@cohortapp/agent-sdk 2.3.0

package/lib/org/ui-parity.mjs

@@ -0,0 +1,3236 @@
+/**
+ * lib/org/ui-parity.mjs — Agent UI-parity helpers (full human-action mirror).
+ *
+ * A 1:1 mirror of the human Cohort UI: 328 named convenience wrappers over the
+ * /v1 RPC binding, one per agent-facing org method the human app exposes (charter,
+ * member, team, channel, persona, profile, sop, escalation, annotation, contact,
+ * file, memory, compact, notification, decision, messaging, board, invitation,
+ * user, settings, billing, org, integration, email + the Inbox app, artifact, and
+ * the agent desks: books, calendar, crm, directory, files, meetings.recapFile).
+ * The `branding.*` (product section: Design) wrappers live in ./client.mjs beside
+ * the rest of that family, not here. Every wrapper is a thin one-liner over
+ * `call()` from ./client.mjs, so they inherit the SAME contract:
+ *
+ *   - POST {base}/v1/{method}, body = params JSON, res frame {ok,result|error}.
+ *   - Bearer auth + x-org-protocol on every request; x-idempotency-key on the
+ *     side-effecting methods (auto-derived from a stable `params.id` when present,
+ *     else supply `o.idempotencyKey`).
+ *   - Fail-open: a network/parse error or a disabled integration yields a benign
+ *     error res frame — never a throw.
+ *
+ * IMPORTANT — even the READ-ONLY methods here (charter.get, member.list, …) are
+ * POST RPC METHODS, not GET reads. They are dispatched over POST /api/v1/<name>
+ * via `call()`, exactly like the writes; they are simply non-side-effecting (no
+ * idempotency key, the server makes no mutation). Do NOT route them through
+ * client.read() — that is the distinct GET read surface (snapshot/events/etc.).
+ *
+ * IDEMPOTENCY — methods marked idempotent in the protocol (the create/add/upsert/
+ * pin verbs) carry no natural `id` at creation time, so `call()` cannot synthesise
+ * a key. The caller SHOULD pass a stable `o.idempotencyKey` so a retried creation
+ * collapses to one row rather than spawning duplicates. Each such wrapper says so.
+ *
+ * Node builtins only. ESM. Re-exported from package.json as "@cohortapp/agent-sdk/org/ui-parity".
+ *
+ * @module lib/org/ui-parity
+ */
+
+"use strict";
+
+import { call } from "./client.mjs";
+
+// ---------------------------------------------------------------------------
+// charter — member charters, clauses, sections, colleague-charter fields
+// ---------------------------------------------------------------------------
+
+/**
+ * Save the full clause set of a channel's operating charter (charter.updateClauses).
+ * @param {object} params - { channelId, clauses[]{ id, title, body?, version? } }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function charterUpdateClauses(params, o = {}) {
+  return call("charter.updateClauses", params || {}, o);
+}
+
+/**
+ * Update a member charter's approval line + gates text (charter.update; creates if absent).
+ * @param {object} params - { memberId, approvedByLine?, gatesText? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function charterUpdate(params, o = {}) {
+  return call("charter.update", params || {}, o);
+}
+
+/**
+ * Append a new section to a member's charter (charter.addSection). Idempotent —
+ * pass a stable `o.idempotencyKey` so a retried add doesn't duplicate the section.
+ * @param {object} params - { memberId, kind, title?, body }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function charterAddSection(params, o = {}) {
+  return call("charter.addSection", params || {}, o);
+}
+
+/**
+ * Update a charter section's kind/title/body (charter.updateSection; provided fields only).
+ * @param {object} params - { id, kind?, title?, body? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function charterUpdateSection(params, o = {}) {
+  return call("charter.updateSection", params || {}, o);
+}
+
+/**
+ * Delete a charter section (charter.deleteSection).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function charterDeleteSection(params, o = {}) {
+  return call("charter.deleteSection", params || {}, o);
+}
+
+/**
+ * Persist a full ordering of a charter's sections (charter.reorderSections).
+ * @param {object} params - { charterId, orderedIds[] }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function charterReorderSections(params, o = {}) {
+  return call("charter.reorderSections", params || {}, o);
+}
+
+/**
+ * Commit a charter amendment (charter.amend): bump version, persist the governance
+ * vector + signed YAML.
+ * @param {object} params - { memberId, yaml, tier?, permissionMode?, model?, reviewCycle?, tools?, autonomousAuthority?, hardConstraints?, escalationTriggers?, rewardWeights? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function charterAmend(params, o = {}) {
+  return call("charter.amend", params || {}, o);
+}
+
+/**
+ * Inline-edit one targeted field of an AI colleague's charter (charter.editColleagueField); bumps version.
+ * @param {object} params - { memberId, target, value }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function charterEditColleagueField(params, o = {}) {
+  return call("charter.editColleagueField", params || {}, o);
+}
+
+/**
+ * Read a member's full charter with sections (charter.get). Non-side-effecting RPC method.
+ * @param {object} params - { memberId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function charterGet(params, o = {}) {
+  return call("charter.get", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// member — directory seats, profile/contact/AI-operating fields, chart nodes
+// ---------------------------------------------------------------------------
+
+/**
+ * Create a human/AI colleague (member.create): auto seat slug, upserts Role,
+ * attaches empty OrgChartNode + Charter. Idempotent — pass a stable
+ * `o.idempotencyKey` so a retried create doesn't spawn a duplicate seat.
+ * @param {object} params - { kind, displayName, roleTitle, roleLevel, teamId, status?, tagline?, officeLocation?, activationWave?, contactEmail?, contactPhone?, agentEmail?, agentPhone?, operatingChannel?, modelRuntimeNotes?, autonomyLevel?, escalationPath?, supervisorId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memberCreate(params, o = {}) {
+  return call("member.create", params || {}, o);
+}
+
+/**
+ * Patch identity/profile/contact/AI-operating fields + supervisor link (member.update).
+ * @param {object} params - { id, displayName?, roleTitle?, roleLevel?, status?, tagline?, officeLocation?, activationWave?, contactEmail?, contactPhone?, agentEmail?, agentPhone?, operatingChannel?, modelRuntimeNotes?, autonomyLevel?, escalationPath?, supervisorId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memberUpdate(params, o = {}) {
+  return call("member.update", params || {}, o);
+}
+
+/**
+ * Set a member's status to INACTIVE (member.archive).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memberArchive(params, o = {}) {
+  return call("member.archive", params || {}, o);
+}
+
+/**
+ * Move a member to another team (or none) (member.assignTeam).
+ * @param {object} params - { memberId, teamId|null }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memberAssignTeam(params, o = {}) {
+  return call("member.assignTeam", params || {}, o);
+}
+
+/**
+ * Repoint a report's manager (member.reassignReporting; validates seats, active manager, no cycle).
+ * @param {object} params - { reportSlug, newManagerSlug }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memberReassignReporting(params, o = {}) {
+  return call("member.reassignReporting", params || {}, o);
+}
+
+/**
+ * Persist a manual org-chart node position (member.savePosition; arrange mode).
+ * @param {object} params - { slug, posX, posY }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memberSavePosition(params, o = {}) {
+  return call("member.savePosition", params || {}, o);
+}
+
+/**
+ * Clear every manual node-position override (member.resetPositions; back to auto-layout).
+ * @param {object} params - {}
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memberResetPositions(params, o = {}) {
+  return call("member.resetPositions", params || {}, o);
+}
+
+/**
+ * Read a member's full payload by slug (member.get). Non-side-effecting RPC method.
+ * @param {object} params - { slug }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function memberGet(params, o = {}) {
+  return call("member.get", params || {}, o);
+}
+
+/**
+ * List org members / directory (member.list). Non-side-effecting RPC method.
+ * @param {object} params - { status?, teamId? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function memberList(params, o = {}) {
+  return call("member.list", params || {}, o);
+}
+
+/**
+ * Option lists for the member editor (member.getEditorOptions). Non-side-effecting RPC method.
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function memberGetEditorOptions(params, o = {}) {
+  return call("member.getEditorOptions", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// team — palette-colored swimlanes / groupings
+// ---------------------------------------------------------------------------
+
+/**
+ * Create a team (team.create): unique slug, palette colorKey, appended sortOrder.
+ * Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { name, shortLabel?, colorKey, charter? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function teamCreate(params, o = {}) {
+  return call("team.create", params || {}, o);
+}
+
+/**
+ * Update a team's name/shortLabel/colorKey/charter (team.update).
+ * @param {object} params - { id, name?, shortLabel?, colorKey?, charter? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function teamUpdate(params, o = {}) {
+  return call("team.update", params || {}, o);
+}
+
+/**
+ * Delete a team (team.delete; only when it has zero assigned members).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function teamDelete(params, o = {}) {
+  return call("team.delete", params || {}, o);
+}
+
+/**
+ * List org teams (team.list). Non-side-effecting RPC method.
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function teamList(params, o = {}) {
+  return call("team.list", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// channel — org channels, membership, read state, DMs/conversations
+// ---------------------------------------------------------------------------
+
+/**
+ * Create an org-scoped channel (channel.create): seats creator as owner + seed
+ * members. Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { slug, name, kind, topic?, members[]? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelCreate(params, o = {}) {
+  return call("channel.create", params || {}, o);
+}
+
+/**
+ * Patch a channel's name/topic/archived (channel.update; slug+kind immutable).
+ * @param {object} params - { channelId, name?, topic?, archived? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelUpdate(params, o = {}) {
+  return call("channel.update", params || {}, o);
+}
+
+/**
+ * Add a member row to a channel (channel.addMember; idempotent if present). Pass a
+ * stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { channelId, memberId, role }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelAddMember(params, o = {}) {
+  return call("channel.addMember", params || {}, o);
+}
+
+/**
+ * Remove a member row from a channel (channel.removeMember; no-op if absent).
+ * @param {object} params - { channelId, memberId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelRemoveMember(params, o = {}) {
+  return call("channel.removeMember", params || {}, o);
+}
+
+/**
+ * Change an existing member's channel role (channel.updateMemberRole).
+ * @param {object} params - { channelId, memberId, role }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelUpdateMemberRole(params, o = {}) {
+  return call("channel.updateMemberRole", params || {}, o);
+}
+
+/**
+ * Stamp the caller's own lastReadAt = now (channel.markRead).
+ * @param {object} params - { channelId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelMarkRead(params, o = {}) {
+  return call("channel.markRead", params || {}, o);
+}
+
+/**
+ * Move the caller's own lastReadAt back to recompute unread (channel.markUnreadFrom).
+ * @param {object} params - { channelId, fromTimestamp }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelMarkUnreadFrom(params, o = {}) {
+  return call("channel.markUnreadFrom", params || {}, o);
+}
+
+/**
+ * Find or create the deterministic 1:1 DM channel with another member
+ * (channel.resolveOrCreateDm). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { memberId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelResolveOrCreateDm(params, o = {}) {
+  return call("channel.resolveOrCreateDm", params || {}, o);
+}
+
+/**
+ * Open a 1:1 DM (one other) or create a GROUP_DM (2+) (channel.createConversation).
+ * Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { memberIds[], name? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function channelCreateConversation(params, o = {}) {
+  return call("channel.createConversation", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// persona — canonical persona fields, AI regeneration, durable agent id
+// ---------------------------------------------------------------------------
+
+/**
+ * Edit one whitelisted canonical persona field (persona.editField; sets
+ * personaEditedByUser, bumps personaVersion).
