@gravity-rail/cli 0.15.0 → 0.17.0

package/dist/gr.js

@@ -207,7 +207,7 @@ var init_pagination = __esm({
   }
 });
 
-// ../sdk/dist/chunk-GP6ICMWF.js
+// ../sdk/dist/chunk-PJFEGUHM.js
 function getCookieValue(name) {
   if (typeof document === "undefined") return void 0;
   const cookies = document.cookie.split(";");
@@ -265,8 +265,8 @@ function setOrgAuthHeader(headers2, token) {
   headers2.set(orgAuthHeaderName(token), token);
 }
 var ApiError, BaseApiClient;
-var init_chunk_GP6ICMWF = __esm({
-  "../sdk/dist/chunk-GP6ICMWF.js"() {
+var init_chunk_PJFEGUHM = __esm({
+  "../sdk/dist/chunk-PJFEGUHM.js"() {
     ApiError = class extends Error {
       statusCode;
       /** Legacy string-array errors — kept for non-validation callers. */
@@ -276,6 +276,13 @@ var init_chunk_GP6ICMWF = __esm({
        * Populated when the backend returns a WorkflowValidationErrorResponse.
        */
       validationErrors;
+      /**
+       * The raw structured `detail` object when the backend returned one (a body
+       * with `error: true` or a `code`). Declared here rather than bolted on with
+       * `as any` at the throw site so consumers can narrow it with a type guard —
+       * see `isMemberContactConflict` in `types/member-types`.
+       */
+      errorData;
       constructor(message, statusCode, errors, validationErrors) {
         super(message);
         this.statusCode = statusCode;
@@ -3213,7 +3220,7 @@ var init_libphonenumber_js = __esm({
   }
 });
 
-// ../sdk/dist/chunk-QTJQTTIR.js
+// ../sdk/dist/chunk-CEFOCGYO.js
 function sanitizePhoneForBackend(phoneNumber) {
   try {
     let parsed = parsePhoneNumber4(phoneNumber);
@@ -3336,6 +3343,16 @@ function supportRequestParams(params) {
   const query = searchParams.toString();
   return query ? `?${query}` : "";
 }
+function withFilters(params, options) {
+  if (options.dateFrom) params.append("dateFrom", options.dateFrom);
+  if (options.dateTo) params.append("dateTo", options.dateTo);
+  if (options.workflowId !== void 0) params.append("workflowId", String(options.workflowId));
+  return params;
+}
+function suffix(params) {
+  const query = params.toString();
+  return query ? `?${query}` : "";
+}
 function createApiModules(apiKey, baseUrl3, customFetch) {
   return {
     abilities: new AbilitiesApi(apiKey, baseUrl3, customFetch),
@@ -3376,10 +3393,11 @@ function createApiModules(apiKey, baseUrl3, customFetch) {
     connectionSync: new ConnectionSyncApi(apiKey, baseUrl3, customFetch),
     mcpServers: new McpServersApi(apiKey, baseUrl3, customFetch),
     members: new MembersApi(apiKey, baseUrl3, customFetch),
-    milestones: new MilestonesApi(apiKey, baseUrl3, customFetch),
     motd: new MotdApi(apiKey, baseUrl3, customFetch),
+    trackedLinks: new TrackedLinksApi(apiKey, baseUrl3, customFetch),
     confluence: new ConfluenceApi(apiKey, baseUrl3, customFetch),
     mondayIntegration: new MondayIntegrationApi(apiKey, baseUrl3, customFetch),
+    interventionRequests: new InterventionRequestsApi(apiKey, baseUrl3, customFetch),
     notificationRules: new NotificationRulesApi(apiKey, baseUrl3, customFetch),
     oauth: new OAuthApi(apiKey, baseUrl3, customFetch),
     operatorGroups: new OperatorApi(apiKey, baseUrl3, customFetch),
@@ -3389,6 +3407,7 @@ function createApiModules(apiKey, baseUrl3, customFetch) {
     pronunciations: new PronunciationsApi(apiKey, baseUrl3, customFetch),
     qualifications: new QualificationsApi(apiKey, baseUrl3, customFetch),
     personas: new PersonasApi(apiKey, baseUrl3, customFetch),
+    metrics: new MetricsApi(apiKey, baseUrl3, customFetch),
     queries: new QueriesApi(apiKey, baseUrl3, customFetch),
     reports: new ReportsApi(apiKey, baseUrl3, customFetch),
     salesforce: new SalesforceApi(apiKey, baseUrl3, customFetch),
@@ -3475,6 +3494,7 @@ function bindChatsMethods(target, chats) {
   target.getChatTokenUsage = chats.getChatTokenUsage.bind(chats);
   target.getChatTodos = chats.getChatTodos.bind(chats);
   target.getChatSkills = chats.getChatSkills.bind(chats);
+  target.getManagerSkills = chats.getManagerSkills.bind(chats);
   target.getChatsNeedsResponse = chats.getChatsNeedsResponse.bind(chats);
   target.getChatsDailyCreationStats = chats.getChatsDailyCreationStats.bind(chats);
   target.getToolCallNames = chats.getToolCallNames.bind(chats);
@@ -3537,10 +3557,21 @@ function bindDashboardsMethods(target, dashboards) {
   target.deleteDashboard = dashboards.deleteDashboard.bind(dashboards);
   target.getDashboardChannelStats = dashboards.getDashboardChannelStats.bind(dashboards);
   target.getDashboardWorkflowAssignmentStats = dashboards.getDashboardWorkflowAssignmentStats.bind(dashboards);
+  target.getConfigurationHealth = dashboards.getConfigurationHealth.bind(dashboards);
 }
 function bindMotdMethods(target, motd) {
   target.getMotd = motd.getMotd.bind(motd);
 }
+function bindTrackedLinksMethods(target, trackedLinks) {
+  target.getTrackedLinkSummary = trackedLinks.getTrackedLinkSummary.bind(trackedLinks);
+  target.getTrackedLinkDestinations = trackedLinks.getTrackedLinkDestinations.bind(trackedLinks);
+  target.getTrackedLinkStats = trackedLinks.getTrackedLinkStats.bind(trackedLinks);
+  target.getTrackedLinkTimeseries = trackedLinks.getTrackedLinkTimeseries.bind(trackedLinks);
+  target.createTrackedLinkDestination = trackedLinks.createTrackedLinkDestination.bind(trackedLinks);
+  target.updateTrackedLinkDestination = trackedLinks.updateTrackedLinkDestination.bind(trackedLinks);
+  target.deleteTrackedLinkDestination = trackedLinks.deleteTrackedLinkDestination.bind(trackedLinks);
+  target.clearTrackedLinkDestinations = trackedLinks.clearTrackedLinkDestinations.bind(trackedLinks);
+}
 function bindDataTypesMethods(target, dataTypes) {
   target.getDataTypes = dataTypes.getDataTypes.bind(dataTypes);
   target.getDataType = dataTypes.getDataType.bind(dataTypes);
@@ -3923,7 +3954,7 @@ function bindWorkflowsMethods(target, workflows, workflowNotes, voice, superviso
   target.updateSupervisor = supervisors.updateSupervisor.bind(supervisors);
   target.deleteSupervisor = supervisors.deleteSupervisor.bind(supervisors);
 }
-function bindCalendarsMethods(target, calendars, milestones) {
+function bindCalendarsMethods(target, calendars) {
   target.getCalendars = calendars.getCalendars.bind(calendars);
   target.getCalendar = calendars.getCalendar.bind(calendars);
   target.createCalendar = calendars.createCalendar.bind(calendars);
@@ -3955,11 +3986,6 @@ function bindCalendarsMethods(target, calendars, milestones) {
   target.linkCalendarToGoogle = calendars.linkCalendarToGoogle.bind(calendars);
   target.unlinkCalendarFromGoogle = calendars.unlinkCalendarFromGoogle.bind(calendars);
   target.syncCalendarWithGoogle = calendars.syncCalendarWithGoogle.bind(calendars);
-  target.getMilestones = milestones.getMilestones.bind(milestones);
-  target.getMilestone = milestones.getMilestone.bind(milestones);
-  target.createMilestone = milestones.createMilestone.bind(milestones);
-  target.updateMilestone = milestones.updateMilestone.bind(milestones);
-  target.deleteMilestone = milestones.deleteMilestone.bind(milestones);
 }
 function bindCommunicationsMethods(target, phoneNumbers, inboxes, notificationRules) {
   target.getPhoneNumbers = phoneNumbers.getPhoneNumbers.bind(phoneNumbers);
@@ -4013,6 +4039,7 @@ function bindToolkitsMethods(target, toolkits, templates, aiModels, customToolki
   target.getSTTModels = aiModels.getSTTModels.bind(aiModels);
   target.getTTSModels = aiModels.getTTSModels.bind(aiModels);
   target.getVoiceModels = aiModels.getVoiceModels.bind(aiModels);
+  target.getVoicePresets = aiModels.getVoicePresets.bind(aiModels);
   target.getAllModels = aiModels.getAllModels.bind(aiModels);
   target.getCustomToolkits = customToolkits.getCustomToolkits.bind(customToolkits);
   target.getCustomToolkit = customToolkits.getCustomToolkit.bind(customToolkits);
@@ -4301,6 +4328,11 @@ function bindOrgMethods(target, org) {
   target.updateBusinessProfile = org.updateBusinessProfile.bind(org);
   target.submitBusinessProfile = org.submitBusinessProfile.bind(org);
   target.cancelBusinessProfile = org.cancelBusinessProfile.bind(org);
+  target.listLegalEntities = org.listLegalEntities.bind(org);
+  target.getLegalEntity = org.getLegalEntity.bind(org);
+  target.createLegalEntity = org.createLegalEntity.bind(org);
+  target.getVoiceTrustProducts = org.getVoiceTrustProducts.bind(org);
+  target.syncVoiceTrustProducts = org.syncVoiceTrustProducts.bind(org);
   target.createOrganizationWorkspace = org.createOrganizationWorkspace.bind(org);
   target.getOrgBillingCustomer = org.getOrgBillingCustomer.bind(org);
 }
@@ -4375,6 +4407,16 @@ function bindPersonasMethods(target, personas) {
   target.updatePersona = personas.updatePersona.bind(personas);
   target.deletePersona = personas.deletePersona.bind(personas);
 }
+function bindMetricsMethods(target, metrics) {
+  target.listMetrics = metrics.listMetrics.bind(metrics);
+  target.getMetric = metrics.getMetric.bind(metrics);
+  target.createMetric = metrics.createMetric.bind(metrics);
+  target.updateMetric = metrics.updateMetric.bind(metrics);
+  target.deleteMetric = metrics.deleteMetric.bind(metrics);
+  target.listMetricObservations = metrics.listMetricObservations.bind(metrics);
+  target.getMetricSeries = metrics.getMetricSeries.bind(metrics);
+  target.computeChatMetrics = metrics.computeChatMetrics.bind(metrics);
+}
 function bindQueriesMethods(target, queries) {
   target.getQueryFields = queries.getQueryFields.bind(queries);
   target.validateQuery = queries.validateQuery.bind(queries);
@@ -4424,10 +4466,10 @@ function bindSupportRequestMethods(target, supportRequests) {
   target.reopenWorkspaceSupportRequest = supportRequests.reopenWorkspaceSupportRequest.bind(supportRequests);
   target.clickWorkspaceSupportRequestResource = supportRequests.clickWorkspaceSupportRequestResource.bind(supportRequests);
 }
