@elevasis/sdk 1.49.0 → 1.51.0

package/dist/cli.cjs

@@ -23570,6 +23570,10 @@ var init_profile_registry = __esm({
 });
 
 // ../core/src/organization-model/domains/systems.ts
+function isSystemLifecycleVisible(lifecycle, enabled) {
+  if (enabled === false) return false;
+  return lifecycle !== "draft" && lifecycle !== "deprecated" && lifecycle !== "archived";
+}
 function isReservedPlatformProfileId(profileId) {
   return BUILT_IN_VALIDATED_PROFILE_IDS.includes(profileId);
 }
@@ -23586,7 +23590,10 @@ var init_systems = __esm({
     init_ontology();
     init_profile_registry();
     SystemKindSchema = external_exports.enum(["product", "operational", "platform", "diagnostic"]).meta({ label: "System kind", color: "blue" });
-    SystemLifecycleSchema = external_exports.enum(["draft", "beta", "active", "deprecated", "archived"]).meta({ label: "Lifecycle", color: "teal" });
+    SystemLifecycleSchema = external_exports.enum(["draft", "beta", "active", "deprecated", "archived"]).meta({
+      label: "Lifecycle",
+      color: "teal"
+    });
     SystemIdSchema = ModelIdSchema;
     SystemPathSchema = external_exports.string().trim().min(1).regex(
       /^[a-z0-9][a-z0-9-]*(?:\.[a-z0-9][a-z0-9-]*)*$/,
@@ -23706,8 +23713,13 @@ var init_systems = __esm({
       parentSystemId: SystemIdSchema.optional(),
       /** Optional UI presence. Systems without UI omit this. */
       ui: SystemUiSchema.optional(),
-      /** Canonical lifecycle state. `beta` is what gates a System to dev-mode viewers. */
-      lifecycle: SystemLifecycleSchema.optional(),
+      /**
+       * Canonical lifecycle state. `beta` is what gates a System to dev-mode
+       * viewers. Defaults to `active` (not `.optional()`) so an omitted field
+       * never reaches a consumer as `undefined` -- see `isSystemLifecycleVisible`
+       * and `systemLifecycleAllowsAccess` above.
+       */
+      lifecycle: SystemLifecycleSchema.default("active"),
       /** Optional role responsible for this system. */
       responsibleRoleId: ModelIdSchema.meta({ ref: "role" }).optional(),
       /** Optional knowledge nodes that govern this system. */
@@ -24229,10 +24241,6 @@ function addIssue(ctx, path3, message) {
     message
   });
 }
-function isLifecycleEnabled(lifecycle, enabled) {
-  if (enabled === false) return false;
-  return lifecycle !== "deprecated" && lifecycle !== "archived";
-}
 function defaultSystemPathFor(id) {
   return `/${id.replaceAll(".", "/")}`;
 }
@@ -24303,11 +24311,11 @@ function refineOrganizationModel(model, ctx) {
         systemIdsByEffectivePath.set(effectivePath, path3);
       }
     }
-    if (hasChildren && isLifecycleEnabled(system.lifecycle, system.enabled)) {
+    if (hasChildren && isSystemLifecycleVisible(system.lifecycle, system.enabled)) {
       const hasEnabledDescendant = Object.values(system.systems ?? system.subsystems ?? {}).some(
-        (candidate) => isLifecycleEnabled(candidate.lifecycle, candidate.enabled)
+        (candidate) => isSystemLifecycleVisible(candidate.lifecycle, candidate.enabled)
       ) || allSystems.some(
-        (candidate) => candidate.path.startsWith(`${path3}.`) && !candidate.path.slice(path3.length + 1).includes(".") && isLifecycleEnabled(candidate.system.lifecycle, candidate.system.enabled)
+        (candidate) => candidate.path.startsWith(`${path3}.`) && !candidate.path.slice(path3.length + 1).includes(".") && isSystemLifecycleVisible(candidate.system.lifecycle, candidate.system.enabled)
       );
       if (!hasEnabledDescendant) {
         addIssue(ctx, [...schemaPath, "lifecycle"], `System "${path3}" is active but has no active descendants`);
@@ -24722,6 +24730,7 @@ var init_schema_refinements = __esm({
     "use strict";
     init_zod();
     init_resources();
+    init_systems();
     init_cross_ref();
     init_ontology();
   }
@@ -25054,7 +25063,7 @@ var init_content = __esm({
   "../core/src/organization-model/catalogs/content.ts"() {
     "use strict";
     init_zod();
-    ContentPipelineStepActorSchema = external_exports.enum(["workflow", "agent", "vendor"]);
+    ContentPipelineStepActorSchema = external_exports.enum(["workflow", "agent", "vendor", "human"]);
