@duvoai/cli 1.27.0 → 1.30.0

package/dist/bin/duvo.js

@@ -2255,6 +2255,16 @@ var AGENT_RUN_STATUSES = [
   "interrupted"
   // User interrupted
 ];
+var TERMINAL_AGENT_RUN_STATUSES = [
+  "completed",
+  "failed",
+  "interrupted"
+];
+function isTerminalAgentRunStatus(status) {
+  return TERMINAL_AGENT_RUN_STATUSES.includes(status);
+}
+__name(isTerminalAgentRunStatus, "isTerminalAgentRunStatus");
+__name2(isTerminalAgentRunStatus, "isTerminalAgentRunStatus");
 var agentRunStatusSchema = z10.enum(AGENT_RUN_STATUSES);
 var AGENT_RUN_SOURCES = [
   "app",
@@ -2503,7 +2513,7 @@ var canExecuteConcurrentResultSchema = z11.object({
 var BrowsingProviderSchema = z12.enum(["google", "anthropic"]);
 var PLATFORM_DEFAULT_MODELS = {
   agent: {
-    model: "claude-sonnet-5"
+    model: "claude-sonnet-5[1m]"
   },
   browsing: {
     provider: "google",
@@ -2512,6 +2522,7 @@ var PLATFORM_DEFAULT_MODELS = {
 };
 var CLAUDE_MODEL_IDS = [
   "claude-sonnet-5",
+  "claude-sonnet-5[1m]",
   "claude-opus-4-8",
   "claude-opus-4-8[1m]"
 ];
@@ -2555,6 +2566,10 @@ var AVAILABLE_AGENT_MODELS = {
     displayName: "Claude Sonnet 5",
     description: "Fast and capable for everyday tasks"
   },
+  "claude-sonnet-5[1m]": {
+    displayName: "Claude Sonnet 5",
+    description: "Fast and capable for everyday tasks"
+  },
   "claude-opus-4-8": {
     displayName: "Claude Opus 4.8",
     description: "Our most capable model \u2014 best for complex work"
@@ -2572,21 +2587,28 @@ var BrowsingModelIdSchema = z12.enum([
   "claude-sonnet-4-5",
   "claude-opus-4-1"
 ]);
-var LEGACY_DEFAULT_MODEL = "claude-sonnet-5";
+var LEGACY_DEFAULT_MODEL = "claude-sonnet-5[1m]";
 var LEGACY_MODEL_REMAP = {
-  "claude-sonnet-4-6": "claude-sonnet-5",
-  "claude-sonnet-4-6[1m]": "claude-sonnet-5",
+  // Bare Sonnet 5 is still schema-valid (stored configs keep parsing) but is
+  // upgraded to the [1m]-suffixed ID at resolve time so the pinned CLI budgets
+  // the real 1M window instead of its 200K unknown-model fallback.
+  "claude-sonnet-5": "claude-sonnet-5[1m]",
+  "claude-sonnet-4-6": "claude-sonnet-5[1m]",
+  "claude-sonnet-4-6[1m]": "claude-sonnet-5[1m]",
   "claude-opus-4-6": "claude-opus-4-8",
   "claude-opus-4-6[1m]": "claude-opus-4-8[1m]",
   "claude-opus-4-7": "claude-opus-4-8",
   "claude-opus-4-7[1m]": "claude-opus-4-8[1m]"
 };
 function mapModelToClaudeModel(model) {
+  const remapped = model != null && model !== "" ? LEGACY_MODEL_REMAP[model] : void 0;
+  if (remapped) {
+    return remapped;
+  }
   if (model && CLAUDE_MODEL_IDS.includes(model)) {
     return model;
   }
-  const remapped = model != null && model !== "" ? LEGACY_MODEL_REMAP[model] : void 0;
-  return remapped ?? LEGACY_DEFAULT_MODEL;
+  return LEGACY_DEFAULT_MODEL;
 }
 __name(mapModelToClaudeModel, "mapModelToClaudeModel");
 __name2(mapModelToClaudeModel, "mapModelToClaudeModel");
@@ -3186,7 +3208,63 @@ var clarityProcessListItemSchema = z15.object({
   contributors: z15.array(z15.object({ userId: z15.string(), userName: z15.string() })).optional(),
   createdAt: z15.coerce.date(),
   updatedAt: z15.coerce.date(),
-  createdByName: z15.string().optional()
+  createdByName: z15.string().optional(),
+  /** Team-scoped lists only; absent on org portfolio rows. */
+  folderId: z15.guid().nullable().optional(),
+  /**
+   * Read-time folder suggestion: set when the process is unfiled and its
+   * landscape leaf sits under a group node a team folder links to.
+   */
+  suggestedFolderId: z15.guid().nullable().optional()
+});
+var clarityProcessFolderSchema = z15.object({
+  id: z15.guid(),
+  teamId: z15.guid(),
+  name: z15.string(),
+  /** Linked landscape group node, or null for plain custom folders. */
+  landscapeNodeId: z15.guid().nullable(),
+  /** Once true, landscape group renames no longer propagate to this folder. */
+  nameOverridden: z15.boolean(),
+  sortOrder: z15.number().int(),
+  createdAt: z15.coerce.date(),
+  updatedAt: z15.coerce.date()
+});
+var clarityProcessFolderListItemSchema = clarityProcessFolderSchema.extend({
+  processCount: z15.number(),
+  /** Unfiled team processes whose landscape group matches this folder's link. */
+  suggestedCount: z15.number()
+});
+var clarityProcessFolderListResponseSchema = z15.object({
+  folders: z15.array(clarityProcessFolderListItemSchema)
+});
+var claritySuccessResponseSchema = z15.object({
+  success: z15.boolean()
+});
+var clarityProcessFolderResponseSchema = z15.object({
+  folder: clarityProcessFolderSchema
+});
+var clarityMoveProcessesToFolderResponseSchema = z15.object({
+  movedCount: z15.number()
+});
+var claritySetupFoldersFromLandscapeResponseSchema = z15.object({
+  folders: z15.array(clarityProcessFolderSchema),
+  createdCount: z15.number()
+});
+var clarityFileSuggestedProcessesResponseSchema = z15.object({
+  filedCount: z15.number()
+});
+var clarityLandscapeGroupSchema = z15.object({
+  id: z15.guid(),
+  name: z15.string(),
+  sortOrder: z15.number().int(),
+  processCount: z15.number()
+});
+var clarityLandscapeGroupListResponseSchema = z15.object({
+  groups: z15.array(clarityLandscapeGroupSchema),
+  /** Team processes whose landscape leaf sits under no group node. */
+  unclassifiedCount: z15.number(),
+  /** True when the bounded read could not return every group. */
+  truncated: z15.boolean()
 });
 var CLARITY_PROCESS_LIST_ORDERS = [
   "updated_desc",
@@ -3337,7 +3415,9 @@ var clarityLandscapeCaptureRequestSchema = z15.object({
     });
   }
 });
-var clarityProcessLandscapeNodeSchema = z15.object({
+var CLARITY_PROCESS_LANDSCAPE_REDACTED_NODE_HINT = "restricted_process";
+var clarityProcessLandscapeFullNodeSchema = z15.object({
+  access: z15.literal("full"),
   id: z15.guid(),
   parentId: z15.guid().nullable(),
   processId: z15.guid().nullable(),
@@ -3360,7 +3440,27 @@ var clarityProcessLandscapeNodeSchema = z15.object({
   captureSuggestions: z15.array(clarityLandscapeCaptureSuggestionSchema).default([]),
   captureRequests: z15.array(clarityLandscapeCaptureRequestSchema).default([]),
   labels: z15.array(clarityProcessAssignedLabelSchema).default([])
-});
+}).strict();