+ * @param {object} params - { memberId, field, stringValue? | arrayValue[]? | numberValue? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function personaEditField(params, o = {}) {
+  return call("persona.editField", params || {}, o);
+}
+
+/**
+ * AI-regenerate one persona field (persona.regenerate; field ∈ shortBio|longBio|
+ * headline|skills|imagePrompt|image — prompt/size only for image).
+ * @param {object} params - { memberId, field, prompt?, size? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function personaRegenerate(params, o = {}) {
+  return call("persona.regenerate", params || {}, o);
+}
+
+/**
+ * Mint and persist a durable cohortAgentId on a member (persona.generateAgentId;
+ * race-safe, returns existing if set). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { memberId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function personaGenerateAgentId(params, o = {}) {
+  return call("persona.generateAgentId", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// profile — tagline/bio/skills, profile sections, avatar
+// ---------------------------------------------------------------------------
+
+/**
+ * Update a member's tagline/bio/skills/languages (profile.update).
+ * @param {object} params - { memberId, tagline?, bio?, skills[]?, languages[]? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function profileUpdate(params, o = {}) {
+  return call("profile.update", params || {}, o);
+}
+
+/**
+ * Append a new profile section (profile.addSection). Idempotent — pass a stable
+ * `o.idempotencyKey` so a retried add doesn't duplicate the section.
+ * @param {object} params - { memberId, kind, title?, body }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function profileAddSection(params, o = {}) {
+  return call("profile.addSection", params || {}, o);
+}
+
+/**
+ * Update a profile section's kind/title/body (profile.updateSection).
+ * @param {object} params - { id, kind?, title?, body? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function profileUpdateSection(params, o = {}) {
+  return call("profile.updateSection", params || {}, o);
+}
+
+/**
+ * Delete a profile section (profile.deleteSection).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function profileDeleteSection(params, o = {}) {
+  return call("profile.deleteSection", params || {}, o);
+}
+
+/**
+ * Set/clear the caller's own avatar (profile.updateAvatar; writes User.image + WorkforceMember.avatarUrl).
+ * @param {object} params - { image }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function profileUpdateAvatar(params, o = {}) {
+  return call("profile.updateAvatar", params || {}, o);
+}
+
+/**
+ * Read a member's profile + sections (profile.get). Non-side-effecting RPC method.
+ * @param {object} params - { memberId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function profileGet(params, o = {}) {
+  return call("profile.get", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// sop — channel-scoped standard operating procedures
+// ---------------------------------------------------------------------------
+
+/**
+ * Create a channel-scoped SOP (sop.create; body parsed to steps, posts channel
+ * notice). Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { channelId, title, body? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function sopCreate(params, o = {}) {
+  return call("sop.create", params || {}, o);
+}
+
+/**
+ * Update a SOP's title/steps and bump its version (sop.update).
+ * @param {object} params - { id, title, body? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function sopUpdate(params, o = {}) {
+  return call("sop.update", params || {}, o);
+}
+
+/**
+ * Delete a SOP (sop.delete; channel-visibility gated).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function sopDelete(params, o = {}) {
+  return call("sop.delete", params || {}, o);
+}
+
+/**
+ * List SOPs, optionally for one channel (sop.list). Non-side-effecting RPC method.
+ * @param {object} params - { channelId? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function sopList(params, o = {}) {
+  return call("sop.list", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// escalation — raise/resolve escalations against tasks/channels
+// ---------------------------------------------------------------------------
+
+/**
+ * Raise an escalation against a task/channel (escalation.create; at least one
+ * target required). Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { title, severity?, detail?, waitingOn?, resolvable?, taskId?, channelId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function escalationCreate(params, o = {}) {
+  return call("escalation.create", params || {}, o);
+}
+
+/**
+ * Resolve a resolvable, not-yet-resolved escalation (escalation.resolve).
+ * @param {object} params - { escalationId, resolution? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function escalationResolve(params, o = {}) {
+  return call("escalation.resolve", params || {}, o);
+}
+
+/**
+ * List escalations, optionally filtered (escalation.list). Non-side-effecting RPC method.
+ * @param {object} params - { status?, channelId? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function escalationList(params, o = {}) {
+  return call("escalation.list", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// annotation — polymorphic annotation threads + comments
+// ---------------------------------------------------------------------------
+
+/**
+ * Create an annotation thread + first comment on a polymorphic entity
+ * (annotation.create). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { entityType, entityId, anchor?, body }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function annotationCreate(params, o = {}) {
+  return call("annotation.create", params || {}, o);
+}
+
+/**
+ * Append a comment to an OPEN annotation thread (annotation.comment).
+ * @param {object} params - { annotationId, body }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function annotationComment(params, o = {}) {
+  return call("annotation.comment", params || {}, o);
+}
+
+/**
+ * Close an OPEN annotation as RESOLVED (annotation.resolve).
+ * @param {object} params - { annotationId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function annotationResolve(params, o = {}) {
+  return call("annotation.resolve", params || {}, o);
+}
+
+/**
+ * Close an OPEN annotation as DISMISSED (annotation.dismiss).
+ * @param {object} params - { annotationId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function annotationDismiss(params, o = {}) {
+  return call("annotation.dismiss", params || {}, o);
+}
+
+/**
+ * List every OPEN annotation in the org (annotation.list; nav-badge feed). Non-side-effecting RPC method.
+ * @param {object} params - { orgId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function annotationList(params, o = {}) {
+  return call("annotation.list", params || {}, o);
+}
+
+/**
+ * Read an annotation thread with all comments (annotation.getThread). Non-side-effecting RPC method.
+ * @param {object} params - { annotationId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function annotationGetThread(params, o = {}) {
+  return call("annotation.getThread", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// contact — per-member contact detail rows
+// ---------------------------------------------------------------------------
+
+/**
+ * Add a contact detail row to a member (contact.add). Idempotent — pass a stable
+ * `o.idempotencyKey` for safe retries.
+ * @param {object} params - { memberId, type, label?, value, isFabricated? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function contactAdd(params, o = {}) {
+  return call("contact.add", params || {}, o);
+}
+
+/**
+ * Patch a contact detail row (contact.update).
+ * @param {object} params - { id, type?, label?, value?, isFabricated? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function contactUpdate(params, o = {}) {
+  return call("contact.update", params || {}, o);
+}
+
+/**
+ * Remove a contact detail row (contact.delete).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function contactDelete(params, o = {}) {
+  return call("contact.delete", params || {}, o);
+}
+
+/**
+ * List a member's contact details (contact.list). Non-side-effecting RPC method.
+ * @param {object} params - { memberId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function contactList(params, o = {}) {
+  return call("contact.list", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// file — channel Pinned tab + per-file comment threads
+// ---------------------------------------------------------------------------
+
+/**
+ * Pin an inline-data-URL file to a channel's Pinned tab (file.pin; posts a system
+ * message). Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { channelId, name, mimeType?, sizeBytes?, dataUrl }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filePin(params, o = {}) {
+  return call("file.pin", params || {}, o);
+}
+
+/**
+ * Remove a pinned file (file.unpin; posts a system message).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function fileUnpin(params, o = {}) {
+  return call("file.unpin", params || {}, o);
+}
+
+/**
+ * Add a comment to an opaque fileKey (file.addComment; optional channel-visibility gate).
+ * @param {object} params - { fileKey, fileName?, body, channelId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function fileAddComment(params, o = {}) {
+  return call("file.addComment", params || {}, o);
+}
+
+/**
+ * List comments for a file, oldest-first (file.listComments). Non-side-effecting RPC method.
+ * @param {object} params - { fileKey, channelId? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function fileListComments(params, o = {}) {
+  return call("file.listComments", params || {}, o);
+}
+
+/**
+ * List pinned files for a channel (file.listPinned). Non-side-effecting RPC method.
+ * @param {object} params - { channelId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function fileListPinned(params, o = {}) {
+  return call("file.listPinned", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// memory — Cortex index-hint MemoryEntry authoring + amendment lifecycle
+// ---------------------------------------------------------------------------
+
+/**
+ * Author (add) or amend a Cortex index-hint MemoryEntry (memory.author; amend path
+ * bumps version + history). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { memoryClass, title, summary?, scopes[]?, amendOf?, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memoryAuthor(params, o = {}) {
+  return call("memory.author", params || {}, o);
+}
+
+/**
+ * Stage an amendment proposal onto an entry (memory.proposeAmendment; live fields untouched).
+ * @param {object} params - { entryId, title, summary?, scopes[]?, note, proposedByKind? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memoryProposeAmendment(params, o = {}) {
+  return call("memory.proposeAmendment", params || {}, o);
+}
+
+/**
+ * Ratify a staged proposal (memory.mergeAmendment; version bump, merger != proposer).
+ * @param {object} params - { entryId, proposalId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function memoryMergeAmendment(params, o = {}) {
+  return call("memory.mergeAmendment", params || {}, o);
+}
+
+/**
+ * List Cortex MemoryEntry index hints (memory.list). Non-side-effecting RPC method.
+ * @param {object} params - { memoryClass?, scope? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function memoryList(params, o = {}) {
+  return call("memory.list", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// compact — 1:1 DM working compacts (one row per channel)
+// ---------------------------------------------------------------------------
+
+/**
+ * Create/version a 1:1 DM compact (compact.upsert; one row per channel, full
+ * history in the ledger). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { channelId, cadence?, voice?, withoutAsking[]?, alwaysAsks[]?, standing[]? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function compactUpsert(params, o = {}) {
+  return call("compact.upsert", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// notification — the caller's own notification preferences
+// ---------------------------------------------------------------------------
+
+/**
+ * Upsert the caller's notification preferences (notification.updatePreferences; all fields partial).
+ * @param {object} params - { emailOnCharterChange?, emailOnRoleChange?, emailOnReportingChange?, emailOnTeamChange?, emailOnComment?, emailOnMention?, emailOnDecision?, emailOnEscalation?, emailOnReviewRequest?, emailOnFleetAlert?, emailOnSecurityAlert?, emailDailyBrief?, dmFromHumans?, dmFromAgents?, mentionScope?, quietHoursEnabled?, quietHoursStart?, quietHoursEnd?, muteWeekends?, digestHourUtc? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function notificationUpdatePreferences(params, o = {}) {
+  return call("notification.updatePreferences", params || {}, o);
+}
+
+/**
+ * Read the caller's notification preferences or defaults (notification.getPreferences). Non-side-effecting RPC method.
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function notificationGetPreferences(params, o = {}) {
+  return call("notification.getPreferences", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// decision — human-side comment/sign/reverse/adjust on live decisions
+// (decision.propose/adopt/supersede/list live in client.mjs)
+// ---------------------------------------------------------------------------
+
+/**
+ * Add a human comment to a live decision (decision.comment; append-only Decision row untouched).
+ * @param {object} params - { decisionId, text }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function decisionComment(params, o = {}) {
+  return call("decision.comment", params || {}, o);
+}
+
+/**
+ * Append an attestation to Decision.signedBy (decision.sign; idempotent per member, rejects superseded).
+ * @param {object} params - { decisionId, memberSlug, ts? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function decisionSign(params, o = {}) {
+  return call("decision.sign", params || {}, o);
+}
+
+/**
+ * CAS-reverse a reversible, non-superseded/non-reversed decision (decision.reverse).