     ContentPipelineStepReviewModeSchema = external_exports.enum(["none", "required"]);
     ContentPayloadFieldTypeSchema = external_exports.enum(["string", "text", "number", "boolean", "url", "string-array"]);
     ContentPayloadFieldDeclarationSchema = external_exports.object({
@@ -26291,6 +26300,13 @@ var init_lead_gen = __esm({
   }
 });
 
+// ../core/src/organization-model/catalogs/content-producer-factory.ts
+var init_content_producer_factory = __esm({
+  "../core/src/organization-model/catalogs/content-producer-factory.ts"() {
+    "use strict";
+  }
+});
+
 // ../core/src/organization-model/catalogs/define-content-pipeline.ts
 var init_define_content_pipeline = __esm({
   "../core/src/organization-model/catalogs/define-content-pipeline.ts"() {
@@ -26298,6 +26314,49 @@ var init_define_content_pipeline = __esm({
   }
 });
 
+// ../core/src/organization-model/catalogs/define-system-api-interface.ts
+function formatAdoptableProfiles() {
+  return SYSTEM_INTERFACE_PROFILES.map((profile) => `"${profile.readinessProfile}"`).join(", ");
+}
+function defineSystemApiInterface(input) {
+  const interfaceKey = input.interfaceKey ?? "api";
+  const identity = `${input.systemPath}/${interfaceKey}`;
+  const catalogEntry = SYSTEM_INTERFACE_PROFILES.find((profile) => profile.readinessProfile === input.readinessProfile);
+  if (catalogEntry === void 0) {
+    throw new Error(
+      `System Interface "${identity}" declares readinessProfile "${input.readinessProfile}", which is not a member of SYSTEM_INTERFACE_PROFILES. Adoptable profiles: ${formatAdoptableProfiles()}. An uncataloged id names no route platform code actually serves -- it computes as ready and answers every request with a 503. Add an entry to SYSTEM_INTERFACE_PROFILES (packages/core/src/organization-model/domains/systems.ts) before declaring it on System "${input.systemPath}", or use one of the ids above.`
+    );
+  }
+  if (input.resourceIds.length === 0) {
+    throw new Error(
+      `System Interface "${identity}" declares an empty resourceIds list. An interface with no scoped active resource computes as ready and answers every route with a 503 -- scope at least one active resource for System "${input.systemPath}".`
+    );
+  }
+  const isBuiltIn = catalogEntry.validation === "built-in";
+  if (!isBuiltIn && input.readinessContract === void 0) {
+    throw new Error(
+      `System Interface "${identity}" adopts contract-validated profile "${input.readinessProfile}" but declares no readinessContract. Contract-validated profiles have no registered platform validator -- each adopter's structural requirements differ, so System "${input.systemPath}" must pass a readinessContract with at least one requiredCatalogs entry.`
+    );
+  }
+  if (isBuiltIn && input.readinessContract !== void 0) {
+    throw new Error(
+      `System Interface "${identity}" declares a readinessContract against built-in profile "${input.readinessProfile}". Built-in profiles derive their requirements from platform code registered via registerBuiltInReadinessProfile, and the readiness engine never reads an authored contract against one -- it is silently ignored (the "else if (readinessContract)" branch in readiness/engine.ts is unreachable for a built-in profile). Delete the readinessContract on System "${input.systemPath}"; it asserts nothing today.`
+    );
+  }
+  return {
+    lifecycle: input.lifecycle ?? "active",
+    readinessProfile: input.readinessProfile,
+    resourceIds: input.resourceIds,
+    ...input.readinessContract !== void 0 ? { readinessContract: input.readinessContract } : {}
+  };
+}
+var init_define_system_api_interface = __esm({
+  "../core/src/organization-model/catalogs/define-system-api-interface.ts"() {
+    "use strict";
+    init_systems();
+  }
+});
+
 // ../core/src/organization-model/readiness/engine.ts
 function addReadinessIssue(issues, family, code, message, details = {}) {
   issues.push({
@@ -26638,7 +26697,9 @@ var init_organization_model = __esm({
     init_graph();
     init_lead_gen();
     init_content();
+    init_content_producer_factory();