+var clarityProcessLandscapePublicNodeSchema = clarityProcessLandscapeFullNodeSchema.omit({ access: true }).partial({
+  teamAssignmentSuggestions: true,
+  captureSuggestions: true,
+  captureRequests: true
+});
+var clarityProcessLandscapeRedactedNodeSchema = z15.object({
+  access: z15.literal("redacted"),
+  hint: z15.literal(CLARITY_PROCESS_LANDSCAPE_REDACTED_NODE_HINT),
+  id: z15.guid(),
+  parentId: z15.guid().nullable(),
+  sortOrder: z15.number(),
+  depth: z15.number()
+}).strict();
+var clarityProcessLandscapeNodeSchema = z15.discriminatedUnion(
+  "access",
+  [
+    clarityProcessLandscapeFullNodeSchema,
+    clarityProcessLandscapeRedactedNodeSchema
+  ]
+);
 var clarityProcessLandscapeUnlinkedProcessSchema = clarityProcessLandscapeSummarySchema.extend({
   teamId: z15.guid(),
   teamName: z15.string().nullable(),
@@ -3372,7 +3472,8 @@ var clarityProcessLandscapeLinkSchema = z15.object({
   targetNodeId: z15.guid(),
   type: z15.enum(["hands_off_to", "shares_step_with", "variant_of"]),
   state: z15.enum(["suggested", "confirmed"]),
-  confidence: z15.number().nullable()
+  confidence: z15.number().nullable(),
+  rationale: z15.string().nullable().default(null)
 });
 var clarityProcessLandscapeStatsSchema = z15.object({
   totalNodes: z15.number(),
@@ -3386,6 +3487,7 @@ var landscapeGenerationResultSummarySchema = z15.object({
   createdNodeCount: z15.number().int().nonnegative(),
   reparentedNodeCount: z15.number().int().nonnegative(),
   attachedProcessCount: z15.number().int().nonnegative(),
+  suggestedRelationshipCount: z15.number().int().nonnegative().default(0),
   unchangedWriteCount: z15.number().int().nonnegative(),
   failedWriteCount: z15.number().int().nonnegative()
 });
@@ -3408,6 +3510,9 @@ var clarityProcessLandscapeResponseSchema = z15.object({
   generation: clarityProcessLandscapeGenerationSchema,
   truncated: z15.boolean()
 });
+var clarityProcessLandscapePublicResponseSchema = clarityProcessLandscapeResponseSchema.extend({
+  nodes: z15.array(clarityProcessLandscapePublicNodeSchema)
+});
 var clarityProcessPersonSchema = z15.object({
   id: z15.guid(),
   userId: z15.guid().nullable(),
@@ -5021,9 +5126,15 @@ var clarityProcessLandscapeGenerationStatusChangedEventDataSchema = z21.object({
   status: clarityProcessLandscapeGenerationSchema.shape.status.exclude([
     "idle"
   ]),
-  error: z21.string().optional(),
   result: landscapeGenerationResultSummarySchema.optional()
 });
+var clarityProcessLandscapeChangedEventDataSchema = z21.object({
+  organizationId: z21.guid()
+});
+var clarityProcessLandscapeOrganizeStatusChangedEventDataSchema = z21.object({
+  organizationId: z21.guid(),
+  status: z21.enum(["completed", "failed"])
+});
 var clarityProcessLandscapeRoomPayloadSchema = z21.object({
   organizationId: z21.guid()
 });
@@ -6903,7 +7014,6 @@ var integrationResponseSchema = z27.object({
   server_url: z27.string().optional(),
   transport_type: TransportTypeSchema.optional(),
   auth_method: z27.string().nullable().optional(),
-  composio_mcp_id: z27.string().nullable().default(null),
   custom_integration_id: z27.string().nullable().optional(),
   icon_url: z27.string().nullable().optional(),
   oauth_provider: z27.string().nullable().optional(),
@@ -6912,7 +7022,7 @@ var integrationResponseSchema = z27.object({
    * to start the OAuth flow via
    * `POST /v1/connections/oauth/native/:provider/start`. Derived
    * server-side from the integration `type`; null when no native provider
-   * exists for the type (default-provider, composio, custom MCP).
+   * exists for the type (default-provider, custom MCP).
    */
   oauth_provider_key: z27.string().nullable().optional(),
   oauth_scopes: z27.array(z27.string()).nullable().optional(),
@@ -7001,15 +7111,6 @@ var checkDcrSupportResponseSchema = z27.object({
 var authorizationUrlResponseSchema = z27.object({
   authorization_url: z27.string().describe("OAuth provider authorization URL to open in a browser")
 });
-var startComposioConnectionResponseSchema = z27.object({
-  redirect_url: z27.string().nullable().describe(
-    "Browser URL the user must visit to complete authorization. Null when the connection was completed synchronously (e.g. for API_KEY auth that did not require a browser flow)."
-  ),
-  status: z27.string().nullable().describe("Composio connection status, e.g. INITIATED or ACTIVE."),
-  connected_account_id: z27.string().describe(
-    "Composio connected-account ID, passed to /v1/connections/composio/finalize to complete the flow."
-  )
-});
 var createCustomIntegrationRequestSchema = z27.object({
   name: z27.string().min(1, "Name is required"),
   auth_method: z27.enum(["url", "apikey", "headers", "oauth"]),
@@ -7046,7 +7147,6 @@ var updateIntegrationRequestSchema = z27.object({
     plaintext: z27.record(z27.string(), z27.string()).optional(),
     secret: z27.record(z27.string(), z27.string()).optional()
   }).nullable().optional(),
-  composio_mcp_id: z27.string().nullable().optional(),
   // Toggle team sharing. `true` makes the instance team-shared
   // (`user_id = NULL`); `false` reverts it to personal owned by the caller.
   // Rejected when the org-level "Connections sharing" setting is OFF and
@@ -7252,6 +7352,14 @@ var artifactVisibilitySchema = z31.enum([
   "teams"
 ]);
 var artifactPublishPermissionSchema = z31.enum(["view", "edit"]);
+var artifactRefreshFrequencySchema = z31.enum([
+  "every_15_minutes",
+  "every_30_minutes",
+  "hourly",
+  "every_6_hours",
+  "daily",
+  "weekly"
+]);
 var artifactSchema = z31.object({
   id: z31.guid(),
   team_id: z31.guid(),
@@ -7274,6 +7382,13 @@ var artifactSchema = z31.object({
   // image. Optional so older/other clients (and fixtures) tolerate its absence;
   // the backend always includes it (string or null).
   thumbnail_url: z31.string().nullable().optional(),
+  // Background auto-refresh cadence, or null when off. Optional so older
+  // clients and fixtures tolerate its absence; the backend always includes it.
+  refresh_frequency: artifactRefreshFrequencySchema.nullable().optional(),
+  // When the last scheduled refresh was dispatched / the next one is due.
+  // Null until a schedule is set (next) or has fired at least once (last).
