@duvoai/cli 1.91.0 → 1.92.0

package/dist/bin/duvo.js

@@ -127,6 +127,9 @@ __name2(readCopilotStepType, "readCopilotStepType");
 var errorSchema = z22.object({
   error: z22.string()
 });
+var codedErrorSchema = errorSchema.extend({
+  code: z22.string().optional()
+});
 function extensibleEnum(values, meta = {}) {
   return z3.enum(values).meta({
     ...meta,
@@ -7575,11 +7578,10 @@ var ORG_ROLE = {
    * A guest's reach is deliberately identical to a team member holding no
    * membership row at all, with two exceptions. The organization appears in
    * their switcher (`/organizations/mine` is self-scoped and ungated), where
-   * the row is rendered inert. Clarity landscape writes accept a guest whose
-   * team role allows them: placing their own team's work into the shared area
-   * structure, and adding areas as a team Manager
-   * (`ORG_ROLES_WITH_TEAM_MEMBERSHIP` in
-   * backend-node/src/modules/clarity-hierarchy/access.ts).
+   * the row is rendered inert. Clarity landscape targets owned by one of their
+   * teams are decided on the team role alone (`resolveLandscapeEditScope` in
+   * backend-node/src/modules/clarity-hierarchy/access.ts), and the org reads in
+   * {@link ORG_ROLES.TEAM_MEMBER_READS} include them.
    * See specs/org-owned-resources/PHASE_0_PLAN.md.
    */
   GUEST: "organization:guest"
@@ -7625,6 +7627,18 @@ var ORG_ROLES = {
     ORG_ROLE.ADMIN,
     ORG_ROLE.MEMBER
   ],
+  /**
+   * Org reads a team-only member (`GUEST`) needs to work in their teams: the
+   * org logo in the switcher and the connection-sharing settings that decide
+   * what their team's Connections pages offer. Org-wide data stays on `ALL`.
+   */
+  TEAM_MEMBER_READS: [
+    ORG_ROLE.EXECUTIVE,
+    ORG_ROLE.OWNER,
+    ORG_ROLE.ADMIN,
+    ORG_ROLE.MEMBER,
+    ORG_ROLE.GUEST
+  ],
   // Org roles an SSO connection may auto-grant to every user it admits.
   // Excludes executive/owner: default_org_role is applied unconditionally to
   // every SSO login, so those tiers must never be broadly granted by config.
@@ -7890,7 +7904,6 @@ var INTEGRATION_SLUGS = [
   "exa-company-search",
   "exa-people-search",
   "deep-research",
-  "system",
   "browser-agent",
   // Deprecated: 368 teams still have catalog rows in the integration table
   "browser-agent-devtools",
@@ -7920,7 +7933,6 @@ var INTEGRATION_SLUGS = [
   "sap-ecc",
   "msteams",
   "human-in-the-loop",
-  "email-attachments-reader",
   "document-processor",
   "google-docs",
   "google-sheets",
@@ -7995,6 +8007,20 @@ function isSupervisedModeIncompatibleIntegration(slug) {
 }
 __name(isSupervisedModeIncompatibleIntegration, "isSupervisedModeIncompatibleIntegration");
 __name2(isSupervisedModeIncompatibleIntegration, "isSupervisedModeIncompatibleIntegration");
+var RETIRED_INTEGRATION_SLUGS = [
+  "system",
+  "email-attachments-reader"
+];
+var RETIRED_INTEGRATION_TYPES = RETIRED_INTEGRATION_SLUGS;
+function isRetiredIntegrationSlug(value) {
+  return RETIRED_INTEGRATION_TYPES.includes(value);
+}
+__name(isRetiredIntegrationSlug, "isRetiredIntegrationSlug");
+__name2(isRetiredIntegrationSlug, "isRetiredIntegrationSlug");
+var IntegrationSlugRequestSchema = z24.enum([
+  ...INTEGRATION_SLUGS,
+  ...RETIRED_INTEGRATION_SLUGS
+]);
 var SERVER_RESOLVED_MCP_URL_SLUGS = /* @__PURE__ */ new Set([
   "sap-ecc",
   "tableau",
@@ -8199,7 +8225,7 @@ var updateIntegrationRequestSchema = z24.object({
 });
 var testIntegrationRequestSchema = z24.object({
   server_url: z24.url().optional().describe("Raw MCP server URL to probe (for custom MCP servers)"),
-  integration_slug: IntegrationSlugSchema.optional().describe(
+  integration_slug: IntegrationSlugRequestSchema.optional().describe(
     "Catalog integration slug. The backend resolves the MCP server URL and dummy auth headers server-side \u2014 no server_url or headers needed."