     init_define_content_pipeline();
+    init_define_system_api_interface();
     init_branding();
     init_systems();
     init_resources();
@@ -45276,7 +45337,7 @@ function detectMissingApiInterfaceDeclarations(orgName, organizationModel) {
   for (const resource of Object.values(organizationModel.resources ?? {})) {
     const ontology = resource.ontology;
     if (ontology === void 0) continue;
-    const hasOntologyBindings = ontology.actions !== void 0 && ontology.actions.length > 0 || ontology.writes !== void 0 && ontology.writes.length > 0;
+    const hasOntologyBindings = ontology.actions !== void 0 && ontology.actions.length > 0 || ontology.writes !== void 0 && ontology.writes.length > 0 || ontology.reads !== void 0 && ontology.reads.length > 0 || ontology.usesCatalogs !== void 0 && ontology.usesCatalogs.length > 0;
     if (!hasOntologyBindings) continue;
     const existing = apiBoundResourcesBySystemPath.get(resource.systemPath);
     if (existing) {
@@ -45309,18 +45370,15 @@ function validateDeclaredSystemInterfaceReadiness(orgName, organizationModel, op
   for (const { path: path3, system } of listAllSystems(model)) {
     if (system.apiInterface === void 0) continue;
     const interfaceKey = "api";
-    const resourceIds = system.apiInterface.resourceIds ?? [];
-    if (resourceIds.length === 0) {
-      const readinessProfile = system.apiInterface.readinessProfile;
-      if (readinessProfile !== void 0 && !SYSTEM_INTERFACE_PROFILES.some((profile) => profile.readinessProfile === readinessProfile)) {
-        addSystemInterfaceIssue(issues, orgName, path3, interfaceKey, {
-          family: "SYSTEM_INTERFACE_INVALID",
-          code: "unknown-readiness-profile",
-          path: `systems.${path3}.apiInterface.readinessProfile`,
-          ref: readinessProfile,
-          message: `System Interface "${path3}/${interfaceKey}" references unknown readiness profile "${readinessProfile}".`
-        });
-      }
+    const readinessProfile = system.apiInterface.readinessProfile;
+    if (readinessProfile !== void 0 && !SYSTEM_INTERFACE_PROFILES.some((profile) => profile.readinessProfile === readinessProfile)) {
+      addSystemInterfaceIssue(issues, orgName, path3, interfaceKey, {
+        family: "SYSTEM_INTERFACE_INVALID",
+        code: "unknown-readiness-profile",
+        path: `systems.${path3}.apiInterface.readinessProfile`,
+        ref: readinessProfile,
+        message: `System Interface "${path3}/${interfaceKey}" references unknown readiness profile "${readinessProfile}".`
+      });
     }
     const result = computeInterfaceReadiness(model, { systemPath: path3, interfaceKey });
     for (const issue2 of result.issues) {
@@ -47661,6 +47719,13 @@ var init_clickup = __esm({
   }
 });
 
+// ../core/src/execution/engine/tools/integration/types/instagram.ts
+var init_instagram = __esm({
+  "../core/src/execution/engine/tools/integration/types/instagram.ts"() {
+    "use strict";
+  }
+});
+
 // ../core/src/execution/engine/tools/integration/types/index.ts
 var init_types9 = __esm({
   "../core/src/execution/engine/tools/integration/types/index.ts"() {
@@ -47678,6 +47743,7 @@ var init_types9 = __esm({
     init_tomba();
     init_millionverifier();
     init_clickup();
+    init_instagram();
   }
 });
 
@@ -48771,7 +48837,14 @@ var init_api_schemas5 = __esm({
     "use strict";
     init_zod();
     init_validation();
-    CredentialTypeSchema = external_exports.enum(["oauth", "api-key", "webhook-secret", "api-key-secret", "clickup"]);
+    CredentialTypeSchema = external_exports.enum([
+      "oauth",
+      "api-key",
+      "webhook-secret",
+      "api-key-secret",
+      "clickup",
+      "instagram"
+    ]);
     CredentialValueSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((val) => Object.keys(val).length > 0, { message: "Credential value must not be empty" }).refine((val) => Object.keys(val).length <= 50, { message: "Credential value has too many keys (max 50)" }).refine(
       (val) => {
         for (const v of Object.values(val)) {
@@ -49225,7 +49298,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@elevasis/sdk",
-      version: "1.49.0",