+  last_refresh_at: z31.string().nullable().optional(),
+  next_refresh_at: z31.string().nullable().optional(),
   created_at: z31.string(),
   updated_at: z31.string()
 });
@@ -7402,8 +7517,12 @@ var answerArtifactQuestionResponseSchema = z31.object({
   ok: z31.literal(true)
 });
 var updateArtifactBodySchema = z31.object({
-  title: z31.string().trim().min(1).max(120)
-}).strict();
+  title: z31.string().trim().min(1).max(120).optional(),
+  refresh_frequency: artifactRefreshFrequencySchema.nullable().optional()
+}).strict().refine(
+  (body) => body.title !== void 0 || body.refresh_frequency !== void 0,
+  { message: "At least one field is required" }
+);
 var publishArtifactBodySchema = z31.object({
   visibility: z31.enum(["private", "team", "organization"]),
   // The audience permission to apply when publishing. Applies to the Pulse's
@@ -8001,10 +8120,18 @@ var adminDreamEditReferenceSchema = z38.object({
   source_refs: z38.array(memorySourceRefSchema),
   created_at: z38.string()
 });
+var adminDreamTraceEntrySchema = z38.object({
+  type: z38.string().max(128),
+  role: z38.string().max(64).optional(),
+  toolName: z38.string().max(512).optional(),
+  contentPreview: z38.string().max(2e3).optional(),
+  ts: z38.string()
+});
 var adminDreamingRunDetailSchema = adminDreamingRunSummarySchema.extend({
   input: z38.record(z38.string(), z38.unknown()),
   resolvedInputs: z38.array(adminDreamResolvedInputSchema),
-  editReferences: z38.array(adminDreamEditReferenceSchema)
+  editReferences: z38.array(adminDreamEditReferenceSchema),
+  sessionTrace: z38.array(adminDreamTraceEntrySchema)
 });
 var adminDreamingRunDetailResponseSchema = z38.object({
   dream: adminDreamingRunDetailSchema
@@ -8329,6 +8456,16 @@ var adminOrgAddMemberRequestSchema = z40.object({
 var adminOrgAddMemberResponseSchema = z40.object({
   member: adminOrgMemberSchema
 });
+var adminOrgInviteMemberRequestSchema = z40.object({
+  email: z40.email(),
+  role: z40.enum(ORG_ROLES.ALL),
+  frontendUrl: z40.url().optional()
+});
+var adminOrgInviteMemberResponseSchema = z40.object({
+  success: z40.literal(true),
+  invitationId: z40.guid(),
+  emailSent: z40.boolean()
+});
 var adminOrgUpdateMemberRoleRequestSchema = z40.object({
   role: z40.enum(ORG_ROLES.ALL)
 });
@@ -8707,6 +8844,7 @@ var agentApiSchema = z42.object({
   team_id: z42.string().nullable(),
   thread_id: z42.string().nullable(),
   folder_id: z42.string().nullable().optional(),
+  automation_id: z42.guid().nullable().optional(),
   created_at: z42.string().nullable(),
   updated_at: z42.string().nullable(),
   created_by: z42.object({
@@ -9074,6 +9212,33 @@ var automationRevisionDetailResponseApiSchema = z50.object({
 var automationRevisionResponseApiSchema = z50.object({
   revision: automationRevisionSummaryApiSchema.describe("The revision summary")
 });
+var automationFlowAgentApiSchema = z50.object({
+  id: z50.guid().describe("Agent identifier"),
+  name: z50.string().describe("Agent name")
+});
+var automationFlowQueueApiSchema = z50.object({
+  id: z50.guid().describe("Queue identifier"),
+  name: z50.string().describe("Queue name (per-revision override or canonical)"),
+  item_count: z50.int().describe("Active (non-deleted) case count in the queue"),
+  producer_agent_ids: z50.array(z50.guid()).describe("Agents that add cases to this queue"),
+  consumer_agent_ids: z50.array(z50.guid()).describe("Agents that process cases from this queue"),
+  routed_consumer_agent_id: z50.guid().nullable().describe(
+    "Consumer the revision routes new cases to (null when unrouted or disabled)"
+  )
+});
+var automationFlowHandoverApiSchema = z50.object({
+  source_agent_id: z50.guid().describe("Agent that hands work over"),
+  target_agent_id: z50.guid().describe("Agent that receives the handover")
+});
+var automationFlowApiSchema = z50.object({
+  revision_id: z50.guid().describe("Revision this flow was computed for"),
+  agents: z50.array(automationFlowAgentApiSchema).describe("Agent nodes in the flow"),
+  queues: z50.array(automationFlowQueueApiSchema).describe("Queue nodes in the flow"),
+  handovers: z50.array(automationFlowHandoverApiSchema).describe("Agent \u2192 agent handover edges")
+});
+var automationFlowResponseApiSchema = z50.object({
+  flow: automationFlowApiSchema.describe("The revision's flow graph")
+});
 var AUTOMATION_REVISION_NAME_MAX_LENGTH = 200;
 var AUTOMATION_REVISION_DESCRIPTION_MAX_LENGTH = 2e3;
 var revisionNameFieldSchema = z50.string().trim().min(1).max(AUTOMATION_REVISION_NAME_MAX_LENGTH);
@@ -9114,6 +9279,82 @@ var activateAutomationRevisionResponseApiSchema = z50.object({
   ),
   repinned_case_count: z50.int().describe("Number of pending cases re-pinned onto the activated revision")
 });
+var automationEntrypointRunApiSchema = z50.object({
+  id: z50.guid().describe("Agent run ID of the entrypoint run"),
+  agent_id: z50.guid().describe("Agent that ran"),
+  build_id: z50.guid().describe("Build the run executed"),
+  agent_name: z50.string().nullable().describe("Display name of the agent that ran"),
+  status: agentRunStatusSchema.describe("Run status"),
+  source: z50.string().nullable().describe("How the run was started (schedule, slack, manual, api, \u2026)"),
+  automation_revision_id: z50.guid().nullable().describe("Revision the run was pinned to (null for legacy runs)"),
+  run_count: z50.int().describe(
+    "Total runs in this run's chain, including the entrypoint run itself"
+  ),
+  produced_case_count: z50.int().describe(
+    "Cases produced by runs in this chain. Non-zero means the chain has something to expand even when run_count is 1 (an unclaimed produced case)"
+  ),
+  eval_summaries: evalSummarySchema.nullable().describe("Evaluation summary for the run, when available"),
+  created_at: z50.string().describe("ISO 8601 creation timestamp"),
+  started_at: z50.string().nullable().describe("ISO 8601 start timestamp"),
+  completed_at: z50.string().nullable().describe("ISO 8601 completion timestamp"),
+  updated_at: z50.string().describe("ISO 8601 last-modified timestamp")
+});
+var automationEntrypointRunsListApiSchema = z50.object({
+  runs: z50.array(automationEntrypointRunApiSchema).describe("Entrypoint runs, newest first"),
+  total: z50.int().describe("Total entrypoint runs matching the query"),
+  limit: z50.int().describe("Page size used"),
+  offset: z50.int().describe("Offset used")
+});
+var automationRunChainNodeApiSchema = z50.object({
+  id: z50.guid().describe("Agent run ID"),
+  agent_id: z50.guid().describe("Agent that ran"),
+  build_id: z50.guid().describe("Build the run executed"),
+  agent_name: z50.string().nullable().describe("Display name of the agent"),
+  automation_revision_id: z50.guid().nullable().describe("Revision the run was pinned to (null for legacy runs)"),
+  parent_agent_run_id: z50.guid().nullable().describe(
+    "Run that directly caused this run (null for the entrypoint run)"
+  ),
+  parent_relationship: z50.string().nullable().describe(
+    "Why this run was created from its parent (produced_case, handover, retry, \u2026)"
+  ),
+  status: agentRunStatusSchema.describe("Run status"),
+  source: z50.string().nullable().describe("How the run was started"),
+  case_queue_item_id: z50.guid().nullable().describe(
+    "Case this run claimed, when it was triggered by claiming one (nests the run under that case in the tree)"
+  ),
+  eval_summaries: evalSummarySchema.nullable().describe("Evaluation summary for the run, when available"),
+  created_at: z50.string().describe("ISO 8601 creation timestamp"),
+  started_at: z50.string().nullable().describe("ISO 8601 start timestamp"),
+  completed_at: z50.string().nullable().describe("ISO 8601 completion timestamp")
+});
+var automationRunChainCaseNodeApiSchema = z50.object({
+  id: z50.guid().describe("Case (case_queue_item) ID"),
+  title: z50.string().nullable().describe("Case title"),
+  queue_id: z50.guid().describe("Queue the case belongs to"),
+  queue_name: z50.string().nullable().describe("Display name of the queue the case was added to"),
+  status: z50.enum([
+    "pending",
+    "in_progress",
+    "needs_input",
+    "postponed",
+    "completed",
+    "failed"
+  ]).describe("Derived case display status"),
+  producer_run_id: z50.guid().describe("Run that produced this case \u2014 its parent in the tree"),
+  created_at: z50.string().describe("ISO 8601 creation timestamp")
+});
+var automationRunChainResponseApiSchema = z50.object({
+  entrypoint_run_id: z50.guid().describe(
+    "The chain's entrypoint run \u2014 resolved from the requested run, which may be any run in the chain"
+  ),
+  runs: z50.array(automationRunChainNodeApiSchema).describe("All runs in the chain, oldest first"),
+  cases: z50.array(automationRunChainCaseNodeApiSchema).describe(
+    "Cases produced by runs in the chain, each nested under its producer run"
+  ),
+  truncated: z50.boolean().describe(
+    "True when the chain exceeded the server cap and only the first runs are returned, so the rendered tree is incomplete"
+  )
+});
 var BROWSER_EGRESS_MODES = [
   "provider",
   "direct",
@@ -9706,6 +9947,10 @@ var caseQueueSchema = z60.object({
   // Optional (additive) so existing CaseQueue consumers and fixtures across the
   // FE/CLI don't break; the backend always populates it on real responses.
   automation_id: z60.guid().nullable().optional(),
+  // Optional (additive), populated by the get-queue route. Consumers use it to
+  // confirm a queue belongs to the acting team before building team-scoped
+  // links (e.g. the automation-shell redirect resolver).