-var AbilitiesApi, AccessGrantsApi, AgentTasksApi, AgentsApi, AIModelsApi, ApiKeysApi, AppsApi, AssignmentsApi, VoiceApi, AuthApi, BuildersApi, CalendarsApi, CallsApi, CELApi, ChatsApi, ConfluenceApi, CustomToolkitsApi, DataTypesApi, DiscordBotsApi, SlackAppsApi, EventsApi, FeaturesApi, FhirConnectionsApi, InboundFaxStatus, DocumoFaxApi, HealthieApi, FilesApi, InboxesApi, InquiriesApi, AppConnectionsApi, McpServersApi, MemberImportValidationError, MembersApi, MilestonesApi, MondayIntegrationApi, NotificationRulesApi, OperatorApi, OrgApi, OAuthConnectionsApi, OAuthApi, PhoneNumbersApi, PronunciationsApi, PromptsApi, PersonasApi, QueriesApi, QualificationsApi, ReportsApi, SalesforceApi, ConnectionSyncApi, HubspotApi, SitesApi, SubscriptionsApi, SupportRequestsApi, CustomersApi, ResellersApi, SupervisorsApi, TasksApi, TemplatesApi, ToolkitsApi, JourneysApi, WorkflowsApi, WorkflowNotesApi, EventRuleEventType, DriverMode, WorkspaceInvitationsApi, WorkspacesApi, DashboardsApi, TeamsAppsApi, ExperimentsApi, PatientSyncConnectionsApi, MotdApi, WORKSPACE_METHOD_NAMES, WORKSPACE_METHOD_NAME_SET, GravityRailClient, WIDGET_SLUGS, CHAT_TYPES, BUILTIN_ASSISTANT_CHAT_TYPES, MEMBER_AGENT_CHAT_TYPES;
-var init_chunk_QTJQTTIR = __esm({
-  "../sdk/dist/chunk-QTJQTTIR.js"() {
-    init_chunk_GP6ICMWF();
+var AbilitiesApi, AccessGrantsApi, AgentTasksApi, AgentsApi, AIModelsApi, ApiKeysApi, AppsApi, AssignmentsApi, VoiceApi, AuthApi, BuildersApi, CalendarsApi, CallsApi, CELApi, ChatsApi, ConfluenceApi, CustomToolkitsApi, DataTypesApi, DiscordBotsApi, SlackAppsApi, EventsApi, FeaturesApi, FhirConnectionsApi, InboundFaxStatus, DocumoFaxApi, HealthieApi, FilesApi, InboxesApi, InquiriesApi, AppConnectionsApi, McpServersApi, MemberImportValidationError, MembersApi, MondayIntegrationApi, NotificationRulesApi, OperatorApi, OrgApi, OAuthConnectionsApi, OAuthApi, PhoneNumbersApi, PronunciationsApi, PromptsApi, PersonasApi, QueriesApi, QualificationsApi, ReportsApi, SalesforceApi, ConnectionSyncApi, HubspotApi, SitesApi, SubscriptionsApi, SupportRequestsApi, CustomersApi, ResellersApi, SupervisorsApi, TasksApi, TemplatesApi, ToolkitsApi, JourneysApi, WorkflowsApi, WorkflowNotesApi, EventRuleEventType, DriverMode, WorkspaceInvitationsApi, WorkspacesApi, DashboardsApi, TeamsAppsApi, ExperimentsApi, PatientSyncConnectionsApi, MotdApi, InterventionRequestsApi, MetricsApi, TrackedLinksApi, WORKSPACE_METHOD_NAMES, WORKSPACE_METHOD_NAME_SET, GravityRailClient, WIDGET_SLUGS, CHAT_TYPES, BUILTIN_ASSISTANT_CHAT_TYPES, MEMBER_AGENT_CHAT_TYPES;
+var init_chunk_CEFOCGYO = __esm({
+  "../sdk/dist/chunk-CEFOCGYO.js"() {
+    init_chunk_PJFEGUHM();
     init_libphonenumber_js();
     AbilitiesApi = class extends BaseApiClient {
       /**
@@ -4685,6 +4727,18 @@ var init_chunk_QTJQTTIR = __esm({
         const url = queryString ? `ai-models/realtime?${queryString}` : "ai-models/realtime";
         return this.fetch(url);
       }
+      /**
+       * Get the voice presets offered by the simplified voice picker.
+       *
+       * A preset bundles a realtime speech-to-speech model with one of its native
+       * voices and the settings recommended alongside it, so choosing a voice is
+       * a single decision. Apply one by assigning its `config` wholesale; compare
+       * against it to tell a preset selection from a customised ("Custom") one.
+       * The full engine/voice/settings matrix lives on `getRealtimeModels`.
+       */
+      async getVoicePresets() {
+        return this.fetch("ai-models/voice-presets");
+      }
       /**
        * Get available voice models with metadata
        */
@@ -5780,6 +5834,10 @@ var init_chunk_QTJQTTIR = __esm({
           `w/${wid}/chats/${chatId}/skills`
         );
       }
+      /** List built-in skills selectable before a Manager Chat (and on Routine manager tasks). */
+      async getManagerSkills(wid) {
+        return this.fetch(`w/${wid}/chats/manager/skills`);
+      }
       /** List chat IDs that need a response. */
       async getChatsNeedsResponse(wid) {
         return this.fetch(`w/${wid}/chats/needs-response`);
@@ -7165,9 +7223,9 @@ var init_chunk_QTJQTTIR = __esm({
         params?.status?.forEach((value) => query.append("status", value));
         if (params?.receivedAfter) query.set("receivedAfter", params.receivedAfter);
         if (params?.receivedBefore) query.set("receivedBefore", params.receivedBefore);
-        const suffix = query.toString() === "" ? "" : `?${query.toString()}`;
+        const suffix2 = query.toString() === "" ? "" : `?${query.toString()}`;
         return this.fetch(
-          `w/${wid}/app-connections/documo-fax/faxes${suffix}`
+          `w/${wid}/app-connections/documo-fax/faxes${suffix2}`
         );
       }
       /**
@@ -8178,12 +8236,34 @@ var init_chunk_QTJQTTIR = __esm({
           body: JSON.stringify(memberRole)
         });
       }
-      /** Delete a member role. */
+      /** Delete a member role. Default roles (``systemKey`` set) return 403. */
       async deleteMemberRole(wid, id) {
         return this.fetch(`w/${wid}/member-roles/${id}`, {
           method: "DELETE"
         });
       }
+      /**
+       * Describe legacy duplicate default roles in this workspace. Read-only.
+       *
+       * Workspaces seeded by older versions of the product can carry the same
+       * default role under several spellings ("manager" next to "Manager"). This
+       * reports which ones should be merged and exactly how many members and
+       * references each merge would move.
+       */
+      async getMemberRoleCleanupPlan(wid) {
+        return this.fetch(`w/${wid}/member-roles/cleanup-plan`);
+      }
+      /**
+       * Move every member and reference from one role to another, then delete the
+       * source role. Requires `member_roles:admin`. The source cannot be a default
+       * role.
+       */
+      async mergeMemberRoles(wid, request) {
+        return this.fetch(`w/${wid}/member-roles/cleanup/merge`, {
+          method: "POST",
+          body: JSON.stringify(request)
+        });
+      }
       // Import/Export Members API
       /**
        * Read-only preview classifying each CSV row before any write (GRA-5545).
@@ -8485,44 +8565,6 @@ var init_chunk_QTJQTTIR = __esm({
         return this.fetch(`w/${wid}/members/${memberId}/sync-links`);
       }
     };
-    MilestonesApi = class extends BaseApiClient {
-      /** List milestones in a workspace with optional pagination and sorting. */
-      async getMilestones(wid, options = {}) {
-        const params = new URLSearchParams();
-        if (options.page) params.append("page", options.page.toString());
-        if (options.pageSize) params.append("pageSize", options.pageSize.toString());
-        if (options.sortBy) params.append("sortBy", options.sortBy);
-        if (options.sortOrder) params.append("sortOrder", options.sortOrder);
-        if (options.search) params.append("search", options.search);
-        return this.fetch(
-          `w/${wid}/milestones${params.toString() ? `?${params.toString()}` : ""}`
-        );
-      }
-      /** Get a single milestone by ID. */
-      async getMilestone(wid, id) {
-        return this.fetch(`w/${wid}/milestones/${id}`);
-      }
-      /** Create a new milestone in a workspace. */
-      async createMilestone(wid, milestone) {
-        return this.fetch(`w/${wid}/milestones`, {
-          method: "POST",
-          body: JSON.stringify(milestone)
-        });
-      }
-      /** Update an existing milestone with partial data. */
-      async updateMilestone(wid, id, milestone) {
-        return this.fetch(`w/${wid}/milestones/${id}`, {
-          method: "PUT",
-          body: JSON.stringify(milestone)
-        });
-      }
-      /** Delete a milestone by ID. */
-      async deleteMilestone(wid, id) {
-        return this.fetch(`w/${wid}/milestones/${id}`, {
-          method: "DELETE"
-        });
-      }
-    };
     MondayIntegrationApi = class extends BaseApiClient {
       /**
        * Get list of boards from the workspace Monday.com connection
@@ -8805,6 +8847,41 @@ var init_chunk_QTJQTTIR = __esm({
       async getCurrentOrgMember(orgIdOrUuid) {
         return this.fetch(`o/${orgIdOrUuid}/me`);
       }
+      /**
+       * Update the settings an org admin owns: name, slug and contact details.
+       *
+       * Deliberately NOT the admin organization update — `primary` and
+       * `enforceCreditLimit` are superuser-only and are not fields on this
+       * endpoint's request model at all.
+       */
+      async updateOrganizationSettings(orgIdOrUuid, data) {
+        return this.fetch(`o/${orgIdOrUuid}`, {
+          method: "PATCH",
+          body: JSON.stringify(data)
+        });
+      }
+      /**
+       * Read this organization's SSO configuration.
+       *
+       * Org-scoped (`org:admin`), unlike the SSO fields on the superuser admin
+       * organization update — an org admin owns their own identity provider.
+       */
+      async getOrgSsoConfig(orgIdOrUuid) {
+        return this.fetch(`o/${orgIdOrUuid}/sso`);
+      }
+      /** Configure this organization's SSO. Requires `org:admin`. */
+      async updateOrgSsoConfig(orgIdOrUuid, data) {
+        return this.fetch(`o/${orgIdOrUuid}/sso`, {
+          method: "PUT",
+          body: JSON.stringify(data)
+        });
+      }
+      /** Remove this organization's SSO configuration. Requires `org:admin`. */
+      async deleteOrgSsoConfig(orgIdOrUuid) {
+        return this.fetch(`o/${orgIdOrUuid}/sso`, {
+          method: "DELETE"
+        });
+      }
       /**
        * Get the billing customer UUID for an organization.
        */
@@ -8925,6 +9002,22 @@ var init_chunk_QTJQTTIR = __esm({
       async getOrganizationWorkspace(orgIdOrUuid, workspaceUuid) {
         return this.fetch(`o/${orgIdOrUuid}/workspaces/${workspaceUuid}`);
       }
+      /**
+       * Workspace cards for the organization page: identity plus the GLB-side
+       * counts. Any org member may call it — members get the workspaces they
+       * belong to, org:read holders get all of them.
+       */
+      async getOrganizationWorkspaceSummaries(orgIdOrUuid) {
+        return this.fetch(`o/${orgIdOrUuid}/workspaces/summary`);
+      }
+      /**
+       * Workspace-schema aggregates for one card, plus the caller's own member
+       * role. Separate from the list because it opens a session against the
+       * workspace's own schema — each card fetches its own.