   ),
   headers: z24.record(z24.string(), z24.string()).optional().describe(
@@ -10900,8 +10926,10 @@ var AGENT_RUN_STATUSES = [
   // Finished successfully
   "failed",
   // Finished with error
-  "interrupted"
+  "interrupted",
   // User interrupted
+  "expired"
+  // Waited for a human longer than the organization's data retention window
 ];
 var agentRunStatusSchema = z42.enum(AGENT_RUN_STATUSES);
 var AGENT_RUN_SOURCES = [
@@ -20129,13 +20157,16 @@ var AGENT_RUN_STATUSES2 = [
   // Finished successfully
   "failed",
   // Finished with error
-  "interrupted"
+  "interrupted",
   // User interrupted
+  "expired"
+  // Waited for a human longer than the organization's data retention window
 ];
 var TERMINAL_AGENT_RUN_STATUSES = [
   "completed",
   "failed",
-  "interrupted"
+  "interrupted",
+  "expired"
 ];
 function isTerminalAgentRunStatus(status) {
   return TERMINAL_AGENT_RUN_STATUSES.includes(status);
@@ -21256,6 +21287,9 @@ var vpnConfigListResponseSchema = z192.object({
 var errorSchema2 = z202.object({
   error: z202.string()
 });
+var codedErrorSchema2 = errorSchema2.extend({
+  code: z202.string().optional()
+});
 var CONFIG_FIELD_TYPES2 = [
   "freeText",
   "identifier",
@@ -22319,7 +22353,18 @@ function validateCompound(typeConfig, value) {
     return ok();
   }
   const partOptions = getRecordOption(typeConfig, "options");
+  const optionalParts = getStringArrayOption(typeConfig, "optionalParts");
+  const partNames = Object.keys(parts);
+  const isGiven = /* @__PURE__ */ __name3((partName) => value[partName] !== void 0 && value[partName] !== null, "isGiven");
+  if (optionalParts !== null && !partNames.some(isGiven)) {
+    return fail(
+      `Expected at least one of ${partNames.map((name) => `"${name}" (${String(parts[name])})`).join(" or ")}`
+    );
+  }
   for (const [partName, partType] of Object.entries(parts)) {
+    if (optionalParts?.includes(partName) && !isGiven(partName)) {
+      continue;
+    }
     const result = validateScalar(
       partName,
       partType,
@@ -32278,15 +32323,6 @@ var INTEGRATION_DESCRIPTORS = [
     category: "duvo-platform",
     oauth_provider_id: null
   },
-  {
-    provider: "default",
-    type: "email-attachments-reader",
-    name: "Email Attachments Reader",
-    icon_url: "/integration-icons/email-attachments-reader.svg",
-    description: "Extract and process attachments from emails automatically.",
-    category: "duvo-platform",
-    oauth_provider_id: null
-  },
   {
     provider: "default",
     type: "document-processor",
@@ -32972,7 +33008,6 @@ var INTEGRATION_SLUGS2 = [
   "exa-company-search",
   "exa-people-search",
   "deep-research",
-  "system",
   "browser-agent",
   // Deprecated: 368 teams still have catalog rows in the integration table
   "browser-agent-devtools",
@@ -33002,7 +33037,6 @@ var INTEGRATION_SLUGS2 = [
   "sap-ecc",
   "msteams",
   "human-in-the-loop",
-  "email-attachments-reader",
   "document-processor",
   "google-docs",
   "google-sheets",
@@ -33078,9 +33112,22 @@ function isSupervisedModeIncompatibleIntegration2(slug) {
 }
 __name(isSupervisedModeIncompatibleIntegration2, "isSupervisedModeIncompatibleIntegration");
 __name3(isSupervisedModeIncompatibleIntegration2, "isSupervisedModeIncompatibleIntegration");
+var RETIRED_INTEGRATION_SLUGS2 = [
+  "system",
+  "email-attachments-reader"
+];
+var RETIRED_INTEGRATION_TYPES2 = RETIRED_INTEGRATION_SLUGS2;
+function isRetiredIntegrationSlug2(value) {
+  return RETIRED_INTEGRATION_TYPES2.includes(value);
+}
+__name(isRetiredIntegrationSlug2, "isRetiredIntegrationSlug");
+__name3(isRetiredIntegrationSlug2, "isRetiredIntegrationSlug");
+var IntegrationSlugRequestSchema2 = z442.enum([
+  ...INTEGRATION_SLUGS2,
+  ...RETIRED_INTEGRATION_SLUGS2
+]);
 var DEPRECATED_INTEGRATION_SLUGS = /* @__PURE__ */ new Set([
   "browser-agent",
-  "email-attachments-reader",
   "exa",
   "firecrawl",
   "linear",
@@ -33290,7 +33337,7 @@ var updateIntegrationRequestSchema2 = z442.object({
 });
 var testIntegrationRequestSchema2 = z442.object({
   server_url: z442.url().optional().describe("Raw MCP server URL to probe (for custom MCP servers)"),
-  integration_slug: IntegrationSlugSchema2.optional().describe(
+  integration_slug: IntegrationSlugRequestSchema2.optional().describe(
     "Catalog integration slug. The backend resolves the MCP server URL and dummy auth headers server-side \u2014 no server_url or headers needed."