+  team_id: z60.string().nullable().optional(),
   created_at: z60.string(),
   /**
    * True when at least one case in this queue has ever had an approval
@@ -9973,6 +10218,11 @@ var FEATURE_FLAG_CATALOGUE = {
     defaultValue: false,
     description: "Enables the Clarity meeting notetaker (Recall.ai bot). When disabled, the 'Meeting Notetaker' option is hidden in the Add Content menu and the POST /clarity/processes/:id/captures/meeting invite route returns 404; the Recall webhook callback is unaffected. Off-by-default for staged rollout."
   },
+  CLARITY_REALTIME_SDP_PROXY: {
+    key: "clarity_realtime_sdp_proxy",
+    defaultValue: false,
+    description: "Routes the Clarity interview WebRTC signaling (SDP offer/answer exchange) through the Duvo backend instead of the browser calling api.openai.com directly, so interviews can start on corporate networks that domain-block OpenAI. Voice/screen media still flows browser-to-OpenAI over WebRTC. Off-by-default for staged rollout; does not help networks that block UDP (those need a TURN relay)."
+  },
   CLARITY_SIGNAVIO_SWIMLANES_EXPORT: {
     key: "clarity_signavio_swimlanes_export",
     defaultValue: false,
@@ -10058,6 +10308,11 @@ var FEATURE_FLAG_CATALOGUE = {
     defaultValue: false,
     description: "Enables portfolio intelligence analysis in the Clarity sidebar, providing cross-process insights and recommendations."
   },
+  PULSE_SCHEDULED_REFRESH: {
+    key: "pulse_scheduled_refresh",
+    defaultValue: false,
+    description: "Enables Pulse scheduled background auto-refresh: the Auto-refresh menu in the Pulse header, the `refresh_frequency` field on PATCH /artifacts/:id, and dispatching by the scheduled-refresh cron (already-armed schedules pause while off). The manual Refresh data button is unaffected. Off-by-default for staged rollout."
+  },
   SHARED_CONNECTIONS: {
     key: "shared_connections",
     defaultValue: false,
@@ -11389,6 +11644,53 @@ function deriveHostnameFromInput(input) {
 }
 __name(deriveHostnameFromInput, "deriveHostnameFromInput");
 __name2(deriveHostnameFromInput, "deriveHostnameFromInput");
+function isHostLikeIdentifier(value) {
+  const host = deriveHostnameFromInput(value);
+  if (!host) {
+    return false;
+  }
+  if (/\s/.test(host)) {
+    return false;
+  }
+  return host.includes(".") || host === "localhost";
+}
+__name(isHostLikeIdentifier, "isHostLikeIdentifier");
+__name2(isHostLikeIdentifier, "isHostLikeIdentifier");
+function normalizeAppName(value) {
+  return value.trim().toLowerCase().replace(/\s+/g, " ");
+}
+__name(normalizeAppName, "normalizeAppName");
+__name2(normalizeAppName, "normalizeAppName");
+function normalizeCredentialIdentifier(input) {
+  const trimmed = (input || "").trim();
+  if (!trimmed) {
+    return "";
+  }
+  return isHostLikeIdentifier(trimmed) ? deriveDomain(trimmed) : trimmed;
+}
+__name(normalizeCredentialIdentifier, "normalizeCredentialIdentifier");
+__name2(normalizeCredentialIdentifier, "normalizeCredentialIdentifier");
+function identifiersMatch(a, b) {
+  if (!a || !b) {
+    return false;
+  }
+  const aIsHost = isHostLikeIdentifier(a);
+  const bIsHost = isHostLikeIdentifier(b);
+  if (aIsHost && bIsHost) {
+    const hostA = deriveDomain(a);
+    const hostB = deriveDomain(b);
+    if (!hostA || !hostB) {
+      return false;
+    }
+    return hostA === hostB || hostA.endsWith(`.${hostB}`) || hostB.endsWith(`.${hostA}`);
+  }
+  if (!aIsHost && !bIsHost) {
+    return normalizeAppName(a) === normalizeAppName(b);
+  }
+  return false;
+}
+__name(identifiersMatch, "identifiersMatch");
+__name2(identifiersMatch, "identifiersMatch");
 var AGENT_MENTION_REGEX_SOURCE = `<DUVO:AGENT\\s+id="((?:[^"\\\\]|\\\\.)*)"\\s+name="((?:[^"\\\\]|\\\\.)*)">`;
 function unescapeAttrValue(value) {
   return value.replace(/\\(.)/g, "$1");
@@ -16198,7 +16500,6 @@ var integrationSchema = z89.object({
   server_url: z89.string().optional(),
   transport_type: z89.string().optional(),
   auth_method: z89.string().nullish(),
-  composio_mcp_id: z89.string().nullish(),
   custom_integration_id: z89.string().nullish(),
   icon_url: z89.string().nullish(),
   oauth_provider: z89.string().nullish(),
@@ -21319,7 +21620,8 @@ var processSummarySchema = z99.object({
   id: z99.string(),
   name: z99.string()
 }).passthrough();
-var landscapeNodeSchema = z99.object({
+var landscapeFullNodeSchema = z99.object({
+  access: z99.literal("full").default("full"),
   id: z99.string(),
   parentId: z99.string().nullable(),
   processId: z99.string().nullable(),
@@ -21327,6 +21629,18 @@ var landscapeNodeSchema = z99.object({
   ownerLabel: z99.string().nullable(),
   process: processSummarySchema.nullable()
 }).passthrough();
+var landscapeRedactedNodeSchema = z99.object({
+  access: z99.literal("redacted"),
+  hint: z99.literal("restricted_process"),
+  id: z99.string(),
+  parentId: z99.string().nullable(),
+  sortOrder: z99.number(),
+  depth: z99.number()
+}).strict();
+var landscapeNodeSchema = z99.union([
+  landscapeFullNodeSchema,
+  landscapeRedactedNodeSchema
+]);
 var unlinkedProcessSchema = processSummarySchema.extend({
   teamId: z99.string(),
   teamName: z99.string().nullable()
@@ -21408,10 +21722,14 @@ var LANDSCAPE_COLUMNS = [
     maxWidth: 36
   },
   { header: "TYPE", cell: getLandscapeNodeType },
-  { header: "NAME", cell: /* @__PURE__ */ __name((row) => row.name, "cell"), maxWidth: 28 },
+  {
+    header: "NAME",
+    cell: /* @__PURE__ */ __name((row) => row.access === "redacted" ? "Restricted process" : row.name, "cell"),
+    maxWidth: 28
+  },
   {
     header: "PROCESS",
-    cell: /* @__PURE__ */ __name((row) => row.process?.name ?? "-", "cell"),
+    cell: /* @__PURE__ */ __name((row) => row.access === "redacted" ? "-" : row.process?.name ?? "-", "cell"),
     maxWidth: 28
   }
 ];
@@ -21575,7 +21893,7 @@ function registerClarityLandscape(clarity) {
     }
     renderCaptures(response, "No landscape captures found.");
   }, "capturesAction"));
-  landscape.command("propose-process").description("Propose a new process node in the Clarity process landscape").requiredOption("--name <name>", "proposed process name").option("--description <text>", "proposed process description").option("--parent <node-id>", "parent area node id").option("--org <org-id>", ORG_FLAG_DESCRIPTION).option("--json", "output JSON").action(/* @__PURE__ */ __name(async function proposeProcessAction(options) {
+  landscape.command("propose-process").description("Create a process node in the Clarity process landscape").requiredOption("--name <name>", "process name").option("--description <text>", "process description").option("--parent <node-id>", "parent area node id").option("--team <team-id>", "owning team id").option("--org <org-id>", ORG_FLAG_DESCRIPTION).option("--json", "output JSON").action(/* @__PURE__ */ __name(async function proposeProcessAction(options) {
     const config = await requireAuthenticatedConfig(this);
     const path = resolveOrgPath(this, PROPOSED_PROCESSES_RESOURCE_PATH);
     const raw = await httpRequest({
@@ -21583,10 +21901,13 @@ function registerClarityLandscape(clarity) {
       path,
       apiKey: config.apiKey,
       apiBaseUrl: config.apiBaseUrl,
-      body: buildProposeProcessBody(options)
+      body: buildProposeProcessBody({
+        ...options,
+        team: this.optsWithGlobals().team
+      })
     });
     const node = nodeResponseSchema.parse(raw);
-    renderNodeMutationResult("Proposed process", node, options);
+    renderNodeMutationResult("Process created", node, options);
   }, "proposeProcessAction"));
 }
 __name(registerClarityLandscape, "registerClarityLandscape");
@@ -21632,7 +21953,8 @@ function buildProposeProcessBody(options) {
   return {
     name: options.name,
     ...options.description !== void 0 ? { description: options.description } : {},
-    ...options.parent !== void 0 ? { parentId: options.parent } : {}
+    ...options.parent !== void 0 ? { parentId: options.parent } : {},
