@eide/foir-cli 0.8.0 → 0.10.0

package/dist/cli.js

@@ -469,6 +469,7 @@ import { HooksService as HooksService2 } from "@eide/foir-proto-ts/hooks/v1/hook
 import { NotificationsService as NotificationsService2 } from "@eide/foir-proto-ts/notifications/v1/notifications_pb";
 import { SchedulesService as SchedulesService2 } from "@eide/foir-proto-ts/schedules/v1/schedules_pb";
 import { IntegrationsService as IntegrationsService2 } from "@eide/foir-proto-ts/integrations/v1/integrations_pb";
+import { AppsService as AppsService2 } from "@eide/foir-proto-ts/apps/v1/apps_service_pb";
 
 // src/lib/rpc/identity.ts
 import { create } from "@bufbuild/protobuf";
@@ -1266,8 +1267,115 @@ function extensionConfigToInput(cfg) {
   return out;
 }
 
+// src/lib/rpc/apps.ts
+import { create as create3 } from "@bufbuild/protobuf";
+import {
+  ListAppsRequestSchema,
+  GetAppRequestSchema,
+  InstallAppRequestSchema,
+  ConfirmInstallAppRequestSchema,
+  UpdateAppRequestSchema,
+  ConfirmUpdateAppRequestSchema,
+  UninstallAppRequestSchema,
+  SetAppMappingRequestSchema,
+  ValidateManifestRequestSchema,
+  TriggerOperationRequestSchema
+} from "@eide/foir-proto-ts/apps/v1/apps_service_pb";
+function createAppsMethods(client) {
+  return {
+    async listApps(tenantId, projectId) {
+      const resp = await client.listApps(
+        create3(ListAppsRequestSchema, { tenantId, projectId })
+      );
+      return resp.apps;
+    },
+    async getApp(tenantId, projectId, name) {
+      const resp = await client.getApp(
+        create3(GetAppRequestSchema, { tenantId, projectId, name })
+      );
+      return resp.app ?? null;
+    },
+    async installApp(tenantId, projectId, manifestUrl) {
+      return client.installApp(
+        create3(InstallAppRequestSchema, { tenantId, projectId, manifestUrl })
+      );
+    },
+    async confirmInstallApp(params) {
+      const resp = await client.confirmInstallApp(
+        create3(ConfirmInstallAppRequestSchema, {
+          installTicket: params.installTicket,
+          sourceMappings: params.sourceMappings ?? {},
+          sinkMappings: params.sinkMappings ?? {},
+          settings: params.settings,
+          placementFieldChoices: params.placementFieldChoices ?? {}
+        })
+      );
+      return resp.app;
+    },
+    async updateApp(tenantId, projectId, name) {
+      return client.updateApp(
+        create3(UpdateAppRequestSchema, { tenantId, projectId, name })
+      );
+    },
+    async confirmUpdateApp(tenantId, projectId, name, newManifestHash) {
+      const resp = await client.confirmUpdateApp(
+        create3(ConfirmUpdateAppRequestSchema, {
+          tenantId,
+          projectId,
+          name,
+          newManifestHash
+        })
+      );
+      return resp.app;
+    },
+    async uninstallApp(tenantId, projectId, name, force = false) {
+      return client.uninstallApp(
+        create3(UninstallAppRequestSchema, { tenantId, projectId, name, force })
+      );
+    },
+    async setAppMapping(params) {
+      const resp = await client.setAppMapping(
+        create3(SetAppMappingRequestSchema, {
+          tenantId: params.tenantId,
+          projectId: params.projectId,
+          name: params.name,
+          sourceMappings: params.sourceMappings ?? {},
+          sinkMappings: params.sinkMappings ?? {},
+          placementFieldChoices: params.placementFieldChoices ?? {}
+        })
+      );
+      return resp.app;
+    },
+    async validateManifestUrl(manifestUrl) {
+      return client.validateManifest(
+        create3(ValidateManifestRequestSchema, {
+          source: { case: "manifestUrl", value: manifestUrl }
+        })
+      );
+    },
+    async validateManifestJson(manifestJson) {
+      return client.validateManifest(
+        create3(ValidateManifestRequestSchema, {
+          source: { case: "manifestJson", value: manifestJson }
+        })
+      );
+    },
+    async triggerOperation(tenantId, projectId, operationKey, input) {
+      const resp = await client.triggerOperation(
+        create3(TriggerOperationRequestSchema, {
+          tenantId,
+          projectId,
+          operationKey,
+          input
+        })
+      );
+      return resp.executionId;
+    }
+  };
+}
+
 // src/lib/rpc/models.ts
-import { create as create3, fromJson } from "@bufbuild/protobuf";
+import { create as create4, fromJson } from "@bufbuild/protobuf";
 import { ValueSchema } from "@bufbuild/protobuf/wkt";
 import {
   FieldSchema as ProtoFieldSchema,
@@ -1284,7 +1392,7 @@ import {
   RestoreModelVersionRequestSchema
 } from "@eide/foir-proto-ts/models/v1/models_pb";
 function jsFieldToProto(f) {
-  return create3(ProtoFieldSchema, {
+  return create4(ProtoFieldSchema, {
     id: f.id,
     key: f.key,
     label: f.label,
@@ -1301,13 +1409,13 @@ function jsFieldToProto(f) {
   });
 }
 function jsConfigToProto(c) {
-  return create3(ProtoModelConfigSchema, {
+  return create4(ProtoModelConfigSchema, {
     versioning: c.versioning ?? false,
     publishing: c.publishing ?? false,
     variants: c.variants ?? false,
     inline: c.inline ?? false,
     customerScoped: c.customerScoped ?? false,
-    sharing: c.sharing ? create3(ProtoSharingConfigSchema, {
+    sharing: c.sharing ? create4(ProtoSharingConfigSchema, {
       enabled: c.sharing.enabled,
       requireAcceptance: c.sharing.requireAcceptance
     }) : void 0,
@@ -1326,18 +1434,18 @@ function createModelsMethods(client) {
   return {
     // ── Queries ──────────────────────────────────────────────
     async getModel(id) {
-      const resp = await client.getModel(create3(GetModelRequestSchema, { id }));
+      const resp = await client.getModel(create4(GetModelRequestSchema, { id }));
       return resp.model ?? null;
     },
     async getModelByKey(key) {
       const resp = await client.getModelByKey(
-        create3(GetModelByKeyRequestSchema, { key })
+        create4(GetModelByKeyRequestSchema, { key })
       );
       return resp.model ?? null;
     },
     async listModels(params = {}) {
       const resp = await client.listModels(
-        create3(ListModelsRequestSchema, {
+        create4(ListModelsRequestSchema, {
           search: params.search,
           category: params.category,
           configId: params.configId,
@@ -1353,7 +1461,7 @@ function createModelsMethods(client) {
     // ── Mutations ────────────────────────────────────────────
     async createModel(params) {
       const resp = await client.createModel(
-        create3(CreateModelRequestSchema, {
+        create4(CreateModelRequestSchema, {
           key: params.key,
           name: params.name,
           fields: params.fields.map(jsFieldToProto),
@@ -1365,7 +1473,7 @@ function createModelsMethods(client) {
     },
     async updateModel(params) {
       const resp = await client.updateModel(
-        create3(UpdateModelRequestSchema, {
+        create4(UpdateModelRequestSchema, {
           id: params.id,
           name: params.name,
           updateFields: params.fields != null,
@@ -1378,20 +1486,20 @@ function createModelsMethods(client) {
     },
     async deleteModel(id) {
       const resp = await client.deleteModel(
-        create3(DeleteModelRequestSchema, { id })
+        create4(DeleteModelRequestSchema, { id })
       );
       return resp.success;
     },
     async duplicateModel(params) {
       const resp = await client.duplicateModel(
-        create3(DuplicateModelRequestSchema, params)
+        create4(DuplicateModelRequestSchema, params)
       );
       return resp.model ?? null;
     },
     // ── Versioning ───────────────────────────────────────────
     async listModelVersions(modelId, params = {}) {
       const resp = await client.listModelVersions(
-        create3(ListModelVersionsRequestSchema, {
+        create4(ListModelVersionsRequestSchema, {
           modelId,
           limit: params.limit ?? 50,
           offset: params.offset ?? 0
@@ -1404,7 +1512,7 @@ function createModelsMethods(client) {
     },
     async restoreModelVersion(modelId, versionId) {
       const resp = await client.restoreModelVersion(
-        create3(RestoreModelVersionRequestSchema, { modelId, versionId })
+        create4(RestoreModelVersionRequestSchema, { modelId, versionId })
       );
       return resp.model ?? null;
     }
@@ -1412,7 +1520,7 @@ function createModelsMethods(client) {
 }
 