+ * @param {object} params - { decisionId, reason? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function decisionReverse(params, o = {}) {
+  return call("decision.reverse", params || {}, o);
+}
+
+/**
+ * Record an adjustment ask as a DecisionComment(isAdjustment=true) (decision.requestAdjustment).
+ * @param {object} params - { decisionId, feedback }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function decisionRequestAdjustment(params, o = {}) {
+  return call("decision.requestAdjustment", params || {}, o);
+}
+
+/**
+ * List comments on a decision (decision.listComments). Non-side-effecting RPC method.
+ * @param {object} params - { decisionId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function decisionListComments(params, o = {}) {
+  return call("decision.listComments", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// messaging — schedule/delete/pin/unpin/bookmark (send/react/edit live in client.mjs)
+// ---------------------------------------------------------------------------
+
+/**
+ * Queue a future-dated message in a channel (messaging.schedule).
+ * @param {object} params - { channelId, body, scheduledFor }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function messagingSchedule(params, o = {}) {
+  return call("messaging.schedule", params || {}, o);
+}
+
+/**
+ * Author-only soft-delete of a message (messaging.delete; REDACTED audit).
+ * @param {object} params - { messageId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function messagingDelete(params, o = {}) {
+  return call("messaging.delete", params || {}, o);
+}
+
+/**
+ * Per-user pin of a visible message (messaging.pin).
+ * @param {object} params - { messageId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function messagingPin(params, o = {}) {
+  return call("messaging.pin", params || {}, o);
+}
+
+/**
+ * Remove the caller's own MessagePin (messaging.unpin).
+ * @param {object} params - { messageId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function messagingUnpin(params, o = {}) {
+  return call("messaging.unpin", params || {}, o);
+}
+
+/**
+ * Per-user bookmark of a visible message (messaging.bookmark).
+ * @param {object} params - { messageId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function messagingBookmark(params, o = {}) {
+  return call("messaging.bookmark", params || {}, o);
+}
+
+/**
+ * Remove the caller's own MessageBookmark (messaging.unbookmark).
+ * @param {object} params - { messageId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function messagingUnbookmark(params, o = {}) {
+  return call("messaging.unbookmark", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// board (human kanban) — workstreams/lanes + tasks, comments, attachments
+// (board.create/claim/complete/decompose/assign/link live in client.mjs)
+// Named entity-first (taskUpdate, workstreamCreate, …) to read ergonomically.
+// ---------------------------------------------------------------------------
+
+/**
+ * Create a workstream/swimlane (board.createWorkstream). Idempotent — pass a
+ * stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { name, objective?, status?, priority?, channelId?, ownerId?, strategyStreamId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function workstreamCreate(params, o = {}) {
+  return call("board.createWorkstream", params || {}, o);
+}
+
+/**
+ * Patch changed lane fields only (board.updateWorkstream).
+ * @param {object} params - { workstreamId, name?, objective?, ownerId?, status? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function workstreamUpdate(params, o = {}) {
+  return call("board.updateWorkstream", params || {}, o);
+}
+
+/**
+ * Delete a lane; tasks fall to unassigned (board.deleteWorkstream).
+ * @param {object} params - { workstreamId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function workstreamDelete(params, o = {}) {
+  return call("board.deleteWorkstream", params || {}, o);
+}
+
+/**
+ * Swap a lane's position with its up/down neighbor (board.moveWorkstream).
+ * @param {object} params - { workstreamId, direction }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function workstreamMove(params, o = {}) {
+  return call("board.moveWorkstream", params || {}, o);
+}
+
+/**
+ * Create a task (board.createTask; refs validated in-org, channel visibility
+ * enforced). Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { title, detail?, col?, priority?, channelId?, workstreamId?, assigneeId?, reviewerId?, strategyStreamId?, blockedById?, why? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function taskCreate(params, o = {}) {
+  return call("board.createTask", params || {}, o);
+}
+
+/**
+ * Diff-based task field patch (board.updateTask; blockedBy merged into why).
+ * @param {object} params - { taskId, title?, detail?, priority?, col?, blockedBy?, dueAt?, tags[]?, checklist[]? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function taskUpdate(params, o = {}) {
+  return call("board.updateTask", params || {}, o);
+}
+
+/**
+ * Kanban drag: update col + optional lane move (board.moveTask; visibility checked both sides).
+ * @param {object} params - { taskId, col, workstreamId?, why? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function taskMove(params, o = {}) {
+  return call("board.moveTask", params || {}, o);
+}
+
+/**
+ * Set/clear task owner (board.assignTask; assignee must be ACTIVE in-org).
+ * @param {object} params - { taskId, assigneeId|null }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function taskAssign(params, o = {}) {
+  return call("board.assignTask", params || {}, o);
+}
+
+/**
+ * Post a task-thread comment (board.addTaskComment; server-resolved author).
+ * @param {object} params - { taskId, body, kind? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function taskAddComment(params, o = {}) {
+  return call("board.addTaskComment", params || {}, o);
+}
+
+/**
+ * Inline a data-URL file as a new task attachment (board.addTaskAttachment).
+ * Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { taskId, name, mimeType?, sizeBytes?, dataUrl }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function taskAddAttachment(params, o = {}) {
+  return call("board.addTaskAttachment", params || {}, o);
+}
+
+/**
+ * Save edited inline content of an existing attachment (board.updateTaskAttachment).
+ * @param {object} params - { id, sizeBytes?, dataUrl }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function taskUpdateAttachment(params, o = {}) {
+  return call("board.updateTaskAttachment", params || {}, o);
+}
+
+/**
+ * Delete a task attachment (board.removeTaskAttachment).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function taskRemoveAttachment(params, o = {}) {
+  return call("board.removeTaskAttachment", params || {}, o);
+}
+
+/**
+ * List a task's comments (board.taskComments). Non-side-effecting RPC method.
+ * @param {object} params - { taskId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function taskComments(params, o = {}) {
+  return call("board.taskComments", params || {}, o);
+}
+
+/**
+ * List a task's attachments (board.taskAttachments). Non-side-effecting RPC method.
+ * @param {object} params - { taskId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function taskAttachments(params, o = {}) {
+  return call("board.taskAttachments", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// invitation — workspace invitations (admin scope)
+// ---------------------------------------------------------------------------
+
+/**
+ * Create a 14-day invitation, optionally pre-linked to a seat, and email it
+ * (invitation.create). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { email, role, workforceMemberId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function invitationCreate(params, o = {}) {
+  return call("invitation.create", params || {}, o);
+}
+
+/**
+ * Revoke a pending/expired invitation (invitation.revoke; rejects if ACCEPTED).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function invitationRevoke(params, o = {}) {
+  return call("invitation.revoke", params || {}, o);
+}
+
+/**
+ * Re-issue a pending/expired invitation with a fresh token + window (invitation.resend).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function invitationResend(params, o = {}) {
+  return call("invitation.resend", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// user — role / access administration (admin scope)
+// ---------------------------------------------------------------------------
+
+/**
+ * Change a user's role (user.updateRole; OWNER-only for ADMIN/OWNER tiers, never your own).
+ * @param {object} params - { userId, role }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function userUpdateRole(params, o = {}) {
+  return call("user.updateRole", params || {}, o);
+}
+
+/**
+ * OWNER-only hard removal of a user's access (user.deactivate; never self).
+ * @param {object} params - { userId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function userDeactivate(params, o = {}) {
+  return call("user.deactivate", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// settings — workspace API keys, secrets, offices, company profile, design tokens
+// ---------------------------------------------------------------------------
+
+/**
+ * Mint a workspace API key (settings.mintApiKey; raw secret returned once).
+ * Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { name }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsMintApiKey(params, o = {}) {
+  return call("settings.mintApiKey", params || {}, o);
+}
+
+/**
+ * Rename a workspace API key label (settings.renameApiKey).
+ * @param {object} params - { keyId, name }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsRenameApiKey(params, o = {}) {
+  return call("settings.renameApiKey", params || {}, o);
+}
+
+/**
+ * Soft-revoke a workspace API key (settings.revokeApiKey; idempotent).
+ * @param {object} params - { keyId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsRevokeApiKey(params, o = {}) {
+  return call("settings.revokeApiKey", params || {}, o);
+}
+
+/**
+ * Record a secret lifecycle event in the ledger with non-secret metadata
+ * (settings.recordSecretRotation).
+ * @param {object} params - { keyName, provider, scope?, action }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsRecordSecretRotation(params, o = {}) {
+  return call("settings.recordSecretRotation", params || {}, o);
+}
+
+/**
+ * Create/update a sealed shared Secret (settings.upsertSecret; value AES-256-GCM,
+ * never returned). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { id?, name, provider?, scope?, value? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsUpsertSecret(params, o = {}) {
+  return call("settings.upsertSecret", params || {}, o);
+}
+
+/**
+ * Delete a Secret (settings.deleteSecret; idempotent).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsDeleteSecret(params, o = {}) {
+  return call("settings.deleteSecret", params || {}, o);
+}
+
+/**
+ * Create/update an office location (settings.upsertOfficeLocation; name or city
+ * required). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { id?, name, status?, street?, city?, region?, postal?, country?, email?, phone?, facilities? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsUpsertOfficeLocation(params, o = {}) {
+  return call("settings.upsertOfficeLocation", params || {}, o);
+}
+
+/**
+ * Delete an office location (settings.deleteOfficeLocation; idempotent).
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsDeleteOfficeLocation(params, o = {}) {
+  return call("settings.deleteOfficeLocation", params || {}, o);
+}
+
+/**
+ * Persist company profile + keep authoritative Org.name in sync
+ * (settings.saveCompanyProfile). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { name, legalEntity?, website?, headquarters?, oneLiner?, logoUrl? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsSaveCompanyProfile(params, o = {}) {
+  return call("settings.saveCompanyProfile", params || {}, o);
+}
+
+/**
+ * Upsert the org's opaque design-token blob verbatim (settings.saveDesignTokens;
+ * one row per org). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { tokens }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function settingsSaveDesignTokens(params, o = {}) {
+  return call("settings.saveDesignTokens", params || {}, o);
+}
+
+/**
+ * Read the org's design-token blob or null (settings.getDesignTokens). Non-side-effecting RPC method.
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function settingsGetDesignTokens(params, o = {}) {
+  return call("settings.getDesignTokens", params || {}, o);
+}
+
+/**
+ * List workspace API key metadata, no secrets (settings.listApiKeys). Non-side-effecting RPC method.
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function settingsListApiKeys(params, o = {}) {
+  return call("settings.listApiKeys", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// billing — org subscription
+// ---------------------------------------------------------------------------
+
+/**
+ * Update the org subscription (billing.update; upsert by orgId).
+ * @param {object} params - { plan?, interval?, amountUsd?, billingOwnerId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function billingUpdate(params, o = {}) {
+  return call("billing.update", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// org — workspace lifecycle + org-scoped API keys (admin scope)
+// ---------------------------------------------------------------------------
+
+/**
+ * Create an org (org.create; creator seated as OWNER, default scaffold). Idempotent
+ * — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { name, slug? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function orgCreate(params, o = {}) {
+  return call("org.create", params || {}, o);
+}
+
+/**
+ * OWNER-only permanent workspace delete (org.delete; refuses the founding org, cascades tenant).
+ * @param {object} params - { orgId, confirmSlug? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function orgDelete(params, o = {}) {
+  return call("org.delete", params || {}, o);
+}
+
+/**
+ * Mint an org API key for a target org (org.mintApiKey; raw secret returned once).