+    ...options.team !== void 0 ? { teamId: options.team } : {}
   };
 }
 __name(buildProposeProcessBody, "buildProposeProcessBody");
@@ -21758,6 +22080,9 @@ function renderNodeMutationResult(label, node, options) {
 }
 __name(renderNodeMutationResult, "renderNodeMutationResult");
 function searchableLandscapeNodeText(node) {
+  if (node.access === "redacted") {
+    return [node.id, node.parentId ?? ""];
+  }
   return [
     node.id,
     node.parentId ?? "",
@@ -21770,6 +22095,9 @@ function searchableLandscapeNodeText(node) {
 }
 __name(searchableLandscapeNodeText, "searchableLandscapeNodeText");
 function getLandscapeNodeType(node) {
+  if (node.access === "redacted") {
+    return PROCESS_NODE_TYPE;
+  }
   return node.processId ? PROCESS_NODE_TYPE : AREA_NODE_TYPE;
 }
 __name(getLandscapeNodeType, "getLandscapeNodeType");
@@ -22395,6 +22723,7 @@ var processLinkSchema = z101.object({
   type: processLinkTypeSchema,
   state: processLinkStateSchema,
   confidence: z101.number().nullable(),
+  rationale: z101.string().nullable().default(null),
   created_at: z101.string(),
   updated_at: z101.string()
 });
@@ -22428,6 +22757,11 @@ var PROCESS_LINK_COLUMNS = [
   {
     header: "CONF",
     cell: /* @__PURE__ */ __name((row) => row.confidence === null ? "-" : row.confidence.toFixed(2), "cell")
+  },
+  {
+    header: "RATIONALE",
+    cell: /* @__PURE__ */ __name((row) => row.rationale ?? "-", "cell"),
+    maxWidth: 60
   }
 ];
 function registerClarityProcessLinks(clarity) {
@@ -22594,6 +22928,9 @@ function renderProcessLinks(response) {
     return;
   }
   console.log(renderTable(PROCESS_LINK_COLUMNS, response.process_links));
+  console.log(
+    "Source and target nodes can belong to different teams in this organization."
+  );
   console.log("");
   console.log(
     `Showing ${response.process_links.length} of ${response.total} \xB7 offset ${response.offset}`
@@ -23836,10 +24173,7 @@ function registerConnectionsUpdate(connections) {
       ...previous ?? [],
       value
     ]
-  ).option("--clear-headers", "remove all configured headers").option("--composio-mcp-id <id>", "associate a Composio MCP server ID").option(
-    "--clear-composio-mcp-id",
-    "remove the Composio MCP server association"
-  ).option("--share", "share this connection with the team (manager+ only)").option("--unshare", "revert this connection to personal").option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function updateAction(id, options) {
+  ).option("--clear-headers", "remove all configured headers").option("--share", "share this connection with the team (manager+ only)").option("--unshare", "revert this connection to personal").option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function updateAction(id, options) {
     if (options.share && options.unshare) {
       throw new CliError("Pass either --share or --unshare, not both.");
     }
@@ -23848,11 +24182,6 @@ function registerConnectionsUpdate(connections) {
         "Pass either --clear-headers or --header / --secret-header, not both."
       );
     }
-    if (options.composioMcpId !== void 0 && Boolean(options.clearComposioMcpId)) {
-      throw new CliError(
-        "Pass either --composio-mcp-id or --clear-composio-mcp-id, not both."
-      );
-    }
     const body = {};
     if (options.name !== void 0) {
       const trimmed = options.name.trim();
@@ -23891,15 +24220,6 @@ function registerConnectionsUpdate(connections) {
       }
       body.headers = headers;
     }
-    if (options.composioMcpId !== void 0) {
-      const trimmed = options.composioMcpId.trim();
-      if (trimmed.length === 0) {
-        throw new CliError("--composio-mcp-id must not be empty");
-      }
-      body.composio_mcp_id = trimmed;
-    } else if (options.clearComposioMcpId) {
-      body.composio_mcp_id = null;
-    }
     if (options.share) {
       body.shared = true;
     } else if (options.unshare) {
@@ -23907,7 +24227,7 @@ function registerConnectionsUpdate(connections) {
     }
     if (Object.keys(body).length === 0) {
       throw new CliError(
-        "Provide at least one field to update (--name, --server-url, --auth-method, --header, --secret-header, --clear-headers, --composio-mcp-id, --clear-composio-mcp-id, --share, --unshare)."
+        "Provide at least one field to update (--name, --server-url, --auth-method, --header, --secret-header, --clear-headers, --share, --unshare)."
       );
     }
     const { apiKey, apiBaseUrl } = await requireAuthenticatedConfig(this);
@@ -25574,184 +25894,6 @@ async function revokeOAuthProfile(profile) {
 }
 __name(revokeOAuthProfile, "revokeOAuthProfile");
 
-// src/commands/oauth/composio/connect.ts
-function registerOauthComposioConnect(composio) {
-  composio.command("connect").description(
-    "Finalize a Composio-backed connection after the start step has produced a connected_account_id."
-  ).requiredOption(
-    "--app <slug>",
-    "Composio app slug (e.g. 'slack', 'googlesheets')"
-  ).requiredOption(
-    "--name <name>",
-    "human-readable name to display for the connection"
-  ).requiredOption(
-    "--connected-account-id <id>",
-    "Composio connected-account ID returned by `duvo oauth composio start`"
-  ).option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function connectComposioAction(options) {
-    const config = await requireAuthenticatedConfig(this);
-    const { apiKey, apiBaseUrl } = config;
-    const teamId = await resolveRequiredTeamId(config, {
-      override: getTeamFlag(this)
-    });
-    if (!options.app || options.app.trim().length === 0) {
-      throw new CliError("--app must not be empty");
-    }
-    if (!options.name || options.name.trim().length === 0) {
-      throw new CliError("--name must not be empty");
-    }
-    if (!options.connectedAccountId || options.connectedAccountId.trim().length === 0) {
-      throw new CliError("--connected-account-id must not be empty");
-    }
-    const body = {
-      app: options.app.trim(),
-      integration_name: options.name.trim(),
-      connected_account_id: options.connectedAccountId.trim()
-    };
-    const raw = await httpRequest({
-      method: "POST",
-      path: buildTeamPath(teamId, "/connections/composio/finalize"),
-      apiKey,
-      apiBaseUrl,
-      body
-    });
-    if (options.json) {
-      printJson(raw);
-      return;
-    }
-    const parsed = connectIntegrationResponseSchema.safeParse(raw);
-    if (!parsed.success) {
-      throw new CliError(
-        `Unexpected response from the API: ${parsed.error.message}`
-      );
-    }
-    const { integration_id, mcp_url } = parsed.data;
-    console.log(green("Connection created!"));
-    console.log();
-    console.log(
-      renderKeyValue([
-        { label: "Integration ID", value: integration_id },
-        { label: "MCP URL", value: mcp_url }
-      ])
-    );
-  }, "connectComposioAction"));
-}
-__name(registerOauthComposioConnect, "registerOauthComposioConnect");
-
-// src/commands/oauth/composio/start.ts
-function collectKeyValue(value, previous) {
-  return [...previous, value];
-}
-__name(collectKeyValue, "collectKeyValue");
-function parseAuthFields(raw) {
-  if (!raw || raw.length === 0) {
-    return void 0;
-  }
-  const result = {};
-  for (const entry of raw) {
-    const index = entry.indexOf("=");
-    if (index <= 0) {
-      throw new CliError(
-        `--auth-field must be in KEY=VALUE format (got "${entry}")`
-      );
-    }
-    const key = entry.slice(0, index).trim();
-    const value = entry.slice(index + 1);
-    if (key.length === 0) {
-      throw new CliError(`--auth-field key must not be empty (got "${entry}")`);
-    }
-    result[key] = value;
-  }
-  return result;
-}
-__name(parseAuthFields, "parseAuthFields");
-function registerOauthComposioStart(composio) {
-  composio.command("start").description(
-    "Start a Composio-backed OAuth connection. Returns a redirect URL to open in a browser; afterwards run `duvo oauth composio connect` to finalize."