+       */
+      async getOrganizationWorkspaceStats(orgIdOrUuid, workspaceUuid) {
+        return this.fetch(`o/${orgIdOrUuid}/workspaces/${workspaceUuid}/stats`);
+      }
       /**
        * Create a workspace in an organization.
        */
@@ -9149,15 +9242,19 @@ var init_chunk_QTJQTTIR = __esm({
       async getA2PStatus(orgUuid) {
         return this.fetch(`o/${orgUuid}/phone-numbers/a2p/status`);
       }
+      /** Return fixed phone-number and outbound-messaging prices. */
+      async getPhoneBillingPricing(orgUuid) {
+        return this.fetch(`o/${orgUuid}/phone-numbers/pricing`);
+      }
       /**
        * Start A2P brand registration under a legal entity. `legalEntityUuid`
        * is required — brands register per legal entity (Customer Profile);
        * there is no primary-entity fallback.
        */
-      async startA2PRegistration(orgUuid, legalEntityUuid, brandName, brandDescription) {
+      async startA2PRegistration(orgUuid, legalEntityUuid, brandName, brandDescription, brandUuid = null) {
         return this.fetch(`o/${orgUuid}/phone-numbers/a2p/start`, {
           method: "POST",
-          body: JSON.stringify({ legalEntityUuid, brandName, brandDescription })
+          body: JSON.stringify({ legalEntityUuid, brandName, brandDescription, brandUuid })
         });
       }
       /**
@@ -9363,14 +9460,34 @@ var init_chunk_QTJQTTIR = __esm({
         );
       }
       /**
-       * The brand-addressable enrollment form URL (carries `?brand=…`). Outreach
-       * appends each patient's `external_id`. `url` is null until a Site is linked.
+       * The brand's enrollment-form template URL (carries `?brand=…`, no
+       * credential). `url` is null until a Site is linked. Do not append a
+       * patient identifier to this URL — use {@link mintA2PBrandEnrollmentLink}
+       * to get a patient-ready link instead.
        */
       async getA2PBrandEnrollmentUrl(orgUuid, brandUuid) {
         return this.fetch(
           `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-url`
         );
       }
+      /**
+       * Mint a patient-ready enrollment link for one patient.
+       *
+       * The returned URL carries a fresh, expiring, single-use `?grant=…` bound to
+       * the member that `externalId` resolves to. `externalId` (the patient's
+       * CRM/EHR identifier) travels in the request body, never the query string,
+       * so it stays out of access logs. When it matches no member, the
+       * credential-free template URL is returned rather than an error.
+       */
+      async mintA2PBrandEnrollmentLink(orgUuid, brandUuid, externalId) {
+        return this.fetch(
+          `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-url`,
+          {
+            method: "POST",
+            body: JSON.stringify({ externalId })
+          }
+        );
+      }
       /**
        * List available member roles for a workspace in the organization.
        */
@@ -11696,6 +11813,7 @@ var init_chunk_QTJQTTIR = __esm({
       EventRuleEventType2["DATA_RECORD_UPDATED"] = "data_record:updated";
       EventRuleEventType2["DATA_RECORD_CHANGED"] = "data_record:changed";
       EventRuleEventType2["CHAT_CREATED"] = "chat:created";
+      EventRuleEventType2["CHAT_SUMMARY"] = "chat:summary";
       EventRuleEventType2["CHAT_CALLBACK"] = "chat:callback";
       EventRuleEventType2["MEMBER_UPDATED"] = "member:updated";
       EventRuleEventType2["ROUTINE_TRIGGERED"] = "routine:triggered";
@@ -12098,6 +12216,20 @@ var init_chunk_QTJQTTIR = __esm({
         if (featured !== void 0) params.set("featured", String(featured));
         return this.fetch(`products?${params.toString()}`);
       }
+      /**
+       * Check whether a promo code is usable, without redeeming it.
+       *
+       * Reserves nothing, so it is safe to call as a form field settles. Redemption
+       * happens server-side after checkout completes, when the organization and its
+       * subscription exist.
+       */
+      async previewPromoCode(code, options) {
+        return this.fetch("promo-codes/preview", {
+          method: "POST",
+          body: JSON.stringify({ code }),
+          signal: options?.signal
+        });
+      }
       /** Get a publicly accessible product by ID. */
       async getPublicProduct(id) {
         return this.fetch(`products/${id}`);
@@ -12252,6 +12384,32 @@ var init_chunk_QTJQTTIR = __esm({
           `w/${wid}/dashboards/stats/workflow-assignments`
         );
       }
+      /**
+       * Current saved-configuration health across every family (Workflow
+       * configuration, Journey authoring, Workflow access, Routine → Workflow
+       * access, and the workspace lint).
+       *
+       * Requires ALL of `workflows:read`, `journeys:read`, `automations:read`,
+       * `datatypes:read`, `members:read`, and `member_roles:read` — a pruned
+       * subset would render as "all configuration is healthy".
+       *
+       * `page`/`pageSize` bound the response only; every family is evaluated in
+       * full before the issue list is sliced. `check`/`severity` narrow the issue
+       * list server-side, before pagination — filtering a single page in the
+       * client cannot find a match that lives on a later one. `summary` and
+       * `checks` are always workspace-global.
+       */
+      async getConfigurationHealth(wid, options) {
+        const params = new URLSearchParams();
+        if (options?.page !== void 0) params.append("page", options.page.toString());
+        if (options?.pageSize !== void 0) params.append("pageSize", options.pageSize.toString());
+        if (options?.check !== void 0) params.append("check", options.check);
+        if (options?.severity !== void 0) params.append("severity", options.severity);
+        const query = params.toString();
+        return this.fetch(
+          `w/${wid}/configuration-health${query ? `?${query}` : ""}`
+        );
+      }
     };
     TeamsAppsApi = class extends BaseApiClient {
       /**
@@ -12438,6 +12596,180 @@ var init_chunk_QTJQTTIR = __esm({
         return this.fetch(`w/${wid}/motd${query ? `?${query}` : ""}`);
       }
     };
+    InterventionRequestsApi = class extends BaseApiClient {
+      /** List intervention requests in a workspace, newest first. */
+      async getInterventionRequests(wid, params = {}) {
+        const query = new URLSearchParams();
+        if (params.kind) query.set("kind", params.kind);
+        if (params.openOnly) query.set("openOnly", "true");
+        if (params.chatId !== void 0) query.set("chatId", String(params.chatId));
+        if (params.unroutedOnly) query.set("unroutedOnly", "true");
+        if (params.limit !== void 0) query.set("limit", String(params.limit));
+        const qs = query.toString();
+        return this.fetch(
+          `w/${wid}/intervention-requests${qs ? `?${qs}` : ""}`
+        );
+      }
+    };
+    MetricsApi = class extends BaseApiClient {
+      /** List metric definitions in the workspace, paginated. */
+      async listMetrics(wid, params) {
+        const q = new URLSearchParams();
+        if (params?.page !== void 0) q.set("page", String(params.page));
+        if (params?.pageSize !== void 0) q.set("pageSize", String(params.pageSize));
+        if (params?.includeArchived !== void 0)
+          q.set("includeArchived", String(params.includeArchived));
+        if (params?.source) q.set("source", params.source);
+        const qs = q.toString() ? `?${q.toString()}` : "";
+        return this.fetch(`w/${wid}/metrics${qs}`);
+      }
+      async getMetric(wid, id) {
+        return this.fetch(`w/${wid}/metrics/${id}`);
+      }
+      async createMetric(wid, data) {
+        return this.fetch(`w/${wid}/metrics`, {
+          method: "POST",
+          body: JSON.stringify(data)
+        });
+      }
+      async updateMetric(wid, id, data) {
+        return this.fetch(`w/${wid}/metrics/${id}`, {
+          method: "PUT",
+          body: JSON.stringify(data)
+        });
+      }
+      /** Soft-archive a metric (observations retained). */
+      async deleteMetric(wid, id) {
+        return this.fetch(`w/${wid}/metrics/${id}`, { method: "DELETE" });
+      }
+      async listMetricObservations(wid, metricId, params) {
+        const q = new URLSearchParams();
+        q.set("start", params.start);
+        q.set("end", params.end);
+        if (params.page !== void 0) q.set("page", String(params.page));
+        if (params.pageSize !== void 0) q.set("pageSize", String(params.pageSize));
+        return this.fetch(
+          `w/${wid}/metrics/${metricId}/observations?${q.toString()}`
+        );
+      }
+      async getMetricSeries(wid, metricId, params) {
+        const q = new URLSearchParams();
+        q.set("start", params.start);
+        q.set("end", params.end);
+        if (params.bucket) q.set("bucket", params.bucket);
+        if (params.aggregation) q.set("aggregation", params.aggregation);
+        return this.fetch(
+          `w/${wid}/metrics/${metricId}/series?${q.toString()}`
+        );
+      }
+      /** On-demand compute of enabled chat-source metrics for one chat. */
+      async computeChatMetrics(wid, data) {
+        return this.fetch(`w/${wid}/metrics/compute-for-chat`, {
+          method: "POST",
+          body: JSON.stringify(data)
+        });
+      }
+    };
+    TrackedLinksApi = class extends BaseApiClient {
+      /** Header counters plus whether shortening is configured and enabled. */
+      async getTrackedLinkSummary(wid, options = {}) {
+        const params = withFilters(new URLSearchParams(), options);
+        return this.fetch(
+          `w/${wid}/tracked-links/summary${suffix(params)}`
+        );
+      }
+      /**
+       * Known destination URLs, most recent first. Powers the "Clicked link"
+       * member-filter autocomplete, so it stays unaggregated and cheap.
+       */
+      async getTrackedLinkDestinations(wid, options = {}) {
+        const params = new URLSearchParams();
+        if (options.q) params.append("q", options.q);
+        if (options.limit !== void 0) params.append("limit", String(options.limit));
+        return this.fetch(
+          `w/${wid}/tracked-links/destinations${suffix(params)}`
+        );
+      }
+      /**
+       * Register a destination an author can reference as `{{links.<key>}}`.
+       *
+       * The URL is deduplicated server-side, so registering one the workspace
+       * already knows adopts that destination — including a row the retired
+       * auto-harvest left unnamed, whose click history then carries forward
+       * under the new key. Registering a URL that already has a *different* key
+       * is a 409: renaming is what `updateTrackedLinkDestination` is for.
+       *
+       * Keys use the same grammar as snippet keys: lowercase letters, digits,
+       * underscores and dots, starting with a letter (`intake_form`,
+       * `docs.privacy`). No hyphens — Jinja2 reads `links.spring-2026` as
+       * subtraction.
+       */
+      async createTrackedLinkDestination(wid, data) {
+        return this.fetch(`w/${wid}/tracked-links/destinations`, {
+          method: "POST",
+          body: JSON.stringify(data)
+        });
+      }
+      /**
+       * Re-key or relabel a destination.
+       *
+       * Changing `key` breaks templates: `{{links.old}}` stops resolving and the
+       * message ships without its link. Relabelling (`name`) is always safe.
+       * Passing `key: null` releases the handle so another destination can take
+       * it — the non-destructive alternative to deleting, which would take the
+       * click history with it. The URL is not editable.