+ * Idempotent — pass a stable `o.idempotencyKey` for safe retries.
+ * @param {object} params - { orgId, name }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function orgMintApiKey(params, o = {}) {
+  return call("org.mintApiKey", params || {}, o);
+}
+
+/**
+ * Soft-revoke an org API key (org.revokeApiKey; idempotent).
+ * @param {object} params - { orgId, keyId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function orgRevokeApiKey(params, o = {}) {
+  return call("org.revokeApiKey", params || {}, o);
+}
+
+/**
+ * List all orgs the caller is seated in (org.list). Non-side-effecting RPC method.
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function orgList(params, o = {}) {
+  return call("org.list", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// integration — sealed provider connections (admin scope)
+// ---------------------------------------------------------------------------
+
+/**
+ * Connect a provider by sealing a pasted token into an Integration row
+ * (integration.connect; upsert by [orgId,provider]). Idempotent — pass a stable
+ * `o.idempotencyKey` for safe retries.
+ * @param {object} params - { provider, token, externalAccountId?, scope? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function integrationConnect(params, o = {}) {
+  return call("integration.connect", params || {}, o);
+}
+
+/**
+ * Revoke a connected integration (integration.disconnect; status->revoked, token zeroed).
+ * @param {object} params - { provider }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function integrationDisconnect(params, o = {}) {
+  return call("integration.disconnect", params || {}, o);
+}
+
+/**
+ * List connected provider ids, no tokens (integration.list). Non-side-effecting RPC method.
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function integrationList(params, o = {}) {
+  return call("integration.list", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// email — the agent workspace mailbox (companion spec 2026-07-21 §8)
+// ---------------------------------------------------------------------------
+//
+// Five wrappers over the additive `email.*` family. All POST METHODS (the
+// reads follow the messaging.history `sideEffecting:false` precedent — they
+// ride call(), never client.read()). Bodies NEVER ride the chain: org events
+// show redacted `email.*` kinds only; content comes from emailMessage /
+// emailThread. When this SDK's vendored protocol predates the family, call()
+// returns its standard NOT_FOUND error frame — nothing throws — and the
+// orgmail adapter's healthCheck surfaces it.
+
+/**
+ * Send workspace email from the acting agent's mailbox (email.send; outbox-
+ * queued server-side, `sideEffecting:true, idempotent:true`). Thread replies
+ * may omit to/subject — hq's reply rule derives them from the thread's newest
+ * delivered inbound message. May return a NORMAL result
+ * `{status:"approval_required", approval:{actionClass:"external_comms",
+ * payloadHash, intent}, firstContactRecipients}` for first-contact recipients:
+ * approval.request that exact payload → approval.wait → re-send with
+ * `approvalId`, the SAME `idempotencyId`, and a FRESH `o.idempotencyKey` (the
+ * dispatcher cached the refusal under the old header key).
+ * @param {object} params - { to?, cc?, bcc?, subject?, text, html?, threadId?,
+ *                            replyToMessageId?, idempotencyId, approvalId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailSend(params, o = {}) {
+  return call("email.send", params || {}, o);
+}
+
+/**
+ * Advance the server-side read cursor (email.markRead) for one message or a
+ * whole thread — exactly one of {messageId | threadId}. THE cursor: the
+ * orgmail adapter keeps no local cursor file; an unmarked item simply
+ * re-delivers on the next inbox poll (at-least-once by design).
+ * @param {object} params - { messageId? | threadId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailMarkRead(params, o = {}) {
+  return call("email.markRead", params || {}, o);
+}
+
+/**
+ * Keyset-paged own-mailbox listing (email.inbox; `sideEffecting:false` METHOD).
+ * Result: `{ mailbox:{address,status,domain,domainStatus}, messages:[summary…],
+ * nextCursor }` — summaries + snippet only; bodies via emailMessage. Excludes
+ * quarantined/auto-submitted rows (those exist for admins, not agents).
+ * @param {object} params - { unreadOnly?, cursor?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailInbox(params, o = {}) {
+  return call("email.inbox", params || {}, o);
+}
+
+/**
+ * Full body/headers/attachment-metadata DTO for ONE own-mailbox message
+ * (email.message). Cross-mailbox ids return NOT_FOUND — no probing.
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailMessage(params, o = {}) {
+  return call("email.message", params || {}, o);
+}
+
+/**
+ * A whole email thread with bodies, ascending (email.thread; own-mailbox only).
+ * @param {object} params - { threadId, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailThread(params, o = {}) {
+  return call("email.thread", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// artifact — generative-UI artifact cards (GU program 2026-07)
+// ---------------------------------------------------------------------------
+//
+// Six wrappers over the additive `artifact.*` family — interactive cards agents
+// post into conversational feeds, every rendered action equally invocable
+// programmatically (the two-sided law). ALL six are `sideEffecting:false` at
+// the DISPATCHER: the hq artifact service owns its own multi-write (Message +
+// Artifact rows + self-appended chain events + approval gating), so dedup for
+// the write verbs rides BUSINESS ids in params — `clientMsgId` on create,
+// `idempotencyKey` on act ((artifact, actor, action, key) dedupe service-side)
+// — NOT the `o.idempotencyKey` header (call() only attaches that header to
+// protocol-side-effecting methods). When this SDK's vendored protocol predates
+// the family, call() returns its standard NOT_FOUND error frame — nothing throws.
+
+/**
+ * Post a generative-UI artifact into a channel (artifact.create): one Message +
+ * one Artifact row. `envelope` is genui/v2 ({genui:"v2", artifact:{class,
+ * version, state, source, provenance?, ttlAt?, deepLink?}, actions:[≤12],
+ * root:{type:"card", tone, title?, blocks:[…]}}); genui/v1 {genui:"v1",
+ * root:card} stays valid for simple static cards. Post state:"streaming" with
+ * skeleton blocks, then artifactPatch to hydrate. Supply a stable
+ * `params.clientMsgId` so a retried create collapses to one artifact.
+ * @param {object} params - { channelId, envelope, threadRootId?, clientMsgId? }
+ * @param {object} o - { base, token, fetchImpl? }
+ * @returns {Promise<object>} res frame {ok:true, result:{artifactId, messageId}}
+ */
+export function artifactCreate(params, o = {}) {
+  return call("artifact.create", params || {}, o);
+}
+
+/**
+ * Invoke an artifact action (artifact.act) — the SAME action a human clicking
+ * the rendered button invokes, same params schema (see artifactCatalog).
+ * Address by artifactId or messageId. The result carries the action outcome;
+ * `{held:true, approvalId}` = approval-gated: await the approval, then
+ * re-invoke with the SAME `params.idempotencyKey` to consume the grant;
+ * `{replay:true}` = idempotent replay (already ran under this key). Supply a
+ * stable `params.idempotencyKey` whenever you may retry.
+ * @param {object} params - { artifactId? | messageId?, action, params?, idempotencyKey? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function artifactAct(params, o = {}) {
+  return call("artifact.act", params || {}, o);
+}
+
+/**
+ * Patch an artifact's lifecycle/envelope (artifact.patch): hydrate a
+ * state:"streaming" skeleton with the full envelope, transition `toState`
+ * (draft|streaming|complete|acted|expired|error), or attach a `receipt`.
+ * Authoring-side verb — acting on buttons is artifactAct.
+ * @param {object} params - { artifactId, toState?, envelope?, receipt? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function artifactPatch(params, o = {}) {
+  return call("artifact.patch", params || {}, o);
+}
+
+/**
+ * One artifact row (artifact.get): envelope, state, class, messageId,
+ * channelId. Non-side-effecting RPC method.
+ * @param {object} params - { artifactId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function artifactGet(params, o = {}) {
+  return call("artifact.get", params || {}, o);
+}
+
+/**
+ * List artifact rows (artifact.list), filterable by channel/class/lifecycle
+ * state; newest first, server-capped limit. Non-side-effecting RPC method.
+ * @param {object} params - { channelId?, class?, state?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function artifactList(params, o = {}) {
+  return call("artifact.list", params || {}, o);
+}
+
+/**
+ * The native artifact class catalog (artifact.catalog): {version, classes:[{
+ * class, version, title, describe, actions:[{name, label, kind, description?,
+ * params? (JSON Schema), confirm?, gate?, audience, roles?}]}]}. THE discovery
+ * surface — read it before composing a native-class create or an act so class
+ * versions, action names, and params match the server registry.
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function artifactCatalog(params, o = {}) {
+  return call("artifact.catalog", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// email (Inbox app) — the agent lane of the human Inbox (mailboxes/viewpoints,
+// governed drafts, rules, folders, signatures). Same domain services as the
+// human server actions: mailbox entitlements, per-thread holds and the
+// guardian-only verbs are enforced identically. Bodies stay REDACTED on-chain.
+// ---------------------------------------------------------------------------
+
+/**
+ * Entitled mailboxes/viewpoints with unread + approval counts (email.mailboxes). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailMailboxes(params, o = {}) {
+  return call("email.mailboxes", params || {}, o);
+}
+
+/**
+ * Thread rows for one mailbox; folder = inbox|archive|starred|assigned|tag:<name>|<folderId> (email.threads). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { mailboxId, folder?, unreadOnly?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailThreads(params, o = {}) {
+  return call("email.threads", params || {}, o);
+}
+
+/**
+ * One thread's messages (bcc visible on OUTBOUND only) (email.messages). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { threadId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailMessages(params, o = {}) {
+  return call("email.messages", params || {}, o);
+}
+
+/**
+ * COMPOSING/RETURNED drafts visible to the acting seat (email.drafts). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { mailboxId? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailDrafts(params, o = {}) {
+  return call("email.drafts", params || {}, o);
+}
+
+/**
+ * HELD drafts awaiting guardian approval on guarded mailboxes (email.approvals). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { mailboxId? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailApprovals(params, o = {}) {
+  return call("email.approvals", params || {}, o);
+}
+
+/**
+ * Compiled mailbox rules + their recent rule events (email.rules). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { mailboxId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailRules(params, o = {}) {
+  return call("email.rules", params || {}, o);
+}
+
+/**
+ * Signatures for one mailbox (email.signatures). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { mailboxId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailSignatures(params, o = {}) {
+  return call("email.signatures", params || {}, o);
+}
+
+/**
+ * One triage facet per call: priority/category/tags/star/read OR assignment (email.triage).
+ * @param {object} params - { threadId, priority?|category?|tags?|starred?|read?|assigneeMemberId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailTriage(params, o = {}) {
+  return call("email.triage", params || {}, o);
+}
+
+/**
+ * Run deterministic triage over the mailbox now (no model call) (email.triageNow).
+ * @param {object} params - { mailboxId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailTriageNow(params, o = {}) {
+  return call("email.triageNow", params || {}, o);
+}
+
+/**
+ * Move a thread: target = inbox|archive|delete|restore|snooze|folder (email.move).
+ * @param {object} params - { threadId, target, folderId?, snoozeUntil? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailMove(params, o = {}) {
+  return call("email.move", params || {}, o);
+}
+
+/**
+ * Mark every thread in the mailbox read (email.markAllRead). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { mailboxId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailMarkAllRead(params, o = {}) {
+  return call("email.markAllRead", params || {}, o);
+}
+
+/**
+ * Delegate a thread to another member (email.delegate).