 // src/lib/rpc/records.ts
-import { create as create4 } from "@bufbuild/protobuf";
+import { create as create5 } from "@bufbuild/protobuf";
 import {
   CreateRecordRequestSchema,
   GetRecordRequestSchema,
@@ -1483,7 +1591,7 @@ function createRecordsMethods(client) {
     // ── CRUD ──────────────────────────────────────────────────
     async createRecord(params) {
       const resp = await client.createRecord(
-        create4(CreateRecordRequestSchema, {
+        create5(CreateRecordRequestSchema, {
           modelKey: params.modelKey,
           naturalKey: params.naturalKey,
           data: params.data ? sanitizeData(params.data) : void 0,
@@ -1500,32 +1608,32 @@ function createRecordsMethods(client) {
     },
     async getRecord(id) {
       const resp = await client.getRecord(
-        create4(GetRecordRequestSchema, { id })
+        create5(GetRecordRequestSchema, { id })
       );
       return resp.record ?? null;
     },
     async getRecordByKey(modelKey, naturalKey) {
       const resp = await client.getRecordByKey(
-        create4(GetRecordByKeyRequestSchema, { modelKey, naturalKey })
+        create5(GetRecordByKeyRequestSchema, { modelKey, naturalKey })
       );
       return resp.record ?? null;
     },
     async getRecordByKeyOrId(modelKey, identifier) {
       const resp = await client.getRecordByKeyOrId(
-        create4(GetRecordByKeyOrIdRequestSchema, { modelKey, identifier })
+        create5(GetRecordByKeyOrIdRequestSchema, { modelKey, identifier })
       );
       return resp.record ?? null;
     },
     async listRecords(params) {
       const resp = await client.listRecords(
-        create4(ListRecordsRequestSchema, {
+        create5(ListRecordsRequestSchema, {
           modelKey: params.modelKey,
           limit: params.limit ?? 50,
           offset: params.offset ?? 0,
           customerId: params.customerId,
           search: params.search,
           filters: params.filters?.map(
-            (f) => create4(RecordFilterSchema, {
+            (f) => create5(RecordFilterSchema, {
               field: f.field,
               operator: f.operator
             })
@@ -1539,7 +1647,7 @@ function createRecordsMethods(client) {
     },
     async updateRecord(params) {
       const resp = await client.updateRecord(
-        create4(UpdateRecordRequestSchema, {
+        create5(UpdateRecordRequestSchema, {
           id: params.id,
           data: sanitizeData(params.data),
           naturalKey: params.naturalKey
@@ -1549,28 +1657,28 @@ function createRecordsMethods(client) {
     },
     async deleteRecord(id) {
       const resp = await client.deleteRecord(
-        create4(DeleteRecordRequestSchema, { id })
+        create5(DeleteRecordRequestSchema, { id })
       );
       return resp.success;
     },
     async duplicateRecord(id, newNaturalKey) {
       const resp = await client.duplicateRecord(
-        create4(DuplicateRecordRequestSchema, { id, newNaturalKey })
+        create5(DuplicateRecordRequestSchema, { id, newNaturalKey })
       );
       return resp.record ?? null;
     },
     async duplicateRecordsBulk(ids, modelKey) {
       const resp = await client.duplicateRecordsBulk(
-        create4(DuplicateRecordsBulkRequestSchema, { ids, modelKey })
+        create5(DuplicateRecordsBulkRequestSchema, { ids, modelKey })
       );
       return resp.records ?? [];
     },
     async batchRecordOperations(operations) {
       const typeMap = { create: 1, update: 2, delete: 3 };
       const resp = await client.batchRecordOperations(
-        create4(BatchRecordOperationsRequestSchema, {
+        create5(BatchRecordOperationsRequestSchema, {
           operations: operations.map(
-            (op) => create4(BatchOperationSchema, {
+            (op) => create5(BatchOperationSchema, {
               type: typeMap[op.type],
               id: op.id,
               modelKey: op.modelKey,
@@ -1587,7 +1695,7 @@ function createRecordsMethods(client) {
     },
     async bulkUpdateRecords(params) {
       const resp = await client.bulkUpdateRecords(
-        create4(BulkUpdateRecordsRequestSchema, {
+        create5(BulkUpdateRecordsRequestSchema, {
           modelKey: params.modelKey,
           data: sanitizeData(params.data)
         })
@@ -1597,7 +1705,7 @@ function createRecordsMethods(client) {
     // ── Versioning ────────────────────────────────────────────
     async createVersion(parentId, data, changeDescription) {
       const resp = await client.createVersion(
-        create4(CreateVersionRequestSchema, {
+        create5(CreateVersionRequestSchema, {
           parentId,
           data: data ? sanitizeData(data) : void 0,
           changeDescription
@@ -1607,25 +1715,25 @@ function createRecordsMethods(client) {
     },
     async publishVersion(versionId) {
       const resp = await client.publishVersion(
-        create4(PublishVersionRequestSchema, { versionId })
+        create5(PublishVersionRequestSchema, { versionId })
       );
       return resp.record ?? null;
     },
     async unpublishRecord(recordId) {
       const resp = await client.unpublishRecord(
-        create4(UnpublishRecordRequestSchema, { recordId })
+        create5(UnpublishRecordRequestSchema, { recordId })
       );
       return resp.success;
     },
     async revertToVersion(versionId) {
       const resp = await client.revertToVersion(
-        create4(RevertToVersionRequestSchema, { versionId })
+        create5(RevertToVersionRequestSchema, { versionId })
       );
       return resp.record ?? null;
     },
     async listRecordVersions(parentId, params) {
       const resp = await client.listRecordVersions(
-        create4(ListRecordVersionsRequestSchema, {
+        create5(ListRecordVersionsRequestSchema, {
           parentId,
           limit: params?.limit ?? 50,
           offset: params?.offset ?? 0
@@ -1638,7 +1746,7 @@ function createRecordsMethods(client) {
     },
     async saveContent(params) {
       const resp = await client.saveContent(
-        create4(SaveContentRequestSchema, {
+        create5(SaveContentRequestSchema, {
           recordId: params.recordId,
           data: sanitizeData(params.data),
           variantKey: params.variantKey,
@@ -1653,7 +1761,7 @@ function createRecordsMethods(client) {
     // ── Variants ──────────────────────────────────────────────
     async createVariant(recordId, variantKey, data) {
       const resp = await client.createVariant(
-        create4(CreateVariantRequestSchema, {
+        create5(CreateVariantRequestSchema, {
           recordId,
           variantKey,
           data: data ? sanitizeData(data) : void 0
@@ -1663,7 +1771,7 @@ function createRecordsMethods(client) {
     },
     async updateVariant(variantId, data) {
       const resp = await client.updateVariant(
-        create4(UpdateVariantRequestSchema, {
+        create5(UpdateVariantRequestSchema, {
           variantId,
           data: sanitizeData(data)
         })
@@ -1672,19 +1780,19 @@ function createRecordsMethods(client) {
     },
     async deleteVariant(variantId) {
       const resp = await client.deleteVariant(
-        create4(DeleteVariantRequestSchema, { variantId })
+        create5(DeleteVariantRequestSchema, { variantId })
       );
       return resp.success;
     },
     async setDefaultVariant(recordId, variantId) {
       const resp = await client.setDefaultVariant(
-        create4(SetDefaultVariantRequestSchema, { recordId, variantId })
+        create5(SetDefaultVariantRequestSchema, { recordId, variantId })
       );
       return resp.record ?? null;
     },
     async listRecordVariants(recordId, params) {
       const resp = await client.listRecordVariants(
-        create4(ListRecordVariantsRequestSchema, {
+        create5(ListRecordVariantsRequestSchema, {
           recordId,
           limit: params?.limit ?? 50,
           offset: params?.offset ?? 0
@@ -1698,7 +1806,7 @@ function createRecordsMethods(client) {
     // ── Scheduling ────────────────────────────────────────────
     async scheduleRecordPublish(versionId, publishAt, unpublishAt) {
       const resp = await client.scheduleRecordPublish(
-        create4(ScheduleRecordPublishRequestSchema, {
+        create5(ScheduleRecordPublishRequestSchema, {
           versionId,
           publishAt: {
             seconds: BigInt(Math.floor(publishAt.getTime() / 1e3)),
@@ -1714,13 +1822,13 @@ function createRecordsMethods(client) {
     },
     async cancelScheduledRecordPublish(versionId) {
       const resp = await client.cancelScheduledRecordPublish(
-        create4(CancelScheduledRecordPublishRequestSchema, { versionId })
+        create5(CancelScheduledRecordPublishRequestSchema, { versionId })
       );
       return resp.version ?? null;
     },
     async listScheduledPublishes(params) {
       const resp = await client.listScheduledPublishes(
-        create4(ListScheduledPublishesRequestSchema, {
+        create5(ListScheduledPublishesRequestSchema, {
           from: params?.from ? {
             seconds: BigInt(Math.floor(params.from.getTime() / 1e3)),
             nanos: 0
@@ -1741,7 +1849,7 @@ function createRecordsMethods(client) {
     },
     async listDraftVersions(params) {
       const resp = await client.listDraftVersions(
-        create4(ListDraftVersionsRequestSchema, {
+        create5(ListDraftVersionsRequestSchema, {
           modelKey: params?.modelKey,
           search: params?.search,
           limit: params?.limit ?? 50,
@@ -1756,7 +1864,7 @@ function createRecordsMethods(client) {
     // ── Batch Publishing ──────────────────────────────────────
     async batchPublishVersions(versionIds) {
       const resp = await client.batchPublishVersions(
-        create4(BatchPublishVersionsRequestSchema, { versionIds })
+        create5(BatchPublishVersionsRequestSchema, { versionIds })
       );
       return {
         records: resp.records ?? [],
@@ -1766,7 +1874,7 @@ function createRecordsMethods(client) {
     // ── Publish Batches ───────────────────────────────────────
     async createPublishBatch(params) {
       const resp = await client.createPublishBatch(
-        create4(CreatePublishBatchRequestSchema, {
+        create5(CreatePublishBatchRequestSchema, {
           name: params.name,
           versionIds: params.versionIds,
           scheduledAt: params.scheduledAt ? {
@@ -1781,7 +1889,7 @@ function createRecordsMethods(client) {
     },
     async updatePublishBatch(params) {
       const resp = await client.updatePublishBatch(
-        create4(UpdatePublishBatchRequestSchema, {
+        create5(UpdatePublishBatchRequestSchema, {
           batchId: params.batchId,
           name: params.name,
           scheduledAt: params.scheduledAt ? {
@@ -1796,19 +1904,19 @@ function createRecordsMethods(client) {
     },
     async cancelPublishBatch(batchId) {
       const resp = await client.cancelPublishBatch(
-        create4(CancelPublishBatchRequestSchema, { batchId })
+        create5(CancelPublishBatchRequestSchema, { batchId })
       );
       return resp.batch ?? null;
     },
     async rollbackPublishBatch(batchId) {
       const resp = await client.rollbackPublishBatch(
-        create4(RollbackPublishBatchRequestSchema, { batchId })
+        create5(RollbackPublishBatchRequestSchema, { batchId })
       );
       return resp.batch ?? null;
     },
     async retryFailedBatchItems(batchId) {
       const resp = await client.retryFailedBatchItems(
-        create4(RetryFailedBatchItemsRequestSchema, { batchId })
+        create5(RetryFailedBatchItemsRequestSchema, { batchId })
       );
       return {
         batch: resp.batch ?? null,
@@ -1817,13 +1925,13 @@ function createRecordsMethods(client) {
     },
     async addItemsToPublishBatch(batchId, versionIds) {
       const resp = await client.addItemsToPublishBatch(
-        create4(AddItemsToPublishBatchRequestSchema, { batchId, versionIds })
+        create5(AddItemsToPublishBatchRequestSchema, { batchId, versionIds })
       );
       return resp.batch ?? null;
     },
     async removeItemsFromPublishBatch(batchId, versionIds) {
       const resp = await client.removeItemsFromPublishBatch(
-        create4(RemoveItemsFromPublishBatchRequestSchema, {
+        create5(RemoveItemsFromPublishBatchRequestSchema, {
           batchId,
           versionIds
         })
@@ -1832,7 +1940,7 @@ function createRecordsMethods(client) {
     },
     async listPublishBatches(params) {
       const resp = await client.listPublishBatches(
-        create4(ListPublishBatchesRequestSchema, {
+        create5(ListPublishBatchesRequestSchema, {
           status: params?.status,
           from: params?.from ? {
             seconds: BigInt(Math.floor(params.from.getTime() / 1e3)),
@@ -1853,7 +1961,7 @@ function createRecordsMethods(client) {
     },
     async getPublishBatch(batchId) {
       const resp = await client.getPublishBatch(
-        create4(GetPublishBatchRequestSchema, { batchId })
+        create5(GetPublishBatchRequestSchema, { batchId })
       );
       return {
         batch: resp.batch ?? null,
@@ -1863,7 +1971,7 @@ function createRecordsMethods(client) {
     // ── Search & Embeddings ──────────────────────────────────
     async globalSearch(params) {
       const resp = await client.globalSearch(
-        create4(GlobalSearchRequestSchema, {
+        create5(GlobalSearchRequestSchema, {
           query: params.query,
           modelKeys: params.modelKeys ?? [],
           limit: params.limit ?? 20
@@ -1876,7 +1984,7 @@ function createRecordsMethods(client) {
     },
     async getEmbeddingStats(modelKey) {
       const resp = await client.getEmbeddingStats(
-        create4(GetEmbeddingStatsRequestSchema, {
+        create5(GetEmbeddingStatsRequestSchema, {
           modelKey
         })
       );
@@ -1884,13 +1992,13 @@ function createRecordsMethods(client) {
     },
     async getRecordEmbeddings(recordId) {
       const resp = await client.getRecordEmbeddings(
-        create4(GetRecordEmbeddingsRequestSchema, { recordId })
+        create5(GetRecordEmbeddingsRequestSchema, { recordId })
       );
       return resp.embeddings ?? [];
     },
     async findSimilarRecords(params) {
       const resp = await client.findSimilarRecords(
-        create4(FindSimilarRecordsRequestSchema, {
+        create5(FindSimilarRecordsRequestSchema, {
           recordId: params.recordId,
           modelKey: params.modelKey,
           limit: params.limit ?? 10
@@ -1902,7 +2010,7 @@ function createRecordsMethods(client) {
 }
 