   ),
   headers: z442.record(z442.string(), z442.string()).optional().describe(
@@ -34761,11 +34808,10 @@ var ORG_ROLE2 = {
    * A guest's reach is deliberately identical to a team member holding no
    * membership row at all, with two exceptions. The organization appears in
    * their switcher (`/organizations/mine` is self-scoped and ungated), where
-   * the row is rendered inert. Clarity landscape writes accept a guest whose
-   * team role allows them: placing their own team's work into the shared area
-   * structure, and adding areas as a team Manager
-   * (`ORG_ROLES_WITH_TEAM_MEMBERSHIP` in
-   * backend-node/src/modules/clarity-hierarchy/access.ts).
+   * the row is rendered inert. Clarity landscape targets owned by one of their
+   * teams are decided on the team role alone (`resolveLandscapeEditScope` in
+   * backend-node/src/modules/clarity-hierarchy/access.ts), and the org reads in
+   * {@link ORG_ROLES.TEAM_MEMBER_READS} include them.
    * See specs/org-owned-resources/PHASE_0_PLAN.md.
    */
   GUEST: "organization:guest"
@@ -34811,6 +34857,18 @@ var ORG_ROLES2 = {
     ORG_ROLE2.ADMIN,
     ORG_ROLE2.MEMBER
   ],
+  /**
+   * Org reads a team-only member (`GUEST`) needs to work in their teams: the
+   * org logo in the switcher and the connection-sharing settings that decide
+   * what their team's Connections pages offer. Org-wide data stays on `ALL`.
+   */
+  TEAM_MEMBER_READS: [
+    ORG_ROLE2.EXECUTIVE,
+    ORG_ROLE2.OWNER,
+    ORG_ROLE2.ADMIN,
+    ORG_ROLE2.MEMBER,
+    ORG_ROLE2.GUEST
+  ],
   // Org roles an SSO connection may auto-grant to every user it admits.
   // Excludes executive/owner: default_org_role is applied unconditionally to
   // every SSO login, so those tiers must never be broadly granted by config.
@@ -43082,6 +43140,36 @@ var applyAutomationRelocationResponseApiSchema = z1022.object({
     "What the relocation did. A retry of an applied plan returns the same result without relocating again."
   )
 });
+var mergeAutomationBodyApiSchema = z1022.object({
+  into_automation_id: z1022.guid().describe(
+    "The automation that survives the merge and receives this one's agents, queues, dashboards and declarations"
+  )
+});
+var automationMergePreviewApiSchema = z1022.object({
+  automation_id: z1022.guid().describe("The automation that will be retired"),
+  into_automation_id: z1022.guid(),
+  into_automation_name: z1022.string(),
+  agents: z1022.array(automationRelocationMemberApiSchema).describe("Agents that move into the survivor"),
+  queues: z1022.array(automationRelocationMemberApiSchema).describe("Queues that move into the survivor"),
+  dashboard_count: z1022.int().describe(
+    "Pulse dashboards that move into the survivor. A count rather than a list: some may be private to their author."