+ * @param {object} params - { threadId, delegateMemberId, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailDelegate(params, o = {}) {
+  return call("email.delegate", params || {}, o);
+}
+
+/**
+ * Set/clear the per-thread outbound hold (email.holdReplies). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { threadId, hold }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailHoldReplies(params, o = {}) {
+  return call("email.holdReplies", params || {}, o);
+}
+
+/**
+ * GUARDIAN-ONLY: redirect a thread to the guardian's own inbox (email.redirect).
+ * @param {object} params - { threadId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailRedirect(params, o = {}) {
+  return call("email.redirect", params || {}, o);
+}
+
+/**
+ * Create/update a draft (attachments may carry live workspaceFileId links) (email.draftSave). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { draftId?, mailboxId, threadId?, mode, to?, cc?, bcc?, subject?, bodyText?, bodyHtml?, attachments?[{name,workspaceFileId?}] }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailDraftSave(params, o = {}) {
+  return call("email.draftSave", params || {}, o);
+}
+
+/**
+ * Discard a COMPOSING/RETURNED draft (held drafts cannot be discarded) (email.draftDiscard).
+ * @param {object} params - { draftId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailDraftDiscard(params, o = {}) {
+  return call("email.draftDiscard", params || {}, o);
+}
+
+/**
+ * Governance send — may return {status:"held", draftId, policyCite} instead of sending (never a silent send) (email.draftSend).
+ * @param {object} params - { mailboxId, threadId?, mode?, to, cc?, bcc?, subject?, bodyText, bodyHtml?, attachments?, draftId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailDraftSend(params, o = {}) {
+  return call("email.draftSend", params || {}, o);
+}
+
+/**
+ * Undo a queued send (fails honestly once the message left QUEUED) (email.undoSend).
+ * @param {object} params - { messageId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailUndoSend(params, o = {}) {
+  return call("email.undoSend", params || {}, o);
+}
+
+/**
+ * GUARDIAN: approve (optionally amend-and-approve) a held draft (email.approve).
+ * @param {object} params - { draftId, editedBody? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailApprove(params, o = {}) {
+  return call("email.approve", params || {}, o);
+}
+
+/**
+ * GUARDIAN: approve every held draft; per-draft charter-§ refusals are honest (email.approveAll).
+ * @param {object} params - { mailboxId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailApproveAll(params, o = {}) {
+  return call("email.approveAll", params || {}, o);
+}
+
+/**
+ * GUARDIAN: amend a held draft (distinct mail.draft.amended event) (email.amend).
+ * @param {object} params - { draftId, editedBody }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailAmend(params, o = {}) {
+  return call("email.amend", params || {}, o);
+}
+
+/**
+ * GUARDIAN: return a held draft to its author with a note (email.return).
+ * @param {object} params - { draftId, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailReturn(params, o = {}) {
+  return call("email.return", params || {}, o);
+}
+
+/**
+ * Save + versioned-compile a mailbox rule (email.ruleSave).
+ * @param {object} params - { mailboxId, ruleId?, name, instruction, withFolder? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailRuleSave(params, o = {}) {
+  return call("email.ruleSave", params || {}, o);
+}
+
+/**
+ * Enable/disable a compiled rule (email.ruleSetEnabled). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { ruleId, enabled }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailRuleSetEnabled(params, o = {}) {
+  return call("email.ruleSetEnabled", params || {}, o);
+}
+
+/**
+ * Rename a mailbox folder (email.folderRename).
+ * @param {object} params - { folderId, name }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailFolderRename(params, o = {}) {
+  return call("email.folderRename", params || {}, o);
+}
+
+/**
+ * Delete a folder (threads return to Inbox; the feeding rule pauses) (email.folderDelete).
+ * @param {object} params - { folderId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailFolderDelete(params, o = {}) {
+  return call("email.folderDelete", params || {}, o);
+}
+
+/**
+ * Create/update a signature (email.signatureSave).
+ * @param {object} params - { signatureId?, mailboxId, name, bodyHtml, isDefault }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailSignatureSave(params, o = {}) {
+  return call("email.signatureSave", params || {}, o);
+}
+
+/**
+ * Delete a signature (last-one guard refuses) (email.signatureDelete).
+ * @param {object} params - { signatureId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailSignatureDelete(params, o = {}) {
+  return call("email.signatureDelete", params || {}, o);
+}
+
+/**
+ * Log a REAL org Decision from a thread (decision-family event) (email.logDecision).
+ * @param {object} params - { threadId, title, rationale? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailLogDecision(params, o = {}) {
+  return call("email.logDecision", params || {}, o);
+}
+
+/**
+ * SANDBOX extraction of action items from a thread (mail.extract.actioned) (email.extractAction).
+ * @param {object} params - { threadId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailExtractAction(params, o = {}) {
+  return call("email.extractAction", params || {}, o);
+}
+
+/**
+ * File a message attachment into the workspace drive as a REAL WorkspaceFile (provenance.bytesPresent honest) (email.fileAttachment).
+ * @param {object} params - { messageId, attachmentIndex? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailFileAttachment(params, o = {}) {
+  return call("email.fileAttachment", params || {}, o);
+}
+
+/**
+ * Report spam / not-spam: stamps the disposition AND maintains the mailbox's Blocked-senders rule (email.reportSpam).
+ * @param {object} params - { threadId, spam? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailReportSpam(params, o = {}) {
+  return call("email.reportSpam", params || {}, o);
+}
+
+/**
+ * Toggle the acting member's reaction pill on a message — new emoji replaces, same emoji removes (email.react).
+ * @param {object} params - { messageId, emoji }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailReact(params, o = {}) {
+  return call("email.react", params || {}, o);
+}
+
+/**
+ * Reassign a thread to another desk the actor holds — filing rules follow (email.moveMailbox).
+ * @param {object} params - { threadId, mailboxId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailMoveMailbox(params, o = {}) {
+  return call("email.moveMailbox", params || {}, o);
+}
+
+/**
+ * Generate AND STORE the thread's grounded brief — gateway-metered, one chain event (email.summarise).
+ * @param {object} params - { threadId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function emailSummarise(params, o = {}) {
+  return call("email.summarise", params || {}, o);
+}
+
+/**
+ * Grounded ask over the acting seat's entitled mailboxes — triage-level rows, never bodies (email.ask). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { question, mailboxId? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function emailAsk(params, o = {}) {
+  return call("email.ask", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// files — the workspace drive (Docs/Sheets/Decks/folders + uploads). Binds the
+// same Workspace DomainCtx as the server actions: VIEW/COMMENT/EDIT shares
+// govern agents exactly as humans.
+// ---------------------------------------------------------------------------
+
+/**
+ * Drive listing with human-surface filters (soft-deleted only when deleted:true) (files.list). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { parentId?, kind?, starred?, byAgents?, q?, deleted?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function filesList(params, o = {}) {
+  return call("files.list", params || {}, o);
+}
+
+/**
+ * One file + the acting seat's effective permission + shares (files.get). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { fileId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function filesGet(params, o = {}) {
+  return call("files.get", params || {}, o);
+}
+
+/**
+ * A DOC's HEAD revision as HTML (files.docRead). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { fileId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function filesDocRead(params, o = {}) {
+  return call("files.docRead", params || {}, o);
+}
+
+/**
+ * A SHEET's cells (computed values from the shared engine) (files.sheetRead). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { fileId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function filesSheetRead(params, o = {}) {
+  return call("files.sheetRead", params || {}, o);
+}
+
+/**
+ * A DECK's slides (files.deckRead). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { fileId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function filesDeckRead(params, o = {}) {
+  return call("files.deckRead", params || {}, o);
+}
+
+/**
+ * Create a file/folder (files.create). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { kind: DOC|SHEET|DECK|FOLDER, name, parentId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesCreate(params, o = {}) {
+  return call("files.create", params || {}, o);
+}
+
+/**
+ * Register a binary upload from a data: URL (files.uploadRegister). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { name, dataUrl (≤2MB), parentId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesUploadRegister(params, o = {}) {
+  return call("files.uploadRegister", params || {}, o);
+}
+
+/**
+ * Rename (files.rename). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, name }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesRename(params, o = {}) {
+  return call("files.rename", params || {}, o);
+}
+
+/**
+ * Move (re-syncs inherited shares) (files.move). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, parentId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesMove(params, o = {}) {
+  return call("files.move", params || {}, o);
+}
+
+/**
+ * Duplicate (files.duplicate). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesDuplicate(params, o = {}) {
+  return call("files.duplicate", params || {}, o);
+}
+
+/**
+ * Star/unstar (files.star). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, starred }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesStar(params, o = {}) {
+  return call("files.star", params || {}, o);
+}
+
+/**
+ * Pin for the paired member (files.pin). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, pinned }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesPin(params, o = {}) {
+  return call("files.pin", params || {}, o);
+}
+
+/**
+ * Soft-delete (30-day recovery; folder cascade) (files.delete). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesDelete(params, o = {}) {
+  return call("files.delete", params || {}, o);
+}
+
+/**
+ * Recover from the 30-day bin (files.recover). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesRecover(params, o = {}) {
+  return call("files.recover", params || {}, o);
+}
+
+/**
+ * Grant shares (folder grants materialize inherited rows) (files.shareGrant). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, permission: VIEW|COMMENT|EDIT, subjects[{type:member|channel|email,…}], message? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesShareGrant(params, o = {}) {
+  return call("files.shareGrant", params || {}, o);
+}
+
+/**
+ * Revoke a share (direct + inherited-from-this-file) (files.shareRevoke). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, subject }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesShareRevoke(params, o = {}) {
+  return call("files.shareRevoke", params || {}, o);
+}
+
+/**
+ * Write a DOC revision (EDIT required; bumps HEAD + DocRevision) (files.docWriteRevision). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, html, summary?, aiDrafted?, costCents? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesDocWriteRevision(params, o = {}) {
+  return call("files.docWriteRevision", params || {}, o);
+}
+
+/**
+ * Write SHEET cells (server recompute, shared engine) (files.sheetWriteCells). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, cells }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesSheetWriteCells(params, o = {}) {
+  return call("files.sheetWriteCells", params || {}, o);
+}
+
+/**
+ * Write DECK slides (files.deckWriteSlides). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, slides }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesDeckWriteSlides(params, o = {}) {
+  return call("files.deckWriteSlides", params || {}, o);
+}
+
+/**
+ * AUDITED export (DIRECT_CONTENT|PRINT_VIEW|SANDBOX_CONVERTER) — rides files.read but lands on the chain (files.exportRequest). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { fileId, path? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesExportRequest(params, o = {}) {
+  return call("files.exportRequest", params || {}, o);
+}
+
+/**
+ * Multi-tab sheet structure ops: create | rename | duplicate | delete | restore — delete returns the snapshot restore takes back (files.sheetTabOp).
+ * @param {object} params - { fileId, op, tabId?, name?, snapshot? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesSheetTabOp(params, o = {}) {
+  return call("files.sheetTabOp", params || {}, o);
+}
+
+/**
+ * Multi-tab doc structure ops: create | rename | delete (content-restoring snapshot revisions) (files.docTabOp).
+ * @param {object} params - { fileId, op, tabId?, name? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesDocTabOp(params, o = {}) {
+  return call("files.docTabOp", params || {}, o);
+}
+
+/**
+ * Accept (commits a real head revision) or reject a held doc suggestion (files.docSuggestResolve).