+      version: "1.51.0",
       description: "SDK for building Elevasis organization resources",
       type: "module",
       bin: {
@@ -49257,6 +49330,7 @@ var init_package = __esm({
         "dist/test-utils/index.js",
         "dist/test-utils/index.d.ts",
         "dist/node/",
+        "dist/chunk-*.js",
         "dist/cli.cjs",
         "reference/"
       ],
@@ -49276,8 +49350,14 @@ var init_package = __esm({
         "remark-gfm": "^4.0.1"
       },
       peerDependencies: {
+        vitest: ">=3",
         zod: "^4.1.0"
       },
+      peerDependenciesMeta: {
+        vitest: {
+          optional: true
+        }
+      },
       devDependencies: {
         "@repo/core": "workspace:*",
         "@repo/eslint-config": "workspace:*",
@@ -49292,6 +49372,7 @@ var init_package = __esm({
         "rollup-plugin-dts": "^6.3.0",
         tsup: "^8.0.0",
         typescript: "5.9.2",
+        vitest: "^3.2.4",
         zod: "^4.1.0"
       }
     };
@@ -49992,18 +50073,35 @@ function emitSystemEntry(opts) {
   const order = opts.order ?? 10;
   let apiInterfaceBlock = "";
   let apiInterfaceNote;
+  let importLine;
   if (opts.apiBacked) {
     const cataloged = SYSTEM_INTERFACE_PROFILES.find(
       (profile) => profile.systemPath === opts.id && profile.interfaceKey === "api"
     );
-    if (cataloged !== void 0) {
+    const resourceIds = (opts.resourceIds ?? []).filter((id) => id.trim().length > 0);
+    if (cataloged !== void 0 && cataloged.validation === "built-in" && resourceIds.length > 0) {
+      defineSystemApiInterface({
+        systemPath: opts.id,
+        readinessProfile: cataloged.readinessProfile,
+        resourceIds
+      });
+      importLine = `import { defineSystemApiInterface } from '@elevasis/core/organization-model'`;
+      const resourceIdsLines = resourceIds.map((id) => `        '${id}'`).join(",\n");
       apiInterfaceBlock = `
-    apiInterface: {
-      lifecycle: 'active',
-      readinessProfile: '${cataloged.readinessProfile}'
-    },`;
+    apiInterface: defineSystemApiInterface({
+      systemPath: '${opts.id}',
+      readinessProfile: '${cataloged.readinessProfile}',
+      resourceIds: [
+${resourceIdsLines}
+      ]
+    }),`;
+    } else if (cataloged !== void 0 && cataloged.validation === "built-in") {
+      apiInterfaceNote = `System \`${opts.id}\` is cataloged for readiness profile "${cataloged.readinessProfile}", but a brand-new System has no scoped resources yet to back an \`apiInterface\`. \`apiInterface\` was NOT added. Once real resource ids exist for this system, declare it with \`defineSystemApiInterface\` from '@elevasis/core/organization-model' (or re-run \`om:scaffold:fill\`, which does this for you).`;
+    } else if (cataloged !== void 0) {
+      apiInterfaceNote = `System \`${opts.id}\` adopts contract-validated readiness profile "${cataloged.readinessProfile}". \`apiInterface\` was NOT added \u2014 declare it with \`defineContentSystem\` from '@elevasis/core/organization-model', which derives the readinessContract, content:object/item, and status catalog from your pipelines, item voice, and status vocabulary.`;
     } else {
-      apiInterfaceNote = `System \`${opts.id}\` is not on a cataloged readiness profile (only sales.lead-gen and sales.crm ship built-in profiles today). \`apiInterface\` was NOT added. Declare it manually once real resourceIds exist for this system, using either a cataloged profile or a custom \`readinessProfile\` paired with a \`readinessContract\`.`;
+      const adoptable = SYSTEM_INTERFACE_PROFILES.filter((profile) => profile.interfaceKey === "api").map((profile) => `"${profile.systemPath}"`).join(", ");
+      apiInterfaceNote = `System \`${opts.id}\` is not on a cataloged readiness profile (adoptable system paths today: ${adoptable}). \`apiInterface\` was NOT added. A custom System extends behavior through workflows/operations plus ontology, resources, and topology \u2014 omitting apiInterface entirely is the designed opt-out.`;
     }
   }
   const code = `  {
@@ -50019,7 +50117,8 @@ function emitSystemEntry(opts) {
 `;