+  ),
+  trigger_count: z1022.int().describe("Trigger declarations that move with their agents"),
+  schedule_count: z1022.int().describe("Schedule declarations that move with their agents"),
+  policy_field_count: z1022.int().describe("Policy questions that move into the survivor's Policy"),
+  process_identity: z1022.enum(["none", "survivor", "moves"]).describe(
+    "Whose process identity the survivor keeps: none at all, its own, or the retired automation's, which moves to it. When both have one, the survivor keeps the one linked to a Clarity process, or its own when neither is"
+  )
+});
+var previewAutomationMergeResponseApiSchema = z1022.object({
+  merge: automationMergePreviewApiSchema
+});
+var mergeAutomationResponseApiSchema = z1022.object({
+  merge: z1022.object({
+    automation_id: z1022.guid().describe("The retired automation"),
+    merged_into_id: z1022.guid().describe("The survivor")
+  })
+});
 var BROWSER_EGRESS_MODES2 = [
   "provider",
   "direct",
@@ -44826,6 +44914,11 @@ var FEATURE_FLAG_CATALOGUE = {
     defaultValue: false,
     description: "Exposes the Automations workspace migration entry point, together with AUTOMATION_MIGRATION \u2014 the entry point needs both flags on, and this flag alone no longer shows it. When both are on, team Administrators and Owners see a 'Migrate to automations' action on the Agents page that sorts the team's standalone agents and queues into Automations (one per connected closure, via the same closure logic as the cross-team move) and stamps team.automations_migrated_at. Which conversion runs is decided by AUTOMATION_VERSIONING, not by this flag: off (the default) writes automation containers and identity FKs only, so builds, triggers and schedules keep their existing lifecycle; on, the same entry point converts straight to revision semantics and additionally stamps team.automation_revisions_migrated_at. Neither conversion can be reversed: nothing clears team.automations_migrated_at. Revision semantics are also reachable for an already-converted team through the separate phase-2 cutover. The workspace stamp \u2014 not this flag \u2014 drives the Automations sidebar entry, and a team carrying it keeps Automations access whatever this flag says: the team gate `isAutomationsEnabledForTeam`, and Modules through it, treat a migrated team as enabled, because its agents live inside automations and nothing undoes the migration, so this flag only decides access for teams that have not migrated. The one exception is the `policy-apply` chat preset, which still reads this flag directly. The migration gate resolves it for the caller, user-level overrides included, as the button does. Off-by-default for staged, per-team rollout."
   },
+  CRON_FREE_PRO_AUTOMATIONS: {
+    key: "cron_free_pro_automations",
+    defaultValue: false,
+    description: "Kill switch for the background conversion of Free and Pro teams to the lite Automations workspace. When on, the `cron-automation-auto-migration` Cloud Scheduler job (POST /v1/cron/automation-auto-migration, every 5 minutes) picks a small batch of teams with an active or trialing subscription on the Free or Pro plan that are not yet on the workspace (org-managed teams \u2014 enterprise billing, following or inheriting organization grants, or holding a sales_override grant \u2014 are left to the manual conversion), and runs the same lite conversion as POST /automations/migrate for each: agents and queues are sorted into automation containers and team.automations_migrated_at is stamped, while builds, triggers and schedules keep their legacy lifecycle. It never converts to revision semantics, and the conversion cannot be reversed. When off (the default), every tick is a no-op. The job itself ships paused in Terraform, so nothing ticks until it is unpaused there as well \u2014 this flag alone converts nothing. Resolved globally only \u2014 the cron has no user, team or organization to resolve against, so only the global override counts; a team, organization or user override has no effect. Independent of AUTOMATIONS and AUTOMATION_MIGRATION, which gate the manual entry point."
+  },
   AUTOMATION_MIGRATION: {
     key: "automation_migration",
     defaultValue: false,
@@ -44834,7 +44927,7 @@ var FEATURE_FLAG_CATALOGUE = {
   AUTOMATIONS_ON_NEW_TEAMS: {
     key: "automations_on_new_teams",
     defaultValue: false,
-    description: "Starts every newly created team on the lite Automations workspace: the team row is inserted with team.automations_migrated_at already stamped, which is all the lite conversion would write for a team with no agents or queues yet. Applies to both team creators \u2014 backend-node's createTeam (signup, onboarding, organization team create, Clarity provisioning, legacy admin) and the standalone admin's organization team create \u2014 on any plan. Resolved for the team's owner in the organization the team is created in, with no team (there is none yet): user, organization and global overrides decide it, so it can be enabled for one owner, one organization or everyone. The owner is the user creating the team in the product, and the owner an admin assigns in the admin app. Read once at creation; turning the flag off later does not move a team that already started on the workspace, since nothing clears the stamp. Independent of AUTOMATION_AUTO_MIGRATION, which converts existing teams. Off by default: new teams start standalone until it is enabled."