+       */
+      async updateTrackedLinkDestination(wid, destinationId, data) {
+        return this.fetch(
+          `w/${wid}/tracked-links/destinations/${destinationId}`,
+          { method: "PUT", body: JSON.stringify(data) }
+        );
+      }
+      /** Per-destination sent / clicks / unique clickers / CTR for the window. */
+      async getTrackedLinkStats(wid, options = {}) {
+        const params = withFilters(new URLSearchParams(), options);
+        if (options.page !== void 0) params.append("page", String(options.page));
+        if (options.pageSize !== void 0) params.append("pageSize", String(options.pageSize));
+        if (options.q) params.append("q", options.q);
+        if (options.sortBy) params.append("sortBy", options.sortBy);
+        if (options.sortOrder) params.append("sortOrder", options.sortOrder);
+        return this.fetch(
+          `w/${wid}/tracked-links${suffix(params)}`
+        );
+      }
+      /** Clicks over time for the current filter selection. */
+      async getTrackedLinkTimeseries(wid, options = {}) {
+        const params = withFilters(new URLSearchParams(), options);
+        if (options.destinationId !== void 0) {
+          params.append("destinationId", String(options.destinationId));
+        }
+        if (options.granularity) params.append("granularity", options.granularity);
+        if (options.tz) params.append("tz", options.tz);
+        return this.fetch(
+          `w/${wid}/tracked-links/timeseries${suffix(params)}`
+        );
+      }
+      /**
+       * Delete one destination: its short links stop resolving and its recorded
+       * clicks are removed.
+       *
+       * Turning the workspace setting off only stops NEW links being minted —
+       * links already delivered to members keep working. This is the deliberate
+       * way to break them.
+       */
+      async deleteTrackedLinkDestination(wid, destinationId) {
+        return this.fetch(
+          `w/${wid}/tracked-links/destinations/${destinationId}`,
+          { method: "DELETE" }
+        );
+      }
+      /** Delete every destination, its links, and its clicks. Irreversible. */
+      async clearTrackedLinkDestinations(wid) {
+        return this.fetch(`w/${wid}/tracked-links/destinations`, {
+          method: "DELETE"
+        });
+      }
+    };
     WORKSPACE_METHOD_NAMES = [
       "activateWorkflowRevision",
       "addGroupMember",
@@ -12472,6 +12804,7 @@ var init_chunk_QTJQTTIR = __esm({
       "checkSiteSlugAvailability",
       "clearConnectionMemberExclusion",
       "clearMemberSwitch",
+      "clearTrackedLinkDestinations",
       "clickWorkspaceSupportRequestResource",
       "cloneDataType",
       "cloneTask",
@@ -12530,7 +12863,6 @@ var init_chunk_QTJQTTIR = __esm({
       "createMemberMemory",
       "createMemberRole",
       "createMenuItem",
-      "createMilestone",
       "createNotificationRule",
       "createOperatorGroup",
       "createPage",
@@ -12547,6 +12879,7 @@ var init_chunk_QTJQTTIR = __esm({
       "createSupervisor",
       "createTask",
       "createTeamsApp",
+      "createTrackedLinkDestination",
       "createWorkflow",
       "createWorkflowContributor",
       "createWorkflowFromTemplate",
@@ -12596,7 +12929,6 @@ var init_chunk_QTJQTTIR = __esm({
       "deleteMemberMemory",
       "deleteMemberRole",
       "deleteMenuItem",
-      "deleteMilestone",
       "deleteMondayConnection",
       "deleteNotificationRule",
       "deleteOperatorGroup",
@@ -12612,6 +12944,7 @@ var init_chunk_QTJQTTIR = __esm({
       "deleteSupervisor",
       "deleteTask",
       "deleteTeamsApp",
+      "deleteTrackedLinkDestination",
       "deleteWidgetDomain",
       "deleteWorkflow",
       "deleteWorkflowContributor",
@@ -12736,6 +13069,7 @@ var init_chunk_QTJQTTIR = __esm({
       "getChatModelOverride",
       "getChatPhoneCalls",
       "getChatSkills",
+      "getManagerSkills",
       "getChatTodos",
       "getChatTokenUsage",
       "getChatToolCallMessages",
@@ -12745,6 +13079,7 @@ var init_chunk_QTJQTTIR = __esm({
       "getChatsNeedsResponse",
       "getChildThreadMessages",
       "getClientWorkspace",
+      "getConfigurationHealth",
       "getConfluenceStatus",
       "getConnectionSyncCapabilities",
       "getConnectionSyncCheckpoint",
@@ -12871,6 +13206,7 @@ var init_chunk_QTJQTTIR = __esm({
       "getMemberMemory",
       "getMemberRecordCounts",
       "getMemberRole",
+      "getMemberRoleCleanupPlan",
       "getMemberRoleByUuid",
       "getMemberRoles",
       "getMemberSyncLinks",
@@ -12879,8 +13215,6 @@ var init_chunk_QTJQTTIR = __esm({
       "getMembersMessageActivity",
       "getMenuItems",
       "getMessageTiming",
-      "getMilestone",
-      "getMilestones",
       "getMondayConnectionBoardColumns",
       "getMondayConnectionBoardGroups",
       "getMondayConnectionBoards",
@@ -12916,6 +13250,7 @@ var init_chunk_QTJQTTIR = __esm({
       "getPublicFolder",
       "getPublicFolderFiles",
       "getPublicProducts",
+      "previewPromoCode",
       "getQualification",
       "getQualifications",
       "getRecordingInfo",
@@ -12962,6 +13297,10 @@ var init_chunk_QTJQTTIR = __esm({
       "getTool",
       "getToolCallNames",
       "getToolkits",
+      "getTrackedLinkDestinations",
+      "getTrackedLinkStats",
+      "getTrackedLinkSummary",
+      "getTrackedLinkTimeseries",
       "getUnreadNotificationCount",
       "getUsageDashboard",
       "getVariableRegistry",
@@ -13038,6 +13377,14 @@ var init_chunk_QTJQTTIR = __esm({
       "listHealthiePatients",
       "listHealthieProviders",
       "listPersonas",
+      "listMetrics",
+      "getMetric",
+      "createMetric",
+      "updateMetric",
+      "deleteMetric",
+      "listMetricObservations",
+      "getMetricSeries",
+      "computeChatMetrics",
       "listPushSubscriptions",
       "listSalesforceObjects",
       "listScenarios",
@@ -13048,6 +13395,7 @@ var init_chunk_QTJQTTIR = __esm({
       "markEmailAsRead",
       "markEmailAsUnread",
       "markNotificationAsRead",
+      "mergeMemberRoles",
       "previewImportMembers",
       "previewImportWorkspace",
       "previewRoutineWorkflowAccess",
@@ -13176,7 +13524,6 @@ var init_chunk_QTJQTTIR = __esm({
       "updateMemberLabel",
       "updateMemberRole",
       "updateMenuItem",
-      "updateMilestone",
       "updateMondaySyncConfig",
       "updateNotificationRule",
       "updateOperatorGroup",
@@ -13196,6 +13543,7 @@ var init_chunk_QTJQTTIR = __esm({
       "updateTask",
       "updateTeamsApp",
       "updateThemeSettings",
+      "updateTrackedLinkDestination",
       "uploadFile",
       "updateVoicemailStatus",
       "updateWorkflow",
@@ -13245,6 +13593,7 @@ var init_chunk_QTJQTTIR = __esm({
       getChatTokenUsage;
       getChatTodos;
       getChatSkills;
+      getManagerSkills;
       getChatsNeedsResponse;
       getChatsDailyCreationStats;
       getToolCallNames;
@@ -13362,6 +13711,8 @@ var init_chunk_QTJQTTIR = __esm({
       createMemberRole;
       updateMemberRole;
       deleteMemberRole;
+      getMemberRoleCleanupPlan;
+      mergeMemberRoles;
       // Member Fields
       getMemberFields;
       getMemberFieldDefinitions;
@@ -13422,6 +13773,15 @@ var init_chunk_QTJQTTIR = __esm({
       createPersona;
       updatePersona;
       deletePersona;
+      // Metrics API (customer-defined outcome metrics)
+      listMetrics;
+      getMetric;
+      createMetric;
+      updateMetric;
+      deleteMetric;
+      listMetricObservations;
+      getMetricSeries;
+      computeChatMetrics;
       // Dashboards API
       getDashboards;
       getDashboard;
@@ -13430,8 +13790,18 @@ var init_chunk_QTJQTTIR = __esm({
       deleteDashboard;
       getDashboardChannelStats;
       getDashboardWorkflowAssignmentStats;
+      getConfigurationHealth;
       // MOTD API
       getMotd;
+      // Tracked Links analytics (#10934)
+      getTrackedLinkSummary;
+      getTrackedLinkDestinations;
+      getTrackedLinkStats;
+      getTrackedLinkTimeseries;
+      createTrackedLinkDestination;
+      updateTrackedLinkDestination;
+      deleteTrackedLinkDestination;
+      clearTrackedLinkDestinations;
       // Journeys API
       getJourneys;
       getJourney;
@@ -13536,6 +13906,7 @@ var init_chunk_QTJQTTIR = __esm({
       getProduct;
       getWorkspaceProduct;
       getPublicProducts;
+      previewPromoCode;
       getPublicProduct;
       createProduct;
       updateProduct;
@@ -13573,6 +13944,11 @@ var init_chunk_QTJQTTIR = __esm({
       updateBusinessProfile;
       submitBusinessProfile;
       cancelBusinessProfile;
+      listLegalEntities;
+      getLegalEntity;
+      createLegalEntity;
+      getVoiceTrustProducts;
+      syncVoiceTrustProducts;
       createOrganizationWorkspace;
       getOrgBillingCustomer;
       getVapidPublicKey;
@@ -13834,11 +14210,6 @@ var init_chunk_QTJQTTIR = __esm({
       linkCalendarToGoogle;
       unlinkCalendarFromGoogle;
       syncCalendarWithGoogle;
-      getMilestones;
-      getMilestone;
-      createMilestone;
-      updateMilestone;
-      deleteMilestone;
       // Communications API
       getPhoneNumbers;
       getAvailablePhoneNumbers;
@@ -13890,6 +14261,7 @@ var init_chunk_QTJQTTIR = __esm({
       getSTTModels;
       getTTSModels;
       getVoiceModels;
+      getVoicePresets;
       getAllModels;
       getCustomToolkits;
       getCustomToolkit;
@@ -14217,9 +14589,11 @@ var init_chunk_QTJQTTIR = __esm({
         bindAgentsMethods(this, apis.agents);
         bindQualificationsMethods(this, apis.qualifications);
         bindPersonasMethods(this, apis.personas);
+        bindMetricsMethods(this, apis.metrics);
         bindQueriesMethods(this, apis.queries);
         bindDashboardsMethods(this, apis.dashboards);
         bindMotdMethods(this, apis.motd);
+        bindTrackedLinksMethods(this, apis.trackedLinks);
         bindJourneysMethods(this, apis.journeys);
         bindExperimentsMethods(this, apis.experiments);
         bindOperatorMethods(this, apis.operatorGroups);
@@ -14232,7 +14606,7 @@ var init_chunk_QTJQTTIR = __esm({
         bindFilesMethods(this, apis.files);
         bindEventsMethods(this, apis.events);
         bindWorkflowsMethods(this, apis.workflows, apis.workflowNotes, apis.voice, apis.supervisors);
-        bindCalendarsMethods(this, apis.calendars, apis.milestones);
+        bindCalendarsMethods(this, apis.calendars);
         bindCommunicationsMethods(this, apis.phoneNumbers, apis.inboxes, apis.notificationRules);
         bindToolkitsMethods(
           this,
@@ -14405,9 +14779,9 @@ var init_chunk_2YLKG4TT = __esm({
 var SEARCHABLE_EVENT_RULE_SOURCE_FIELDS;
 var init_dist = __esm({
   "../sdk/dist/index.js"() {
-    init_chunk_QTJQTTIR();
+    init_chunk_CEFOCGYO();
     init_chunk_2YLKG4TT();
-    init_chunk_GP6ICMWF();
+    init_chunk_PJFEGUHM();
     SEARCHABLE_EVENT_RULE_SOURCE_FIELDS = [
       "taskId",
       "dataTypeId",
@@ -16268,6 +16642,19 @@ var COMMON_ARGS = [
   { name: "id", description: "Entity ID" },
   { name: "uuid", description: "Entity UUID" }
 ];
+var ORG_UUID_ARG = {
+  name: "org-uuid",
+  aliases: ["org"],
+  description: "Organization UUID or ID",
+  required: true
+};
+function requireOrgRef(args) {
+  const val = args["org-uuid"] ?? args.org;
+  if (typeof val !== "string" || !val) {
+    throw new CLIError("Missing required argument: --org-uuid");
+  }
+  return val;
+}
 function parseArgs(defs, argv) {
   const allDefs = [...defs, ...COMMON_ARGS];
   const result3 = {};
@@ -16640,8 +17027,8 @@ function crudCommands(config) {
             requiresWorkspace ? [hctx.workspace, id, cascade] : [id, cascade],
             resolveClient
           );
-          const suffix = result3 && typeof result3 === "object" && "deletedTaskCount" in result3 && result3.deletedTaskCount ? ` and ${result3.deletedTaskCount} child entities` : "";
-          process.stdout.write(`Deleted ${entityName} ${id}${suffix}
+          const suffix2 = result3 && typeof result3 === "object" && "deletedTaskCount" in result3 && result3.deletedTaskCount ? ` and ${result3.deletedTaskCount} child entities` : "";
+          process.stdout.write(`Deleted ${entityName} ${id}${suffix2}
 `);
         } else {
           await callApiWithId(
@@ -16779,8 +17166,8 @@ var CommandRegistry = class {
     const key = cmd.path.join(" ");
     this.commands.set(key, cmd);
   }
-  registerCommands(commands3) {
-    for (const cmd of commands3) {
+  registerCommands(commands4) {
+    for (const cmd of commands4) {
       this.registerCommand(cmd);
     }
   }
@@ -17159,6 +17546,43 @@ var agentTasksDomain = {
 // src/domains/agents.ts
 init_output();
 var COLUMNS = [COL.id(), COL.uuid(), COL.name(), COL.status(), COL.created()];
+var AGENT_FIELD_REFERENCE = `
+Field reference for --data JSON (create/update):
+
+Required on create
+  name (string)                         Display name
+  chatModelId (string)                  Text chat model ID (see \`gr ai-models chat\`)
+                                        e.g. "aws:bedrock:claude-4-5-haiku"
+
+Optional
+  description (string)                  Short summary shown in listings
+  systemPrompt (string)                 Base instructions / identity
+  chatModelConfig (object|null)         Chat model overrides (temperature, thinking, \u2026)
+  realtimeModelId (string|null)         Voice/realtime model (see \`gr ai-models realtime\`)
+                                        e.g. "xai:realtime:voice-agent-2" (Grok Voice Think Fast 2)
+                                        Native models auto-fill tts=native + default voice when
+                                        realtimeModelConfig is omitted.