   const startAnchor = /^(?!\s*(?:\/\/|\*|\/\*)).*\bexport const templateSystems\s*=/m;
   const anchor = /^\] as const\s*$/m;
-  return { code, startAnchor, anchor, apiInterfaceNote };
+  const importAnchor = /^\/\/ -{75,}\n\/\/ Feature/m;
+  return { code, startAnchor, anchor, apiInterfaceNote, importLine, importAnchor };
 }
 var init_emit_system = __esm({
   "src/cli/commands/om/emit-system.ts"() {
@@ -50186,10 +50285,20 @@ async function scaffoldSystem(opts) {
     });
     apiBacked = answer.trim().toLowerCase() === "y";
   }
-  const { code, anchor, startAnchor, apiInterfaceNote } = emitSystemEntry({ id, title, kind, apiBacked });
+  const { code, anchor, startAnchor, apiInterfaceNote, importLine, importAnchor } = emitSystemEntry({
+    id,
+    title,
+    kind,
+    apiBacked,
+    resourceIds: options.resourceIds
+  });
   const shouldWrite = options.write === true || options.dryRun === false;
   if (!shouldWrite) {
     console.log(source_default.cyan("Dry-run mode (default) \u2014 no files written. Pass --write to apply.\n"));
+    if (importLine !== void 0) {
+      console.log(source_default.gray("Import line to add near the top of core/config/organization-model/systems.ts:"));
+      console.log(importLine);
+    }
     console.log(source_default.gray("Proposed addition to core/config/organization-model/systems.ts:"));
     console.log(code);
     if (apiInterfaceNote !== void 0) {
@@ -50200,6 +50309,9 @@ async function scaffoldSystem(opts) {
   const systemsFilePath = (0, import_node_path13.join)(getOrganizationModelDir(projectDir), "systems.ts");
   try {
     await withSnapshotRollback([systemsFilePath], async () => {
+      if (importLine !== void 0) {
+        await appendBeforeAnchor(systemsFilePath, importLine + "\n", importAnchor);
+      }
       await appendBeforeAnchor(systemsFilePath, code, anchor, startAnchor);
       const validationError = runValidation(projectDir);
       if (validationError !== null) {
@@ -50646,6 +50758,14 @@ var init_scaffold_knowledge = __esm({
 function toConstName(systemPath) {
   return systemPath.split(/[.-]/).map((segment, index) => index === 0 ? segment : segment.charAt(0).toUpperCase() + segment.slice(1)).join("") + "ApiInterface";
 }
+function buildContentPlaceholderReadinessContract(systemPath) {
+  return {
+    requiredObjects: [`${systemPath}:object/item`],
+    requiredCatalogs: [
+      "TODO -- replace with this System real pipeline, step, and status catalog ids (see defineContentPipeline and defineContentSystem in the organization-model subpath)"
+    ]
+  };
+}
 function emitApiInterfaceBlock(gap) {
   const constName = toConstName(gap.systemPath);
   const cataloged = SYSTEM_INTERFACE_PROFILES.find(
@@ -50658,17 +50778,44 @@ function emitApiInterfaceBlock(gap) {
     );
   }
   const readinessProfile = cataloged.readinessProfile;
-  const resourceIdsField = gap.resourceIds.length === 0 ? "" : `,
-  resourceIds: [
-    ${gap.resourceIds.map((id) => `'${id}'`).join(",\n    ")}
-  ]`;
+  if (gap.resourceIds.length === 0) {
+    throw new Error(
+      `Cannot emit an apiInterface for system path "${gap.systemPath}": the gap carries no resourceIds. defineSystemApiInterface requires at least one scoped resource id \u2014 an interface with none computes as ready and answers every route with a 503. Re-run this scaffolder once the system has at least one API-backed resource declared.`
+    );
+  }
+  const resourceIds = gap.resourceIds;
+  const isContractValidated = cataloged.validation === "contract";
+  const readinessContract = isContractValidated ? buildContentPlaceholderReadinessContract(gap.systemPath) : void 0;
+  defineSystemApiInterface({
+    systemPath: gap.systemPath,
+    readinessProfile,
+    resourceIds,
+    ...readinessContract !== void 0 ? { readinessContract } : {}
+  });
+  const resourceIdsLines = resourceIds.map((id) => `    '${id}'`).join(",\n");
+  const readinessContractField = readinessContract === void 0 ? "" : `,
+  // TODO: requiredCatalogs below is a placeholder. Replace it with this System's actual pipeline,
+  // step, and status catalog ids before deploying \u2014 see extend-content.md in the SDK scaffold docs.
