@bike4mind/cli 3.2.0 → 3.3.0

package/dist/{ConfigStore-v0wgf0_j.mjs → ConfigStore-DUATzLxB.mjs}

@@ -963,6 +963,7 @@ let ChatModels = /* @__PURE__ */ function(ChatModels) {
 	ChatModels["GPT5_2_CHAT_LATEST"] = "gpt-5.2-chat-latest";
 	ChatModels["GPT5_4"] = "gpt-5.4";
 	ChatModels["GPT5_4_MINI"] = "gpt-5.4-mini";
+	ChatModels["GPT5_4_MINI_2026_03_17"] = "gpt-5.4-mini-2026-03-17";
 	ChatModels["GPT5_4_NANO"] = "gpt-5.4-nano";
 	ChatModels["GPT5_5"] = "gpt-5.5";
 	ChatModels["GPT5_6_SOL"] = "gpt-5.6-sol";
@@ -1058,8 +1059,8 @@ let ChatModels = /* @__PURE__ */ function(ChatModels) {
 	ChatModels["DEEPSEEK_V4_PRO"] = "deepseek-v4-pro";
 	return ChatModels;
 }({});
-const CHAT_MODELS = Object.values(ChatModels);
-const supportedChatModels = z$1.enum(ChatModels);
+const supportedChatModels = z$1.enum(ChatModels).exclude(["GPT5_4_MINI_2026_03_17"]);
+const CHAT_MODELS = [...supportedChatModels.options];
 new RegExp(`^${BEDROCK_ANTHROPIC_PREFIX}claude-`);
 /**
 * Models that support OpenAI's `reasoning_effort` request parameter.
@@ -1081,6 +1082,7 @@ const REASONING_SUPPORTED_MODELS = /* @__PURE__ */ new Set([
 	"gpt-5.2",
 	"gpt-5.4",
 	"gpt-5.4-mini",
+	"gpt-5.4-mini-2026-03-17",
 	"gpt-5.4-nano",
 	"gpt-5.6-sol",
 	"gpt-5.6-luna",
@@ -2906,6 +2908,105 @@ const WORK_ITEM_STATUSES = [
 	"blocked",
 	"closed"
 ];
+const AuditActorSchema = z$1.object({
+	kind: z$1.enum([
+		"user",
+		"apiKey",
+		"system",
+		"script"
+	]),
+	scope: z$1.enum(["platform", "organization"]),
+	userId: z$1.string().optional(),
+	apiKeyId: z$1.string().optional(),
+	email: z$1.string().optional(),
+	name: z$1.string(),
+	wasAdmin: z$1.boolean(),
+	impersonatedUserId: z$1.string().optional()
+});
+const AuditTargetSchema = z$1.object({
+	kind: z$1.enum([
+		"user",
+		"organization",
+		"settings",
+		"oauthClient",
+		"apiKey",
+		"system"
+	]),
+	id: z$1.string(),
+	displayName: z$1.string()
+});
+const AuditChangeSchema = z$1.object({
+	field: z$1.string(),
+	before: z$1.unknown(),
+	after: z$1.unknown()
+});
+const AuditContextSchema = z$1.object({
+	ip: z$1.string().optional(),
+	userAgent: z$1.string().optional(),
+	requestId: z$1.string().optional(),
+	source: z$1.enum([
+		"admin_ui",
+		"api_key",
+		"script",
+		"worker"
+	]),
+	route: z$1.string().optional()
+});
+const AdminAuditCategorySchema = z$1.enum([
+	"credits",
+	"access",
+	"identity",
+	"account",
+	"org",
+	"settings",
+	"support"
+]);
+const AdminAuditSeveritySchema = z$1.enum([
+	"info",
+	"notice",
+	"critical"
+]);
+z$1.object({
+	id: z$1.string(),
+	source: z$1.enum([
+		"admin",
+		"auth",
+		"apiKey",
+		"supportAccess"
+	]),
+	occurredAt: z$1.date(),
+	action: z$1.string(),
+	category: AdminAuditCategorySchema,
+	severity: AdminAuditSeveritySchema,
+	actor: AuditActorSchema,
+	target: AuditTargetSchema,
+	organizationId: z$1.string().optional(),
+	summary: z$1.string(),
+	reason: z$1.string().optional(),
+	changes: z$1.array(AuditChangeSchema).optional(),
+	details: z$1.record(z$1.string(), z$1.unknown()).optional(),
+	context: AuditContextSchema,
+	related: z$1.object({
+		creditTransactionId: z$1.string().optional(),
+		impersonationSessionId: z$1.string().optional()
+	}).optional(),
+	backfilled: z$1.boolean().optional()
+});
+z$1.object({
+	category: AdminAuditCategorySchema.optional(),
+	severity: AdminAuditSeveritySchema.optional(),
+	action: z$1.string().regex(/^[a-z_]+(\.[a-z_]+)+$/).optional(),
+	verb: z$1.string().regex(/^[a-z_]+$/).optional(),
+	actorUserId: z$1.string().min(1).optional(),
+	targetKind: AuditTargetSchema.shape.kind.optional(),
+	targetId: z$1.string().min(1).optional(),
+	source: AuditContextSchema.shape.source.optional(),
+	actorScope: AuditActorSchema.shape.scope.optional(),
+	from: z$1.iso.datetime().optional(),
+	to: z$1.iso.datetime().optional(),
+	requestId: z$1.string().min(1).optional(),
+	impersonationSessionId: z$1.string().min(1).optional()
+});
 let SupportedFabFileMimeTypes = /* @__PURE__ */ function(SupportedFabFileMimeTypes) {
 	SupportedFabFileMimeTypes["PDF"] = "application/pdf";
 	SupportedFabFileMimeTypes["DOCX"] = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
@@ -3134,6 +3235,21 @@ const CREDITS_PER_USD_COST = (() => {
 	console.warn(`[pricing] Env-configured margin/rate derive ${derived} credits per USD cost; using defaults`);
 	return Math.round(DEFAULT_PRICE_MARGIN / DEFAULT_USD_TO_CREDITS_RATE);
 })();
+const DEFAULT_PROVIDER_COST_PER_CREDIT_USD = 1 / Math.round(DEFAULT_PRICE_MARGIN / DEFAULT_USD_TO_CREDITS_RATE);
+/**
+* Lowest USD price a credit may be sold for: the provider cost one credit stands for, times the
+* markup - the same sale price usage is billed at - and never less than what a credit costs us at
+* the built-in rate. The admin `pricePerCredit` save (apps/client/pages/api/settings/update.ts)
+* refuses a price below it, and per-credit purchases re-check it at charge time
+* (apps/client/lib/credits/utils.ts).
+*/
+const MIN_PRICE_PER_CREDIT_USD = (() => {
+	const derived = PRICE_MARGIN / CREDITS_PER_USD_COST;
+	if (!Number.isFinite(derived)) return DEFAULT_USD_TO_CREDITS_RATE;
+	return Math.max(derived, DEFAULT_PROVIDER_COST_PER_CREDIT_USD);
+})();
+/** USD price per credit for display, without float noise (0.0006, not 0.0006000000000000001). */
+const formatUsdPerCredit = (usd) => `$${Number(usd.toPrecision(6))}`;
 z.enum([
 	"openai",
 	"test",
@@ -3656,6 +3772,12 @@ z$1.enum([
 	"investigate_soon",
 	"immediate_action"
 ]);
+/**
+* Largest legacy thinking budget (`budget_tokens`) a request may ask for. Anthropic rejects rather
+* than clamps an oversized budget, and the budget raises the max_tokens a turn is sent with, so it
+* is bounded both at the request schemas and where the adapter consumes it (buildThinkingParams).