+  realtimeModelConfig (object|null)     Realtime config. Native example:
+                                        {"ttsModel":"native","voiceModel":"xai:voice:eve"}
+                                        Composable (custom:realtime:composable) needs
+                                        voiceModel + ttsModel + inferenceModel.
+  memberRoleId (number)                 Role id (omit to use the default Agent role)
+  email / phone / externalId            Optional contact fields
+  labelIds (number[])                   Member label ids
+  codeInterpreterEnabled (bool)
+  maxDailyActions (number|null)
+
+Attach an agent\u2019s models/identity to a workflow (draft), then publish:
+  gr workflows update --id <wf> -d '{"copyFromAgentId": <agentId>}'
+  gr workflows publish --id <wf>
+
+One-shot workflow voice WITHOUT creating an agent (preferred for "use Grok Voice 2"):
+  gr workflows update --id <wf> -d '{"realtimeModelId":"xai:realtime:voice-agent-2"}'
+  gr workflows publish --id <wf>
+
+List models:
+  gr ai-models chat | realtime | voice
+`;
 var agentsDomain = {
   name: "agents",
   description: "Manage agents",
@@ -17175,9 +17599,16 @@ var agentsDomain = {
       unarchiveMethod: "unarchiveAgent",
       columns: COLUMNS,
       paginationSupport: "full",
-      updateHelp: "Update an agent. Body schema (JSON via --data/--file/stdin), all fields optional:\n  name              string   display name\n  description       string   short summary shown in listings\n  systemPrompt      string   base instructions for the agent\n  model             string   AI model slug (see `gr ai-models list`)\n  temperature       number   sampling temperature (0-2)\n  avatarFileId      number   workspace file ID for the avatar\n  config            object   AgentConfig overrides (advanced)\nWorkflow abilities are managed with `gr abilities`.",
+      createHelp: `Create an agent
+${AGENT_FIELD_REFERENCE}`,
+      updateHelp: `Update an agent. All fields optional.
+${AGENT_FIELD_REFERENCE}`,
+      createExamples: [
+        `gr agents create -d '{"name":"Support","chatModelId":"aws:bedrock:claude-4-5-haiku","realtimeModelId":"xai:realtime:voice-agent-2"}'`,
+        "gr agents create --file agent.json"
+      ],
       updateExamples: [
-        `gr agents update --id 42 --data '{"name":"Scheduler","temperature":0.4}'`,
+        `gr agents update --id 42 -d '{"realtimeModelId":"xai:realtime:voice-agent-2"}'`,
         "gr agents update --id 42 --file agent.json"
       ]
     })
@@ -17255,6 +17686,42 @@ var FEEDBACK_COLUMNS = [
   },
   COL.created()
 ];
+async function respondWithValue(ctx, workspace, args) {
+  const chatId = requireIdOrUuidFrom(args, "chat-id", "id");
+  const chat = await requireAuth(ctx).apiClient.getChat(workspace, chatId);
+  const interrupt = chat?.interrupt;
+  if (!interrupt || !interrupt.interruptId) {
+    throw new Error("No pending interrupt on this chat.");
+  }
+  const raw = args.value;
+  if (typeof raw !== "string" || !raw.length) {
+    throw new Error(
+      `A --value is required. For a form pass the field map as JSON, e.g. --value '{"channels":"sms,voice","days":"2"}'; for a choice list pass the chosen value.`
+    );
+  }
+  const url = `${ctx.envConfig.apiUrl}/api/v2/w/${workspace}/chats/${chat.id}/inference/hitl`;
+  const response = await fetch(url, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${requireAuth(ctx).accessToken}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({ chosenValue: raw, interruptId: interrupt.interruptId })
+  });
+  if (!response.ok) {
+    throw new Error(
+      `Resume failed (${response.status}): ${(await response.text()).slice(0, 400)}`
+    );
+  }
+  outputSingle(
+    {
+      status: "resumed",
+      chatId: chat.id,
+      next: `gr chats inspect --id ${chat.id} -w ${workspace}`
+    },
+    ctx
+  );
+}
 async function respondToInterrupt(ctx, workspace, args, decisionType) {
   const chatId = requireIdOrUuidFrom(args, "chat-id", "id");
   const chat = await requireAuth(ctx).apiClient.getChat(workspace, chatId);
@@ -17287,6 +17754,27 @@ async function respondToInterrupt(ctx, workspace, args, decisionType) {
   if (streamError) throw new Error(`Inference error: ${streamError}`);
   outputSingle({ role: "assistant", content: buffered }, ctx, MESSAGE_COLUMNS2);
 }
+function isDevProfile(env) {
+  return env === "dev" || env === "development" || env === "local";
+}
+function isLocalApiOrigin(apiUrl) {
+  if (!apiUrl) return false;
+  try {
+    const host = new URL(apiUrl).hostname.replace(/^\[|\]$/g, "");
+    return host === "localhost" || host === "127.0.0.1" || host === "::1" || host.endsWith(".gravityrail.test");
+  } catch {
+    return false;
+  }
+}
+async function shouldRedactChatContent(ctx, apiClient, workspace) {
+  if (isDevProfile(ctx.env) && isLocalApiOrigin(ctx.envConfig?.apiUrl)) return false;
+  try {
+    const ws = await apiClient.getWorkspace(workspace);
+    return ws.phiPostureDecision !== "allow_non_phi";
+  } catch {
+    return true;
+  }
+}
 var chatsDomain = {
   name: "chats",
   description: "Manage chats",
@@ -17483,6 +17971,28 @@ var chatsDomain = {
         await respondToInterrupt(ctx, workspace, args, decisionType);
       }
     },
+    {
+      path: ["chats", "interrupt", "respond"],
+      description: "Answer a chat's pending UI interrupt (form or choice list) with a value, and stream the continued reply.",
+      mutates: true,
+      requiresWorkspace: true,
+      args: [
+        {
+          name: "chat-id",
+          aliases: ["id"],
+          description: "Chat ID (numeric id preferred; uuid accepted)",
+          required: true
+        },
+        {
+          name: "value",
+          description: `The answer. For a form, the field map as JSON (e.g. '{"channels":"sms,voice","days":"2"}'); for a choice list, the chosen value.`,
+          required: true
+        }
+      ],
+      handler: async ({ ctx, workspace, args }) => {
+        await respondWithValue(ctx, workspace, args);
+      }
+    },
     {
       path: ["chats", "interrupt", "deny"],
       description: "Reject a chat's pending approval request with a reason.",
@@ -17513,7 +18023,17 @@ var chatsDomain = {
           description: "Chat ID (numeric id preferred; uuid accepted)",
           required: true
         },
-        { name: "stream", description: "Stream the AI response via AG-UI", isFlag: true }
+        { name: "stream", description: "Stream the AI response via AG-UI", isFlag: true },
+        {
+          // Read by the handler below since this command was written, but
+          // never declared — so `--auto-approve` parsed as nothing and the
+          // turn stopped on every tool call anyway. Driving a manager turn
+          // from the CLI meant approving each exec by hand, which is why
+          // multi-turn QA was impractical.
+          name: "auto-approve",
+          description: "Approve tool calls automatically for this turn (development QA). Capability round-trips (screenshots, browser, forms) still prompt.",
+          isFlag: true
+        }
       ],
       handler: async ({ ctx, workspace, args, data }) => {
         const content = typeof data === "string" ? data : data?.content;
@@ -17548,7 +18068,11 @@ var chatsDomain = {
           );
           process.stdout.write("\n");
           if (!streamed.trim()) {
-            await printPendingApproval(ctx, workspace, chatId);
+            if (!await printPendingApproval(ctx, workspace, chatId)) {
+              throw new Error(
+                `No response was produced for chat ${chatId}, and no approval is pending. The inference stream ended without emitting anything \u2014 usually the turn never started.`
+              );
+            }
           }
         } else {
           const aguiClient = new AGUIClient({
@@ -17578,6 +18102,9 @@ var chatsDomain = {
               chatId
             );
             if (await printPendingApproval(ctx, workspace, chatId, chat)) return;
+            throw new Error(
+              `No response was produced for chat ${chatId}, and no approval is pending. The inference stream ended without emitting anything \u2014 usually the turn never started. Check the API log for "Inference stream timed out for key inference:${workspace}:${chatId}" and the temporal-worker log for an "inference-${workspace}-${chatId}" workflow.`
+            );
           }
           outputSingle(
             {
@@ -17720,6 +18247,8 @@ var chatsDomain = {
           authed.apiClient.getChat(workspace, chatId),
           authed.apiClient.getChatMessages(workspace, chatId)
         ]);
+        const redact = await shouldRedactChatContent(ctx, authed.apiClient, workspace);
+        const hide = (value) => redact ? "[REDACTED]" : value;
         const result3 = {
           chat: {
             id: chat.id,
@@ -17735,7 +18264,7 @@ var chatsDomain = {
             // field projections (#20262). Always an array so the key
             // survives JSON serialization even when the API omits it.
             participants: (chat.participants ?? []).map((p) => ({
-              name: "[REDACTED]",
+              name: hide(p.name),
               role: p.role,
               memberId: p.memberId ?? null,
               memberType: p.memberType ?? null
@@ -17743,11 +18272,13 @@ var chatsDomain = {
           },
           // Deliberate allow-list — never spread the API message. PHI
           // lives in content and (if ever added) sttMetadata.words
-          // (#21973); both must stay out of inspect output.