+ * @param {object} params - { revisionId, action, summary? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesDocSuggestResolve(params, o = {}) {
+  return call("files.docSuggestResolve", params || {}, o);
+}
+
+/**
+ * The doc's held SUGGESTED revisions, content included for diffing (files.docSuggestions). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { fileId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function filesDocSuggestions(params, o = {}) {
+  return call("files.docSuggestions", params || {}, o);
+}
+
+/**
+ * File a comment on a doc ({section?, quote?}) or anchor one to a deck slide (slideId + elementKey?) (files.commentAdd).
+ * @param {object} params - { fileId, body, anchor?, slideId?, elementKey?, parentId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesCommentAdd(params, o = {}) {
+  return call("files.commentAdd", params || {}, o);
+}
+
+/**
+ * Resolve a comment thread — author or the file's editors (files.commentResolve).
+ * @param {object} params - { commentId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesCommentResolve(params, o = {}) {
+  return call("files.commentResolve", params || {}, o);
+}
+
+/**
+ * A file's comment threads — doc sections + deck slides, open by default (files.comments). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { fileId, includeResolved?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function filesComments(params, o = {}) {
+  return call("files.comments", params || {}, o);
+}
+
+/**
+ * Register or clear an agent-fed sheet range — non-owning writes inside it are allowed but LOGGED (files.sheetFedRange).
+ * @param {object} params - { fileId, action, range?, agentMemberId?, tabId?, cadence?, label?, rangeId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function filesSheetFedRange(params, o = {}) {
+  return call("files.sheetFedRange", params || {}, o);
+}
+
+/**
+ * Grounded ask over the drive's names/kinds/owners/share facts — never file content (files.ask). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { question, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function filesAsk(params, o = {}) {
+  return call("files.ask", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// calendar — the workspace calendar. Writes queue REAL invite/update/cancel
+// emails (invitesQueued/Skipped honest in payloads); findATime is a
+// deterministic 15-min-lattice scan, Mon–Fri 08–18.
+// ---------------------------------------------------------------------------
+
+/**
+ * Events in a window with attendee rows (calendar.list). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { fromIso?, toIso?, calendarMemberId?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function calendarList(params, o = {}) {
+  return call("calendar.list", params || {}, o);
+}
+
+/**
+ * One event + records (calendar.get). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { eventId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function calendarGet(params, o = {}) {
+  return call("calendar.get", params || {}, o);
+}
+
+/**
+ * Deterministic free-slot scan (proposes times, changes nothing) (calendar.findATime). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { attendeeMemberIds (≤20), durationMinutes, fromDay, scanDays? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function calendarFindATime(params, o = {}) {
+  return call("calendar.findATime", params || {}, o);
+}
+
+/**
+ * Grounded ask over the calendar window this seat may see — restricted events of other seats ABSENT (calendar.ask). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { question, fromIso?, toIso? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function calendarAsk(params, o = {}) {
+  return call("calendar.ask", params || {}, o);
+}
+
+/**
+ * Create a typed event (MEETING/REVIEW/FOCUS/AGENT_BLOCK/ALL_HANDS/HOLD); queues real invite emails (calendar.create). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { title, kind?, startsAt, endsAt, allDay?, location?, description?, calendarMemberId?, companyCalendar?, agendaFileId?, estCostCents?, attendees?, recurrence? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function calendarCreate(params, o = {}) {
+  return call("calendar.create", params || {}, o);
+}
+
+/**
+ * Update an event (substantive changes queue update emails) (calendar.update). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { eventId, …fields }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function calendarUpdate(params, o = {}) {
+  return call("calendar.update", params || {}, o);
+}
+
+/**
+ * Move an event (queues new-time emails) (calendar.reschedule). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { eventId, startsAt, endsAt }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function calendarReschedule(params, o = {}) {
+  return call("calendar.reschedule", params || {}, o);
+}
+
+/**
+ * Cancel an event (queues cancellation emails) (calendar.delete). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { eventId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function calendarDelete(params, o = {}) {
+  return call("calendar.delete", params || {}, o);
+}
+
+/**
+ * RSVP the acting seat's own invite (calendar.rsvp). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { eventId, rsvp: INVITED|ACCEPTED|DECLINED|TENTATIVE|COMMITTED }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function calendarRsvp(params, o = {}) {
+  return call("calendar.rsvp", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// meetings (desk addition) — recapFile lands a held meeting's recap +
+// transcript into the workspace drive (two DOCs + MeetingRecord links).
+// ---------------------------------------------------------------------------
+
+/**
+ * File recap + transcript DOCs with links back to the meeting (meetings.recapFile). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { meetingId, callId?, occurredAt?, recap:{bullets, decisions?, actions?}, transcript? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function meetingsRecapFile(params, o = {}) {
+  return call("meetings.recapFile", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// crm — the CRM desk (deals, escalations, accounts, contacts, interactions,
+// playbooks, targets). Human-only verbs (signEscalation/returnEscalation,
+// targetCents) refuse agent actors in the domain layer.
+// ---------------------------------------------------------------------------
+
+/**
+ * Grounded ask over the deals this seat may see — value/stage/owner/held state (crm.ask). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { question, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmAsk(params, o = {}) {
+  return call("crm.ask", params || {}, o);
+}
+
+/**
+ * Deal listing (crm.listDeals). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { stage?, accountId?, ownerId?, openOnly?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmListDeals(params, o = {}) {
+  return call("crm.listDeals", params || {}, o);
+}
+
+/**
+ * One deal + account/contacts/hold detail (crm.getDeal). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { dealId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmGetDeal(params, o = {}) {
+  return call("crm.getDeal", params || {}, o);
+}
+
+/**
+ * Held deals pending resolution (crm.listEscalations). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmListEscalations(params, o = {}) {
+  return call("crm.listEscalations", params || {}, o);
+}
+
+/**
+ * Accounts (crm.listAccounts). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { q?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmListAccounts(params, o = {}) {
+  return call("crm.listAccounts", params || {}, o);
+}
+
+/**
+ * Contacts (crm.listContacts). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { accountId?, q?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmListContacts(params, o = {}) {
+  return call("crm.listContacts", params || {}, o);
+}
+
+/**
+ * Interaction log (crm.listInteractions). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { dealId?, contactId?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmListInteractions(params, o = {}) {
+  return call("crm.listInteractions", params || {}, o);
+}
+
+/**
+ * Playbooks + versions (crm.listPlaybooks). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmListPlaybooks(params, o = {}) {
+  return call("crm.listPlaybooks", params || {}, o);
+}
+
+/**
+ * Targets (committed/best-case vs targetCents) (crm.getTargets). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { period? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmGetTargets(params, o = {}) {
+  return call("crm.getTargets", params || {}, o);
+}
+
+/**
+ * PURE compile preview — nothing persisted (crm.compilePlaybook). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { source }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function crmCompilePlaybook(params, o = {}) {
+  return call("crm.compilePlaybook", params || {}, o);
+}
+
+/**
+ * Create a deal (crm.createDeal).
+ * @param {object} params - { company, name?, valueCents?, ownerId?, source? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmCreateDeal(params, o = {}) {
+  return call("crm.createDeal", params || {}, o);
+}
+
+/**
+ * Update deal fields (crm.updateDeal). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { dealId, …fields }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmUpdateDeal(params, o = {}) {
+  return call("crm.updateDeal", params || {}, o);
+}
+
+/**
+ * Soft-delete a deal (crm.deleteDeal). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { dealId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmDeleteDeal(params, o = {}) {
+  return call("crm.deleteDeal", params || {}, o);
+}
+
+/**
+ * Move stage (CLOSED-without-outcome refused) (crm.moveStage). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { dealId, stage, sortOrder? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmMoveStage(params, o = {}) {
+  return call("crm.moveStage", params || {}, o);
+}
+
+/**
+ * Close a deal — WON drafts a Books SalesInvoice (payload draftedInvoiceId/Number; never auto-SENDs) (crm.closeDeal). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { dealId, outcome, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmCloseDeal(params, o = {}) {
+  return call("crm.closeDeal", params || {}, o);
+}
+
+/**
+ * HUMAN-ONLY: sign a held escalation (agent actors refused in-domain) (crm.signEscalation).
+ * @param {object} params - { dealId, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmSignEscalation(params, o = {}) {
+  return call("crm.signEscalation", params || {}, o);
+}
+
+/**
+ * HUMAN-ONLY: return a held escalation (crm.returnEscalation).
+ * @param {object} params - { dealId, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmReturnEscalation(params, o = {}) {
+  return call("crm.returnEscalation", params || {}, o);
+}
+
+/**
+ * Update held terms — real playbook re-evaluation on both lanes (crm.updateHeldTerms). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { dealId, terms }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmUpdateHeldTerms(params, o = {}) {
+  return call("crm.updateHeldTerms", params || {}, o);
+}
+
+/**
+ * Delegate a deal — creates a real board handover Task (payload boardTaskId) (crm.delegate). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { dealId, delegateMemberId, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmDelegate(params, o = {}) {
+  return call("crm.delegate", params || {}, o);
+}
+
+/**
+ * Hold the next step (crm.holdNextStep).
+ * @param {object} params - { dealId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmHoldNextStep(params, o = {}) {
+  return call("crm.holdNextStep", params || {}, o);
+}
+
+/**
+ * Run next-best-action (refused while the deal is held) (crm.runNextBestAction).
+ * @param {object} params - { dealId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmRunNextBestAction(params, o = {}) {
+  return call("crm.runNextBestAction", params || {}, o);
+}
+
+/**
+ * Share a deal — real channel post + queryable DealShare ACL rows (crm.shareDeal).
+ * @param {object} params - { dealId, subjects }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmShareDeal(params, o = {}) {
+  return call("crm.shareDeal", params || {}, o);
+}
+
+/**
+ * Revoke a member's or channel's share on a deal (crm.revokeDealShare).
+ * @param {object} params - { dealId, memberId?, channelId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmRevokeDealShare(params, o = {}) {
+  return call("crm.revokeDealShare", params || {}, o);
+}
+
+/**
+ * Propose non-standard terms on a deal — re-evaluates playbooks and may raise a signature hold (crm.proposeTerms).
+ * @param {object} params - { dealId, discountPct, term?, nonStandard? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmProposeTerms(params, o = {}) {
+  return call("crm.proposeTerms", params || {}, o);
+}
+
+/**
+ * Add an external guest to a deal call (crm.addCallGuest). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { callId, email?, name? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmAddCallGuest(params, o = {}) {
+  return call("crm.addCallGuest", params || {}, o);
+}
+
+/**
+ * Mint a single-use guest join token for a contact on a call (crm.mintGuestToken).
+ * @param {object} params - { callId, contactId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmMintGuestToken(params, o = {}) {
+  return call("crm.mintGuestToken", params || {}, o);
+}
+
+/**
+ * Attach an email address to a CRM contact (crm.linkEmail). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { contactId, email, label? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmLinkEmail(params, o = {}) {
+  return call("crm.linkEmail", params || {}, o);
+}
+
+/**
+ * Link workspace files to a deal (crm.linkFiles).
+ * @param {object} params - { dealId, fileIds }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmLinkFiles(params, o = {}) {
+  return call("crm.linkFiles", params || {}, o);
+}
+
+/**
+ * Link a contact to a deal (crm.linkContact). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { dealId, contactId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmLinkContact(params, o = {}) {
+  return call("crm.linkContact", params || {}, o);
+}
+
+/**
+ * Create a follow-through board task (board item.created) (crm.taskFollowThrough).