+  readinessContract: {
+    requiredObjects: [
+      ${readinessContract.requiredObjects.map((id) => `'${id}'`).join(",\n      ")}
+    ],
+    requiredCatalogs: [
+      ${readinessContract.requiredCatalogs.map((id) => `'${id}'`).join(",\n      ")}
+    ]
+  }`;
   const constFileCode = `// Auto-generated by om:scaffold:fill \u2014 do not edit manually.
 // Regenerate by running: elevasis-sdk om:scaffold:fill --gaps <path>
 
-export const ${constName} = {
-  lifecycle: 'active' as const,
-  readinessProfile: '${readinessProfile}'${resourceIdsField}
-}
+import { defineSystemApiInterface } from '@elevasis/core/organization-model'
+
+export const ${constName} = defineSystemApiInterface({
+  systemPath: '${gap.systemPath}',
+  readinessProfile: '${readinessProfile}',
+  resourceIds: [
+${resourceIdsLines}
+  ]${readinessContractField}
+})
 `;
   const importLine = `import { ${constName} } from './api-interfaces/${gap.systemPath}'`;
   const fieldLine = `    apiInterface: ${constName},`;
@@ -50769,11 +50916,21 @@ async function scaffoldFill(opts) {
           gap.resourceIds
         ) : gap.resourceId ? [gap.resourceId] : []
       );
-      const emitResult = emitApiInterfaceBlock({
-        systemPath,
-        resourceIds,
-        message: gap.reason
-      });
+      let emitResult;
+      try {
+        emitResult = emitApiInterfaceBlock({
+          systemPath,
+          resourceIds,
+          message: gap.reason
+        });
+      } catch (err) {
+        skippedGaps.push({
+          field: gap.field,
+          resourceId: gap.resourceId,
+          reason: err instanceof Error ? err.message : String(err)
+        });
+        continue;
+      }
       const constFilePath = (0, import_node_path17.join)(getOrganizationModelDir(projectDir), "api-interfaces", `${systemPath}.ts`);
       touchedFiles.push(constFilePath);
       emitResults.push(emitResult);
@@ -51865,9 +52022,10 @@ Credentials (${data.credentials.length}):
 // src/cli/commands/creds/creds-create.ts
 init_source();
 init_ora();
+init_src();
 init_api_client();
 var CREDENTIAL_NAME_REGEX = /^[a-z0-9]+(-[a-z0-9]+)*$/;
-var VALID_TYPES = ["api-key", "webhook-secret"];
+var VALID_TYPES = CredentialTypeSchema.options.filter((type) => type !== "oauth");
 async function createCreds(apiUrl, name, type, valueJson) {
   if (!name || name.length < 1 || name.length > 100) {
     throw new Error("Credential name must be 1-100 characters");
@@ -51887,6 +52045,8 @@ Note: OAuth credentials must be created through the Command Center UI`
   if (!valueJson) {
     throw new Error(
       `Credential value is required. Provide it with --value '{"apiKey":"sk-..."}'
+For a secret you do not want in shell history, write it to a file and pass
+--value @json:tmp/credential.json instead.