 // src/lib/rpc/configs.ts
-import { create as create5 } from "@bufbuild/protobuf";
+import { create as create6 } from "@bufbuild/protobuf";
 import {
   CreateConfigRequestSchema,
   GetConfigRequestSchema,
@@ -1927,7 +2035,7 @@ function createConfigsMethods(client) {
     // ── Operations ────────────────────────────────────────────
     async listOperations(params = {}) {
       return client.listOperations(
-        create5(ListOperationsRequestSchema, {
+        create6(ListOperationsRequestSchema, {
           category: params.category,
           isActive: params.isActive,
           search: params.search,
@@ -1939,19 +2047,19 @@ function createConfigsMethods(client) {
     // ── Queries ──────────────────────────────────────────────
     async getConfig(id) {
       const resp = await client.getConfig(
-        create5(GetConfigRequestSchema, { id })
+        create6(GetConfigRequestSchema, { id })
       );
       return resp.config ?? null;
     },
     async getConfigByKey(key) {
       const resp = await client.getConfigByKey(
-        create5(GetConfigByKeyRequestSchema, { key })
+        create6(GetConfigByKeyRequestSchema, { key })
       );
       return resp.config ?? null;
     },
     async listConfigs(params = {}) {
       return client.listConfigs(
-        create5(ListConfigsRequestSchema, {
+        create6(ListConfigsRequestSchema, {
           configType: params.configType,
           enabled: params.enabled,
           limit: params.limit ?? 50,
@@ -1962,7 +2070,7 @@ function createConfigsMethods(client) {
     // ── Mutations ────────────────────────────────────────────
     async createConfig(params) {
       const resp = await client.createConfig(
-        create5(CreateConfigRequestSchema, {
+        create6(CreateConfigRequestSchema, {
           key: params.key,
           configType: params.configType,
           direction: DIRECTION_TO_PROTO[params.direction ?? "read"] ?? ConfigDirection.READ,
@@ -1976,7 +2084,7 @@ function createConfigsMethods(client) {
     },
     async updateConfig(params) {
       const resp = await client.updateConfig(
-        create5(UpdateConfigRequestSchema, {
+        create6(UpdateConfigRequestSchema, {
           id: params.id,
           name: params.name,
           description: params.description,
@@ -1990,7 +2098,7 @@ function createConfigsMethods(client) {
     },
     async applyConfig(configKey, configData) {
       const resp = await client.applyConfig(
-        create5(ApplyConfigRequestSchema, {
+        create6(ApplyConfigRequestSchema, {
           configKey,
           configData
         })
@@ -2006,7 +2114,7 @@ function createConfigsMethods(client) {
     },
     async writeConfigCredential(params) {
       const resp = await client.writeConfigCredential(
-        create5(WriteConfigCredentialRequestSchema, {
+        create6(WriteConfigCredentialRequestSchema, {
           configKey: params.configKey,
           value: params.value
         })
@@ -2018,13 +2126,13 @@ function createConfigsMethods(client) {
     },
     async triggerConfigSync(configId) {
       const resp = await client.triggerConfigSync(
-        create5(TriggerConfigSyncRequestSchema, { configId })
+        create6(TriggerConfigSyncRequestSchema, { configId })
       );
       return resp.success;
     },
     async deleteConfig(id) {
       const resp = await client.deleteConfig(
-        create5(DeleteConfigRequestSchema, { id })
+        create6(DeleteConfigRequestSchema, { id })
       );
       return resp.success;
     }
@@ -2032,7 +2140,7 @@ function createConfigsMethods(client) {
 }
 
 // src/lib/rpc/segments.ts
-import { create as create6, fromJson as fromJson2 } from "@bufbuild/protobuf";
+import { create as create7, fromJson as fromJson2 } from "@bufbuild/protobuf";
 import { ValueSchema as ValueSchema2 } from "@bufbuild/protobuf/wkt";
 import {
   RuleExpressionSchema,
@@ -2053,7 +2161,7 @@ import {
   OptBackIntoSegmentRequestSchema
 } from "@eide/foir-proto-ts/segments/v1/segments_pb";
 function rawOperandToProto(raw) {
-  return create6(RuleOperandSchema, {
+  return create7(RuleOperandSchema, {
     type: raw.type,
     path: raw.path,
     value: raw.value !== void 0 ? fromJson2(ValueSchema2, raw.value) : void 0,
@@ -2062,7 +2170,7 @@ function rawOperandToProto(raw) {
   });
 }
 function rawRulesToProto(raw) {
-  return create6(RuleExpressionSchema, {
+  return create7(RuleExpressionSchema, {
     type: raw.type,
     id: raw.id,
     left: raw.left ? rawOperandToProto(raw.left) : void 0,
@@ -2078,19 +2186,19 @@ function createSegmentsMethods(client) {
     // ── Queries ──────────────────────────────────────────────
     async getSegment(id) {
       const resp = await client.getSegment(
-        create6(GetSegmentRequestSchema, { id })
+        create7(GetSegmentRequestSchema, { id })
       );
       return resp.segment ?? null;
     },
     async getSegmentByKey(key) {
       const resp = await client.getSegmentByKey(
-        create6(GetSegmentByKeyRequestSchema, { key })
+        create7(GetSegmentByKeyRequestSchema, { key })
       );
       return resp.segment ?? null;
     },
     async listSegments(params = {}) {
       return client.listSegments(
-        create6(ListSegmentsRequestSchema, {
+        create7(ListSegmentsRequestSchema, {
           isActive: params.isActive,
           configId: params.configId,
           limit: params.limit ?? 50,
@@ -2102,7 +2210,7 @@ function createSegmentsMethods(client) {
     async createSegment(params) {
       const rules = params.rules && !("$typeName" in params.rules) ? rawRulesToProto(params.rules) : params.rules;
       const resp = await client.createSegment(
-        create6(CreateSegmentRequestSchema, {
+        create7(CreateSegmentRequestSchema, {
           key: params.key,
           name: params.name,
           description: params.description,
@@ -2119,7 +2227,7 @@ function createSegmentsMethods(client) {
     async updateSegment(params) {
       const rules = params.rules && !("$typeName" in params.rules) ? rawRulesToProto(params.rules) : params.rules;
       const resp = await client.updateSegment(
-        create6(UpdateSegmentRequestSchema, {
+        create7(UpdateSegmentRequestSchema, {
           id: params.id,
           name: params.name,
           description: params.description,
@@ -2132,19 +2240,19 @@ function createSegmentsMethods(client) {
     },
     async deleteSegment(id) {
       const resp = await client.deleteSegment(
-        create6(DeleteSegmentRequestSchema, { id })
+        create7(DeleteSegmentRequestSchema, { id })
       );
       return resp.success;
     },
     // ── Customer Operations ──────────────────────────────────
     async getCustomerMemberships(customerId) {
       return client.getCustomerMemberships(
-        create6(GetCustomerMembershipsRequestSchema, { customerId })
+        create7(GetCustomerMembershipsRequestSchema, { customerId })
       );
     },
     async previewSegmentRules(rules, sampleSize) {
       const resp = await client.previewSegmentRules(
-        create6(PreviewSegmentRulesRequestSchema, {
+        create7(PreviewSegmentRulesRequestSchema, {
           rules,
           sampleSize: sampleSize ?? 10
         })
@@ -2153,26 +2261,26 @@ function createSegmentsMethods(client) {
     },
     async testSegmentEvaluation(segmentId, customerId) {
       const resp = await client.testSegmentEvaluation(
-        create6(TestSegmentEvaluationRequestSchema, { segmentId, customerId })
+        create7(TestSegmentEvaluationRequestSchema, { segmentId, customerId })
       );
       return resp.result ?? null;
     },
     // ── Opt-out Management ───────────────────────────────────
     async setGlobalOptOut(customerId, optedOut) {
       const resp = await client.setGlobalOptOut(
-        create6(SetGlobalOptOutRequestSchema, { customerId, optedOut })
+        create7(SetGlobalOptOutRequestSchema, { customerId, optedOut })
       );
       return resp.success;
     },
     async optOutOfSegment(customerId, segmentId) {
       const resp = await client.optOutOfSegment(
-        create6(OptOutOfSegmentRequestSchema, { customerId, segmentId })
+        create7(OptOutOfSegmentRequestSchema, { customerId, segmentId })
       );
       return resp.success;
     },
     async optBackIntoSegment(customerId, segmentId) {
       const resp = await client.optBackIntoSegment(
-        create6(OptBackIntoSegmentRequestSchema, { customerId, segmentId })
+        create7(OptBackIntoSegmentRequestSchema, { customerId, segmentId })
       );
       return resp.success;
     }
@@ -2180,7 +2288,7 @@ function createSegmentsMethods(client) {
 }
 