-  ).requiredOption(
-    "--auth-config <id>",
-    "Composio auth-config ID for the toolkit"
-  ).requiredOption(
-    "--callback-url <url>",
-    "where to send the user's browser after they finish the Composio consent screen"
-  ).option(
-    "--auth-scheme <scheme>",
-    "Composio auth scheme (e.g. OAUTH2, API_KEY, BEARER_TOKEN); required when using --auth-field"
-  ).option(
-    "--auth-field <key=value>",
-    "auth field for non-OAuth schemes; repeat for multiple",
-    collectKeyValue,
-    []
-  ).option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function startComposioAction(options) {
-    const config = await requireAuthenticatedConfig(this);
-    const { apiKey, apiBaseUrl } = config;
-    const teamId = await resolveRequiredTeamId(config, {
-      override: getTeamFlag(this)
-    });
-    if (!options.authConfig || options.authConfig.trim().length === 0) {
-      throw new CliError("--auth-config must not be empty");
-    }
-    if (!options.callbackUrl || options.callbackUrl.trim().length === 0) {
-      throw new CliError("--callback-url must not be empty");
-    }
-    const authFields = parseAuthFields(options.authField);
-    const trimmedAuthScheme = options.authScheme?.trim();
-    if (authFields && !trimmedAuthScheme) {
-      throw new CliError(
-        "--auth-scheme is required when --auth-field is provided"
-      );
-    }
-    const body = {
-      auth_config_id: options.authConfig.trim(),
-      callback_url: options.callbackUrl.trim()
-    };
-    if (options.authScheme !== void 0) {
-      if (trimmedAuthScheme === void 0 || trimmedAuthScheme.length === 0) {
-        throw new CliError("--auth-scheme must not be empty");
-      }
-      body.auth_scheme = trimmedAuthScheme;
-    }
-    if (authFields) {
-      body.auth_fields = authFields;
-    }
-    const raw = await httpRequest({
-      method: "POST",
-      path: buildTeamPath(teamId, "/connections/composio/start"),
-      apiKey,
-      apiBaseUrl,
-      body
-    });
-    if (options.json) {
-      printJson(raw);
-      return;
-    }
-    const parsed = startComposioConnectionResponseSchema.safeParse(raw);
-    if (!parsed.success) {
-      throw new CliError(
-        `Unexpected response from the API: ${parsed.error.message}`
-      );
-    }
-    const { redirect_url, status, connected_account_id } = parsed.data;
-    console.log(
-      renderKeyValue([
-        { label: "Connected Account ID", value: connected_account_id },
-        { label: "Status", value: status ?? "" },
-        { label: "Redirect URL", value: redirect_url ?? "" }
-      ])
-    );
-  }, "startComposioAction"));
-}
-__name(registerOauthComposioStart, "registerOauthComposioStart");
-
-// src/commands/oauth/composio/index.ts
-function registerOauthComposio(oauth) {
-  const composio = oauth.command("composio").description(
-    "Composio-backed OAuth flows. Run `start` to get a redirect URL, then `connect` to finalize."
-  );
-  registerOauthComposioStart(composio);
-  registerOauthComposioConnect(composio);
-}
-__name(registerOauthComposio, "registerOauthComposio");
-
 // src/commands/oauth/mcp/authorize.ts
 function registerOauthMcpAuthorize(mcp) {
   mcp.command("authorize").description(
@@ -25876,10 +26018,10 @@ function registerOauthMcpCheck(mcp) {
 __name(registerOauthMcpCheck, "registerOauthMcpCheck");
 
 // src/commands/oauth/mcp/probe.ts
-function collectKeyValue2(value, previous) {
+function collectKeyValue(value, previous) {
   return [...previous, value];
 }
-__name(collectKeyValue2, "collectKeyValue");
+__name(collectKeyValue, "collectKeyValue");
 function parseHeaders(raw) {
   if (!raw || raw.length === 0) {
     return void 0;
@@ -25912,7 +26054,7 @@ function registerOauthMcpProbe(mcp) {
   ).option(
     "--header <key=value>",
     "optional HTTP header for authentication; repeat for multiple",
-    collectKeyValue2,
+    collectKeyValue,
     []
   ).option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function probeMcpAction(url, options) {
     const trimmedUrl = url.trim();
@@ -26046,7 +26188,6 @@ __name(registerOauthNative, "registerOauthNative");
 function registerOauth(program) {
   const oauth = program.command("oauth").description("Start and probe OAuth flows for Duvo connections");
   registerOauthNative(oauth);
-  registerOauthComposio(oauth);
   registerOauthMcp(oauth);
 }
 __name(registerOauth, "registerOauth");
@@ -26889,6 +27030,69 @@ function registerPulsePdf(pulse) {
 }
 __name(registerPulsePdf, "registerPulsePdf");
 
+// src/commands/pulse/refresh-schedule.ts
+var OFF = "off";
+var FREQUENCY_CHOICES = [...artifactRefreshFrequencySchema.options, OFF].join(
+  ", "
+);
+function parseFrequency2(raw) {
+  if (raw === OFF) {
+    return null;
+  }
+  const parsed = artifactRefreshFrequencySchema.safeParse(raw);
+  if (!parsed.success) {
+    throw new CliError(`--frequency must be one of: ${FREQUENCY_CHOICES}.`);
+  }
+  return parsed.data;
+}
+__name(parseFrequency2, "parseFrequency");
+function registerPulseRefreshSchedule(pulse) {
+  pulse.command("refresh-schedule <id>").description(
+    "Set how often a Pulse dashboard auto-refreshes in the background (creator only)"
+  ).requiredOption(
+    "--frequency <frequency>",
+    `the auto-refresh cadence: ${FREQUENCY_CHOICES}`
+  ).option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function refreshScheduleAction(id, options) {
+    const pulseId = trimRequired(id, "<id>");
+    const frequency = parseFrequency2(
+      trimRequired(options.frequency ?? "", "--frequency")
+    );
+    const { apiKey, apiBaseUrl } = await requireAuthenticatedConfig(this);
+    const raw = await httpRequest({
+      method: "PATCH",
+      path: `/v2/artifacts/${encodeURIComponent(pulseId)}`,
+      apiKey,
+      apiBaseUrl,
+      body: { refresh_frequency: frequency }
+    });
+    if (options.json) {
+      printJson(raw);
+      return;
+    }
+    const parsed = artifactSchema.safeParse(raw);
+    if (!parsed.success) {
+      throw new CliError(
+        `Unexpected response from the API: ${parsed.error.message}`
+      );
+    }
+    console.log(
+      frequency ? green("Pulse auto-refresh scheduled.") : green("Pulse auto-refresh turned off.")