+ * @param {object} params - { dealId, title, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmTaskFollowThrough(params, o = {}) {
+  return call("crm.taskFollowThrough", params || {}, o);
+}
+
+/**
+ * Propose a REAL org Decision from a deal (decision.proposed) (crm.logDealDecision).
+ * @param {object} params - { dealId, title, rationale? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmLogDealDecision(params, o = {}) {
+  return call("crm.logDealDecision", params || {}, o);
+}
+
+/**
+ * Create an account (crm.createAccount). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { name, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmCreateAccount(params, o = {}) {
+  return call("crm.createAccount", params || {}, o);
+}
+
+/**
+ * Update an account (crm.updateAccount). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { accountId, …fields }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmUpdateAccount(params, o = {}) {
+  return call("crm.updateAccount", params || {}, o);
+}
+
+/**
+ * Archive an account (crm.archiveAccount). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { accountId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmArchiveAccount(params, o = {}) {
+  return call("crm.archiveAccount", params || {}, o);
+}
+
+/**
+ * Create a contact (crm.createContact).
+ * @param {object} params - { displayName, accountId?, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmCreateContact(params, o = {}) {
+  return call("crm.createContact", params || {}, o);
+}
+
+/**
+ * Update a contact (crm.updateContact). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { contactId, …fields }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmUpdateContact(params, o = {}) {
+  return call("crm.updateContact", params || {}, o);
+}
+
+/**
+ * Delete a contact (crm.deleteContact). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { contactId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmDeleteContact(params, o = {}) {
+  return call("crm.deleteContact", params || {}, o);
+}
+
+/**
+ * Log an interaction (crm.logInteraction).
+ * @param {object} params - { kind: note|call|email|meeting, text, dealId?, contactId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmLogInteraction(params, o = {}) {
+  return call("crm.logInteraction", params || {}, o);
+}
+
+/**
+ * Pin/unpin a note (crm.pinNote). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { interactionId, pinned }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmPinNote(params, o = {}) {
+  return call("crm.pinNote", params || {}, o);
+}
+
+/**
+ * Soft-redact an interaction (crm.redactInteraction). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { interactionId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmRedactInteraction(params, o = {}) {
+  return call("crm.redactInteraction", params || {}, o);
+}
+
+/**
+ * Save a playbook (versioned) (crm.savePlaybook).
+ * @param {object} params - { playbookId?, source, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmSavePlaybook(params, o = {}) {
+  return call("crm.savePlaybook", params || {}, o);
+}
+
+/**
+ * Enable/disable a playbook (locked refuses) (crm.togglePlaybook). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { playbookId, enabled }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmTogglePlaybook(params, o = {}) {
+  return call("crm.togglePlaybook", params || {}, o);
+}
+
+/**
+ * Delete a playbook (locked refuses) (crm.deletePlaybook). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { playbookId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmDeletePlaybook(params, o = {}) {
+  return call("crm.deletePlaybook", params || {}, o);
+}
+
+/**
+ * Set targets — targetCents is HUMAN-ONLY; agents maintain committed/bestCase (crm.setTarget). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { period, committedCents?, bestCaseCents?, targetCents? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function crmSetTarget(params, o = {}) {
+  return call("crm.setTarget", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// books — the Books desk (PB-B1..B4). The signature law lives in the domain
+// layer: payrollSign / taxSignLodge (and floor/new-payee billApprove releases)
+// require a verified HUMAN signature — books.write alone cannot move money.
+// ---------------------------------------------------------------------------
+
+/**
+ * Chart of accounts (books.accounts). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksAccounts(params, o = {}) {
+  return call("books.accounts", params || {}, o);
+}
+
+/**
+ * Journals with lines (books.journals). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksJournals(params, o = {}) {
+  return call("books.journals", params || {}, o);
+}
+
+/**
+ * Bank-feed lines + match state (books.feedLines). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { status?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksFeedLines(params, o = {}) {
+  return call("books.feedLines", params || {}, o);
+}
+
+/**
+ * AR invoices with chase state (books.invoices). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { status?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksInvoices(params, o = {}) {
+  return call("books.invoices", params || {}, o);
+}
+
+/**
+ * AP bills with hold reasons + run linkage (books.bills). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { status?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksBills(params, o = {}) {
+  return call("books.bills", params || {}, o);
+}
+
+/**
+ * Tax obligations + lodgement state (books.taxObligations). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { status? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksTaxObligations(params, o = {}) {
+  return call("books.taxObligations", params || {}, o);
+}
+
+/**
+ * Ledger-current reports (figures carry journal-line ids) (books.reports). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { report: pl|balance|cashflow|agedAr|agedAp, from?, to? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksReports(params, o = {}) {
+  return call("books.reports", params || {}, o);
+}
+
+/**
+ * Fixed assets + depreciation state (books.assets). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - {}
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksAssets(params, o = {}) {
+  return call("books.assets", params || {}, o);
+}
+
+/**
+ * Grounded ask-the-books via the shared AI gateway ({content, grounding[], costCents, auditId}) (books.ask). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { question }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function booksAsk(params, o = {}) {
+  return call("books.ask", params || {}, o);
+}
+
+/**
+ * Post a manual journal (books.journalPost). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { lines, memo?, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksJournalPost(params, o = {}) {
+  return call("books.journalPost", params || {}, o);
+}
+
+/**
+ * Accept a feed-line match (books.matchAccept). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { feedLineId, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksMatchAccept(params, o = {}) {
+  return call("books.matchAccept", params || {}, o);
+}
+
+/**
+ * Resolve a held match (books.matchHoldResolve). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { feedLineId, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksMatchHoldResolve(params, o = {}) {
+  return call("books.matchHoldResolve", params || {}, o);
+}
+
+/**
+ * Register receipts (OCR is SANDBOX-labelled) (books.receiptsRegister). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { receipts }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksReceiptsRegister(params, o = {}) {
+  return call("books.receiptsRegister", params || {}, o);
+}
+
+/**
+ * Recode a journal line (each recode is a new act) (books.lineRecode).
+ * @param {object} params - { journalLineId, accountId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksLineRecode(params, o = {}) {
+  return call("books.lineRecode", params || {}, o);
+}
+
+/**
+ * Draft an AR invoice (send:true queues a real email) (books.invoiceDraft). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { payeeId?|payeeName?, description, totalCents, dueDays?, dealId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksInvoiceDraft(params, o = {}) {
+  return call("books.invoiceDraft", params || {}, o);
+}
+
+/**
+ * Send a drafted invoice — posts AR journal, arms the PB-B2 chase ladder, queues a REAL customer email (emailQueued/emailSkipped honest) (books.invoiceSend). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksInvoiceSend(params, o = {}) {
+  return call("books.invoiceSend", params || {}, o);
+}
+
+/**
+ * Advance the chase ladder (steps ≥2 are human-gated per PB-B2) (books.invoiceChaseStep). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id, step }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksInvoiceChaseStep(params, o = {}) {
+  return call("books.invoiceChaseStep", params || {}, o);
+}
+
+/**
+ * Record a payment (books.invoiceRecordPayment). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id, amountCents, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksInvoiceRecordPayment(params, o = {}) {
+  return call("books.invoiceRecordPayment", params || {}, o);
+}
+
+/**
+ * Issue a credit note (books.invoiceCreditNote). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksInvoiceCreditNote(params, o = {}) {
+  return call("books.invoiceCreditNote", params || {}, o);
+}
+
+/**
+ * Void (idempotent by state; undo mirror exists) (books.invoiceVoid). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksInvoiceVoid(params, o = {}) {
+  return call("books.invoiceVoid", params || {}, o);
+}
+
+/**
+ * Record a payment promise (books.invoicePromise).
+ * @param {object} params - { id, promisedAt, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksInvoicePromise(params, o = {}) {
+  return call("books.invoicePromise", params || {}, o);
+}
+
+/**
+ * Run a statement — queues a REAL statement email from accounts@ (books.statementRun).
+ * @param {object} params - { payeeId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksStatementRun(params, o = {}) {
+  return call("books.statementRun", params || {}, o);
+}
+
+/**
+ * Capture an AP bill (books.billCapture). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { …bill }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksBillCapture(params, o = {}) {
+  return call("books.billCapture", params || {}, o);
+}
+
+/**
+ * Release a held bill (PB-B1 floor/new-payee holds require the human signature token) (books.billApprove). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id, humanSignatureMemberId? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksBillApprove(params, o = {}) {
+  return call("books.billApprove", params || {}, o);
+}
+
+/**
+ * Hold a bill (books.billHold). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id, reason? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksBillHold(params, o = {}) {
+  return call("books.billHold", params || {}, o);
+}
+
+/**
+ * Return a bill to its capturer (books.billReturn). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksBillReturn(params, o = {}) {
+  return call("books.billReturn", params || {}, o);
+}
+
+/**
+ * Schedule a payment run (books.billScheduleRun). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { billIds?, runDate? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksBillScheduleRun(params, o = {}) {
+  return call("books.billScheduleRun", params || {}, o);
+}
+
+/**
+ * File an expense claim (books.expenseClaim). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { …claim }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksExpenseClaim(params, o = {}) {
+  return call("books.expenseClaim", params || {}, o);
+}
+
+/**
+ * Approve an expense claim (books.expenseApprove). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksExpenseApprove(params, o = {}) {
+  return call("books.expenseApprove", params || {}, o);
+}
+
+/**
+ * Draft a pay run (+ company-calendar pay-date HOLD marker) (books.payrollDraft). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { period? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksPayrollDraft(params, o = {}) {
+  return call("books.payrollDraft", params || {}, o);
+}
+
+/**
+ * HUMAN-SIGNATURE (PB-B3): sign a pay run (books.payrollSign). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id, humanSignatureMemberId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksPayrollSign(params, o = {}) {
+  return call("books.payrollSign", params || {}, o);
+}
+
+/**
+ * Recall a drafted/signed-but-unlodged pay run (books.payrollRecall). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksPayrollRecall(params, o = {}) {
+  return call("books.payrollRecall", params || {}, o);
+}
+
+/**
+ * Start employee onboarding (books.onboardingStart). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { …employee }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksOnboardingStart(params, o = {}) {
+  return call("books.onboardingStart", params || {}, o);
+}
+
+/**
+ * Advance onboarding (books.onboardingAdvance). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id, step? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksOnboardingAdvance(params, o = {}) {
+  return call("books.onboardingAdvance", params || {}, o);
+}
+
+/**
+ * File a leave request (books.leaveRequest). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { …request }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksLeaveRequest(params, o = {}) {
+  return call("books.leaveRequest", params || {}, o);
+}
+
+/**
+ * Approve leave (books.leaveApprove). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { id }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksLeaveApprove(params, o = {}) {
+  return call("books.leaveApprove", params || {}, o);
+}
+
+/**
+ * Prepare an obligation (+ lodgement-due HOLD marker) (books.taxPrepare). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { obligationId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksTaxPrepare(params, o = {}) {
+  return call("books.taxPrepare", params || {}, o);
+}
+
+/**
+ * Hold an obligation (books.taxHold). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { obligationId, reason? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksTaxHold(params, o = {}) {
+  return call("books.taxHold", params || {}, o);
+}
+
+/**
+ * Return an obligation to preparation (books.taxReturn).