 // src/lib/rpc/experiments.ts
-import { create as create7 } from "@bufbuild/protobuf";
+import { create as create8 } from "@bufbuild/protobuf";
 import {
   ExperimentStatus,
   CreateExperimentRequestSchema,
@@ -2213,19 +2321,19 @@ function createExperimentsMethods(client) {
     // ── Queries ──────────────────────────────────────────────
     async getExperiment(id) {
       const resp = await client.getExperiment(
-        create7(GetExperimentRequestSchema, { id })
+        create8(GetExperimentRequestSchema, { id })
       );
       return resp.experiment ?? null;
     },
     async getExperimentByKey(key) {
       const resp = await client.getExperimentByKey(
-        create7(GetExperimentByKeyRequestSchema, { key })
+        create8(GetExperimentByKeyRequestSchema, { key })
       );
       return resp.experiment ?? null;
     },
     async listExperiments(params = {}) {
       return client.listExperiments(
-        create7(ListExperimentsRequestSchema, {
+        create8(ListExperimentsRequestSchema, {
           status: params.status ? STATUS_TO_PROTO[params.status] : void 0,
           isActive: params.isActive,
           limit: params.limit ?? 50,
@@ -2235,21 +2343,21 @@ function createExperimentsMethods(client) {
     },
     async getExperimentStats(experimentId) {
       const resp = await client.getExperimentStats(
-        create7(GetExperimentStatsRequestSchema, { experimentId })
+        create8(GetExperimentStatsRequestSchema, { experimentId })
       );
       return resp.stats ?? null;
     },
     // ── Mutations ────────────────────────────────────────────
     async createExperiment(params) {
       const resp = await client.createExperiment(
-        create7(CreateExperimentRequestSchema, {
+        create8(CreateExperimentRequestSchema, {
           key: params.key,
           name: params.name,
           description: params.description,
           targeting: params.targeting,
           controlPercent: params.controlPercent,
           variants: params.variants?.map(
-            (v) => create7(ExperimentVariantSchema, {
+            (v) => create8(ExperimentVariantSchema, {
               key: v.key,
               name: v.name,
               percent: v.percent
@@ -2261,14 +2369,14 @@ function createExperimentsMethods(client) {
     },
     async updateExperiment(params) {
       const resp = await client.updateExperiment(
-        create7(UpdateExperimentRequestSchema, {
+        create8(UpdateExperimentRequestSchema, {
           id: params.id,
           name: params.name,
           description: params.description,
           targeting: params.targeting,
           controlPercent: params.controlPercent,
           variants: params.variants?.map(
-            (v) => create7(ExperimentVariantSchema, {
+            (v) => create8(ExperimentVariantSchema, {
               key: v.key,
               name: v.name,
               percent: v.percent
@@ -2280,38 +2388,38 @@ function createExperimentsMethods(client) {
     },
     async deleteExperiment(id) {
       const resp = await client.deleteExperiment(
-        create7(DeleteExperimentRequestSchema, { id })
+        create8(DeleteExperimentRequestSchema, { id })
       );
       return resp.success;
     },
     // ── Lifecycle ────────────────────────────────────────────
     async startExperiment(experimentId) {
       const resp = await client.startExperiment(
-        create7(StartExperimentRequestSchema, { experimentId })
+        create8(StartExperimentRequestSchema, { experimentId })
       );
       return resp.experiment ?? null;
     },
     async pauseExperiment(experimentId) {
       const resp = await client.pauseExperiment(
-        create7(PauseExperimentRequestSchema, { experimentId })
+        create8(PauseExperimentRequestSchema, { experimentId })
       );
       return resp.experiment ?? null;
     },
     async resumeExperiment(experimentId) {
       const resp = await client.resumeExperiment(
-        create7(ResumeExperimentRequestSchema, { experimentId })
+        create8(ResumeExperimentRequestSchema, { experimentId })
       );
       return resp.experiment ?? null;
     },
     async endExperiment(experimentId) {
       const resp = await client.endExperiment(
-        create7(EndExperimentRequestSchema, { experimentId })
+        create8(EndExperimentRequestSchema, { experimentId })
       );
       return resp.experiment ?? null;
     },
     async applyExperimentWinner(experimentId, winnerVariantKey) {
       const resp = await client.applyExperimentWinner(
-        create7(ApplyExperimentWinnerRequestSchema, {
+        create8(ApplyExperimentWinnerRequestSchema, {
           experimentId,
           winnerVariantKey
         })
@@ -2321,7 +2429,7 @@ function createExperimentsMethods(client) {
     // ── Assignments ──────────────────────────────────────────
     async forceAssignExperiment(customerId, experimentId, variantKey) {
       const resp = await client.forceAssignExperiment(
-        create7(ForceAssignExperimentRequestSchema, {
+        create8(ForceAssignExperimentRequestSchema, {
           customerId,
           experimentId,
           variantKey
@@ -2331,7 +2439,7 @@ function createExperimentsMethods(client) {
     },
     async removeExperimentAssignment(customerId, experimentId) {
       const resp = await client.removeExperimentAssignment(
-        create7(RemoveExperimentAssignmentRequestSchema, {
+        create8(RemoveExperimentAssignmentRequestSchema, {
           customerId,
           experimentId
         })
@@ -2340,7 +2448,7 @@ function createExperimentsMethods(client) {
     },
     async getCustomerAssignments(customerId) {
       const resp = await client.getCustomerAssignments(
-        create7(GetCustomerAssignmentsRequestSchema, { customerId })
+        create8(GetCustomerAssignmentsRequestSchema, { customerId })
       );
       return resp.assignments ?? [];
     }
@@ -2348,7 +2456,7 @@ function createExperimentsMethods(client) {
 }
 
 // src/lib/rpc/settings.ts
-import { create as create8 } from "@bufbuild/protobuf";
+import { create as create9 } from "@bufbuild/protobuf";
 import {
   GetSettingsRequestSchema,
   UpdateSettingRequestSchema,
@@ -2399,7 +2507,7 @@ function createSettingsMethods(client) {
     // ── Settings ─────────────────────────────────────────────
     async getSettings(params = {}) {
       const resp = await client.getSettings(
-        create8(GetSettingsRequestSchema, {
+        create9(GetSettingsRequestSchema, {
           category: params.category,
           key: params.key
         })
@@ -2408,7 +2516,7 @@ function createSettingsMethods(client) {
     },
     async updateSetting(params) {
       const resp = await client.updateSetting(
-        create8(UpdateSettingRequestSchema, {
+        create9(UpdateSettingRequestSchema, {
           key: params.key,
           value: params.value
         })
@@ -2417,14 +2525,14 @@ function createSettingsMethods(client) {
     },
     async deleteSetting(key) {
       const resp = await client.deleteSetting(
-        create8(DeleteSettingRequestSchema, { key })
+        create9(DeleteSettingRequestSchema, { key })
       );
       return resp.success;
     },
     // ── Mentions ─────────────────────────────────────────────
     async listMyMentions(params = {}) {
       return client.listMyMentions(
-        create8(ListMyMentionsRequestSchema, {
+        create9(ListMyMentionsRequestSchema, {
           status: params.status ?? [],
           entityType: params.entityType,
           limit: params.limit ?? 50,
@@ -2434,7 +2542,7 @@ function createSettingsMethods(client) {
     },
     async updateMentionStatus(params) {
       const resp = await client.updateMentionStatus(
-        create8(UpdateMentionStatusRequestSchema, {
+        create9(UpdateMentionStatusRequestSchema, {
           mentionId: params.mentionId,
           status: params.status,
           completedNote: params.completedNote,
@@ -2446,7 +2554,7 @@ function createSettingsMethods(client) {
     // ── Notes ────────────────────────────────────────────────
     async createNote(params) {
       const resp = await client.createNote(
-        create8(CreateNoteRequestSchema, {
+        create9(CreateNoteRequestSchema, {
           ...params,
           content: params.content
         })
@@ -2454,12 +2562,12 @@ function createSettingsMethods(client) {
       return resp.note ?? null;
     },
     async getNote(id) {
-      const resp = await client.getNote(create8(GetNoteRequestSchema, { id }));
+      const resp = await client.getNote(create9(GetNoteRequestSchema, { id }));
       return resp.note ?? null;
     },
     async listNotes(params) {
       return client.listNotes(
-        create8(ListNotesRequestSchema, {
+        create9(ListNotesRequestSchema, {
           entityType: params.entityType,
           entityId: params.entityId,
           limit: params.limit ?? 50,
@@ -2469,7 +2577,7 @@ function createSettingsMethods(client) {
     },
     async updateNote(params) {
       const resp = await client.updateNote(
-        create8(UpdateNoteRequestSchema, {
+        create9(UpdateNoteRequestSchema, {
           id: params.id,
           content: params.content,
           isResolved: params.isResolved
@@ -2479,14 +2587,14 @@ function createSettingsMethods(client) {
     },
     async deleteNote(id) {
       const resp = await client.deleteNote(
-        create8(DeleteNoteRequestSchema, { id })
+        create9(DeleteNoteRequestSchema, { id })
       );
       return resp.success;
     },
     // ── Context Dimensions ───────────────────────────────────
     async listContextDimensions(params = {}) {
       return client.listContextDimensions(
-        create8(ListContextDimensionsRequestSchema, {
+        create9(ListContextDimensionsRequestSchema, {
           search: params.search,
           limit: params.limit ?? 50,
           offset: params.offset ?? 0
@@ -2495,31 +2603,31 @@ function createSettingsMethods(client) {
     },
     async getContextDimension(id) {
       const resp = await client.getContextDimension(
-        create8(GetContextDimensionRequestSchema, { id })
+        create9(GetContextDimensionRequestSchema, { id })
       );
       return resp.dimension ?? null;
     },
     async createContextDimension(params) {
       const resp = await client.createContextDimension(
-        create8(CreateContextDimensionRequestSchema, params)
+        create9(CreateContextDimensionRequestSchema, params)
       );
       return resp.dimension ?? null;
     },
     async updateContextDimension(params) {
       const resp = await client.updateContextDimension(
-        create8(UpdateContextDimensionRequestSchema, params)
+        create9(UpdateContextDimensionRequestSchema, params)
       );
       return resp.dimension ?? null;
     },
     async deleteContextDimension(id) {
       const resp = await client.deleteContextDimension(
-        create8(DeleteContextDimensionRequestSchema, { id })
+        create9(DeleteContextDimensionRequestSchema, { id })
       );
       return resp.success;
     },
     async getContextDimensionValues(dimensionKey, params = {}) {
       return client.getContextDimensionValues(
-        create8(GetContextDimensionValuesRequestSchema, {
+        create9(GetContextDimensionValuesRequestSchema, {
           dimensionKey,
           search: params.search,
           limit: params.limit ?? 50,
@@ -2530,19 +2638,19 @@ function createSettingsMethods(client) {
     // ── Customer Profile Schema ──────────────────────────────
     async getCustomerProfileSchema() {
       const resp = await client.getCustomerProfileSchema(
-        create8(GetCustomerProfileSchemaRequestSchema, {})
+        create9(GetCustomerProfileSchemaRequestSchema, {})
       );
       return resp.schema ?? null;
     },
     async getCustomerProfile(customerId) {
       const resp = await client.getCustomerProfile(
-        create8(GetCustomerProfileRequestSchema, { customerId })
+        create9(GetCustomerProfileRequestSchema, { customerId })
       );
       return resp.data ?? null;
     },
     async setCustomerProfile(params) {
       const resp = await client.setCustomerProfile(
-        create8(SetCustomerProfileRequestSchema, {
+        create9(SetCustomerProfileRequestSchema, {
           customerId: params.customerId,
           data: params.data
         })
@@ -2551,7 +2659,7 @@ function createSettingsMethods(client) {
     },
     async updateCustomerProfileSchema(params) {
       const resp = await client.updateCustomerProfileSchema(
-        create8(UpdateCustomerProfileSchemaRequestSchema, {
+        create9(UpdateCustomerProfileSchemaRequestSchema, {
           fields: params.fields.map((f) => ({
             id: f.id,
             key: f.key,
@@ -2569,19 +2677,19 @@ function createSettingsMethods(client) {
     },
     async getCustomerResolutionAttributes(customerId) {
       return client.getCustomerResolutionAttributes(
-        create8(GetCustomerResolutionAttributesRequestSchema, { customerId })
+        create9(GetCustomerResolutionAttributesRequestSchema, { customerId })
       );
     },
     async getEditorConfigs(modelKey) {
       const resp = await client.getEditorConfigs(
-        create8(GetEditorConfigsRequestSchema, { modelKey })
+        create9(GetEditorConfigsRequestSchema, { modelKey })
       );
       return resp.placements ?? [];
     },
     // ── Variant Catalog ──────────────────────────────────────
     async listVariantCatalog(params = {}) {
       return client.listVariantCatalog(
-        create8(ListVariantCatalogRequestSchema, {
+        create9(ListVariantCatalogRequestSchema, {
           isActive: params.isActive,
           limit: params.limit ?? 50,
           offset: params.offset ?? 0
@@ -2590,13 +2698,13 @@ function createSettingsMethods(client) {
     },
     async getVariantCatalogEntry(id) {
       const resp = await client.getVariantCatalogEntry(
-        create8(GetVariantCatalogEntryRequestSchema, { id })
+        create9(GetVariantCatalogEntryRequestSchema, { id })
       );
       return resp.entry ?? null;
     },
     async createVariantCatalogEntry(params) {
       const resp = await client.createVariantCatalogEntry(
-        create8(CreateVariantCatalogEntryRequestSchema, {
+        create9(CreateVariantCatalogEntryRequestSchema, {
           key: params.key,
           name: params.name,
           description: params.description,
@@ -2610,7 +2718,7 @@ function createSettingsMethods(client) {
     },
     async updateVariantCatalogEntry(params) {
       const resp = await client.updateVariantCatalogEntry(
-        create8(UpdateVariantCatalogEntryRequestSchema, {
+        create9(UpdateVariantCatalogEntryRequestSchema, {
           id: params.id,
           name: params.name,
           description: params.description,
@@ -2624,14 +2732,14 @@ function createSettingsMethods(client) {
     },
     async deleteVariantCatalogEntry(id) {
       const resp = await client.deleteVariantCatalogEntry(
-        create8(DeleteVariantCatalogEntryRequestSchema, { id })
+        create9(DeleteVariantCatalogEntryRequestSchema, { id })
       );
       return resp.success;
     },
     // ── Locales ──────────────────────────────────────────────
     async listLocales(params = {}) {
       return client.listLocales(
-        create8(ListLocalesRequestSchema, {
+        create9(ListLocalesRequestSchema, {
           includeInactive: params.includeInactive,
           limit: params.limit ?? 50,
           offset: params.offset ?? 0
@@ -2640,25 +2748,25 @@ function createSettingsMethods(client) {
     },
     async getLocale(id) {
       const resp = await client.getLocale(
-        create8(GetLocaleRequestSchema, { id })
+        create9(GetLocaleRequestSchema, { id })
       );
       return resp.locale ?? null;
     },
     async getLocaleByCode(code) {
       const resp = await client.getLocaleByCode(
-        create8(GetLocaleByCodeRequestSchema, { code })
+        create9(GetLocaleByCodeRequestSchema, { code })
       );
       return resp.locale ?? null;
     },
     async getDefaultLocale() {
       const resp = await client.getDefaultLocale(
-        create8(GetDefaultLocaleRequestSchema, {})
+        create9(GetDefaultLocaleRequestSchema, {})
       );
       return resp.locale ?? null;
     },
     async createLocale(params) {
       const resp = await client.createLocale(
-        create8(CreateLocaleRequestSchema, {
+        create9(CreateLocaleRequestSchema, {
           locale: params.locale,
           displayName: params.displayName,
           nativeName: params.nativeName,
@@ -2671,7 +2779,7 @@ function createSettingsMethods(client) {
     },
     async updateLocale(params) {
       const resp = await client.updateLocale(
-        create8(UpdateLocaleRequestSchema, {
+        create9(UpdateLocaleRequestSchema, {
           id: params.id,
           displayName: params.displayName,
           nativeName: params.nativeName,
@@ -2685,20 +2793,20 @@ function createSettingsMethods(client) {
     },
     async deleteLocale(id) {
       const resp = await client.deleteLocale(
-        create8(DeleteLocaleRequestSchema, { id })
+        create9(DeleteLocaleRequestSchema, { id })
       );
       return resp.success;
     },
     // ── Nav Preferences ─────────────────────────────────────
     async getNavPreferences() {
       const resp = await client.getNavPreferences(
-        create8(GetNavPreferencesRequestSchema, {})
+        create9(GetNavPreferencesRequestSchema, {})
       );
       return resp.preferences ?? null;
     },
     async updateNavPreferences(params) {
       const resp = await client.updateNavPreferences(
-        create8(UpdateNavPreferencesRequestSchema, {
+        create9(UpdateNavPreferencesRequestSchema, {
           preferences: params.preferences ? {
             favoriteProjects: params.preferences.favoriteProjects,
             favoriteNavItems: params.preferences.favoriteNavItems,
@@ -2715,7 +2823,7 @@ function createSettingsMethods(client) {
     // ── Recently Opened ─────────────────────────────────────
     async listRecentlyOpened(limit) {
       const resp = await client.listRecentlyOpened(
-        create8(ListRecentlyOpenedRequestSchema, {
+        create9(ListRecentlyOpenedRequestSchema, {
           limit: limit ?? 20
         })
       );
@@ -2723,7 +2831,7 @@ function createSettingsMethods(client) {
     },
     async trackRecentlyOpened(params) {
       const resp = await client.trackRecentlyOpened(
-        create8(TrackRecentlyOpenedRequestSchema, {
+        create9(TrackRecentlyOpenedRequestSchema, {
           type: params.type,
           id: params.id,
           label: params.label,
@@ -2734,7 +2842,7 @@ function createSettingsMethods(client) {
     },
     async removeRecentlyOpened(params) {
       const resp = await client.removeRecentlyOpened(
-        create8(RemoveRecentlyOpenedRequestSchema, {
+        create9(RemoveRecentlyOpenedRequestSchema, {
           type: params.type,
           id: params.id
         })
@@ -2743,14 +2851,14 @@ function createSettingsMethods(client) {
     },
     async clearRecentlyOpened() {
       const resp = await client.clearRecentlyOpened(
-        create8(ClearRecentlyOpenedRequestSchema, {})
+        create9(ClearRecentlyOpenedRequestSchema, {})
       );
       return resp.success;
     },
     // ── Email Actions ──────────────────────────────────────────
     async listEmailActions(params = {}) {
       return client.listEmailActions(
-        create8(ListEmailActionsRequestSchema, {
+        create9(ListEmailActionsRequestSchema, {
           limit: params.limit ?? 50,
           offset: params.offset ?? 0
         })
@@ -2758,7 +2866,7 @@ function createSettingsMethods(client) {
     },
     async updateEmailAction(params) {
       const resp = await client.updateEmailAction(
-        create8(UpdateEmailActionRequestSchema, {
+        create9(UpdateEmailActionRequestSchema, {
           key: params.key,
           resendTemplateId: params.resendTemplateId,
           defaultFrom: params.defaultFrom,
@@ -2771,7 +2879,7 @@ function createSettingsMethods(client) {
     },
     async listResendTemplates() {
       const resp = await client.listResendTemplates(
-        create8(ListResendTemplatesRequestSchema, {})
+        create9(ListResendTemplatesRequestSchema, {})
       );
       return resp.templates ?? [];
     }
@@ -2779,7 +2887,7 @@ function createSettingsMethods(client) {
 }
 