+*/
+const MAX_THINKING_BUDGET_TOKENS = 32e3;
 const CompletionReasoningEffortSchema = z$1.enum([
 	"none",
 	"minimal",
@@ -3705,9 +3827,24 @@ const COMPLETION_TOOL_ERROR_CODES = [
 	"tool_search_unsupported",
 	"all_tools_deferred",
 	"deferred_tool_cache_control",
-	"unknown_tool_reference"
+	"unknown_tool_reference",
+	"tool_changes_unsupported",
+	"invalid_tool_change"
 ];
 /**
+* One block of a mid-conversation tool change: a `system`-role message whose content holds only these.
+* Strict on purpose: the provider takes a name reference to a tool already in `tools`, never an inline
+* definition or an MCP reference.
+*/
+const ToolChangeBlockSchema = z$1.object({
+	type: z$1.enum(["tool_addition", "tool_removal"]),
+	tool: z$1.object({
+		type: z$1.literal("tool_reference"),
+		name: z$1.string().min(1)
+	}).strict()
+}).strict();
+z$1.array(ToolChangeBlockSchema).min(1);
+/**
 * JSON Schema definition for structured output. The `schema` field is a full
 * JSON Schema document (we don't try to validate JSON Schema with Zod - that's
 * the caller's contract with the model). `strict: true` is the default, matching
@@ -3733,7 +3870,7 @@ const CompletionMessageSchema = z$1.object({
 		"assistant",
 		"system"
 	]),
-	content: z$1.union([z$1.string(), z$1.array(z$1.any())]),
+	content: z$1.union([z$1.string(), z$1.array(z$1.any())]).describe("A string, or an array of content blocks. A `system` message may instead hold only `tool_addition` / `tool_removal` blocks (`{ type, tool: { type: \"tool_reference\", name } }`) to load or unload a tool named in `tools` mid-conversation without invalidating the prompt cache. It must follow a user turn or an assistant turn ending in a tool search result, and be the last message or precede an assistant turn. Only on models whose `supports_tool_changes` is true and that are served by the direct Anthropic API; otherwise refused with `errorCode: \"tool_changes_unsupported\"` (or `invalid_tool_change` / `unknown_tool_reference` when malformed)."),
 	cache: z$1.boolean().optional()
 });
 /**
@@ -3763,8 +3900,8 @@ const CompletionRequestSchema = z$1.object({
 		reasoningEffort: CompletionReasoningEffortSchema.optional().describe("Reasoning effort hint. Honoured by the OpenAI (reasoning models only, and not alongside tools on some of them), Kimi (K3 only), DeepSeek and Anthropic Claude (direct and Bedrock) adapters; each maps it onto its own scale. On Claude, `none` turns thinking off where the model allows it (otherwise it runs at the lowest effort), so short `max_tokens` replies stream visible text from the start; `minimal` maps to `low`. When `thinking.enabled` is also set on a Claude model, thinking stays on and this sets its effort instead, with `none` and `minimal` mapping to `low`. Claude models that reason inside `max_tokens` never have that ceiling raised, and on older Claude models any level above `none` turns thinking on (it is off by default there), forces temperature to 1 and drops top_p, and a thinking budget that cannot fit under `max_tokens` is skipped. On the direct Anthropic API, a json_schema `response_format` with no tools is served by a forced tool on models that support forced tool use, and that tool cannot run alongside thinking, so there only `none` is honoured; models served by native structured outputs honour every level. Silently ignored by every other adapter (Gemini, xAI, Ollama) and by non-reasoning models, so sending it there is a no-op."),
 		thinking: z$1.object({
 			enabled: z$1.boolean(),
-			budget_tokens: z$1.number().int().min(1024).optional()
-		}).optional().describe("Ask a model that can think to think on this turn. On Claude, `reasoningEffort` then sets how much it thinks, and `budget_tokens` (default 16000, minimum 1024) sizes thinking on older Claude models. Ignored by models that cannot think, and on the direct Anthropic API when a json_schema `response_format` is served by a forced tool, which cannot run alongside thinking.")
+			budget_tokens: z$1.number().int().min(1024).max(MAX_THINKING_BUDGET_TOKENS).optional()
+		}).optional().describe("Ask a model that can think to think on this turn. On Claude, `reasoningEffort` then sets how much it thinks, and `budget_tokens` (default 16000, minimum 1024, maximum 32000) sizes thinking on older Claude models. Ignored by models that cannot think, and on the direct Anthropic API when a json_schema `response_format` is served by a forced tool, which cannot run alongside thinking.")
 	}).optional()
 });
 const CompletionUsageSchema = z$1.object({
@@ -3918,7 +4055,7 @@ function createThinkMarkerEscaper() {
 * The visible remainder of one reply slot, with hidden reasoning removed.
 *
 * This is the rule the chat transcript renders by - `extractReplies` in
-* apps/client/shared/replyUtils.ts calls straight into it, so the two cannot drift.
+* packages/server-utils/src/shared/replyUtils.ts calls straight into it, so the two cannot drift.
 * Anything deriving "did the user see something yet" (latency metrics in particular) must
 * use this and not a looser non-empty check: a metric built on a looser rule reports text
 * as seen while the UI is still hiding it.
@@ -5322,6 +5459,7 @@ const ttsRequestSchema = z.object({
 	stability: z.number().min(0).max(1).optional(),
 	similarityBoost: z.number().min(0).max(1).optional(),
 	languageCode: ttsLanguageCodeSchema.optional(),
+	organization_id: z.string().trim().min(1).nullable().optional().describe("The organization to bill: one you belong to, or null for your personal credits. Omitted bills your personal credits, as this endpoint always has. An organization-billed API key always bills its own organization: omit this or set it to the key's organization; any other value, null included, is rejected with a 403 (`errorCode: billing_organization_mismatch`)."),
 	...generatedAudioRequestFields
 });
 /**
@@ -5337,6 +5475,21 @@ const ttsBase64ResponseSchema = extendGeneratedAudioResponseSchema({
 	fallbackFrom: supportedVoiceGenerationVendor.optional()
 });
 /**
+* The classifiers `POST /api/ai/tts` can emit - a narrowing of the platform-wide
+* `API_ERROR_CODES`, not a parallel vocabulary (CONVENTIONS.md section 1). The
+* `satisfies` fails the build if a code here is not in the shared union.
+*
+* `insufficient_credits` rides the 422 and means the same thing it does on
+* /api/ai/music and every other credit-metered endpoint. The two provider codes
+* are easy to invert: `provider_not_configured` means WE have no usable key,
+* `provider_rejected` means the provider REFUSED the key we sent.
+*/
+const TTS_ERROR_CODES = [
+	"insufficient_credits",
+	"provider_not_configured",
+	"provider_rejected"
+];
+/**
 * Error body for `POST /api/ai/tts`, shared by the 401, 422, 429 and 502; the 413
 * has a shape of its own (`ttsResponseTooLargeSchema`). `errorCode` is present only
 * on the conditions that carry a classifier; an ordinary validation 422 has none.
@@ -5362,13 +5515,11 @@ const ttsBase64ResponseSchema = extendGeneratedAudioResponseSchema({
 * this handler's written bodies is a gap in the handler rather than something to
 * enshrine in a schema.