 Value must be a valid JSON object.`
     );
   }
@@ -51906,11 +52066,7 @@ Example: --value '{"apiKey":"sk-abc123"}'`
     throw new Error("Credential value must not be empty");
   }
   const spinner = ora("Creating credential...").start();
-  const result = await apiPost(
-    "/api/external/credentials",
-    { name, type, value },
-    apiUrl
-  );
+  const result = await apiPost("/api/external/credentials", { name, type, value }, apiUrl);
   spinner.stop();
   console.log(source_default.green(`
 Credential created successfully!`));
@@ -51944,10 +52100,8 @@ Example: --value '{"apiKey":"sk-new-key"}'`
   const credential = data.credentials.find((c) => c.name === name);
   if (!credential) {
     spinner.stop();
-    throw new Error(
-      `Credential '${name}' not found.
-Run "elevasis-sdk creds list" to see available credentials.`
-    );
+    throw new Error(`Credential '${name}' not found.
+Run "elevasis-sdk creds list" to see available credentials.`);
   }
   await apiPatch(`/api/external/credentials/${credential.id}`, { value }, apiUrl);
   spinner.stop();
@@ -52042,21 +52196,31 @@ Credential '${name}' deleted successfully.`));
 // src/cli/commands/creds/creds.ts
 function registerCredsCommand(program3) {
   const creds = program3.command("creds").description("Manage organization credentials");
-  creds.command("list").description("List all credentials (metadata only, no secrets)").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").option("--json", "Output as JSON").action(wrapAction("creds list", async (options) => {
-    await listCreds(resolveApiUrl(options.apiUrl, options.prod), options.json);
-  }));
-  creds.command("create").description("Create a new credential").requiredOption("--name <name>", "Credential name (lowercase, digits, hyphens)").requiredOption("--type <type>", "Credential type (api-key, webhook-secret)").option("--value <json>", "Credential value as JSON string").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").action(wrapAction("creds create", async (options) => {
-    await createCreds(resolveApiUrl(options.apiUrl, options.prod), options.name, options.type, options.value);
-  }));
-  creds.command("update <name>").description("Update a credential value").requiredOption("--value <json>", "New credential value as JSON string").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").action(wrapAction("creds update", async (name, options) => {
-    await updateCreds(resolveApiUrl(options.apiUrl, options.prod), name, options.value);
-  }));
-  creds.command("rename <name>").description("Rename a credential").requiredOption("--to <newName>", "New credential name").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").action(wrapAction("creds rename", async (name, options) => {
-    await renameCreds(resolveApiUrl(options.apiUrl, options.prod), name, options.to);
-  }));
-  creds.command("delete <name>").description("Delete a credential").option("--force", "Skip confirmation prompt").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").action(wrapAction("creds delete", async (name, options) => {
-    await deleteCreds(resolveApiUrl(options.apiUrl, options.prod), name, options.force);
-  }));
+  creds.command("list").description("List all credentials (metadata only, no secrets)").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").option("--json", "Output as JSON").action(
+    wrapAction("creds list", async (options) => {
+      await listCreds(resolveApiUrl(options.apiUrl, options.prod), options.json);
+    })
+  );
+  creds.command("create").description("Create a new credential").requiredOption("--name <name>", "Credential name (lowercase, digits, hyphens)").requiredOption("--type <type>", "Credential type (api-key, webhook-secret, api-key-secret, clickup, instagram)").option("--value <json>", "Credential value as JSON string (or @json:<path> to read it from a file)").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").action(
+    wrapAction("creds create", async (options) => {
+      await createCreds(resolveApiUrl(options.apiUrl, options.prod), options.name, options.type, options.value);
+    })
+  );
+  creds.command("update <name>").description("Update a credential value").requiredOption("--value <json>", "New credential value as JSON string (or @json:<path> to read it from a file)").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").action(
+    wrapAction("creds update", async (name, options) => {
+      await updateCreds(resolveApiUrl(options.apiUrl, options.prod), name, options.value);
+    })
+  );
+  creds.command("rename <name>").description("Rename a credential").requiredOption("--to <newName>", "New credential name").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").action(
+    wrapAction("creds rename", async (name, options) => {
+      await renameCreds(resolveApiUrl(options.apiUrl, options.prod), name, options.to);
+    })
+  );
+  creds.command("delete <name>").description("Delete a credential").option("--force", "Skip confirmation prompt").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API URL").action(
+    wrapAction("creds delete", async (name, options) => {
+      await deleteCreds(resolveApiUrl(options.apiUrl, options.prod), name, options.force);
+    })
+  );
 }
 
 // src/cli/commands/error/error.ts
@@ -56433,7 +56597,7 @@ function appendQuery4(params, key, value) {
 }
 function registerContentList(program3) {
   program3.command("content:list").description(
-    "List content pipeline items\n  Example: elevasis-sdk content:list --status queued --pipeline-id short-form-repurpose"
+    'List content pipeline items\n  Example: elevasis-sdk content:list --status <status> --pipeline-id <pipelineId>\n  Note: both values come from the org model this project declares, not a platform enum --\n  read them from the content:catalog/status catalog and content:pipeline.\n  Note: "awaiting review" is not a status -- that read is content:queue.'