 // src/lib/rpc/storage.ts
-import { create as create9 } from "@bufbuild/protobuf";
+import { create as create10 } from "@bufbuild/protobuf";
 import {
   CreateFileUploadRequestSchema,
   ConfirmFileUploadRequestSchema,
@@ -2799,7 +2907,7 @@ function createStorageMethods(client) {
   return {
     async createFileUpload(params) {
       return client.createFileUpload(
-        create9(CreateFileUploadRequestSchema, {
+        create10(CreateFileUploadRequestSchema, {
           filename: params.filename,
           mimeType: params.mimeType,
           size: BigInt(params.size),
@@ -2809,17 +2917,17 @@ function createStorageMethods(client) {
     },
     async confirmFileUpload(uploadId) {
       const resp = await client.confirmFileUpload(
-        create9(ConfirmFileUploadRequestSchema, { uploadId })
+        create10(ConfirmFileUploadRequestSchema, { uploadId })
       );
       return resp.file ?? null;
     },
     async getFile(id) {
-      const resp = await client.getFile(create9(GetFileRequestSchema, { id }));
+      const resp = await client.getFile(create10(GetFileRequestSchema, { id }));
       return resp.file ?? null;
     },
     async listFiles(params) {
       return client.listFiles(
-        create9(ListFilesRequestSchema, {
+        create10(ListFilesRequestSchema, {
           folder: params.folder,
           mimeType: params.mimeType,
           search: params.search,
@@ -2831,13 +2939,13 @@ function createStorageMethods(client) {
     },
     async getStorageUsage() {
       const resp = await client.getStorageUsage(
-        create9(GetStorageUsageRequestSchema, {})
+        create10(GetStorageUsageRequestSchema, {})
       );
       return resp.usage ?? null;
     },
     async updateFile(params) {
       const resp = await client.updateFile(
-        create9(UpdateFileRequestSchema, {
+        create10(UpdateFileRequestSchema, {
           id: params.id,
           filename: params.filename,
           folder: params.folder,
@@ -2848,7 +2956,7 @@ function createStorageMethods(client) {
     },
     async updateFileMetadata(params) {
       const resp = await client.updateFileMetadata(
-        create9(UpdateFileMetadataRequestSchema, {
+        create10(UpdateFileMetadataRequestSchema, {
           id: params.id,
           altText: params.altText,
           caption: params.caption,
@@ -2859,37 +2967,37 @@ function createStorageMethods(client) {
     },
     async deleteFile(id) {
       const resp = await client.deleteFile(
-        create9(DeleteFileRequestSchema, { id })
+        create10(DeleteFileRequestSchema, { id })
       );
       return resp.success;
     },
     async permanentlyDeleteFile(id) {
       const resp = await client.permanentlyDeleteFile(
-        create9(PermanentlyDeleteFileRequestSchema, { id })
+        create10(PermanentlyDeleteFileRequestSchema, { id })
       );
       return resp.success;
     },
     async restoreFile(id) {
       const resp = await client.restoreFile(
-        create9(RestoreFileRequestSchema, { id })
+        create10(RestoreFileRequestSchema, { id })
       );
       return resp.file ?? null;
     },
     async trackFileUsage(fileId, entityType) {
       const resp = await client.trackFileUsage(
-        create9(TrackFileUsageRequestSchema, { fileId, entityType })
+        create10(TrackFileUsageRequestSchema, { fileId, entityType })
       );
       return resp.file ?? null;
     },
     async removeFileUsage(fileId, entityType) {
       const resp = await client.removeFileUsage(
-        create9(RemoveFileUsageRequestSchema, { fileId, entityType })
+        create10(RemoveFileUsageRequestSchema, { fileId, entityType })
       );
       return resp.success;
     },
     async cleanupOrphanedFiles(params) {
       return client.cleanupOrphanedFiles(
-        create9(CleanupOrphanedFilesRequestSchema, {
+        create10(CleanupOrphanedFilesRequestSchema, {
           orphanThresholdDays: params?.orphanThresholdDays ?? 30,
           dryRun: params?.dryRun ?? false,
           limit: params?.limit ?? 100
@@ -2900,7 +3008,7 @@ function createStorageMethods(client) {
 }
 