+          // (#21973), so nothing beyond these three keys is emitted; the
+          // content itself is gated on posture (see
+          // shouldRedactChatContent), not blanket-hidden.
           messages: messages.map((m) => ({
             id: m.id,
             role: m.role,
-            content: "[REDACTED]"
+            content: hide(m.content)
           }))
         };
         const assignmentId = chat.assignmentId;
@@ -17765,7 +18296,7 @@ var chatsDomain = {
             dataRecords: assignment.dataRecords?.map((dr) => ({
               id: dr.id,
               dataTypeId: dr.dataTypeId,
-              fieldValues: "[REDACTED]"
+              fieldValues: hide(dr.fieldValues)
             }))
           };
         }
@@ -18161,8 +18692,26 @@ Core
   name (string)                         Display name
   description (string, optional)
   defaultPhoneNumberId (number|null)    Outbound caller ID (workspace phone id)
+  defaultInboxId (number|null)          Default inbox for inbound messaging
   permissions (object, optional)        Workflow-level permission flags
 
+Assistant / models (live on the DRAFT revision \u2014 publish to go live)
+  assistantName (string)                Display name for the workflow assistant
+  assistantIdentity (string)            Persona / identity instructions
+  chatModelId (string)                  Text chat model (see \`gr ai-models chat\`)
+  chatModelConfig (object|null)         Chat model overrides
+  realtimeModelId (string|null)         Voice/realtime model (see \`gr ai-models realtime\`)
+                                        One-shot voice example:
+                                        {"realtimeModelId":"xai:realtime:voice-agent-2"}
+                                        Native models auto-fill tts=native + default voice
+                                        (xAI \u2192 xai:voice:eve). Optional explicit config:
+                                        {"realtimeModelId":"xai:realtime:voice-agent-2",
+                                         "realtimeModelConfig":{"ttsModel":"native",
+                                           "voiceModel":"xai:voice:ara"}}
+  realtimeModelConfig (object|null)     Realtime config; omit for provider defaults
+  copyFromAgentId (number)              Copy full assistant settings from an agent
+  copyFromWorkflowRevisionId (number)   Copy assistant settings from a revision
+
 Member role access (memberRoleAccess)
   Array of objects, NOT bare role ids:
   [{"memberRoleId": 6, "accessMode": 1}]
@@ -18188,6 +18737,9 @@ Use the dedicated commands:
   workflows revisions edit     Branch a published revision back into the draft
   workflows revisions diff     Compare two revisions
   workflows revisions update   Edit a revision's label / publish notes
+
+After changing assistant/realtime fields, publish so live traffic picks them up:
+  gr workflows publish --id <workflowId>
 `;
 
 // src/domains/workflows.ts
@@ -19104,8 +19656,6 @@ Provisioning started. Watch it come up with:
             "inboxes",
             "routines",
             "memberFilters",
-            "milestones",
-            "milestoneGoals",
             "customToolkits",
             "customTools",
             "pages",
@@ -19186,8 +19736,6 @@ Provisioning started. Watch it come up with:
             "inboxes",
             "routines",
             "memberFilters",
-            "milestones",
-            "milestoneGoals",
             "customToolkits",
             "customTools",
             "pages",
@@ -21599,9 +22147,160 @@ var journeysDomain = {
   ]
 };
 
-// src/domains/personas.ts
+// src/domains/metrics.ts
 init_output();
+init_context();
+init_errors();
 var COLUMNS11 = [
+  COL.id(),
+  COL.name(),
+  { header: "SLUG", getValue: (item) => item.slug ?? "" },
+  { header: "TYPE", getValue: (item) => item.metricType ?? "" },
+  { header: "SOURCE", getValue: (item) => item.source ?? "" },
+  { header: "UNIT", getValue: (item) => item.unit ?? "" },
+  {
+    header: "ENABLED",
+    getValue: (item) => item.enabled ? "yes" : "no"
+  },
+  COL.created()
+];
+var OBS_COLUMNS = [
+  COL.id(),
+  { header: "VALUE", getValue: (item) => String(item.value ?? "") },
+  { header: "OBSERVED_AT", getValue: (item) => item.observedAt ?? "" },
+  {
+    header: "CHAT_ID",
+    getValue: (item) => item.chatId != null ? String(item.chatId) : ""
+  },
+  {
+    header: "MEMBER_ID",
+    getValue: (item) => item.memberId != null ? String(item.memberId) : ""
+  }
+];
+var metricsDomain = {
+  name: "metrics",
+  description: "Customer-defined outcome metrics (CEL expression or LLM rubric) with time-series readout",
+  commands: [
+    ...crudCommands({
+      prefix: ["metrics"],
+      entityName: "metric",
+      listMethod: "listMetrics",
+      getMethod: "getMetric",
+      createMethod: "createMetric",
+      updateMethod: "updateMetric",
+      deleteMethod: "deleteMetric",
+      columns: COLUMNS11,
+      paginationSupport: "full",
+      createExamples: [
+        `yarn gr metrics create -w $WID --allow-write --data '{"name":"SMS Channel Rate","metricType":"expression","celExpression":"chat.channel == \\"phone-sms\\"","unit":"rate"}'`,
+        `yarn gr metrics create -w $WID --allow-write --data '{"name":"Qualified Engagement","metricType":"rubric","evaluationPrompt":"Did the user show buying intent?","unit":"rate"}'`
+      ],
+      createHelp: "Create a metric definition. metricType is expression (CEL) or rubric (LLM). MVP source is chat only."
+    }),
+    {
+      path: ["metrics", "observations"],
+      description: "List raw observations for a metric in a date range (may include PHI reason)",
+      args: [
+        { name: "id", required: true, description: "Metric ID" },
+        {
+          name: "start",
+          required: true,
+          description: "ISO-8601 inclusive lower bound on observed_at"
+        },
+        {
+          name: "end",
+          required: true,
+          description: "ISO-8601 exclusive upper bound on observed_at"
+        },
+        { name: "page", description: "Page number (default 1)" },
+        { name: "page-size", description: "Page size (default 100)" }
+      ],
+      requiresWorkspace: true,
+      examples: [
+        "yarn gr metrics observations --id 1 --start 2026-07-01T00:00:00Z --end 2026-08-01T00:00:00Z"
+      ],
+      handler: async (hctx) => {
+        const client = requireAuth(hctx.ctx).apiClient;
+        const id = requireNumber(hctx.args, "id");
+        const start = requireString(hctx.args, "start");
+        const end = requireString(hctx.args, "end");
+        const page = hctx.args["page"] != null ? Number(hctx.args["page"]) : void 0;
+        const pageSize = hctx.args["page-size"] != null ? Number(hctx.args["page-size"]) : void 0;
+        const result3 = await client.listMetricObservations(hctx.workspace, id, {
+          start,
+          end,
+          page,
+          pageSize
+        });
+        outputData(result3.items ?? result3, hctx.ctx, OBS_COLUMNS);
+      }
+    },
+    {
+      path: ["metrics", "series"],
+      description: "Time-bucketed aggregation for a metric (numeric only)",
+      args: [
+        { name: "id", required: true, description: "Metric ID" },
+        {
+          name: "start",
+          required: true,
+          description: "ISO-8601 inclusive lower bound on observed_at"
+        },
+        {
+          name: "end",
+          required: true,
+          description: "ISO-8601 exclusive upper bound on observed_at"
+        },
+        { name: "bucket", description: "day | week (default day)" },
+        {
+          name: "aggregation",
+          description: "avg | sum | count | rate (default avg)"
+        }
+      ],
+      requiresWorkspace: true,
+      examples: [
+        "yarn gr metrics series --id 1 --start 2026-07-01T00:00:00Z --end 2026-08-01T00:00:00Z --bucket day"
+      ],
+      handler: async (hctx) => {
+        const client = requireAuth(hctx.ctx).apiClient;
+        const id = requireNumber(hctx.args, "id");
+        const result3 = await client.getMetricSeries(hctx.workspace, id, {
+          start: requireString(hctx.args, "start"),
+          end: requireString(hctx.args, "end"),
+          bucket: hctx.args["bucket"] ?? "day",
+          aggregation: hctx.args["aggregation"] ?? "avg"
+        });
+        outputSingle(result3, hctx.ctx);
+      }
+    },
+    {
+      path: ["metrics", "compute-for-chat"],
+      description: "On-demand evaluate enabled chat-source metrics for one chat (writes observations + dual-write feedback)",
+      args: [
+        {
+          name: "chat-id",
+          required: true,
+          description: "Chat ID to evaluate"
+        }
+      ],
+      requiresWorkspace: true,
+      mutates: true,
+      examples: ["yarn gr metrics compute-for-chat --chat-id 42 --allow-write"],
+      handler: async (hctx) => {
+        const client = requireAuth(hctx.ctx).apiClient;
+        const chatId = requireNumber(hctx.args, "chat-id");
+        if (chatId < 1) {
+          throw new CLIError("--chat-id must be a positive number");
+        }
+        const result3 = await client.computeChatMetrics(hctx.workspace, { chatId });
+        outputSingle(result3, hctx.ctx);
+      }
+    }
+  ]
+};
+
+// src/domains/personas.ts
+init_output();
+var COLUMNS12 = [
   COL.id(),
   COL.name(),
   { header: "AGE", getValue: (item) => item.age != null ? String(item.age) : "" },
@@ -21631,7 +22330,7 @@ var personasDomain = {
       createMethod: "createPersona",
       updateMethod: "updatePersona",
       deleteMethod: "deletePersona",
-      columns: COLUMNS11,
+      columns: COLUMNS12,
       paginationSupport: "full"
     })
   ]
@@ -21690,11 +22389,11 @@ function shuffleInPlace(items) {
   }
   return items;
 }
-function buildModelEvalBatchJobs(scenarios, models, rounds, warmup) {
+function buildModelEvalBatchJobs(scenarios, models, rounds, warmup, realtimeModels = []) {
   if (scenarios.length === 0) {
     throw new CLIError("At least one scenario is required");
   }
-  if (models.length === 0) {
+  if (models.length === 0 && realtimeModels.length === 0) {
     throw new CLIError("At least one model is required");
   }
   if (rounds < 1) {
@@ -21715,12 +22414,60 @@ function buildModelEvalBatchJobs(scenarios, models, rounds, warmup) {
           modelId
         });
       }
+      for (const modelId of realtimeModels) {
+        roundJobs.push({
+          round,
+          warmup: warm,
+          scenarioId: scenario.id,
+          scenarioSlug: scenario.slug,
+          scenarioName: scenario.name,
+          modelId,
+          realtime: true
+        });
+      }
     }
     shuffleInPlace(roundJobs);
     jobs.push(...roundJobs);
   }
   return jobs;
 }
+var REALTIME_AUDIO_USD_PER_MIN = {
+  "xai:realtime:voice-agent": 0.05,
+  // Grok Voice Think Fast 1
+  "xai:realtime:voice-agent-2": 0.08