+    description: "Starts every newly created team on the lite Automations workspace: the team row is inserted with team.automations_migrated_at already stamped, which is all the lite conversion would write for a team with no agents or queues yet. Applies to both team creators \u2014 backend-node's createTeam (signup, onboarding, organization team create, Clarity provisioning, legacy admin) and the standalone admin's organization team create \u2014 on any plan. Resolved for the team's owner in the organization the team is created in, with no team (there is none yet): user, organization and global overrides decide it, so it can be enabled for one owner, one organization or everyone. The owner is the user creating the team in the product, and the owner an admin assigns in the admin app. Read once at creation; turning the flag off later does not move a team that already started on the workspace, since nothing clears the stamp. Independent of CRON_FREE_PRO_AUTOMATIONS, which converts existing teams. Off by default: new teams start standalone until it is enabled."
   },
   AUTOMATION_VERSIONING: {
     key: "automation_versioning",
@@ -45026,7 +45119,7 @@ var FEATURE_FLAG_CATALOGUE = {
   DECISION_MODEL_BROWSING: {
     key: "decision_model_browsing",
     defaultValue: false,
-    description: "Team/org opt-in (user-level overrides are ignored) for the `browse` tool on the Enterprise Browser (formerly `jev_browsing`; its rows were copied to this key, and the old ones are inert). When on, backend-node stamps `x-duvo-decision-model-browsing-enabled: true` on every internal MCP server it builds, and mcp-server registers `browse` (it hands a short browser sub-goal to TypeSafe's Jev model, with a one-step Claude fallback when the model is unsure); the browser prompt makes browse the default way to operate the browser. mcp-server trusts the header only from a KMS-decrypted envelope, and registers the tool only when it also holds a TYPESAFE_API_KEY, which preview, staging and production mcp-servers have (dev does not). Staging and previews share a database, so a team flagged there gets browse on both. The browse prompt section is added wherever the flag is on, and is worded to apply only when the tool is available. Page text and field values (never passwords: saved logins and {secret} values are typed only into password fields and shown to Jev as placeholders) are sent to TypeSafe (US-hosted), so enable only for teams whose data may leave Duvo's infrastructure. The flag gates new runs, not live traffic: the opt-in header is stamped into a run's MCP config at dispatch, so runs already in flight keep `browse` after the flag is cleared (and the fallback route honours a cleared flag only after a cache of up to 30 seconds). To stop live traffic to TypeSafe, remove TYPESAFE_API_KEY from mcp-server. Off by default."
+    description: "Team/org opt-in for the `browse` tool on the Enterprise Browser; user overrides are ignored. Browse sends page text and field values (never passwords) to TypeSafe in the US, so enable it only for teams whose data may leave Duvo. Applies to new runs; to stop all TypeSafe traffic, remove TYPESAFE_API_KEY from mcp-server. Staging and previews share these flags."
   },
   JIRA_CONNECTION: {
     key: "jira_connection",
@@ -46587,6 +46680,19 @@ var RedactedMcpServerConfigSchema = z135.object({
   integrationSlug: IntegrationSlugSchema2,
   instanceId: z135.string().nullable()
 });
+function isRetiredMcpServer(server) {
+  return typeof server === "object" && server !== null && "integrationSlug" in server && typeof server.integrationSlug === "string" && RETIRED_INTEGRATION_TYPES2.includes(server.integrationSlug);
+}
+__name(isRetiredMcpServer, "isRetiredMcpServer");
+__name3(isRetiredMcpServer, "isRetiredMcpServer");
+var FrozenMcpServersSchema = z135.preprocess(
+  (servers) => typeof servers === "object" && servers !== null && !Array.isArray(servers) ? Object.fromEntries(
+    Object.entries(servers).filter(
+      ([, server]) => !isRetiredMcpServer(server)
+    )
+  ) : servers,
+  z135.record(z135.string(), RedactedMcpServerConfigSchema)
+);
 var ThreadContextMessageSchema = z135.object({
   role: z135.enum(["user", "assistant"]),
   content: z135.string()
@@ -46614,7 +46720,7 @@ var RunConfigSchema = AgentConfigSchema2.omit({
   subAgents: true
 }).extend({
   task: z135.string(),
-  mcpServers: z135.record(z135.string(), RedactedMcpServerConfigSchema),
+  mcpServers: FrozenMcpServersSchema,
   /**
    * Newly created runs store `ResolvedSkillRef` entries exclusively. The
    * `string` arm exists ONLY for stored v1 rows written before skill pinning
@@ -46673,7 +46779,7 @@ var ResolvedPolicyValueSchema = z135.object({
   value: policyValueJsonSchema
 });
 var CodeStepRunConfigSchema = codeStepConfigSchema2.extend({
-  mcpServers: z135.record(z135.string(), RedactedMcpServerConfigSchema).default({}).describe(
+  mcpServers: FrozenMcpServersSchema.default({}).describe(
     "Redacted MCP server configs resolved for this run. Keyed as `<slug>` or `<slug>_<instanceId>`. Secrets resolved at call time."