 // src/lib/rpc/operations.ts
-import { create as create10 } from "@bufbuild/protobuf";
+import { create as create11 } from "@bufbuild/protobuf";
 import {
   ListOperationsRequestSchema as ListOperationsRequestSchema2,
   GetOperationRequestSchema,
@@ -2918,7 +3026,7 @@ function createOperationsMethods(client) {
     // ── CRUD ──────────────────────────────────────────────────
     async listOperations(params = {}) {
       return client.listOperations(
-        create10(ListOperationsRequestSchema2, {
+        create11(ListOperationsRequestSchema2, {
           configId: params.configId,
           category: params.category,
           isActive: params.isActive,
@@ -2930,7 +3038,7 @@ function createOperationsMethods(client) {
     },
     async getOperation(params) {
       const resp = await client.getOperation(
-        create10(GetOperationRequestSchema, {
+        create11(GetOperationRequestSchema, {
           id: params.id ?? "",
           key: params.key
         })
@@ -2939,7 +3047,7 @@ function createOperationsMethods(client) {
     },
     async createOperation(params) {
       const resp = await client.createOperation(
-        create10(CreateOperationRequestSchema, {
+        create11(CreateOperationRequestSchema, {
           key: params.key,
           name: params.name,
           endpoint: params.endpoint,
@@ -2963,7 +3071,7 @@ function createOperationsMethods(client) {
     },
     async updateOperation(params) {
       const resp = await client.updateOperation(
-        create10(UpdateOperationRequestSchema, {
+        create11(UpdateOperationRequestSchema, {
           id: params.id,
           name: params.name,
           description: params.description,
@@ -2984,20 +3092,20 @@ function createOperationsMethods(client) {
     },
     async deleteOperation(id) {
       const resp = await client.deleteOperation(
-        create10(DeleteOperationRequestSchema, { id })
+        create11(DeleteOperationRequestSchema, { id })
       );
       return resp.success;
     },
     async getSigningSecret() {
       const resp = await client.getSigningSecret(
-        create10(GetSigningSecretRequestSchema, {})
+        create11(GetSigningSecretRequestSchema, {})
       );
       return { secret: resp.secret, prefix: resp.prefix };
     },
     // ── Execution ─────────────────────────────────────────────
     async executeOperation(params) {
       return client.executeOperation(
-        create10(ExecuteOperationRequestSchema, {
+        create11(ExecuteOperationRequestSchema, {
           operationKey: params.operationKey,
           input: params.input,
           triggerType: params.triggerType,
@@ -3008,7 +3116,7 @@ function createOperationsMethods(client) {
     // ── Dead Letter Queue ─────────────────────────────────────
     async listDeadLetterEntries(params = {}) {
       return client.listDeadLetterEntries(
-        create10(ListDeadLetterEntriesRequestSchema, {
+        create11(ListDeadLetterEntriesRequestSchema, {
           operationKey: params.operationKey,
           limit: params.limit ?? 50,
           offset: params.offset ?? 0
@@ -3017,13 +3125,13 @@ function createOperationsMethods(client) {
     },
     async retryDeadLetterEntry(id) {
       const resp = await client.retryDeadLetterEntry(
-        create10(RetryDeadLetterEntryRequestSchema, { id })
+        create11(RetryDeadLetterEntryRequestSchema, { id })
       );
       return resp.success;
     },
     async dismissDeadLetterEntry(id) {
       const resp = await client.dismissDeadLetterEntry(
-        create10(DismissDeadLetterEntryRequestSchema, { id })
+        create11(DismissDeadLetterEntryRequestSchema, { id })
       );
       return resp.success;
     }
@@ -3031,7 +3139,7 @@ function createOperationsMethods(client) {
 }
 
 // src/lib/rpc/hooks.ts
-import { create as create11 } from "@bufbuild/protobuf";
+import { create as create12 } from "@bufbuild/protobuf";
 import {
   ListHooksRequestSchema,
   GetHookRequestSchema,
@@ -3048,7 +3156,7 @@ function createHooksMethods(client) {
     // ── Queries ──────────────────────────────────────────────
     async listHooks(params = {}) {
       return client.listHooks(
-        create11(ListHooksRequestSchema, {
+        create12(ListHooksRequestSchema, {
           event: params.event,
           isActive: params.isActive,
           configId: params.configId,
@@ -3058,13 +3166,13 @@ function createHooksMethods(client) {
       );
     },
     async getHook(id) {
-      const resp = await client.getHook(create11(GetHookRequestSchema, { id }));
+      const resp = await client.getHook(create12(GetHookRequestSchema, { id }));
       return resp.hook ?? null;
     },
     // ── Mutations ────────────────────────────────────────────
     async createHook(params) {
       const resp = await client.createHook(
-        create11(CreateHookRequestSchema, {
+        create12(CreateHookRequestSchema, {
           key: params.key,
           name: params.name,
           event: params.event,
@@ -3080,7 +3188,7 @@ function createHooksMethods(client) {
     },
     async updateHook(params) {
       const resp = await client.updateHook(
-        create11(UpdateHookRequestSchema, {
+        create12(UpdateHookRequestSchema, {
           id: params.id,
           name: params.name,
           description: params.description,
@@ -3094,21 +3202,21 @@ function createHooksMethods(client) {
     },
     async deleteHook(id) {
       const resp = await client.deleteHook(
-        create11(DeleteHookRequestSchema, { id })
+        create12(DeleteHookRequestSchema, { id })
       );
       return resp.success;
     },
     // ── Get by Key ──────────────────────────────────────────
     async getHookByKey(key) {
       const resp = await client.getHookByKey(
-        create11(GetHookByKeyRequestSchema, { key })
+        create12(GetHookByKeyRequestSchema, { key })
       );
       return resp.hook ?? null;
     },
     // ── Deliveries ──────────────────────────────────────────
     async listHookDeliveries(params) {
       return client.listHookDeliveries(
-        create11(ListHookDeliveriesRequestSchema, {
+        create12(ListHookDeliveriesRequestSchema, {
           hookId: params.hookId,
           status: params.status,
           limit: params.limit ?? 50,
@@ -3118,14 +3226,14 @@ function createHooksMethods(client) {
     },
     async retryHookDelivery(deliveryId) {
       const resp = await client.retryHookDelivery(
-        create11(RetryHookDeliveryRequestSchema, { deliveryId })
+        create12(RetryHookDeliveryRequestSchema, { deliveryId })
       );
       return resp.success;
     },
     // ── Testing ─────────────────────────────────────────────
     async testHook(params) {
       const resp = await client.testHook(
-        create11(TestHookRequestSchema, {
+        create12(TestHookRequestSchema, {
           hookId: params.hookId,
           testPayload: params.testPayload
         })
@@ -3139,7 +3247,7 @@ function createHooksMethods(client) {
 }
 
 // src/lib/rpc/notifications.ts
-import { create as create12 } from "@bufbuild/protobuf";
+import { create as create13 } from "@bufbuild/protobuf";
 import {
   ListNotificationsRequestSchema,
   MarkNotificationReadRequestSchema,
@@ -3149,7 +3257,7 @@ function createNotificationsMethods(client) {
   return {
     async listNotifications(params = {}) {
       return client.listNotifications(
-        create12(ListNotificationsRequestSchema, {
+        create13(ListNotificationsRequestSchema, {
           isRead: params.unreadOnly ? false : void 0,
           limit: params.limit ?? 20,
           offset: params.offset ?? 0
@@ -3158,13 +3266,13 @@ function createNotificationsMethods(client) {
     },
     async markNotificationRead(id) {
       const resp = await client.markNotificationRead(
-        create12(MarkNotificationReadRequestSchema, { id })
+        create13(MarkNotificationReadRequestSchema, { id })
       );
       return resp.success;
     },
     async markAllNotificationsRead() {
       const resp = await client.markAllNotificationsRead(
-        create12(MarkAllNotificationsReadRequestSchema, {})
+        create13(MarkAllNotificationsReadRequestSchema, {})
       );
       return resp.count;
     }
@@ -3172,7 +3280,7 @@ function createNotificationsMethods(client) {
 }
 
 // src/lib/rpc/cron-schedules.ts
-import { create as create13 } from "@bufbuild/protobuf";
+import { create as create14 } from "@bufbuild/protobuf";
 import {
   ListCronSchedulesRequestSchema,
   GetCronScheduleRequestSchema,
@@ -3189,7 +3297,7 @@ function createCronSchedulesMethods(client) {
     // ── Queries ──────────────────────────────────────────────
     async listCronSchedules(params = {}) {
       return client.listCronSchedules(
-        create13(ListCronSchedulesRequestSchema, {
+        create14(ListCronSchedulesRequestSchema, {
           configId: params.configId,
           isActive: params.isActive,
           limit: params.limit ?? 50,
@@ -3199,36 +3307,34 @@ function createCronSchedulesMethods(client) {
     },
     async getCronSchedule(id) {
       const resp = await client.getCronSchedule(
-        create13(GetCronScheduleRequestSchema, { id })
+        create14(GetCronScheduleRequestSchema, { id })
       );
       return resp.schedule ?? null;
     },
     async getCronScheduleByKey(key) {
       const resp = await client.getCronScheduleByKey(
-        create13(GetCronScheduleByKeyRequestSchema, { key })
+        create14(GetCronScheduleByKeyRequestSchema, { key })
       );
       return resp.schedule ?? null;
     },
     // ── Mutations ────────────────────────────────────────────
     async createCronSchedule(params) {
       const resp = await client.createCronSchedule(
-        create13(CreateCronScheduleRequestSchema, {
+        create14(CreateCronScheduleRequestSchema, {
           key: params.key,
           name: params.name,
           description: params.description,
           cron: params.cron,
           timezone: params.timezone,
           operationKey: params.operationKey,
-          configId: params.configId,
-          targetType: params.targetType,
-          targetConfig: params.targetConfig
+          configId: params.configId
         })
       );
       return resp.schedule ?? null;
     },
     async updateCronSchedule(params) {
       const resp = await client.updateCronSchedule(
-        create13(UpdateCronScheduleRequestSchema, {
+        create14(UpdateCronScheduleRequestSchema, {
           id: params.id,
           name: params.name,
           description: params.description,
@@ -3242,25 +3348,25 @@ function createCronSchedulesMethods(client) {
     },
     async deleteCronSchedule(id) {
       const resp = await client.deleteCronSchedule(
-        create13(DeleteCronScheduleRequestSchema, { id })
+        create14(DeleteCronScheduleRequestSchema, { id })
       );
       return resp.success;
     },
     async pauseCronSchedule(params) {
       const resp = await client.pauseCronSchedule(
-        create13(PauseCronScheduleRequestSchema, { id: params.id })
+        create14(PauseCronScheduleRequestSchema, { id: params.id })
       );
       return resp.schedule ?? null;
     },
     async resumeCronSchedule(params) {
       const resp = await client.resumeCronSchedule(
-        create13(ResumeCronScheduleRequestSchema, { id: params.id })
+        create14(ResumeCronScheduleRequestSchema, { id: params.id })
       );
       return resp.schedule ?? null;
     },
     async triggerCronSchedule(params) {
       const resp = await client.triggerCronSchedule(
-        create13(TriggerCronScheduleRequestSchema, { id: params.id })
+        create14(TriggerCronScheduleRequestSchema, { id: params.id })
       );
       return resp.schedule ?? null;
     }
@@ -3328,7 +3434,8 @@ async function createPlatformClient(options) {
     ),
     integrations: createIntegrationsMethods(
       createRpcClient(IntegrationsService2, transport)
-    )
+    ),
+    apps: createAppsMethods(createRpcClient(AppsService2, transport))
   };
 }
 function createPlatformClientWithHeaders(apiUrl, headers) {
@@ -3366,7 +3473,8 @@ function createPlatformClientWithHeaders(apiUrl, headers) {
     ),
     integrations: createIntegrationsMethods(
       createRpcClient(IntegrationsService2, transport)
-    )
+    ),
+    apps: createAppsMethods(createRpcClient(AppsService2, transport))
   };
 }
 async function getStorageAuth(options) {
@@ -3648,6 +3756,9 @@ function success(message, data) {
   }
   console.log(chalk2.green(`\u2713 ${interpolated}`));
 }
+function warn(message) {
+  console.log(chalk2.yellow(`\u26A0 ${message}`));
+}
 