 */
+/** 403 body: the `ai:generate` scope refusal (`required_scopes`), or a billing refusal. */
+const ttsForbiddenResponseSchema = BillingOrganizationForbiddenErrorSchema.extend({ provider: supportedVoiceGenerationVendor.optional() });
 const ttsErrorResponseSchema = ApiErrorSchema.extend({
 	provider: supportedVoiceGenerationVendor.optional(),
-	errorCode: z.enum([
-		"insufficient_credits",
-		"provider_not_configured",
-		"provider_rejected"
-	]).optional()
+	errorCode: z.enum(TTS_ERROR_CODES).optional()
 });
 /**
 * TTS 413 body: `generatedAudioTooLargeSchema` plus the provider. The handler never
@@ -5462,6 +5613,8 @@ const MUSIC_VALIDATION_ERROR_CODES = [
 	"lyrics_with_instrumental",
 	"lyrics_too_long"
 ];
+const SECONDS = String.raw`\d+(?:\.\d+)?`;
+String.raw`\[(?:${SECONDS}:${SECONDS}|:)\]`;
 /**
 * Building blocks for entity response schemas held to an entity's key list (see
 * selfUserResponseSchema in ./user.ts for the full rationale). A passthrough value is
@@ -6704,8 +6857,11 @@ If the full deliverable genuinely will not fit, do NOT stub the difference. REDU
 * public "Help Center" data lake, so when the knowledge-base search tool is available the model
 * can GROUND its answer in the real docs; the prompt still forbids inventing UI paths it can't
 * verify (relevant when that tool isn't enabled for the session).
+*
+* Ships in open-core builds too, so it names only host surfaces, never an overlay feature. A quoted
+* name in a sentence about the sidebar must be a real sidenav row: SidenavNav.test.tsx enforces it.
 */
-const HELP_CENTER_PROMPT = `HELP CENTER: Bike4Mind has a built-in Help Center that documents how to use the app. Users reach it from the "Help Center" item in the left sidebar, the help (?) icons beside feature titles, or the ? keyboard shortcut. When the user is clearly asking how to DO something in Bike4Mind itself (navigation, settings, files, the data lake, OptiHashi, agents, projects, sharing, billing, etc.) — as opposed to asking you to perform a task — give a brief, helpful answer and point them to the Help Center for full, up-to-date steps. If a knowledge-base/help search tool is available, use it to ground your answer in the actual help docs first. Do NOT invent menu paths, button names, or features you are not sure exist; if unsure, say so and direct them to the Help Center rather than guessing.`;
+const HELP_CENTER_PROMPT = `HELP CENTER: Bike4Mind has a built-in Help Center that documents how to use the app. Users reach it from the Help Center button on the "Gears" page (open "Gears" in the left sidebar), the help (?) icons beside feature titles, or the ? keyboard shortcut. When the user is clearly asking how to DO something in Bike4Mind itself (navigation, settings, files, the data lake, agents, projects, sharing, billing, etc.) - as opposed to asking you to perform a task - give a brief, helpful answer and point them to the Help Center for full, up-to-date steps. If a knowledge-base/help search tool is available, use it to ground your answer in the actual help docs first. Do NOT invent menu paths, button names, or features you are not sure exist; if unsure, say so and direct them to the Help Center rather than guessing.`;
 /**
 * Default text for the abstention licence. Single source of truth used BOTH as the
 * `AbstentionPrompt` admin setting's default AND as the runtime fallback in ChatCompletionProcess -
@@ -6869,6 +7025,7 @@ z$1.enum([
 	"BedrockGuardrailId",
 	"BedrockGuardrailVersion",
 	"ImageModerationEnabled",
+	"ImageModerationReviewerEmails",
 	"tagLineMain",
 	"tagLineSub",
 	"defaultTags",
@@ -9368,6 +9525,14 @@ const settingsMap = {
 		description: "Whether to run generated images through content moderation (Rekognition) and block explicit content. Legal-safety control (#9776) — default ON.",
 		category: "AI Moderation"
 	}),
+	ImageModerationReviewerEmails: makeObjectSetting({
+		key: "ImageModerationReviewerEmails",
+		name: "Image Moderation Reviewer Emails",
+		defaultValue: [],
+		description: "Email addresses alerted when an image moderation incident needs review, one per line. The alert carries incident metadata and an admin link only, never the image or user content. Empty sends no alert.",
+		category: "AI Moderation",
+		schema: z$1.array(z$1.string())
+	}),
 	SkillMarketHighRiskTools: makeStringSetting({
 		key: "SkillMarketHighRiskTools",
 		name: "Skill Market High-Risk Tools",
@@ -9513,7 +9678,7 @@ const settingsMap = {
 		userReadable: true,
 		name: "Price Per Credit",
 		defaultValue: 50,
-		description: "The price per credit for purchasing credits.",
+		description: `The price in USD of one credit bought pay-as-you-go. Cannot be set below ${formatUsdPerCredit(MIN_PRICE_PER_CREDIT_USD)}, the per-credit sale price including markup.`,
 		category: "Users",
 		group: API_SERVICE_GROUPS.CREDITS.id,
 		order: 1
@@ -9945,7 +10110,7 @@ const settingsMap = {
 		userReadable: true,
 		name: "Default Free Credits",
 		defaultValue: 0,
-		description: `Credits granted to a user who registers WITHOUT an invite code (only applies when Allow Open Registration is ON). Granted after the user verifies their email, NOT at signup - an unverified throwaway account gets 0 credits (anti-spam). A free user can never spend more than this - their hard ceiling of real model cost is roughly credits / ${CREDITS_PER_USD_COST} USD.`,
+		description: "Base credits granted after email verification to a user who registers WITHOUT an invite code, including eligible partner signups when Allow Open Registration is OFF. Partner-rule credits are added on top of this amount. An unverified account receives no credits. A free user cannot spend beyond their total granted balance.",
 		group: API_SERVICE_GROUPS.CREDITS.id,
 		category: "Users"
 	}),
@@ -11770,6 +11935,17 @@ z$1.looseObject({
 	param: z$1.string().optional()
 });
 /**
+* The client-chosen billing organization on the v1 media request bodies (image generations and edits,
+* video and music generations). Blank is a 422 rather than an omission: billing must never fall
+* through to a different payer on an empty string. The server side of this contract is
+* resolveMediaBillingOrgId (apps/client/server/billing); keep these descriptions in step with it.
+*/
+const BillingOrganizationIdSchema = z$1.string().trim().min(1).nullable().optional().describe(`The organization to bill: one you belong to, or null for your personal credits. Omitted bills your home organization, or your personal credits if you have none. An organization-billed API key always bills its own organization: omit this or set it to the key's organization; any other value, null included, is rejected with a 403 (\`errorCode: ${BILLING_ORGANIZATION_MISMATCH_ERROR_CODE}\`).`);
+/** The billing-organization clause of a v1 media create route's 403 description. */
+const BILLING_ORGANIZATION_FORBIDDEN_DESCRIPTION = `the billing organization names one you do not belong to (or is not a valid id), or an organization-billed API key names any organization but its own (\`errorCode: ${BILLING_ORGANIZATION_MISMATCH_ERROR_CODE}\`).`;
+/** A v1 media create route's 400 for an org-billed key that no longer speaks for its organization. */
+const BILLING_ORGANIZATION_STALE_KEY_DESCRIPTION = "An organization-billed API key bills an organization that no longer exists, or one its owner is no longer a member of; re-mint the key.";
+/**
 * Supported sound-effects generation vendors. Currently only ElevenLabs.