+    );
+    console.log();
+    console.log(
+      renderKeyValue([
+        { label: "ID", value: parsed.data.id },
+        { label: "Frequency", value: parsed.data.refresh_frequency ?? OFF },
+        {
+          label: "Next refresh",
+          value: parsed.data.next_refresh_at ?? "\u2014"
+        }
+      ])
+    );
+  }, "refreshScheduleAction"));
+}
+__name(registerPulseRefreshSchedule, "registerPulseRefreshSchedule");
+
 // src/commands/pulse/refresh.ts
 function registerPulseRefresh(pulse) {
   pulse.command("refresh <id>").description(
@@ -27256,6 +27460,7 @@ function registerPulse(program) {
   registerPulseStop(pulse);
   registerPulseRefresh(pulse);
   registerPulseRename(pulse);
+  registerPulseRefreshSchedule(pulse);
   registerPulseShare(pulse);
   registerPulseDuplicate(pulse);
   registerPulseMove(pulse);
@@ -29558,7 +29763,7 @@ __name(registerSandboxes, "registerSandboxes");
 
 // src/commands/secrets/parse-key-value.ts
 var ENV_VAR_KEY_PATTERN = /^[A-Z_][A-Z0-9_]*$/;
-function collectKeyValue3(flag, raw, previous) {
+function collectKeyValue2(flag, raw, previous) {
   const equalsIndex = raw.indexOf("=");
   if (equalsIndex <= 0) {
     throw new CliError(`${flag} must be in the form KEY=VALUE (got "${raw}")`);
@@ -29578,7 +29783,7 @@ function collectKeyValue3(flag, raw, previous) {
   accumulator[key] = value;
   return accumulator;
 }
-__name(collectKeyValue3, "collectKeyValue");
+__name(collectKeyValue2, "collectKeyValue");
 function collectRename(flag, raw, previous) {
   const equalsIndex = raw.indexOf("=");
   if (equalsIndex <= 0) {
@@ -29632,7 +29837,7 @@ function registerSecretsCreate(secrets) {
   ).option("--shared", "create as team-shared (requires manager role)").requiredOption(
     "--value <KEY=VALUE>",
     "env var to store (repeat for multiple)",
-    collectKeyValue3.bind(null, "--value"),
+    collectKeyValue2.bind(null, "--value"),
     void 0
   ).option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function createAction(options) {
     const name = trimRequired(options.name ?? "", "--name");
@@ -29823,7 +30028,7 @@ function registerSecretsUpdate(secrets) {
   ).option("--name <name>", "new name").option("--service-slug <slug>", "set the service slug").option("--clear-service-slug", "remove the service slug").option("--shared", "promote to team-shared (requires manager role)").option("--personal", "demote to personal (requires manager role)").option(
     "--set <KEY=VALUE>",
     "add or overwrite an env var (repeatable)",
-    collectKeyValue3.bind(null, "--set"),
+    collectKeyValue2.bind(null, "--set"),
     void 0
   ).option(
     "--remove <KEY>",
@@ -30989,15 +31194,128 @@ function registerTeam(program) {
 }
 __name(registerTeam, "registerTeam");
 
-// src/commands/teams/list.ts
+// src/commands/teams/create-org-team.ts
 import { z as z113 } from "zod";
-var teamApiSchema2 = z113.object({
-  id: z113.string(),
-  name: z113.string(),
-  organization_id: z113.string().nullable()
+var createOrgTeamResponseSchema = z113.object({
+  id: z113.guid(),
+  name: z113.string()
+});
+function registerTeamsCreateOrgTeam(teams) {
+  teams.command("create-org-team <org-id>").description("Create a new team inside an organization you administer").requiredOption("--name <name>", "team name").option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function createOrgTeamAction(orgId, options) {
+    if (options.name === void 0 || options.name.trim().length === 0) {
+      throw new CliError("--name must not be empty");
+    }
+    const { apiKey, apiBaseUrl } = await requireAuthenticatedConfig(this);
+    const raw = await httpRequest({
+      method: "POST",
+      path: `/v2/organizations/${encodeURIComponent(orgId)}/teams`,
+      apiKey,
+      apiBaseUrl,
+      body: { name: options.name.trim() }
+    });
+    if (options.json) {
+      printJson(raw);
+      return;
+    }
+    const parsed = createOrgTeamResponseSchema.safeParse(raw);
+    if (!parsed.success) {
+      throw new CliError(
+        `Unexpected response from POST /v2/organizations/:orgId/teams: ${parsed.error.message}`
+      );
+    }
+    console.log(green("Team created!"));
+    console.log();
+    console.log(
+      renderKeyValue([
+        { label: "ID", value: parsed.data.id },
+        { label: "Name", value: parsed.data.name }
+      ])
+    );
+  }, "createOrgTeamAction"));
+}
+__name(registerTeamsCreateOrgTeam, "registerTeamsCreateOrgTeam");
+
+// src/commands/teams/invite-org-member.ts
+var ORG_ROLES2 = Object.values(ORG_ROLE);
+var DEFAULT_ROLE = ORG_ROLE.MEMBER;
+function registerTeamsInviteOrgMember(teams) {
+  teams.command("invite-org-member <org-id>").description(
+    "Invite a person to an organization, optionally onto one of its teams"
+  ).requiredOption("--email <email>", "email address of the person to invite").option(
+    "--role <role>",
+    `organization role to grant: ${ORG_ROLES2.join(", ")} (default ${DEFAULT_ROLE})`,
+    DEFAULT_ROLE
+  ).option("--team-id <id>", "assign the invitee to this team in the org").option(
+    "--frontend-url <url>",
+    "base URL used to build the invitation email link (email is skipped if omitted)"
+  ).option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function inviteOrgMemberAction(orgId, options) {
+    const email = options.email?.trim();
+    if (email === void 0 || email.length === 0) {
+      throw new CliError("--email must not be empty");
+    }
+    const role = options.role ?? DEFAULT_ROLE;
+    if (!ORG_ROLES2.includes(role)) {
+      throw new CliError(
+        `Invalid --role "${role}"; expected one of: ${ORG_ROLES2.join(", ")}`
+      );
+    }
+    const { apiKey, apiBaseUrl } = await requireAuthenticatedConfig(this);
+    const body = { email, role };
+    if (options.teamId !== void 0) {
+      const teamId = options.teamId.trim();
+      if (teamId.length === 0) {
+        throw new CliError("--team-id must not be empty");
+      }
+      body.teamId = teamId;
+    }
+    if (options.frontendUrl !== void 0) {
+      const frontendUrl = options.frontendUrl.trim();
+      if (frontendUrl.length === 0) {
+        throw new CliError("--frontend-url must not be empty");
+      }
+      body.frontendUrl = frontendUrl;
+    }
+    const raw = await httpRequest({
+      method: "POST",
+      path: `/v2/organizations/${encodeURIComponent(orgId)}/members`,
+      apiKey,
+      apiBaseUrl,
+      body
+    });
+    if (options.json) {
+      printJson(raw);
+      return;
+    }
+    const parsed = inviteOrgMemberResponseSchema.safeParse(raw);
+    if (!parsed.success) {
+      throw new CliError(
+        `Unexpected response from POST /v2/organizations/:orgId/members: ${parsed.error.message}`
+      );
+    }
+    console.log(green("Invitation created!"));
+    console.log();
+    console.log(
+      renderKeyValue([
+        { label: "Invitation ID", value: parsed.data.invitationId },
+        { label: "Email", value: email },
+        { label: "Role", value: role },
+        { label: "Team", value: body.teamId ?? "\u2014" },
+        { label: "Email sent", value: parsed.data.emailSent ? "yes" : "no" }
+      ])
+    );
+  }, "inviteOrgMemberAction"));
+}
+__name(registerTeamsInviteOrgMember, "registerTeamsInviteOrgMember");
+
+// src/commands/teams/list.ts
+import { z as z114 } from "zod";
+var teamApiSchema2 = z114.object({
+  id: z114.string(),
+  name: z114.string(),
+  organization_id: z114.string().nullable()
 });
-var listMyTeamsResponseSchema3 = z113.object({
-  teams: z113.array(teamApiSchema2)
+var listMyTeamsResponseSchema3 = z114.object({
+  teams: z114.array(teamApiSchema2)
 });
 function registerTeamsList(teams) {