   ).option("--status <status>", "Filter by content item status").option("--pillar <pillar>", "Filter by content pillar").option("--pipeline-id <id>", "Filter by pipeline template id").option("--client-id <id>", "Filter by client id").option("--reviewed-by <id>", "Filter by reviewer user id").option("--search <query>", "Search by title").option("--limit <n>", "Maximum number of results").option("--offset <n>", "Pagination offset").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API base URL").option("--pretty", "Render human-readable output instead of raw JSON").action(
     wrapAction("content:list", async (options) => {
       const apiUrl = resolveApiUrl(options.apiUrl, options.prod);
@@ -56671,7 +56835,7 @@ function printCards(cards, stepsByKey) {
 }
 function registerContentBoard(program3) {
   program3.command("content:board <pipelineId>").description(
-    "Render one pipeline as a board -- columns, review gates, and waiting counts\n  Example: elevasis-sdk content:board short-form-repurpose --pretty"
+    "Render one pipeline as a board -- columns, review gates, and waiting counts\n  Example: elevasis-sdk content:board <pipelineId> --pretty\n  Note: pipeline ids come from the org model this project declares -- list them with content:pipeline."
   ).option("--limit <n>", `Items to pull before deriving (default and API maximum ${DEFAULT_ITEM_LIMIT})`).option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API base URL").option("--pretty", "Render human-readable output instead of raw JSON").action(
     wrapAction("content:board", async (pipelineId, options) => {
       const apiUrl = resolveApiUrl(options.apiUrl, options.prod);
@@ -56772,7 +56936,7 @@ Pipeline: ${pipeline.id}`));
 }
 function registerContentPipeline(program3) {
   program3.command("content:pipeline [id]").description(
-    "List content pipeline templates, or show one pipeline's step contract\n  Example: elevasis-sdk content:pipeline short-form-repurpose"
+    "List content pipeline templates, or show one pipeline's step contract\n  Example: elevasis-sdk content:pipeline <pipelineId>\n  Note: run without an id to list the pipeline ids this project declares in its org model."
   ).option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API base URL").option("--pretty", "Render human-readable output instead of raw JSON").action(
     wrapAction("content:pipeline", async (id, options) => {
       const apiUrl = resolveApiUrl(options.apiUrl, options.prod);
@@ -56817,7 +56981,7 @@ function appendQuery5(params, key, value) {
 }
 function registerContentDistributions(program3) {
   program3.command("content:distributions").description(
-    "List content distributions\n  Example: elevasis-sdk content:distributions --pipeline-id short-form-repurpose"
+    "List content distributions\n  Example: elevasis-sdk content:distributions --pipeline-id <pipelineId>\n  Note: pipeline ids come from the org model this project declares -- list them with content:pipeline."
   ).option("--content-item-id <id>", "Filter by content item id").option("--pipeline-id <id>", "Filter by pipeline template id").option("--platform <platform>", "Filter by distribution platform").option("--status <status>", "Filter by distribution status").option("--limit <n>", "Maximum number of results").option("--offset <n>", "Pagination offset").option("--prod", "Target production (overrides NODE_ENV=development)").option("--api-url <url>", "API base URL").option("--pretty", "Render human-readable output instead of raw JSON").action(
     wrapAction("content:distributions", async (options) => {
       const apiUrl = resolveApiUrl(options.apiUrl, options.prod);