 * New vendors are added here and in the `aiSoundService` factory.
 */
@@ -11788,6 +11964,7 @@ const soundEffectsRequestSchema = z.object({
 	durationSeconds: z.number().min(.5).max(30).optional(),
 	promptInfluence: z.number().min(0).max(1).optional(),
 	format: z.string().optional(),
+	organization_id: BillingOrganizationIdSchema,
 	...generatedAudioRequestFields
 });
 /**
@@ -13553,8 +13730,7 @@ const AgentExecutionStartRequestSchema = z$1.object({
 	max_tokens: z$1.number().int().positive().optional(),
 	thinking: z$1.object({
 		enabled: z$1.boolean(),
-		/** Bounded at 32000: Anthropic rejects rather than clamps an oversized budget. */
-		budget_tokens: z$1.number().int().positive().max(32e3).optional()
+		budget_tokens: z$1.number().int().positive().max(MAX_THINKING_BUDGET_TOKENS).optional()
 	}).optional(),
 	/** Per-message file attachments (fabFile ids), materialized into the first iteration. */
 	file_ids: z$1.array(z$1.string()).optional(),
@@ -13657,7 +13833,7 @@ const AgentExecutionIdParamSchema = z$1.object({ id: z$1.string().min(1) });
 *
 * Plain Zod (no `.openapi()`) so any runtime can import them; the OpenAPI layer
 * annotates them via the contract. The tool-name enum MUST stay in sync with
-* SUPPORTED_TOOLS in apps/client/server/cli/toolsHandler.shared.ts.
+* SUPPORTED_TOOLS in packages/server-utils/src/cli/toolsHandler.shared.ts.
 */
 const ToolExecutionRequestSchema = z$1.object({
 	toolName: z$1.enum([
@@ -14313,7 +14489,7 @@ const ChatCompletionCreateInputSchema = z$1.object({
 	stream: z$1.boolean().optional(),
 	thinking: z$1.object({
 		enabled: z$1.boolean(),
-		budget_tokens: z$1.number().optional()
+		budget_tokens: z$1.number().int().positive().max(MAX_THINKING_BUDGET_TOKENS).optional()
 	}).optional(),
 	messages: z$1.array(z$1.object({
 		role: z$1.enum([
@@ -14972,7 +15148,7 @@ const CreateSessionRequestSchema = z$1.object({
 	retrievalVectorizedOnly: z$1.boolean().optional(),
 	citationStyle: z$1.enum(["named", "indexed"]).optional(),
 	temperature: z$1.number().optional(),
-	maxToolCalls: z$1.number().int().positive().optional(),
+	maxToolCalls: z$1.number().int().positive().max(50).optional(),
 	autoNamePlaceholder: z$1.string().optional(),
 	tags: z$1.array(SessionTagSchema).optional(),
 	lastUsedModel: z$1.string().nullish()
@@ -15038,6 +15214,47 @@ z$2.object(passthroughShape({
 	uiSideEffects: true,
 	jupyterNotebook: true
 }));
+const ENV_VARIABLE_RESPONSE_FIELDS = { key: z$2.string() };
+const envVariableResponseSchema = z$2.preprocess((value) => Array.isArray(value) ? value.flatMap((item) => {
+	const key = item?.key;
+	return typeof key === "string" ? [{ key }] : [];
+}) : [], z$2.array(z$2.object(ENV_VARIABLE_RESPONSE_FIELDS)));
+const GITHUB_WEBHOOK_RESPONSE_FIELDS = {
+	routingToken: true,
+	subscribedEvents: true,
+	repos: true,
+	createdAt: true,
+	lastDeliveryAt: true
+};
+const metadataResponseSchema = z$2.object({
+	...passthroughShape({
+		githubLogin: true,
+		githubUserId: true,
+		scope: true,
+		connectedAt: true,
+		disconnectedAt: true,
+		selectedRepositories: true,
+		webhooks: true
+	}),
+	webhooks: z$2.object({ github: z$2.object(passthroughShape(GITHUB_WEBHOOK_RESPONSE_FIELDS)).nullish() }).nullish()
+});
+z$2.object({
+	...passthroughShape({
+		id: true,
+		createdAt: true,
+		updatedAt: true,
+		name: true,
+		userId: true,
+		envVariables: true,
+		tools: true,
+		toolSchemas: true,
+		toolSchemasFetchedAt: true,
+		enabled: true,
+		metadata: true
+	}),
+	envVariables: envVariableResponseSchema,
+	metadata: metadataResponseSchema.nullish()
+});
 const questMasterPlanResponseSchema = z$2.object(passthroughShape({
 	id: true,
 	createdAt: true,
@@ -15203,7 +15420,10 @@ const CreateFileUploadRequestSchema = z$1.object({
 	file_name: z$1.string().min(1),
 	/** Declared MIME type, e.g. `image/png`. Unsupported types are rejected with 400. */
 	mime_type: z$1.string().min(1),
-	/** Size in bytes of the file you will PUT. Checked against the upload limit and your storage quota. */
+	/**
+	* Size in bytes of the file you will PUT. Checked against the upload limit and your storage quota,
+	* and bound into `upload_url`: a PUT of any other length is refused.
+	*/
 	file_size: z$1.number().int().positive()
 });
 const FILE_MODERATION_STATUSES = [
@@ -16436,17 +16656,6 @@ const GENERATION_CALLBACK_DESCRIPTION = "Optional `callbackUrl`: an https URL th
 * in sync with the rejections in apps/client/server/generationCallback/armGenerationCallback.ts.
 */
 const GENERATION_CALLBACK_REJECTED_DESCRIPTION = "`callbackUrl` was rejected: the request is not API-key authenticated, the key has no callback signing secret, the URL resolves to a private address, or the deployment does not deliver callbacks.";
-/**
-* The client-chosen billing organization on the v1 media request bodies (image generations and edits,
-* video and music generations). Blank is a 422 rather than an omission: billing must never fall
-* through to a different payer on an empty string. The server side of this contract is
-* resolveMediaBillingOrgId (apps/client/server/billing); keep these descriptions in step with it.
-*/
-const BillingOrganizationIdSchema = z$1.string().trim().min(1).nullable().optional().describe(`The organization to bill: one you belong to, or null for your personal credits. Omitted bills your home organization, or your personal credits if you have none. An organization-billed API key always bills its own organization: omit this or set it to the key's organization; any other value, null included, is rejected with a 403 (\`errorCode: ${BILLING_ORGANIZATION_MISMATCH_ERROR_CODE}\`).`);
-/** The billing-organization clause of a v1 media create route's 403 description. */
-const BILLING_ORGANIZATION_FORBIDDEN_DESCRIPTION = `the billing organization names one you do not belong to (or is not a valid id), or an organization-billed API key names any organization but its own (\`errorCode: ${BILLING_ORGANIZATION_MISMATCH_ERROR_CODE}\`).`;
-/** A v1 media create route's 400 for an org-billed key that no longer speaks for its organization. */
-const BILLING_ORGANIZATION_STALE_KEY_DESCRIPTION = "An organization-billed API key bills an organization that no longer exists, or one its owner is no longer a member of; re-mint the key.";
 const DashboardParamsSchema = z$1.object({
 	dashboardDataSources: z$1.array(z$1.object({
 		sourceName: z$1.string(),
@@ -16487,7 +16696,7 @@ const PromptIntentSchema = z$1.enum(["fresh", "continuation"]);
 * (pages/api/v1/image-generations.ts); `literal` sends it unchanged apart from truncation to the model's prompt limit.