   teams.command("list", { isDefault: true }).description("List every team you can act on").option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function listAction(options) {
@@ -31040,21 +31358,21 @@ function registerTeamsList(teams) {
 __name(registerTeamsList, "registerTeamsList");
 
 // src/commands/teams/org-insights.ts
-import { z as z114 } from "zod";
-var headlineSchema = z114.object({
-  total_runs: z114.number(),
-  completed_runs: z114.number(),
-  failed_runs: z114.number(),
-  success_rate: z114.number().nullable(),
-  active_agents: z114.number(),
-  active_users: z114.number(),
-  start_date: z114.string(),
-  end_date: z114.string(),
-  truncated: z114.boolean(),
-  aggregated_teams: z114.number(),
-  total_teams: z114.number()
-});
-var orgInsightsHeadlineResponseSchema = z114.object({
+import { z as z115 } from "zod";
+var headlineSchema = z115.object({
+  total_runs: z115.number(),
+  completed_runs: z115.number(),
+  failed_runs: z115.number(),
+  success_rate: z115.number().nullable(),
+  active_agents: z115.number(),
+  active_users: z115.number(),
+  start_date: z115.string(),
+  end_date: z115.string(),
+  truncated: z115.boolean(),
+  aggregated_teams: z115.number(),
+  total_teams: z115.number()
+});
+var orgInsightsHeadlineResponseSchema = z115.object({
   headline: headlineSchema
 });
 function formatRate(rate) {
@@ -31122,26 +31440,26 @@ function registerTeamsOrgInsights(teams) {
 __name(registerTeamsOrgInsights, "registerTeamsOrgInsights");
 
 // src/commands/teams/org-metrics.ts
-import { z as z115 } from "zod";
-var teamMetricSchema = z115.object({
-  team_id: z115.string(),
-  team_name: z115.string(),
-  is_deleted: z115.boolean(),
-  member_count: z115.number(),
-  assignment_count: z115.number(),
-  scheduled_job_count: z115.number(),
-  total_jobs: z115.number(),
-  completed_jobs: z115.number(),
-  failed_jobs: z115.number(),
-  total_runs: z115.number()
-});
-var orgInsightsMetricsResponseSchema = z115.object({
-  teams: z115.array(teamMetricSchema),
-  start_date: z115.string(),
-  end_date: z115.string(),
-  truncated: z115.boolean(),
-  total_teams: z115.number(),
-  org_member_count: z115.number()
+import { z as z116 } from "zod";
+var teamMetricSchema = z116.object({
+  team_id: z116.string(),
+  team_name: z116.string(),
+  is_deleted: z116.boolean(),
+  member_count: z116.number(),
+  assignment_count: z116.number(),
+  scheduled_job_count: z116.number(),
+  total_jobs: z116.number(),
+  completed_jobs: z116.number(),
+  failed_jobs: z116.number(),
+  total_runs: z116.number()
+});
+var orgInsightsMetricsResponseSchema = z116.object({
+  teams: z116.array(teamMetricSchema),
+  start_date: z116.string(),
+  end_date: z116.string(),
+  truncated: z116.boolean(),
+  total_teams: z116.number(),
+  org_member_count: z116.number()
 });
 function registerTeamsOrgMetrics(teams) {
   teams.command("org-metrics <org-id>").description("Show per-team run metrics across an organization").option("--start-date <date>", "window start (ISO 8601, default 7d ago)").option("--end-date <date>", "window end (ISO 8601, default now)").option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function orgMetricsAction(orgId, options) {
@@ -31204,20 +31522,20 @@ ${total_teams} teams${suffix} \xB7 ${org_member_count} org members`
 __name(registerTeamsOrgMetrics, "registerTeamsOrgMetrics");
 
 // src/commands/teams/org-usage.ts
-import { z as z116 } from "zod";
+import { z as z117 } from "zod";
 var GRANULARITIES = ["day", "week", "month"];
 var DEFAULT_LOOKBACK_MS = 30 * 24 * 60 * 60 * 1e3;
-var bucketSchema = z116.object({
-  period: z116.string(),
-  total_runs: z116.number(),
-  scheduled_runs: z116.number(),
-  on_demand_runs: z116.number()
-});
-var usageChartResponseSchema = z116.object({
-  buckets: z116.array(bucketSchema),
-  granularity: z116.enum(GRANULARITIES),
-  truncated: z116.boolean(),
-  total_teams: z116.number()
+var bucketSchema = z117.object({
+  period: z117.string(),
+  total_runs: z117.number(),
+  scheduled_runs: z117.number(),
+  on_demand_runs: z117.number()
+});
+var usageChartResponseSchema = z117.object({
+  buckets: z117.array(bucketSchema),
+  granularity: z117.enum(GRANULARITIES),
+  truncated: z117.boolean(),
+  total_teams: z117.number()
 });
 function registerTeamsOrgUsage(teams) {
   teams.command("org-usage <org-id>").description("Show org-wide run volume over time (scheduled vs on-demand)").option("--start-date <date>", "window start (ISO 8601, default 30d ago)").option("--end-date <date>", "window end (ISO 8601, default now)").option(
@@ -31276,17 +31594,17 @@ function registerTeamsOrgUsage(teams) {
 __name(registerTeamsOrgUsage, "registerTeamsOrgUsage");
 
 // src/commands/teams/org.ts
-import { z as z117 } from "zod";
-var orgTeamSchema = z117.object({
-  id: z117.string(),
-  name: z117.string(),
-  userIsMember: z117.boolean(),
-  userRole: z117.string().nullable(),
-  memberCount: z117.number()
+import { z as z118 } from "zod";
+var orgTeamSchema = z118.object({
+  id: z118.string(),
+  name: z118.string(),
+  userIsMember: z118.boolean(),
+  userRole: z118.string().nullable(),
+  memberCount: z118.number()
 });
-var listOrgTeamsResponseSchema = z117.object({
-  teams: z117.array(orgTeamSchema),
-  total: z117.number()
+var listOrgTeamsResponseSchema = z118.object({
+  teams: z118.array(orgTeamSchema),
+  total: z118.number()
 });
 function registerTeamsOrg(teams) {
   teams.command("org <org-id>").description("List all teams in an organization you belong to").option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function orgAction(orgId, options) {
@@ -31328,17 +31646,17 @@ function registerTeamsOrg(teams) {
 __name(registerTeamsOrg, "registerTeamsOrg");
 
 // src/commands/teams/orgs.ts
-import { z as z118 } from "zod";
-var orgMembershipSchema = z118.object({
-  organization: z118.object({
-    id: z118.string(),
-    name: z118.string()
+import { z as z119 } from "zod";
+var orgMembershipSchema = z119.object({
+  organization: z119.object({
+    id: z119.string(),
+    name: z119.string()
   }),
-  role: z118.string(),
-  memberCount: z118.number()
+  role: z119.string(),
+  memberCount: z119.number()
 });
-var listMyOrganizationsResponseSchema = z118.object({
-  memberships: z118.array(orgMembershipSchema)
+var listMyOrganizationsResponseSchema = z119.object({
+  memberships: z119.array(orgMembershipSchema)
 });
 function registerTeamsOrgs(teams) {
   teams.command("orgs").description("List the organizations you belong to and your role in each").option("--json", "output raw JSON from the API").action(/* @__PURE__ */ __name(async function orgsAction(options) {
@@ -31384,6 +31702,8 @@ function registerTeams(program) {
   registerTeamsList(teams);
   registerTeamsOrg(teams);
   registerTeamsOrgs(teams);
+  registerTeamsCreateOrgTeam(teams);
+  registerTeamsInviteOrgMember(teams);
   registerTeamsOrgInsights(teams);
   registerTeamsOrgMetrics(teams);
   registerTeamsOrgUsage(teams);
@@ -31443,7 +31763,7 @@ __name(resolveActiveTeamId, "resolveActiveTeamId");
 var version = resolveVersion();
 function resolveVersion() {
   if (true) {
-    return "1.27.0";
+    return "1.30.0";
   }
   const packageJsonPath = join3(
     dirname3(fileURLToPath2(import.meta.url)),
@@ -31637,7 +31957,7 @@ function isNewerVersion(candidate, current) {
 __name(isNewerVersion, "isNewerVersion");
 function loadPackageMeta() {
   if (true) {
-    return { name: "@duvoai/cli", version: "1.27.0" };
+    return { name: "@duvoai/cli", version: "1.30.0" };
   }
   const require2 = createRequire(import.meta.url);
   const raw = require2("../package.json");