 // src/commands/whoami.ts
 function registerWhoamiCommand(program2, globalOpts) {
@@ -4880,7 +4991,7 @@ import { resolve as resolve4 } from "path";
 function zeroCounts() {
   return { created: 0, updated: 0, deleted: 0 };
 }
-async function reconcileConfig(client, configId, manifest) {
+async function reconcileConfig(client, configId, manifest, options = {}) {
   const summary = {
     models: zeroCounts(),
     operations: zeroCounts(),
@@ -4890,7 +5001,8 @@ async function reconcileConfig(client, configId, manifest) {
     authProviders: zeroCounts(),
     placementsUpdated: false,
     profileSchemaUpdated: false,
-    apiKeys: []
+    apiKeys: [],
+    apps: zeroCounts()
   };
   const operationBaseUrl = manifest.operationBaseUrl ?? "";
   await reconcileModels(client, configId, manifest.models ?? [], summary);
@@ -4901,7 +5013,20 @@ async function reconcileConfig(client, configId, manifest) {
   await reconcileAuthProviders(client, manifest.authProviders ?? [], summary);
   await reconcilePlacements(client, configId, manifest.placements ?? [], summary);
   await reconcileProfileSchema(client, manifest, summary);
-  await reconcileApiKeys(client, manifest.key, manifest.apiKeys ?? [], summary);
+  await reconcileApiKeys(
+    client,
+    manifest.key,
+    manifest.apiKeys ?? [],
+    summary,
+    options.rotateKeys ?? false
+  );
+  await reconcileApps(
+    client,
+    options.tenantId,
+    options.projectId,
+    manifest.apps ?? {},
+    summary
+  );
   return summary;
 }
 async function reconcileModels(client, configId, models, summary) {
@@ -5242,7 +5367,7 @@ async function reconcileProfileSchema(client, manifest, summary) {
   });
   summary.profileSchemaUpdated = true;
 }
-async function reconcileApiKeys(client, configKey, apiKeys, summary) {
+async function reconcileApiKeys(client, configKey, apiKeys, summary, rotateKeys) {
   if (apiKeys.length === 0) return;
   const existing = await client.identity.listApiKeys({ limit: 200 });
   const existingByName = new Map(
@@ -5264,8 +5389,10 @@ async function reconcileApiKeys(client, configKey, apiKeys, summary) {
           updateScopes: true
         });
       }
-      const rotated = await client.identity.rotateApiKey(existingKey.id);
-      rawKey = rotated?.apiKey?.rawKey;
+      if (rotateKeys) {
+        const rotated = await client.identity.rotateApiKey(existingKey.id);
+        rawKey = rotated?.apiKey?.rawKey;
+      }
     } else {
       const result = await client.identity.createApiKey({
         name: key.name,
@@ -5301,6 +5428,111 @@ async function reconcileApiKeys(client, configKey, apiKeys, summary) {
     }
   }
 }
+async function reconcileApps(client, tenantId, projectId, apps, summary) {
+  const entries = Object.entries(apps);
+  if (entries.length === 0) return;
+  if (!tenantId || !projectId) {
+    console.warn(
+      "Warning: apps declared in foir.config.ts but tenant/project context not supplied; skipping apps reconcile."
+    );
+    return;
+  }
+  const existingList = await client.apps.listApps(tenantId, projectId);
+  const existingByName = new Map(existingList.map((a) => [a.name, a]));
+  for (const [name, input] of entries) {
+    const existing = existingByName.get(name);
+    if (!existing) {
+      await installApp(client, tenantId, projectId, name, input);
+      summary.apps.created += 1;
+      continue;
+    }
+    if (existing.manifestUrl !== input.source) {
+      console.warn(
+        `Warning: app "${name}" installed from ${existing.manifestUrl} but config declares ${input.source}; skipping. Uninstall explicitly (\`foir apps uninstall ${name}\`) and re-push to change sources.`
+      );
+      continue;
+    }
+    await client.apps.setAppMapping({
+      tenantId,
+      projectId,
+      name,
+      sourceMappings: toSourceMappings(input.mappings?.sources ?? {}),
+      sinkMappings: toSinkMappings(input.mappings?.sinks ?? {}),
+      placementFieldChoices: toPlacementFieldChoices(
+        input.mappings?.placementFields ?? {}
+      )
+    });
+    summary.apps.updated += 1;
+  }
+}
+async function installApp(client, tenantId, projectId, name, input) {
+  const installResp = await client.apps.installApp(
+    tenantId,
+    projectId,
+    input.source
+  );
+  const previewName = installResp.preview?.manifest?.name ?? name;
+  if (previewName !== name) {
+    throw new Error(
+      `apps.${name}: manifest declares name "${previewName}"; config key must match the manifest name.`
+    );
+  }
+  const missing = [];
+  for (const needed of installResp.preview?.sourceTypesToMap ?? []) {
+    if (!(input.mappings?.sources ?? {})[needed]) missing.push(`source ${needed}`);
+  }
+  for (const needed of installResp.preview?.sinkContractsToMap ?? []) {
+    if (!(input.mappings?.sinks ?? {})[needed]) missing.push(`sink ${needed}`);
+  }
+  for (const needed of installResp.preview?.placementsRequiringFieldChoice ?? []) {
+    if (!(input.mappings?.placementFields ?? {})[needed]) {
+      missing.push(`placement-field ${needed}`);
+    }
+  }
+  if (missing.length > 0) {
+    throw new Error(
+      `apps.${name}: missing mappings in foir.config.ts: ${missing.join(", ")}`
+    );
+  }
+  await client.apps.confirmInstallApp({
+    installTicket: installResp.installTicket,
+    sourceMappings: toSourceMappings(input.mappings?.sources ?? {}),
+    sinkMappings: toSinkMappings(input.mappings?.sinks ?? {}),
+    settings: input.settings,
+    placementFieldChoices: toPlacementFieldChoices(
+      input.mappings?.placementFields ?? {}
+    )
+  });
+}
+function toSourceMappings(input) {
+  const out = {};
+  for (const [k, v] of Object.entries(input)) {
+    out[k] = {
+      toModel: v.toModel,
+      naturalKey: v.naturalKey,
+      fields: v.fields
+    };
+  }
+  return out;
+}
+function toSinkMappings(input) {
+  const out = {};
+  for (const [k, v] of Object.entries(input)) {
+    out[k] = {
+      toModel: v.toModel,
+      naturalKey: v.naturalKey,
+      fields: v.fields
+    };
+  }
+  return out;
+}
+function toPlacementFieldChoices(input) {
+  const out = {};
+  for (const [k, v] of Object.entries(input)) {
+    out[k] = { model: v.model, field: v.field };
+  }
+  return out;
+}
 
 // src/lib/validate-integrations.ts
 import { fromJson as fromJson3 } from "@bufbuild/protobuf";
@@ -5603,23 +5835,6 @@ function syncEnvVar(envPath, key, value) {
 `, "utf-8");
   return "written";
 }
-function writeEnvVar(envPath, key, value) {
-  let content = "";
-  if (existsSync4(envPath)) {
-    content = readFileSync(envPath, "utf-8");
-    const regex = new RegExp(`^${key}=`, "m");
-    if (regex.test(content)) {
-      return false;
-    }
-  }
-  if (content && !content.endsWith("\n")) {
-    content += "\n";
-  }
-  content += `${key}=${value}
-`;
-  writeFileSync2(envPath, content, "utf-8");
-  return true;
-}
 function printSummary(summary) {
   const lines = [];
   const fmt = (label, c) => {
@@ -5645,7 +5860,11 @@ function printSummary(summary) {
   }
 }
 function registerPushCommand(program2, globalOpts) {
-  program2.command("push").description("Push foir.config.ts to the platform").option("--config <path>", "Path to config file (default: auto-discover)").option("--force", "Force reinstall (delete and recreate)", false).option("--env <path>", "Path to .env file (default: .env)").action(
+  program2.command("push").description("Push foir.config.ts to the platform").option("--config <path>", "Path to config file (default: auto-discover)").option("--force", "Force reinstall (delete and recreate)", false).option(
+    "--rotate-keys",
+    "Rotate existing API keys and rewrite their values in .env",
+    false
+  ).option("--env <path>", "Path to .env file (default: .env)").action(
     withErrorHandler(
       globalOpts,
       async (opts) => {
@@ -5670,7 +5889,9 @@ function registerPushCommand(program2, globalOpts) {
           console.log(chalk6.yellow(`\u26A0 ${warning}`));
         }
         assertValid(validation);
-        const client = await createPlatformClient(globalOpts());
+        const gOpts = globalOpts();
+        const client = await createPlatformClient(gOpts);
+        const resolved = await resolveProjectContext(gOpts);
         console.log(
           chalk6.dim(`Pushing config "${config2.key}" to platform...`)
         );
@@ -5685,7 +5906,11 @@ function registerPushCommand(program2, globalOpts) {
         }
         const configId = applyResult.id;
         console.log(chalk6.dim("Reconciling resources..."));
-        const summary = await reconcileConfig(client, configId, config2);
+        const summary = await reconcileConfig(client, configId, config2, {
+          rotateKeys: opts.rotateKeys ?? false,
+          tenantId: resolved?.project.tenantId,
+          projectId: resolved?.project.id
+        });
         console.log();
         console.log(chalk6.green("\u2713 Config applied successfully"));
         console.log(`  Config ID:  ${chalk6.cyan(configId)}`);
@@ -5724,14 +5949,18 @@ function registerPushCommand(program2, globalOpts) {
         if (envWrites.length > 0) {
           console.log();
           for (const { key, value, label } of envWrites) {
-            const written = writeEnvVar(envPath, key, value);
-            if (written) {
+            const result = syncEnvVar(envPath, key, value);
+            if (result === "unchanged") {
               console.log(
-                chalk6.green(`\u2713 ${label}`) + chalk6.dim(` \u2192 ${key} written to ${envPath}`)
+                chalk6.dim(`  ${label}: ${key} already up to date in ${envPath}, skipped`)
+              );
+            } else if (result === "replaced") {
+              console.log(
+                chalk6.yellow(`\u27F3 ${label}`) + chalk6.dim(` \u2192 ${key} updated in ${envPath}`)
               );
             } else {
               console.log(
-                chalk6.dim(`  ${label}: ${key} already exists in ${envPath}, skipped`)
+                chalk6.green(`\u2713 ${label}`) + chalk6.dim(` \u2192 ${key} written to ${envPath}`)
               );
             }
           }
@@ -5788,8 +6017,10 @@ function registerPullCommand(program2, globalOpts) {
         const resolved = await resolveProjectContext(globalOpts());
         let integrations;
         let extensions;
+        let apps;
         if (resolved) {
           const projectId = resolved.project.id;
+          const tenantId = resolved.project.tenantId;
           const protoIntegrations = await client.integrations.listIntegrations(projectId);
           if (protoIntegrations.length > 0) {
             integrations = {};
@@ -5804,10 +6035,18 @@ function registerPullCommand(program2, globalOpts) {
               extensions[cfg.name] = extensionConfigToInput(cfg);
             }
           }
+          const installedApps = await client.apps.listApps(tenantId, projectId);
+          if (installedApps.length > 0) {
+            apps = {};
+            for (const a of installedApps) {
+              apps[a.name] = appToInput(a);
+            }
+          }
         }
         const configDataNoInteg = { ...configData };
         delete configDataNoInteg.integrations;
         delete configDataNoInteg.extensions;
+        delete configDataNoInteg.apps;
         const manifest = {
           key: config2.key,
           name: config2.name,
@@ -5817,7 +6056,8 @@ function registerPullCommand(program2, globalOpts) {
           ...config2.connectionDomain ? { operationBaseUrl: config2.connectionDomain } : {},
           ...configDataNoInteg,
           ...integrations ? { integrations } : {},
-          ...extensions ? { extensions } : {}
+          ...extensions ? { extensions } : {},
+          ...apps ? { apps } : {}
         };
         delete manifest.force;
         const jsonContent = JSON.stringify(manifest, null, 2);
@@ -5870,6 +6110,9 @@ export default defineConfig(${jsonContent});
         if (extensions && Object.keys(extensions).length > 0) {
           parts.push(`${Object.keys(extensions).length} extension(s)`);
         }
+        if (apps) {
+          parts.push(`${Object.keys(apps).length} app(s)`);
+        }
         if (parts.length > 0) {
           console.log(chalk7.dim(`  Contains: ${parts.join(", ")}`));
         }
@@ -5877,6 +6120,25 @@ export default defineConfig(${jsonContent});
     )
   );
 }
+function appToInput(a) {
+  const mappingsBlob = a.mappings ?? {};
+  const out = { source: a.manifestUrl };
+  const settingsObj = a.settings;
+  if (settingsObj && Object.keys(settingsObj).length > 0) {
+    out.settings = settingsObj;
+  }
+  const sources = mappingsBlob.sources;
+  const sinks = mappingsBlob.sinks;
+  const placementFields = mappingsBlob.placement_fields;
+  if (sources && Object.keys(sources).length > 0 || sinks && Object.keys(sinks).length > 0 || placementFields && Object.keys(placementFields).length > 0) {
+    out.mappings = {
+      ...sources ? { sources } : {},
+      ...sinks ? { sinks } : {},
+      ...placementFields ? { placementFields } : {}
+    };
+  }
+  return out;
+}
 
