocumentType as x, getAccessibleDataLakes as xt, ElabsEvents as y, XAI_IMAGE_MODELS as yt, ModelBackend as z };