+ * @param {object} params - { obligationId, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksTaxReturn(params, o = {}) {
+  return call("books.taxReturn", params || {}, o);
+}
+
+/**
+ * HUMAN-SIGNATURE LAW (PB-B4): sign + lodge (lodgement is SANDBOX-labelled — never silently fakes a government filing) (books.taxSignLodge). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { obligationId, humanSignatureMemberId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksTaxSignLodge(params, o = {}) {
+  return call("books.taxSignLodge", params || {}, o);
+}
+
+/**
+ * Run depreciation (idempotent per period) (books.assetDepreciationRun). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { period? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksAssetDepreciationRun(params, o = {}) {
+  return call("books.assetDepreciationRun", params || {}, o);
+}
+
+/**
+ * Dispose an asset (idempotent by state) (books.assetDispose). Idempotent — pass a stable `o.idempotencyKey` so a retry collapses to one act.
+ * @param {object} params - { assetId, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksAssetDispose(params, o = {}) {
+  return call("books.assetDispose", params || {}, o);
+}
+
+/**
+ * Resubmit STP (remediation only — no signature act) (books.stpResubmit).
+ * @param {object} params - { payRunId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function booksStpResubmit(params, o = {}) {
+  return call("books.stpResubmit", params || {}, o);
+}
+
+// ---------------------------------------------------------------------------
+// directory — the Directory desk (external people + organisations, channels,
+// captures, duplicates, awareness, links, contact lists). Colleagues are NOT
+// directory records; the domain refuses to archive one from here.
+//
+// Two invariants ride every wrapper below and neither is enforced client-side:
+//   - Awareness (DECISIONS D-4): a NAMED record is ABSENT — not redacted, not
+//     a refusal — from every read for a seat without a grant. An empty page or
+//     a NOT_FOUND is a legitimate answer; never infer non-existence from it.
+//   - Propose-only (D-7): mergeExecute/revert, setAwareness, resolveCapture,
+//     resolveAwarenessRequest and the two archive verbs are HUMAN-GATED in the
+//     domain. An agent seat calling them files a review item instead of acting.
+//     That refusal is correct behaviour, not an error to route around.
+// ---------------------------------------------------------------------------
+
+/**
+ * One-box search across external people + organisations (directory.search). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { q, scope?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directorySearch(params, o = {}) {
+  return call("directory.search", params || {}, o);
+}
+
+/**
+ * The People view — filter/sort/paginate external people (directory.listPeople). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { scope?, relationship?, accountId?, awareness?, listId?, q?, sort?, includeArchived?, limit?, cursor? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directoryListPeople(params, o = {}) {
+  return call("directory.listPeople", params || {}, o);
+}
+
+/**
+ * The Organisations view (directory.listOrgs). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { relationship?, q?, includeArchived?, limit?, cursor? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directoryListOrgs(params, o = {}) {
+  return call("directory.listOrgs", params || {}, o);
+}
+
+/**
+ * One person record + channels, provenance, links, awareness (directory.getPerson). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { contactId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directoryGetPerson(params, o = {}) {
+  return call("directory.getPerson", params || {}, o);
+}
+
+/**
+ * One organisation record + channels, relationships, people (directory.getOrg). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { accountId }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directoryGetOrg(params, o = {}) {
+  return call("directory.getOrg", params || {}, o);
+}
+
+/**
+ * Grounded directory Q&A via the shared AI gateway ({content, grounding[], costCents, auditId}) (directory.ask). Grounding is awareness-scoped.
+ * @param {object} params - { question, limit? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryAsk(params, o = {}) {
+  return call("directory.ask", params || {}, o);
+}
+
+/**
+ * Export selected people as vCards (directory.exportVcard). Awareness-scoped — restricted records are absent from the export.
+ * @param {object} params - { contactIds }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryExportVcard(params, o = {}) {
+  return call("directory.exportVcard", params || {}, o);
+}
+
+/**
+ * The Review view's capture queue (directory.listCaptures). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { status?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directoryListCaptures(params, o = {}) {
+  return call("directory.listCaptures", params || {}, o);
+}
+
+/**
+ * Proposed duplicate pairs + the evidence that flagged them (directory.listMerges). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { status?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directoryListMerges(params, o = {}) {
+  return call("directory.listMerges", params || {}, o);
+}
+
+/**
+ * Open awareness requests awaiting a human decision (directory.listAwarenessRequests). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { status?, limit? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directoryListAwarenessRequests(params, o = {}) {
+  return call("directory.listAwarenessRequests", params || {}, o);
+}
+
+/**
+ * Contact lists visible to this seat (directory.listLists). Non-side-effecting RPC method (POST via call(), never client.read()).
+ * @param {object} params - { includeArchived? }
+ * @param {object} o - { base, token, fetchImpl? }
+ */
+export function directoryListLists(params, o = {}) {
+  return call("directory.listLists", params || {}, o);
+}
+
+/**
+ * Create an EXTERNAL person record (directory.createPerson). Idempotent — pass a stable `o.idempotencyKey` so a retried create doesn't duplicate the record.
+ * @param {object} params - { displayName, accountId?|organisationName?, relationship?, email?, phone?, awareness?, granteeMemberIds?, source?, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryCreatePerson(params, o = {}) {
+  return call("directory.createPerson", params || {}, o);
+}
+
+/**
+ * Edit a person record; `verifiedFrom` records how a channel written by this edit was learned (directory.updatePerson). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { contactId, …fields }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryUpdatePerson(params, o = {}) {
+  return call("directory.updatePerson", params || {}, o);
+}
+
+/**
+ * Archive a person — HUMAN-GATED (directory.archivePerson). An agent seat files an approval instead of archiving; a colleague refuses outright.
+ * @param {object} params - { contactId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryArchivePerson(params, o = {}) {
+  return call("directory.archivePerson", params || {}, o);
+}
+
+/**
+ * Create an organisation record (directory.createOrg). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { name, domain?, industry?, relationships?, contactEmail?, address?, … }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryCreateOrg(params, o = {}) {
+  return call("directory.createOrg", params || {}, o);
+}
+
+/**
+ * Edit an organisation record (directory.updateOrg). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { accountId, …fields }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryUpdateOrg(params, o = {}) {
+  return call("directory.updateOrg", params || {}, o);
+}
+
+/**
+ * Archive an organisation — HUMAN-GATED (directory.archiveOrg). An agent seat files an approval instead of archiving.
+ * @param {object} params - { accountId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryArchiveOrg(params, o = {}) {
+  return call("directory.archiveOrg", params || {}, o);
+}
+
+/**
+ * Attach an email/phone/handle/URL with its provenance (directory.addChannel). THE enrichment verb — re-adding a known channel with a fresh `verifiedFrom` re-verifies it. Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { subjectType, subjectId, type, value, isPrimary?, verifiedFrom?, label?, source?, sourceRef?, confidence? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryAddChannel(params, o = {}) {
+  return call("directory.addChannel", params || {}, o);
+}
+
+/**
+ * Remove a channel from a record (directory.removeChannel).
+ * @param {object} params - { channelId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryRemoveChannel(params, o = {}) {
+  return call("directory.removeChannel", params || {}, o);
+}
+
+/**
+ * Promote a channel to primary for its type (directory.setPrimaryChannel). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { channelId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directorySetPrimaryChannel(params, o = {}) {
+  return call("directory.setPrimaryChannel", params || {}, o);
+}
+
+/**
+ * Propose a record for the Review queue from observed traffic (directory.proposeCapture). Writes NO record. `sourceFingerprint` dedupes, so re-proposing the same observation is safe. Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { kind, payload, source, sourceRef?, sourceFingerprint, confidence? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryProposeCapture(params, o = {}) {
+  return call("directory.proposeCapture", params || {}, o);
+}
+
+/**
+ * Approve (optionally edited) or dismiss a capture — HUMAN-GATED (directory.resolveCapture). Approving is what writes the record.
+ * @param {object} params - { captureId, decision, patch? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryResolveCapture(params, o = {}) {
+  return call("directory.resolveCapture", params || {}, o);
+}
+
+/**
+ * Flag two records as the same party, with evidence (directory.proposeMerge). Files a candidate; does NOT merge. Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { aRef, bRef, evidence? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryProposeMerge(params, o = {}) {
+  return call("directory.proposeMerge", params || {}, o);
+}
+
+/**
+ * Execute a merge with per-field picks — HUMAN-GATED (directory.executeMerge).
+ * @param {object} params - { candidateId, survivorRef, fieldPicks?, keepBothChannels? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryExecuteMerge(params, o = {}) {
+  return call("directory.executeMerge", params || {}, o);
+}
+
+/**
+ * Undo an executed merge — HUMAN-GATED (directory.revertMerge).
+ * @param {object} params - { candidateId }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryRevertMerge(params, o = {}) {
+  return call("directory.revertMerge", params || {}, o);
+}
+
+/**
+ * Ask for awareness of a restricted record; the reason is shown verbatim to the decider (directory.requestAwareness). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { contactId, reason? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryRequestAwareness(params, o = {}) {
+  return call("directory.requestAwareness", params || {}, o);
+}
+
+/**
+ * Set a record's awareness + the FULL grantee set — HUMAN-GATED (directory.setAwareness). The acting human is always included.
+ * @param {object} params - { contactIds, awareness, granteeMemberIds?, reason? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directorySetAwareness(params, o = {}) {
+  return call("directory.setAwareness", params || {}, o);
+}
+
+/**
+ * Grant or decline an awareness request — HUMAN-GATED (directory.resolveAwarenessRequest). Logged either way.
+ * @param {object} params - { requestId, decision, note? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryResolveAwarenessRequest(params, o = {}) {
+  return call("directory.resolveAwarenessRequest", params || {}, o);
+}
+
+/**
+ * Link a party to a mail message/thread, meeting attendee, file share or bank-feed line (directory.linkParty). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { partyRef, refType, refId, role, address? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryLinkParty(params, o = {}) {
+  return call("directory.linkParty", params || {}, o);
+}
+
+/**
+ * Remove a cross-suite link (directory.unlinkParty).
+ * @param {object} params - { partyRef, refType, refId, role }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryUnlinkParty(params, o = {}) {
+  return call("directory.unlinkParty", params || {}, o);
+}
+
+/**
+ * Create a contact list, optionally seeded + shared (directory.createList). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { name, memberRefs?, shareMemberIds? }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryCreateList(params, o = {}) {
+  return call("directory.createList", params || {}, o);
+}
+
+/**
+ * Add parties to a contact list (directory.addToList). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { listId, partyRefs }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryAddToList(params, o = {}) {
+  return call("directory.addToList", params || {}, o);
+}
+
+/**
+ * Remove parties from a contact list (directory.removeFromList).
+ * @param {object} params - { listId, partyRefs }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryRemoveFromList(params, o = {}) {
+  return call("directory.removeFromList", params || {}, o);
+}
+
+/**
+ * Share a contact list with other seats (directory.shareList). Idempotent — pass a stable `o.idempotencyKey`.
+ * @param {object} params - { listId, memberIds }
+ * @param {object} o - { base, token, idempotencyKey?, fetchImpl? }
+ */
+export function directoryShareList(params, o = {}) {
+  return call("directory.shareList", params || {}, o);
+}