   ),
   /**
@@ -51747,7 +51853,7 @@ __name(collect4, "collect");
 function registerAutomationsAddConfigField(automations) {
   automations.command("add-config-field <id>").description(
     "Add an optional Policy question to an automation; its key is derived from the label"
-  ).requiredOption("--label <label>", "short name shown as the row heading").requiredOption("--question <text>", "the question asked during setup").requiredOption(
+  ).requiredOption("--label <label>", "short name shown as the row heading").requiredOption("--question <text>", "the question asked during setup").option("--guidance <text>", "what to fill in, in plain sentences").option("--example <text>", "an example answer").requiredOption(
     "--type <type>",
     `answer type: ${CUSTOM_CONFIG_FIELD_TYPES.join(", ")}`
   ).option("--section <name>", "section to add the field to").option(
@@ -51772,6 +51878,8 @@ function registerAutomationsAddConfigField(automations) {
     const body = addConfigFieldBodySchema.safeParse({
       label: options.label,
       question: options.question,
+      guidance: options.guidance,
+      example: options.example,
       type: options.type,
       section: options.section,
       fill_mode: options.fillMode,
@@ -52306,20 +52414,20 @@ function collect5(value, previous = []) {
   return [...previous, value];
 }
 __name(collect5, "collect");
-function resolveSection(options) {
-  if (options.section !== void 0 && options.clearSection) {
-    throw new CliError("Pass either --section or --clear-section, not both.");
+function resolveClearable(value, clear, flag) {
+  if (value !== void 0 && clear) {
+    throw new CliError(`Pass either --${flag} or --clear-${flag}, not both.`);
   }
-  return options.clearSection ? null : options.section;
+  return clear ? null : value;
 }
-__name(resolveSection, "resolveSection");
+__name(resolveClearable, "resolveClearable");
 function registerAutomationsEditConfigField(automations) {
   automations.command("edit-config-field <id> <fieldId>").description(
-    "Edit a Policy question's definition (label, question, section, options, columns, type); its answer is kept"
+    "Edit a Policy question's definition (label, question, guidance, example, section, options, columns, type); its answer is kept"
   ).option("--label <label>", "new short name shown as the row heading").option(
     "--question <text>",
     "new question; a reworded one gets a new version"
-  ).option("--section <name>", "move the field to the end of this section").option("--clear-section", "move the field out of any section").option(
+  ).option("--guidance <text>", "new guidance on what to fill in").option("--clear-guidance", "remove the guidance").option("--example <text>", "new example answer").option("--clear-example", "remove the example answer").option("--section <name>", "move the field to the end of this section").option("--clear-section", "move the field out of any section").option(
     "--option <value>",
     "a choice of a select or multiSelect field; replaces the whole list (repeat for each)",
     collect5,
@@ -52336,7 +52444,21 @@ function registerAutomationsEditConfigField(automations) {
     const body = updateConfigFieldDefinitionBodySchema.safeParse({
       label: options.label,
       question: options.question,
-      section: resolveSection(options),
+      guidance: resolveClearable(
+        options.guidance,
+        options.clearGuidance,
+        "guidance"
+      ),
+      example: resolveClearable(
+        options.example,
+        options.clearExample,
+        "example"
+      ),
+      section: resolveClearable(
+        options.section,
+        options.clearSection,
+        "section"
+      ),
       options: options.option.length > 0 ? options.option : void 0,
       columns: options.column.length > 0 ? options.column : void 0,
       type: options.type
@@ -78314,7 +78436,7 @@ __name(isStandaloneBinary, "isStandaloneBinary");
 import { createRequire } from "node:module";
 function getPackageMeta() {
   if (true) {
-    return { name: "@duvoai/cli", version: "1.91.0" };
+    return { name: "@duvoai/cli", version: "1.92.0" };
   }
   const require2 = createRequire(import.meta.url);
   const raw = require2("../../package.json");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@duvoai/cli",
-  "version": "1.91.0",
+  "version": "1.92.0",
   "description": "Command-line interface for the Duvo public API",
   "bin": {
     "duvo": "./dist/bin/duvo.js"