 */
 const ImagePromptResolutionSchema = z$1.enum(["auto", "literal"]);
-const GenerateImageRequestBodySchema = OpenAIImageGenerationInput.extend({
+const GenerateImageIvokeParamsSchema = OpenAIImageGenerationInput.extend({
 	sessionId: z$1.string(),
 	questId: z$1.string().optional(),
 	organizationId: z$1.string().nullable().optional(),
@@ -16520,13 +16729,21 @@ const GenerateImageRequestBodySchema = OpenAIImageGenerationInput.extend({
 		/** Resolver intent - drives the banner's framing (continuation = "context applied" vs fresh = "enhanced"). */
 		intent: PromptIntentSchema.optional()
 	}).optional()
-}).omit({
+});
+/**
+* snake_case alias of `organizationId` on the public image request bodies. The route maps it
+* (`resolveBillingOrgInput`) rather than the schema, which a public request schema may not
+* `.transform()`. Same rules as `organizationId`: null bills personal, blank is a 422.
+*/
+const BillingOrgIdAliasSchema = BillingOrganizationIdSchema.describe("Alias of `organizationId`, for callers used to the snake_case video and music bodies. Sending both with different values is a 422.");
+const GenerateImageRequestBodySchema = GenerateImageIvokeParamsSchema.omit({
 	intent: true,
 	promptEnhancement: true
 }).extend({
 	sessionId: z$1.string().optional(),
 	sessionName: z$1.string().optional(),
 	organizationId: BillingOrganizationIdSchema,
+	organization_id: BillingOrgIdAliasSchema,
 	callbackUrl: GenerationCallbackUrlSchema.optional(),
 	projectId: z$1.string().optional(),
 	prompt_resolution: ImagePromptResolutionSchema.optional().describe("How the prompt is treated before it reaches the image model. `\"auto\"` (the default) resolves it against the session history, so a follow-up such as \"make it darker\" is rewritten to carry the previous subject and the prior image is fed back as input. `\"literal\"` skips that step: the prompt is sent unchanged (apart from truncation to the model's prompt limit), `intent` is `\"fresh\"`, `promptWasEnhanced` is `false`, and a prior session image is carried forward only for models that cannot run without an input image. Use `\"literal\"` when the prompt is already self-contained, for example when an agent or pipeline builds it.")
@@ -16569,6 +16786,7 @@ const EditImageRequestBodySchema = OpenAIImageGenerationInput.extend({
 	sessionId: z$1.string(),
 	questId: z$1.string().optional(),
 	organizationId: BillingOrganizationIdSchema,
+	organization_id: BillingOrgIdAliasSchema,
 	aspect_ratio: z$1.string().optional(),
 	fabFileIds: z$1.array(z$1.string()).prefault([]),
 	/**
@@ -16603,8 +16821,8 @@ z$1.object({
 	imageConfig: GenerateImageToolCallSchema.optional(),
 	audioConfig: AudioGenerationToolCallSchema.optional(),
 	deepResearchConfig: z$1.object({
-		maxDepth: z$1.number().optional(),
-		duration: z$1.number().optional(),
+		maxDepth: z$1.number().int().min(1).max(10).optional(),
+		duration: z$1.number().positive().max(10).optional(),
 		searchers: z$1.array(z$1.any()).optional()
 	}).optional(),
 	fabFileIds: z$1.array(z$1.string()),
@@ -17471,7 +17689,7 @@ defineEndpoint({
 			}
 		},
 		400: {
-			description: "Malformed or otherwise invalid request (no `errorCode`), or a `model` the caller cannot use (`errorCode: \"unknown_model\"`): not in the catalog or not available to the caller. List valid ids with `GET /api/v1/models`. Tool search requests are refused with: `tool_search_unsupported` (a server tool, `tool_reference` or echoed tool search block on a model that cannot serve tool search here), `all_tools_deferred` (every tool deferred and no server tool), `deferred_tool_cache_control` (`cache_control` on a deferred tool), `unknown_tool_reference` (a `tool_reference` naming a tool not in `tools`, or carrying no string `tool_name`).",
+			description: "Malformed or otherwise invalid request (no `errorCode`), or a `model` the caller cannot use (`errorCode: \"unknown_model\"`): not in the catalog or not available to the caller. List valid ids with `GET /api/v1/models`. Tool search requests are refused with: `tool_search_unsupported` (a server tool, `tool_reference` or echoed tool search block on a model that cannot serve tool search here), `all_tools_deferred` (every tool deferred and no server tool), `deferred_tool_cache_control` (`cache_control` on a deferred tool), `unknown_tool_reference` (a `tool_reference` naming a tool not in `tools`, or carrying no string `tool_name`). Mid-conversation tool changes are refused with: `tool_changes_unsupported` (a `tool_addition` / `tool_removal` system message on a model that cannot serve it here), `invalid_tool_change` (a malformed block, or one placed where the provider does not accept it), and `unknown_tool_reference` (a changed tool not in `tools`).",
 			schema: CompletionsBadRequestErrorSchema
 		},
 		413: {
@@ -17568,7 +17786,7 @@ defineEndpoint({
 	path: "/api/ai/tts",
 	operationId: "synthesizeSpeech",
 	summary: "Synthesize speech from text",
-	description: "Generates speech from text using OpenAI or ElevenLabs. When the requested provider has no usable key (or the provider rejects it), another configured provider stands in and the substitution is reported via `provider`/`fallbackFrom` and the `X-B4M-Tts-Provider*` headers. Input length is capped per provider (OpenAI 4096 characters, ElevenLabs 10000), and an output `format` the chosen provider cannot produce is rejected with a 422 before any provider cost is incurred. " + GENERATED_AUDIO_DESCRIPTION,
+	description: "Generates speech from text using OpenAI or ElevenLabs. When the requested provider has no usable key (or the provider rejects it), another configured provider stands in and the substitution is reported via `provider`/`fallbackFrom` and the `X-B4M-Tts-Provider*` headers. Input length is capped per provider (OpenAI 4096 characters, ElevenLabs 10000), and an output `format` the chosen provider cannot produce is rejected with a 422 before any provider cost is incurred. `organization_id` picks the payer: an organization you belong to, or null for your personal credits; omitted bills your personal credits, as this endpoint always has. " + GENERATED_AUDIO_DESCRIPTION,
 	tags: ["Audio"],
 	auth: "apiKeyOrJwt",
 	scopes: ["ai:generate"],
@@ -17611,6 +17829,18 @@ defineEndpoint({
 			description: "Missing/invalid credentials, no provider has a usable key (`provider_not_configured`), or the provider refused the key we sent and no alternate could stand in (`provider_rejected`).",
 			schema: ttsErrorResponseSchema
 		},
+		400: {
+			description: `The billing organization could not be resolved. ${BILLING_ORGANIZATION_STALE_KEY_DESCRIPTION}`,
+			schema: ttsErrorResponseSchema
+		},
+		403: {
+			description: `The API key lacks the \`ai:generate\` scope (\`required_scopes\` names it), or ${BILLING_ORGANIZATION_FORBIDDEN_DESCRIPTION}`,
+			schema: ttsForbiddenResponseSchema
+		},
+		404: {
+			description: "A nonexistent `organization_id`, for an admin caller; for anyone else it is `403`.",
+			schema: ttsErrorResponseSchema
+		},
 		422: {