+  // Grok Voice Think Fast 2
+};
+var DEFAULT_REALTIME_AUDIO_USD_PER_MIN = 0.08;
+var EST_AUDIO_MIN_PER_RUN = 3;
+var EST_TEXT_USD_PER_RUN = 0.012;
+function realtimeAudioUsdPerMin(modelId) {
+  return REALTIME_AUDIO_USD_PER_MIN[modelId] ?? DEFAULT_REALTIME_AUDIO_USD_PER_MIN;
+}
+function estimateRealtimeRunCostUsd(modelId) {
+  return EST_AUDIO_MIN_PER_RUN * realtimeAudioUsdPerMin(modelId) + EST_TEXT_USD_PER_RUN;
+}
+function projectRealtimeBatchCostUsd(jobs) {
+  return jobs.filter((j) => j.realtime).reduce((sum, j) => sum + estimateRealtimeRunCostUsd(j.modelId), 0);
+}
+function actualRealtimeRowCostUsd(row, modelId) {
+  const summary = row.timing_summary;
+  const audioMs = summary ? summary["audio_output_ms_total"] : void 0;
+  if (typeof audioMs === "number" && Number.isFinite(audioMs) && audioMs >= 0) {
+    return audioMs / 6e4 * realtimeAudioUsdPerMin(modelId) + EST_TEXT_USD_PER_RUN;
+  }
+  return estimateRealtimeRunCostUsd(modelId);
+}
+function parseMaxBudgetUsd(raw, flagName) {
+  if (raw === void 0 || raw === null || raw === "") {
+    return void 0;
+  }
+  const value = Number(raw);
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new CLIError(`${flagName} must be a positive number of USD`);
+  }
+  return value;
+}
+var REALTIME_MAX_CONCURRENCY = 4;
 function summarizeCriterionResults(run) {
   if (!run.criterionResults?.length) return void 0;
   return run.criterionResults.map((c) => ({
@@ -21729,7 +22476,7 @@ function summarizeCriterionResults(run) {
     score: c.score ?? null
   }));
 }
-function runToBatchRow(job, workflowId, run, error) {
+function runToBatchRow(job, workflowId, run, error, batchLabel) {
   return {
     ts: (/* @__PURE__ */ new Date()).toISOString(),
     round: job.round,
@@ -21739,6 +22486,8 @@ function runToBatchRow(job, workflowId, run, error) {
     scenario_slug: job.scenarioSlug,
     scenario_name: job.scenarioName,
     model_id: job.modelId,
+    ...job.realtime ? { realtime_model_id: job.modelId } : {},
+    ...batchLabel ? { batch_label: batchLabel } : {},
     run_id: run?.id,
     error,
     failure_reason: run?.failureReason ?? null,
@@ -21793,7 +22542,10 @@ async function executeModelEvalJob(api, options, job, waitTimeoutMs, pollMs, sle
     const started = await api.startTestChatRun(options.workspace, options.workflowId, {
       scenarioId: job.scenarioId,
       driver: DriverMode.AUTO,
-      assistantChatModelId: job.modelId
+      ...job.realtime ? {
+        assistantRealtimeModelId: job.modelId,
+        ...options.realtimeConfig ? { assistantRealtimeModelConfig: options.realtimeConfig } : {}
+      } : { assistantChatModelId: job.modelId }
     });
     let run = await waitForRunTerminal(
       api,
@@ -21814,10 +22566,10 @@ async function executeModelEvalJob(api, options, job, waitTimeoutMs, pollMs, sle
         sleep
       );
     }
-    return runToBatchRow(job, options.workflowId, run);
+    return runToBatchRow(job, options.workflowId, run, void 0, options.batchLabel);
   } catch (e) {
     const message = e instanceof Error ? e.message : String(e);
-    return runToBatchRow(job, options.workflowId, null, message);
+    return runToBatchRow(job, options.workflowId, null, message, options.batchLabel);
   }
 }
 function createSpacingGate(spacingSec, sleep) {
@@ -21835,56 +22587,99 @@ function createSpacingGate(spacingSec, sleep) {
 }
 async function executeModelEvalBatch(api, options) {
   const sleep = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const concurrency = options.concurrency ?? 1;
   const jobs = buildModelEvalBatchJobs(
     options.scenarios,
     options.models,
     options.rounds,
-    options.warmup
+    options.warmup,
+    options.realtimeModels ?? []
   );
   const waitTimeoutMs = options.waitTimeoutSec * 1e3;
   const pollMs = options.pollIntervalSec * 1e3;
   const rows = [];
   let stopBatch = false;
+  let budgetStopped = false;
+  let actualSpendUsd = 0;
   const awaitSpacing = createSpacingGate(options.spacingSec, sleep);
+  const emitProgress = (line) => {
+    if (options.onProgress) {
+      options.onProgress(line);
+    } else {
+      process.stdout.write(`${line}
+`);
+    }
+  };
+  const realtimeJobCount = jobs.filter((j) => j.realtime).length;
+  let concurrency = options.concurrency ?? 1;
+  if (realtimeJobCount > 0 && concurrency > REALTIME_MAX_CONCURRENCY) {
+    emitProgress(
+      `concurrency clamped ${concurrency} -> ${REALTIME_MAX_CONCURRENCY} (realtime models share the provider session pool)`
+    );
+    concurrency = REALTIME_MAX_CONCURRENCY;
+  }
+  if (realtimeJobCount > 0) {
+    const projectedUsd = projectRealtimeBatchCostUsd(jobs);
+    const cap = options.maxBudgetUsd;
+    emitProgress(
+      `realtime budget: projected ~$${projectedUsd.toFixed(2)} for ${realtimeJobCount} realtime run(s)${cap != null ? ` (cap $${cap.toFixed(2)})` : ""}`
+    );
+    if (cap != null && projectedUsd > cap) {
+      throw new CLIError(
+        `Batch aborted before dispatch: projected realtime cost $${projectedUsd.toFixed(2)} exceeds --max-budget-usd $${cap.toFixed(2)}. Reduce rounds/scenarios/models or raise the cap.`
+      );
+    }
+  }
   const recordRow = (job, row) => {
     rows.push(row);
     if (options.outPath) {
       appendFileSync(options.outPath, `${JSON.stringify(row)}
 `);
     }
-    const progress = formatBatchProgressLine(job, row);
-    if (options.onProgress) {
-      options.onProgress(progress);
-    } else {
-      process.stdout.write(`${progress}
-`);
-    }
+    emitProgress(formatBatchProgressLine(job, row));
   };
+  const makeSkippedRow = (job) => ({
+    ...runToBatchRow(
+      job,
+      options.workflowId,
+      null,
+      budgetStopped ? "batch stopped: realtime budget cap reached" : "batch aborted before start",
+      options.batchLabel
+    ),
+    batch_skipped: true
+  });
   const runOne = async (job) => {
     await awaitSpacing();
     if (stopBatch) {
-      return {
-        ...runToBatchRow(job, options.workflowId, null, "batch aborted before start"),
-        batch_skipped: true
-      };
+      return makeSkippedRow(job);
     }
     const row = await executeModelEvalJob(api, options, job, waitTimeoutMs, pollMs, sleep);
     if (isConfigurationBlockerFailure(row.failure_reason)) {
       stopBatch = true;
     }
+    if (job.realtime && !row.batch_skipped) {
+      actualSpendUsd += actualRealtimeRowCostUsd(row, job.modelId);
+      if (options.maxBudgetUsd != null && actualSpendUsd >= options.maxBudgetUsd && !stopBatch) {
+        stopBatch = true;
+        budgetStopped = true;
+        emitProgress(
+          `realtime budget: actual spend ~$${actualSpendUsd.toFixed(2)} reached cap $${options.maxBudgetUsd.toFixed(2)} \u2014 stopping dispatch`
+        );
+      }
+    }
     return row;
   };
   if (concurrency <= 1) {
-    for (const job of jobs) {
+    let stoppedAt = jobs.length;
+    for (const [index, job] of jobs.entries()) {
       if (stopBatch) {
+        stoppedAt = index;
         break;
       }
       const row = await runOne(job);
       recordRow(job, row);
-      if (stopBatch) {
-        break;
-      }
+    }
+    for (const job of jobs.slice(stoppedAt)) {
+      recordRow(job, makeSkippedRow(job));
     }
   } else {
     const results = new Array(jobs.length);
@@ -21900,6 +22695,9 @@ async function executeModelEvalBatch(api, options) {
           return;
         }
         const job = jobs[index];
+        if (job === void 0) {
+          return;
+        }
         const row = await runOne(job);
         results[index] = row;
         recordRow(job, row);
@@ -21908,20 +22706,19 @@ async function executeModelEvalBatch(api, options) {
     const workers = Array.from({ length: Math.min(concurrency, jobs.length) }, () => worker());
     await Promise.all(workers);
     if (stopBatch) {
-      for (let index = 0; index < jobs.length; index++) {
+      jobs.forEach((job, index) => {
         if (results[index] !== void 0) {
-          continue;
+          return;
         }
-        const job = jobs[index];
-        const skipped = {
-          ...runToBatchRow(job, options.workflowId, null, "batch aborted before start"),
-          batch_skipped: true
-        };
+        const skipped = makeSkippedRow(job);
         results[index] = skipped;
         recordRow(job, skipped);
-      }
+      });
     }
   }
+  if (realtimeJobCount > 0) {
+    emitProgress(`realtime budget: total actual spend ~$${actualSpendUsd.toFixed(2)}`);
+  }
   const blockerRow = rows.find((r) => isConfigurationBlockerFailure(r.failure_reason));
   if (blockerRow) {
     throw new CLIError(
@@ -22223,9 +23020,29 @@ var qualificationsDomain = {
         { name: "workflow-id", description: "Workflow ID", required: true },
         {
           name: "models",
-          description: "Comma-separated assistant chat model IDs",
+          description: "Comma-separated assistant chat model IDs (optional with --realtime-models)",
           alias: "m",
-          required: true
+          required: false
+        },
+        {
+          name: "realtime-models",
+          description: "Comma-separated native realtime model IDs (each forwarded as assistantRealtimeModelId)",
+          required: false
+        },
+        {
+          name: "realtime-config",
+          description: "JSON object forwarded as assistantRealtimeModelConfig on realtime jobs",
+          required: false
+        },
+        {
+          name: "batch-label",
+          description: "Label recorded on every JSONL row for cross-batch comparison",
+          required: false
+        },
+        {
+          name: "max-budget-usd",
+          description: "Dispatch cap in USD on realtime spend: abort if pre-flight projection exceeds it, stop dispatching when actuals cross it (in-flight runs still finish and bill)",
+          required: false
         },
         {
           name: "scenario-ids",
@@ -22265,7 +23082,31 @@ var qualificationsDomain = {
         { name: "out", description: "Append JSONL rows to this file" }
       ],
       handler: async ({ ctx, workspace, args }) => {
-        const models = parseCommaSeparatedList(requireString(args, "models"), "--models");
+        const models = args.models ? parseCommaSeparatedList(String(args.models), "--models") : [];
+        const realtimeModels = args["realtime-models"] ? parseCommaSeparatedList(String(args["realtime-models"]), "--realtime-models") : [];
+        if (models.length === 0 && realtimeModels.length === 0) {
+          throw new CLIError("Specify --models and/or --realtime-models");
+        }
+        let realtimeConfig;
+        if (args["realtime-config"]) {
+          if (realtimeModels.length === 0) {
+            throw new CLIError("--realtime-config requires --realtime-models");
+          }
+          let parsed;
+          try {
+            parsed = JSON.parse(String(args["realtime-config"]));