 // src/commands/remove.ts
 import chalk8 from "chalk";
@@ -8252,6 +8514,260 @@ function registerConfigsCommands(program2, globalOpts) {
   );
 }
 
+// src/commands/apps.ts
+function registerAppsCommands(program2, globalOpts) {
+  const apps = program2.command("apps").description("Install and manage apps");
+  apps.command("list").description("List installed apps").action(
+    withErrorHandler(globalOpts, async () => {
+      const opts = globalOpts();
+      const resolved = await requireProject(opts);
+      const client = await createPlatformClient(opts);
+      const apps2 = await client.apps.listApps(
+        resolved.project.tenantId,
+        resolved.project.id
+      );
+      formatList(apps2, opts, {
+        columns: [
+          { key: "name", header: "Name", width: 24 },
+          {
+            key: "manifest",
+            header: "Version",
+            width: 10,
+            format: (v) => v?.version ?? ""
+          },
+          { key: "manifestUrl", header: "Manifest URL", width: 40 },
+          {
+            key: "installedAt",
+            header: "Installed",
+            width: 12,
+            format: (v) => {
+              const ts = v;
+              if (!ts?.seconds) return "";
+              return new Date(Number(ts.seconds) * 1e3).toLocaleDateString();
+            }
+          }
+        ]
+      });
+    })
+  );
+  apps.command("get <name>").description("Get an installed app by name").action(
+    withErrorHandler(globalOpts, async (name) => {
+      const opts = globalOpts();
+      const resolved = await requireProject(opts);
+      const client = await createPlatformClient(opts);
+      const app = await client.apps.getApp(
+        resolved.project.tenantId,
+        resolved.project.id,
+        name
+      );
+      if (!app) throw new Error(`App "${name}" not installed.`);
+      formatOutput(app, opts);
+    })
+  );
+  apps.command("install <manifestUrl>").description("Install an app from a manifest URL").option(
+    "--source-map <json>",
+    `Inline source-type mappings as JSON, e.g. '{"product":{"toModel":"product","naturalKey":"handle","fields":{"title":"title"}}}'`
+  ).option(
+    "--sink-map <json>",
+    "Inline sink-contract mappings as JSON"
+  ).option(
+    "--field-map <json>",
+    "Inline placement field choices as JSON, keyed by placement key"
+  ).action(
+    withErrorHandler(
+      globalOpts,
+      async (manifestUrl, cmdOpts) => {
+        const opts = globalOpts();
+        const resolved = await requireProject(opts);
+        const client = await createPlatformClient(opts);
+        const installResp = await client.apps.installApp(
+          resolved.project.tenantId,
+          resolved.project.id,
+          manifestUrl
+        );
+        if (!opts.json && !opts.quiet) {
+          const preview = installResp.preview;
+          console.error(
+            `preview: ${preview?.operationsToCreate.length ?? 0} ops, ${preview?.hooksToCreate.length ?? 0} hooks, ${preview?.placementsToCreate.length ?? 0} placements`
+          );
+          const sourcesNeeded = preview?.sourceTypesToMap ?? [];
+          const sinksNeeded = preview?.sinkContractsToMap ?? [];
+          const fieldsNeeded = preview?.placementsRequiringFieldChoice ?? [];
+          if (sourcesNeeded.length) {
+            console.error(
+              `source mappings required for: ${sourcesNeeded.join(", ")}`
+            );
+          }
+          if (sinksNeeded.length) {
+            console.error(
+              `sink mappings required for: ${sinksNeeded.join(", ")}`
+            );
+          }
+          if (fieldsNeeded.length) {
+            console.error(
+              `placement field choices required for: ${fieldsNeeded.join(", ")}`
+            );
+          }
+        }
+        const sourceMappings = parseJsonOpt(cmdOpts.sourceMap, "source-map");
+        const sinkMappings = parseJsonOpt(cmdOpts.sinkMap, "sink-map");
+        const placementFieldChoices = parseJsonOpt(
+          cmdOpts.fieldMap,
+          "field-map"
+        );
+        const app = await client.apps.confirmInstallApp({
+          installTicket: installResp.installTicket,
+          sourceMappings,
+          sinkMappings,
+          placementFieldChoices
+        });
+        if (opts.json) {
+          formatOutput(app, opts);
+        } else {
+          success(`Installed ${app?.name ?? ""}`);
+        }
+      }
+    )
+  );
+  apps.command("update <name>").description("Check for updates and apply if no rejected changes").option("--dry-run", "Show the diff without applying").action(
+    withErrorHandler(
+      globalOpts,
+      async (name, cmdOpts) => {
+        const opts = globalOpts();
+        const resolved = await requireProject(opts);
+        const client = await createPlatformClient(opts);
+        const updateResp = await client.apps.updateApp(
+          resolved.project.tenantId,
+          resolved.project.id,
+          name
+        );
+        if (updateResp.noChanges) {
+          if (!opts.quiet) success("no changes");
+          return;
+        }
+        if (!opts.json && !opts.quiet) {
+          for (const change of updateResp.changes) {
+            const classLabel = classToLabel(change.class);
+            console.error(`[${classLabel}] ${change.path}: ${change.description}`);
+          }
+        }
+        const hasRejected = updateResp.changes.some((c) => c.class === 3);
+        if (hasRejected) {
+          throw new Error(
+            "update rejected: one or more changes require admin resolution; see diff above"
+          );
+        }
+        if (cmdOpts.dryRun) return;
+        const app = await client.apps.confirmUpdateApp(
+          resolved.project.tenantId,
+          resolved.project.id,
+          name,
+          updateResp.newManifestHash
+        );
+        if (opts.json) {
+          formatOutput(app, opts);
+        } else {
+          success(`Updated ${name}`);
+        }
+      }
+    )
+  );
+  apps.command("uninstall <name>").description("Uninstall an app (runs __uninstall if declared)").option("--force", "Skip middleware __uninstall call; remove platform state regardless").action(
+    withErrorHandler(
+      globalOpts,
+      async (name, cmdOpts) => {
+        const opts = globalOpts();
+        const resolved = await requireProject(opts);
+        const client = await createPlatformClient(opts);
+        const resp = await client.apps.uninstallApp(
+          resolved.project.tenantId,
+          resolved.project.id,
+          name,
+          !!cmdOpts.force
+        );
+        if (!opts.quiet) {
+          if (resp.forced) warn(`force-uninstalled ${name} (external resources may be orphaned)`);
+          else success(`uninstalled ${name}`);
+        }
+      }
+    )
+  );
+  apps.command("trigger <appName> <operationKey>").description(
+    "Trigger an operation on an installed app. operationKey is the bare manifest key (the namespaced form is built for you)."
+  ).option("-d, --data <json>", "Input data as JSON").action(
+    withErrorHandler(
+      globalOpts,
+      async (appName, operationKey, cmdOpts) => {
+        const opts = globalOpts();
+        const resolved = await requireProject(opts);
+        const client = await createPlatformClient(opts);
+        const stored = operationKey.includes("/") ? operationKey : `${appName}/${operationKey}`;
+        const input = cmdOpts.data ? JSON.parse(String(cmdOpts.data)) : void 0;
+        const executionId = await client.apps.triggerOperation(
+          resolved.project.tenantId,
+          resolved.project.id,
+          stored,
+          input
+        );
+        if (opts.json) {
+          formatOutput({ executionId }, opts);
+        } else {
+          success(`triggered ${stored}`, { executionId });
+        }
+      }
+    )
+  );
+  apps.command("validate <manifestUrl>").description("Dry-run a manifest URL against the validator; prints any issues").action(
+    withErrorHandler(globalOpts, async (manifestUrl) => {
+      const opts = globalOpts();
+      const client = await createPlatformClient(opts);
+      const resp = await client.apps.validateManifestUrl(manifestUrl);
+      if (opts.json) {
+        formatOutput(resp, opts);
+        return;
+      }
+      if (resp.ok) {
+        success("manifest validates cleanly");
+        return;
+      }
+      for (const iss of resp.issues) {
+        const sev = iss.severity === 1 ? "error" : "warning";
+        console.error(`[${sev}] ${iss.path}: ${iss.message}`);
+      }
+      throw new Error(`manifest has ${resp.issues.length} issue(s)`);
+    })
+  );
+}
+async function requireProject(opts) {
+  const resolved = await resolveProjectContext(opts);
+  if (!resolved) {
+    throw new Error(
+      "No project selected. Run `foir select-project` or set FOIR_PROJECT."
+    );
+  }
+  return resolved;
+}
+function parseJsonOpt(value, flag) {
+  if (!value) return void 0;
+  try {
+    return JSON.parse(String(value));
+  } catch (err) {
+    throw new Error(`--${flag} is not valid JSON: ${err.message}`);
+  }
+}
+function classToLabel(n) {
+  switch (n) {
+    case 1:
+      return "safe";
+    case 2:
+      return "confirm";
+    case 3:
+      return "REJECTED";
+    default:
+      return "?";
+  }
+}
+
 // src/cli.ts
 var __filename = fileURLToPath(import.meta.url);
 var __dirname = dirname4(__filename);
@@ -8300,4 +8816,5 @@ registerFilesCommands(program, getGlobalOpts);
 registerNotesCommands(program, getGlobalOpts);
 registerNotificationsCommands(program, getGlobalOpts);
 registerConfigsCommands(program, getGlobalOpts);
+registerAppsCommands(program, getGlobalOpts);
 program.parse();