 			description: "Request body failed validation, the text exceeds the provider character limit, the provider cannot produce the requested `format`, the provider rejected the request (e.g. an unknown voice), or the caller cannot afford the synthesis - the last of those is the only one tagged `errorCode: \"insufficient_credits\"`, so match on the classifier rather than the status to tell a billing failure from a bad request.",
 			schema: ttsErrorResponseSchema
@@ -17704,7 +17934,7 @@ defineEndpoint({
 	path: "/api/ai/sound-effects",
 	operationId: "generateSoundEffect",
 	summary: "Generate a sound effect",
-	description: "Generates a short sound effect from a text description. Omitting `durationSeconds` lets the provider pick the length (and bills at its default); `promptInfluence` trades prompt fidelity (1) against variation (0). Credits are reserved before generation and refunded if it fails. " + GENERATED_AUDIO_DESCRIPTION,
+	description: "Generates a short sound effect from a text description. Omitting `durationSeconds` lets the provider pick the length (and bills at its default); `promptInfluence` trades prompt fidelity (1) against variation (0). Credits are reserved before generation and refunded if it fails. `organization_id` picks the payer: an organization you belong to, or null for your personal credits; omitted bills your home organization (or personal credits if you have none). " + GENERATED_AUDIO_DESCRIPTION,
 	tags: ["Audio"],
 	auth: "apiKeyOrJwt",
 	scopes: ["ai:generate"],
@@ -17730,7 +17960,15 @@ defineEndpoint({
 			tooLargeSchema: generatedAudioTooLargeSchema
 		}),
 		400: {
-			description: "The billing user or organization could not be resolved.",
+			description: `The billing user or organization could not be resolved. ${BILLING_ORGANIZATION_STALE_KEY_DESCRIPTION}`,
+			schema: ApiErrorSchema
+		},
+		403: {
+			description: `The API key lacks the \`ai:generate\` scope (\`required_scopes\` names it), or ${BILLING_ORGANIZATION_FORBIDDEN_DESCRIPTION}`,
+			schema: BillingOrganizationForbiddenErrorSchema
+		},
+		404: {
+			description: "A nonexistent `organization_id`, for an admin caller; for anyone else it is `403`.",
 			schema: ApiErrorSchema
 		},
 		422: {
@@ -17871,9 +18109,9 @@ defineEndpoint({
 					replaced_by: null,
 					image: null,
 					credits_per_1m_tokens: {
-						input: 6e3,
-						output: 3e4,
-						cached_input: 600
+						input: 4e3,
+						output: 2e4,
+						cached_input: 400
 					}
 				}, {
 					id: "gpt-image-1",
@@ -17955,7 +18193,7 @@ defineEndpoint({
 	path: "/api/v1/image-generations",
 	operationId: "generateImage",
 	summary: "Generate an image",
-	description: "Queues an image generation and returns immediately with the quest that will carry the result - no image yet, and the call never blocks on the render. Poll `GET /api/v1/quests/{id}` until `status` is `\"done\"` (see the `generateImage200PollResult` schema). Omit `sessionId` to create a new session. The prompt is resolved against the session history first, so a follow-up such as \"make it darker\" binds to the previous image; `enhancedPrompt` reports the prompt actually sent to the model. Send `prompt_resolution: \"literal\"` to skip that step and have the prompt sent as written (apart from truncation to the model's prompt limit). `referenceImageFabFileIds` passes up to 15 already-uploaded images as style anchors, after the input image taken from `fabFileIds`. Only gpt-image models accept them: sending any with another model is rejected with a 400 rather than ignored. Which `size` values a model accepts, and whether it honours `background`, `seed`, `quality`, `n` and reference images, is listed per model in the `image` block of `GET /api/v1/models`. Credits are checked when the render runs, so insufficient credits arrive on the polled quest rather than as a 422. `POST /api/ai/generate-image` is a legacy alias of this endpoint. Authenticate with an API key (`b4m_live_`) or a JWT.\n\n" + GENERATION_CALLBACK_DESCRIPTION,
+	description: "Queues an image generation and returns immediately with the quest that will carry the result - no image yet, and the call never blocks on the render. Poll `GET /api/v1/quests/{id}` until `status` is `\"done\"` (see the `generateImage200PollResult` schema). Omit `sessionId` to create a new session. The prompt is resolved against the session history first, so a follow-up such as \"make it darker\" binds to the previous image; `enhancedPrompt` reports the prompt actually sent to the model. Send `prompt_resolution: \"literal\"` to skip that step and have the prompt sent as written (apart from truncation to the model's prompt limit). `referenceImageFabFileIds` passes up to 15 already-uploaded images as style anchors, after the input image taken from `fabFileIds`. Only gpt-image models accept them: sending any with another model is rejected with a 400 rather than ignored. Which `size` values a model accepts, and whether it honours `background`, `seed`, `quality`, `n` and reference images, is listed per model in the `image` block of `GET /api/v1/models`. Credits are checked when the render runs, so insufficient credits arrive on the polled quest rather than as a 422. `organization_id` is accepted as an alias of `organizationId`, for callers used to the snake_case video and music bodies; `null` bills the personal account. `POST /api/ai/generate-image` is a legacy alias of this endpoint. Authenticate with an API key (`b4m_live_`) or a JWT.\n\n" + GENERATION_CALLBACK_DESCRIPTION,
 	tags: ["Images"],
 	auth: "apiKeyOrJwt",
 	scopes: ["ai:generate"],
@@ -17982,6 +18220,10 @@ defineEndpoint({
 		404: {
 			description: "The session, or the quest being retried, does not exist or is not accessible to the caller. A nonexistent billing `organizationId` is `404` only for an admin caller; for anyone else, an invalid or inaccessible `organizationId` is `403` instead.",
 			schema: ApiErrorSchema
+		},
+		422: {
+			description: "The body is malformed, or it names the billing organization ambiguously. Both `organizationId` and `organization_id` sent with different values is a `422`; so is an empty or blank value for either (a blank is never treated as an omission, which would bill a different payer), and so is any other billing-org-shaped key such as `billing_org_id` or `payerOrgId`, which would otherwise be stripped and silently bill the caller's home organization.",
+			schema: ApiErrorSchema
 		}
 	},
 	emitsRateLimitHeaders: true,
@@ -18000,7 +18242,7 @@ defineEndpoint({
 	path: "/api/v1/image-edits",
 	operationId: "editImage",
 	summary: "Edit an image",
-	description: "Queues an edit of an existing image and returns the quest that will carry the result, before the render runs. Poll `GET /api/v1/quests/{id}` until `status` is `\"done\"` (see the `editImage200PollResult` schema). `image` is the URL of the source image; `fabFileIds` must name at least one file, and the first is the inpainting mask. `referenceImageFabFileIds` adds up to 15 style anchors after the source image, so the mask always applies to the source; only gpt-image models accept them, and sending any with another model is rejected with a 400 rather than ignored. Both id fields take ids from `POST /api/v1/files`: upload each file, poll `GET /api/v1/files/{id}` until `moderation_status` is `clean`, then pass its `id`. An id that is not yet `clean` fails the edit on the polled quest. `image` takes a URL rather than an id, so a source uploaded the same way is passed as its `download_url`, which must still be unexpired when the render runs. The edited image is not a file id: read it from `files[].url` on the polled quest, not from `GET /api/v1/files/{id}`. `seed` makes an edit reproducible on BFL (FLUX) models only; gpt-image and Gemini models ignore it. Credits are checked when the render runs, so insufficient credits arrive on the polled quest rather than as a 422. `POST /api/ai/edit-image` is a legacy alias of this endpoint. Authenticate with an API key (`b4m_live_`) or a JWT.\n\n" + GENERATION_CALLBACK_DESCRIPTION,
+	description: "Queues an edit of an existing image and returns the quest that will carry the result, before the render runs. Poll `GET /api/v1/quests/{id}` until `status` is `\"done\"` (see the `editImage200PollResult` schema). `image` is the URL of the source image; `fabFileIds` must name at least one file, and the first is the inpainting mask. `referenceImageFabFileIds` adds up to 15 style anchors after the source image, so the mask always applies to the source; only gpt-image models accept them, and sending any with another model is rejected with a 400 rather than ignored. Both id fields take ids from `POST /api/v1/files`: upload each file, poll `GET /api/v1/files/{id}` until `moderation_status` is `clean`, then pass its `id`. An id that is not yet `clean` fails the edit on the polled quest. `image` takes a URL rather than an id, so a source uploaded the same way is passed as its `download_url`, which must still be unexpired when the render runs. The edited image is not a file id: read it from `files[].url` on the polled quest, not from `GET /api/v1/files/{id}`. `seed` makes an edit reproducible on BFL (FLUX) models only; gpt-image and Gemini models ignore it. Credits are checked when the render runs, so insufficient credits arrive on the polled quest rather than as a 422. `organization_id` is accepted as an alias of `organizationId`, for callers used to the snake_case video and music bodies; `null` bills the personal account. `POST /api/ai/edit-image` is a legacy alias of this endpoint. Authenticate with an API key (`b4m_live_`) or a JWT.\n\n" + GENERATION_CALLBACK_DESCRIPTION,
 	tags: ["Images"],
 	auth: "apiKeyOrJwt",
 	scopes: ["ai:generate"],
@@ -18029,6 +18271,10 @@ defineEndpoint({
 		404: {
 			description: "The session, or the quest being retried, does not exist or is not accessible to the caller. A nonexistent billing `organizationId` is `404` only for an admin caller; for anyone else, an invalid or inaccessible `organizationId` is `403` instead.",
 			schema: ApiErrorSchema
+		},
+		422: {
+			description: "The body is malformed, or it names the billing organization ambiguously. Both `organizationId` and `organization_id` sent with different values is a `422`; so is an empty or blank value for either (a blank is never treated as an omission, which would bill a different payer), and so is any other billing-org-shaped key such as `billing_org_id` or `payerOrgId`, which would otherwise be stripped and silently bill the caller's home organization.",
+			schema: ApiErrorSchema
 		}
 	},
 	emitsRateLimitHeaders: true,
@@ -18060,7 +18306,7 @@ defineEndpoint({
 	path: "/api/v1/files",
 	operationId: "createFileUpload",
 	summary: "Start a file upload",
-	description: "Registers a file and returns a presigned `upload_url`. Uploading is three steps: (1) call this endpoint with the file name, MIME type, and size in bytes; (2) `PUT` the raw bytes to `upload_url` before `upload_url_expires_at` - send no `Authorization` header, the URL signature is the credential, and do send a `Content-Type` matching `mime_type`; (3) poll `GET /api/v1/files/{id}` until `moderation_status` is `clean` (usually a few seconds after the PUT), then pass `id` wherever an endpoint takes a file id (for example `fabFileIds` and `referenceImageFabFileIds` on `POST /api/v1/image-edits`). Unsupported types, a size over the upload limit, or a size that would exceed your storage quota are rejected with 400 before any URL is issued. Authenticate with an API key (`b4m_live_`) carrying `files:write`, or a JWT.",
+	description: "Registers a file and returns a presigned `upload_url`. Uploading is three steps: (1) call this endpoint with the file name, MIME type, and size in bytes; (2) `PUT` the raw bytes to `upload_url` before `upload_url_expires_at` - send no `Authorization` header, the URL signature is the credential, and do send a `Content-Type` matching `mime_type`; the URL is bound to `file_size`, so the body must be exactly that many bytes or storage refuses it with 403; (3) poll `GET /api/v1/files/{id}` until `moderation_status` is `clean` (usually a few seconds after the PUT), then pass `id` wherever an endpoint takes a file id (for example `fabFileIds` and `referenceImageFabFileIds` on `POST /api/v1/image-edits`). Unsupported types, a size over the upload limit, or a size that would exceed your storage quota are rejected with 400 before any URL is issued. Authenticate with an API key (`b4m_live_`) carrying `files:write`, or a JWT.",
 	tags: ["Files"],
 	auth: "apiKeyOrJwt",
 	scopes: ["files:write"],
@@ -21214,6 +21460,11 @@ const INCIDENT_REVIEW_STATUSES = [
 	"reported"
 ];
 const INCIDENT_REPORT_CHANNELS = ["manual"];
+const INCIDENT_SURFACES = [
+	"generation",
+	"edit",
+	"upload"
+];
 const ModerationLabelHitSchema = z$1.object({
 	name: z$1.string(),
 	parentName: z$1.string(),
@@ -21227,6 +21478,7 @@ z$1.object({
 	fabFileId: z$1.string().optional(),
 	provider: z$1.string(),
 	model: z$1.string(),
+	surface: z$1.enum(INCIDENT_SURFACES).optional(),
 	labels: z$1.array(ModerationLabelHitSchema),
 	reviewStatus: z$1.enum(INCIDENT_REVIEW_STATUSES).optional(),
 	ncmecReportId: z$1.string().optional(),
@@ -21236,9 +21488,11 @@ z$1.object({
 	previousReviewStatus: z$1.literal("false_positive").optional(),
 	falsePositiveBy: z$1.string().optional(),
 	falsePositiveAt: z$1.union([z$1.string(), z$1.date()]).optional(),
+	alertedAt: z$1.union([z$1.string(), z$1.date()]).optional(),
 	createdAt: z$1.union([z$1.string(), z$1.date()]).optional(),
 	updatedAt: z$1.union([z$1.string(), z$1.date()]).optional()
 });
+z$1.string().email();
 new RegExp(`[аеорсхуіјѕԁһӏαονικρτυ]`, "g");
 const OPENER_STICKY = /<artifact/iy;
 const WHITESPACE$1 = /\s/;
@@ -24005,7 +24259,8 @@ const CORE_TOOL_DESCRIPTORS = new Map(Object.entries({
 		effect: "execute",
 		approval: "prompt_always",
 		openWorld: true,
-		commandArg: "command"
+		commandArg: "command",
+		sandbox: "command"
 	},
 	shell_execute: {
 		source: CORE,
@@ -24114,6 +24369,15 @@ function isReadOnlyTool(descriptor) {
 function commandTextOf(descriptor, args) {
 	return stringArg(args, descriptor?.commandArg);
 }
+/**
+* The argument holding the command the OS sandbox wraps, or undefined when the tool is not
+* sandboxed. Only core tools may declare it: a sandboxed call can skip the prompt in
+* auto-allow mode, so a plugin or MCP descriptor must not be able to claim it.
+*/
+function sandboxedCommandArg(descriptor) {
+	if (descriptor?.sandbox !== "command" || descriptor.source.kind !== "core") return void 0;
+	return descriptor.commandArg;
+}
 /** The path a file-writing tool will write, when the tool declares one and `args` carries it. */
 function writePathOf(descriptor, args) {
 	const writePath = stringArg(args, descriptor?.writePathArg);
@@ -25603,4 +25867,4 @@ var ConfigStore = class {
 	}
 };
 //#endregion
-export { PermissionDeniedError as $, ApiKeyType as A, stripToolArtifactMarkup as At, DEFAULT_TTS_PROVIDER as B, actorKindMarker as Bt, htmlFirstH1 as C, obfuscateApiKey as Ct, AGENT_QUEST_MCP_URI as D, signImageUrl as Dt, AGENT_QUEST_MANIFEST as E, secureParameters as Et, CONTEXT_WINDOW_SAFETY_BUFFER_TOKENS as F, ttsResponseTooLargeSchema as Ft, LOCATION_MAP_LANGUAGE as G, WEBSITE_URL as Gt, GENERATED_IMAGE_EXTENSION_RE as H, delegationPayloadSchema as Ht, CREDIT_DEDUCT_TRANSACTION_TYPES as I, withRetry as It, ModelBackend as J, MODEL_INFO_FIELD_GROUP_OF as K, ChatModels as L, ACTOR_COLOR_SLOTS as Lt, BRIEFCASE_CATALOG_QUERIES as M, tokenEstimateMultiplier as Mt, BedrockEmbeddingModel as N, ttsBase64ResponseSchema as Nt, ARTIFACT_DELIVERED_PLACEHOLDER as O, splitEquals as Ot, BriefcasePromptIdSchema as P, ttsRequestSchema as Pt, PROMPT_TEXT_MAX as Q, CompletionReasoningEffortSchema as R, DELEGATION_PAYLOAD_SCHEMA_NAME as Rt, htmlErrorTitle as S, joinReplySlots as St, AGENT_QUEST_ID as T, replacePromptVariables as Tt, ImageModels as U, selfClaimedActorKindSchema as Ut, DEGENERATE_FINISH_REASON as V, actorKindSchema as Vt, ImagePromptResolutionSchema as W, APP_NAME as Wt, OllamaEmbeddingModel as X, NotFoundError as Y, OpenAIEmbeddingModel as Z, NotAuthenticatedError as _, hasDeliverablePinnedArtifact as _t, commandTextOf as a, VisibilitySchema as at, SESSION_ID_PATTERN as b, isRetryableError as bt, writePathOf as c, assertAuthOriginMatchesApiKey as ct, getEnvironmentName as d, escapeThinkMarkers as dt, REVIEW_GATE_STATUS_VALUES as et, requireApiUrl as f, filterToolArtifactMarkup as ft, LOCAL_DEV_URL as g, googleMapsSearchUrl as gt, DeviceFlowClient as h, getQuestErrorCode as ht, ToolCatalog as i, SupportedFabFileMimeTypes as it, ArtifactTypeSchema as j, supportedVoiceGenerationVendor as jt, ARTIFACT_REMOVED_PLACEHOLDER as k, stripDeliveredArtifactBlocks as kt, ApiEndpointUnconfiguredError as l, buildPromptContext as lt, AuthenticatedApiClient as m, getMcpProviderMetadata as mt, extractCompactInstructions as n, SLUG_OWNED_BY_OTHER as nt, isReadOnlyTool as o, VoyageAIEmbeddingModel as ot, resolveApiEndpoint as p, generatedAudioResponseSchema as pt, McpServerName as q, loadContextFiles as r, SUBQUEST_STATUS_VALUES as rt, toolCategory as s, WORK_ITEM_STATUSES as st, ConfigStore as t, SEARCH_RESULT_CARDS_LANGUAGE as tt, getCreditsUrl as u, createThinkMarkerEscaper as ut, parseApiUrl as v, isEarlyStop as vt, escapeArtifactBodyJson as w, questReplyText as wt, isValidSessionId as x, isUserInitiatedAbort as xt, logger as y, isPlaceholderImageSigningSecret as yt, CreateArtifactRequestSchema as z, actorColorIndex as zt };
+export { PROMPT_TEXT_MAX as $, ARTIFACT_REMOVED_PLACEHOLDER as A, splitEquals as At, CreateArtifactRequestSchema as B, DELEGATION_PAYLOAD_SCHEMA_NAME as Bt, htmlErrorTitle as C, isUserInitiatedAbort as Ct, AGENT_QUEST_MANIFEST as D, replacePromptVariables as Dt, AGENT_QUEST_ID as E, questReplyText as Et, BriefcasePromptIdSchema as F, ttsBase64ResponseSchema as Ft, ImagePromptResolutionSchema as G, selfClaimedActorKindSchema as Gt, DEGENERATE_FINISH_REASON as H, actorKindMarker as Ht, CONTEXT_WINDOW_SAFETY_BUFFER_TOKENS as I, ttsRequestSchema as It, McpServerName as J, LOCATION_MAP_LANGUAGE as K, APP_NAME as Kt, CREDIT_DEDUCT_TRANSACTION_TYPES as L, ttsResponseTooLargeSchema as Lt, ArtifactTypeSchema as M, stripToolArtifactMarkup as Mt, BRIEFCASE_CATALOG_QUERIES as N, supportedVoiceGenerationVendor as Nt, AGENT_QUEST_MCP_URI as O, secureParameters as Ot, BedrockEmbeddingModel as P, tokenEstimateMultiplier as Pt, OpenAIEmbeddingModel as Q, ChatModels as R, withRetry as Rt, isValidSessionId as S, isRetryableError as St, escapeArtifactBodyJson as T, obfuscateApiKey as Tt, GENERATED_IMAGE_EXTENSION_RE as U, actorKindSchema as Ut, DEFAULT_TTS_PROVIDER as V, actorColorIndex as Vt, ImageModels as W, delegationPayloadSchema as Wt, NotFoundError as X, ModelBackend as Y, OllamaEmbeddingModel as Z, LOCAL_DEV_URL as _, getQuestErrorCode as _t, commandTextOf as a, SupportedFabFileMimeTypes as at, logger as b, isEarlyStop as bt, toolCategory as c, VoyageAIEmbeddingModel as ct, getCreditsUrl as d, buildPromptContext as dt, PermissionDeniedError as et, getEnvironmentName as f, createThinkMarkerEscaper as ft, DeviceFlowClient as g, getMcpProviderMetadata as gt, AuthenticatedApiClient as h, generatedAudioResponseSchema as ht, ToolCatalog as i, SUBQUEST_STATUS_VALUES as it, ApiKeyType as j, stripDeliveredArtifactBlocks as jt, ARTIFACT_DELIVERED_PLACEHOLDER as k, signImageUrl as kt, writePathOf as l, WORK_ITEM_STATUSES as lt, resolveApiEndpoint as m, filterToolArtifactMarkup as mt, extractCompactInstructions as n, SEARCH_RESULT_CARDS_LANGUAGE as nt, isReadOnlyTool as o, UnprocessableEntityError as ot, requireApiUrl as p, escapeThinkMarkers as pt, MODEL_INFO_FIELD_GROUP_OF as q, WEBSITE_URL as qt, loadContextFiles as r, SLUG_OWNED_BY_OTHER as rt, sandboxedCommandArg as s, VisibilitySchema as st, ConfigStore as t, REVIEW_GATE_STATUS_VALUES as tt, ApiEndpointUnconfiguredError as u, assertAuthOriginMatchesApiKey as ut, NotAuthenticatedError as v, googleMapsSearchUrl as vt, htmlFirstH1 as w, joinReplySlots as wt, SESSION_ID_PATTERN as x, isPlaceholderImageSigningSecret as xt, parseApiUrl as y, hasDeliverablePinnedArtifact as yt, CompletionReasoningEffortSchema as z, ACTOR_COLOR_SLOTS as zt };