+          } catch {
+            throw new CLIError("--realtime-config is not valid JSON");
+          }
+          if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new CLIError(
+              "--realtime-config must be a JSON object (not an array or null)"
+            );
+          }
+          realtimeConfig = parsed;
+        }
+        const batchLabel = args["batch-label"] ? String(args["batch-label"]) : void 0;
+        const maxBudgetUsd = parseMaxBudgetUsd(args["max-budget-usd"], "--max-budget-usd");
         const allScenarios = Boolean(args["all-scenarios"]);
         const scenarioIdsRaw = args["scenario-ids"];
         if (allScenarios && scenarioIdsRaw) {
@@ -22306,6 +23147,10 @@ var qualificationsDomain = {
           workspace,
           workflowId,
           models,
+          realtimeModels,
+          realtimeConfig,
+          batchLabel,
+          maxBudgetUsd,
           scenarios,
           rounds,
           warmup,
@@ -22622,7 +23467,7 @@ Relations (relationMatch): ${relations.join(", ")}`);
 };
 init_output();
 init_context();
-var COLUMNS12 = [
+var COLUMNS13 = [
   COL.id(),
   COL.name(),
   { header: "SLUG", getValue: (item) => item.slug ?? "" },
@@ -22676,7 +23521,7 @@ var sitesDomain = {
       createMethod: "createSite",
       updateMethod: "updateSite",
       deleteMethod: "deleteSite",
-      columns: COLUMNS12
+      columns: COLUMNS13
     }),
     // Pages sub-resource
     {
@@ -23350,7 +24195,7 @@ var abilitiesDomain = {
 init_output();
 init_pagination();
 init_context();
-var COLUMNS13 = [
+var COLUMNS14 = [
   COL.id(),
   COL.status(),
   { header: "GRANTOR", getValue: (item) => String(item.grantorMemberId ?? "") },
@@ -23367,7 +24212,7 @@ var accessGrantsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getAccessGrants(workspace);
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     },
     {
@@ -23380,7 +24225,7 @@ var accessGrantsDomain = {
           workspace,
           requireString(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS13);
+        outputSingle(result3, ctx, COLUMNS14);
       }
     },
     {
@@ -23393,7 +24238,7 @@ var accessGrantsDomain = {
           workspace,
           data
         );
-        outputSingle(result3, ctx, COLUMNS13);
+        outputSingle(result3, ctx, COLUMNS14);
       }
     },
     {
@@ -23404,7 +24249,7 @@ var accessGrantsDomain = {
         const result3 = await requireAuth(ctx).apiClient.getMyReceivedGrants(workspace, {
           pageSize: 200
         });
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     },
     {
@@ -23415,7 +24260,7 @@ var accessGrantsDomain = {
         const result3 = await requireAuth(ctx).apiClient.getMyGivenGrants(workspace, {
           pageSize: 200
         });
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     },
     {
@@ -23430,7 +24275,7 @@ var accessGrantsDomain = {
           requireString(args, "id"),
           data ?? {}
         );
-        outputSingle(result3, ctx, COLUMNS13);
+        outputSingle(result3, ctx, COLUMNS14);
       }
     },
     {
@@ -23445,7 +24290,7 @@ var accessGrantsDomain = {
           requireString(args, "id"),
           data ?? {}
         );
-        outputSingle(result3, ctx, COLUMNS13);
+        outputSingle(result3, ctx, COLUMNS14);
       }
     },
     {
@@ -23458,7 +24303,7 @@ var accessGrantsDomain = {
           workspace,
           requireNumber(args, "member-id")
         );
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     },
     {
@@ -23483,7 +24328,7 @@ var accessGrantsDomain = {
             pageSize: 200
           }
         );
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     }
   ]
@@ -23492,7 +24337,7 @@ var accessGrantsDomain = {
 // src/domains/ai-models.ts
 init_output();
 init_context();
-var COLUMNS14 = [
+var COLUMNS15 = [
   { header: "ID", getValue: (item) => String(item.id ?? item.modelId ?? "") },
   { header: "NAME", getValue: (item) => item.name ?? item.displayName ?? "" },
   { header: "PROVIDER", getValue: (item) => item.provider ?? "" },
@@ -23500,7 +24345,7 @@ var COLUMNS14 = [
 ];
 var aiModelsDomain = {
   name: "ai-models",
-  description: "List available AI models",
+  description: `List available AI models (chat, realtime/voice stacks, speaker voices). Use realtime ids as workflow/agent realtimeModelId; voice ids go in realtimeModelConfig.voiceModel. One-shot workflow voice: gr workflows update -d '{"realtimeModelId":"xai:realtime:voice-agent-2"}' then publish.`,
   commands: [
     {
       path: ["ai-models", "list"],
@@ -23508,34 +24353,34 @@ var aiModelsDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getAllModels();
-        outputData(result3, ctx, COLUMNS14);
+        outputData(result3, ctx, COLUMNS15);
       }
     },
     {
       path: ["ai-models", "chat"],
-      description: "List chat models",
+      description: "List chat models (use as chatModelId on agents/workflows)",
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getChatModels();
-        outputData(result3, ctx, COLUMNS14);
+        outputData(result3, ctx, COLUMNS15);
       }
     },
     {
       path: ["ai-models", "realtime"],
-      description: "List realtime models",
+      description: "List realtime/voice stacks (use as realtimeModelId). e.g. xai:realtime:voice-agent-2 = Grok Voice Think Fast 2",
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getRealtimeModels();
-        outputData(result3, ctx, COLUMNS14);
+        outputData(result3, ctx, COLUMNS15);
       }
     },
     {
       path: ["ai-models", "voice"],
-      description: "List voice models",
+      description: "List speaker voices (use as realtimeModelConfig.voiceModel). Match provider to the realtime model (xai:voice:* with xAI realtime)",
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getVoiceModels();
-        outputData(result3, ctx, COLUMNS14);
+        outputData(result3, ctx, COLUMNS15);
       }
     }
   ]
@@ -23544,7 +24389,7 @@ var aiModelsDomain = {
 // src/domains/api-keys.ts
 init_output();
 init_context();
-var COLUMNS15 = [
+var COLUMNS16 = [
   COL.id(),
   COL.name(),
   { header: "PREFIX", getValue: (item) => item.prefix ?? "" },
@@ -23567,7 +24412,7 @@ var apiKeysDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getApiKeys(workspace);
-        outputData(result3, ctx, COLUMNS15);
+        outputData(result3, ctx, COLUMNS16);
       }
     },
     {
@@ -23602,7 +24447,7 @@ var apiKeysDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getGlobalApiKeys();
-        outputData(result3, ctx, COLUMNS15);
+        outputData(result3, ctx, COLUMNS16);
       }
     },
     {
@@ -24268,7 +25113,7 @@ var conciergeDomain = {
 init_errors();
 init_output();
 init_context();
-var COLUMNS16 = [COL.id(), COL.name(), COL.description(), COL.enabled()];
+var COLUMNS17 = [COL.id(), COL.name(), COL.description(), COL.enabled()];
 var TOOL_COLUMNS2 = [COL.id(), COL.name(), COL.description()];
 var customToolkitsDomain = {
   name: "custom-toolkits",
@@ -24282,7 +25127,7 @@ var customToolkitsDomain = {
       createMethod: "createCustomToolkit",
       updateMethod: "updateCustomToolkit",
       deleteMethod: "deleteCustomToolkit",
-      columns: COLUMNS16
+      columns: COLUMNS17
     }),
     {
       path: ["custom-toolkits", "enable"],
@@ -24295,7 +25140,7 @@ var customToolkitsDomain = {
           workspace,
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS16);
+        outputSingle(result3, ctx, COLUMNS17);
       }
     },
     {
@@ -24309,7 +25154,7 @@ var customToolkitsDomain = {
           workspace,
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS16);
+        outputSingle(result3, ctx, COLUMNS17);
       }
     },
     // Tools — nested resource requiring toolkitId
@@ -24427,7 +25272,7 @@ var docsDomain = {
 // src/domains/features.ts
 init_output();
 init_context();
-var COLUMNS17 = [
+var COLUMNS18 = [
   { header: "SLUG", getValue: (item) => item.slug ?? "" },
   COL.name(),
   COL.description()
@@ -24442,7 +25287,7 @@ var featuresDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getFeatureRegistry();
-        outputData(result3, ctx, COLUMNS17);
+        outputData(result3, ctx, COLUMNS18);
       }
     },
     {
@@ -24454,7 +25299,7 @@ var featuresDomain = {
         const result3 = await requireAuth(ctx).apiClient.getFeatureBySlug(
           requireString(args, "slug")
         );
-        outputSingle(result3, ctx, COLUMNS17);
+        outputSingle(result3, ctx, COLUMNS18);
       }
     },
     {
@@ -24463,7 +25308,7 @@ var featuresDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getAvailableWorkspaceFeatures();
-        outputData(result3, ctx, COLUMNS17);
+        outputData(result3, ctx, COLUMNS18);
       }
     }
   ]
@@ -24472,7 +25317,7 @@ var featuresDomain = {
 // src/domains/inboxes.ts
 init_output();
 init_context();
-var COLUMNS18 = [
+var COLUMNS19 = [
   COL.id(),
   COL.name(),
   { header: "EMAIL", getValue: (item) => item.emailAddress ?? "" },
@@ -24497,7 +25342,7 @@ var inboxesDomain = {
       createMethod: "createInbox",
       updateMethod: "updateInbox",
       deleteMethod: "deleteInbox",
-      columns: COLUMNS18
+      columns: COLUMNS19
     }),
     {
       path: ["inboxes", "emails", "list"],
@@ -24584,7 +25429,7 @@ var inboxesDomain = {
 // src/domains/mcp-servers.ts
 init_output();
 init_context();
-var COLUMNS19 = [
+var COLUMNS20 = [
   COL.id(),
   COL.name(),
   { header: "URL", getValue: (item) => item.url ?? "" },
@@ -24602,7 +25447,7 @@ var mcpServersDomain = {
       createMethod: "createMcpServer",
       updateMethod: "updateMcpServer",
       deleteMethod: "deleteMcpServer",
-      columns: COLUMNS19
+      columns: COLUMNS20
     }),
     {
       path: ["mcp-servers", "enable"],
@@ -24615,7 +25460,7 @@ var mcpServersDomain = {
           workspace,
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS19);
+        outputSingle(result3, ctx, COLUMNS20);
       }
     },
     {
@@ -24629,7 +25474,7 @@ var mcpServersDomain = {
           workspace,
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS19);
+        outputSingle(result3, ctx, COLUMNS20);
       }
     },
     {
@@ -24652,7 +25497,7 @@ var mcpServersDomain = {
 init_output();
 init_pagination();
 init_context();
-var COLUMNS20 = [
+var COLUMNS21 = [
   { header: "KEY", getValue: (item) => item.key ?? "" },
   { header: "TYPE", getValue: (item) => item.type ?? "basic" },
   { header: "DESCRIPTION", getValue: (item) => truncate(item.description ?? "", 60) },
@@ -24686,7 +25531,7 @@ var memberMemoriesDomain = {
           type,
           query
         });
-        outputData(listResult(result3, false), ctx, COLUMNS20);
+        outputData(listResult(result3, false), ctx, COLUMNS21);
       }
     },
     {
@@ -24705,7 +25550,7 @@ var memberMemoriesDomain = {
           memberId,
           key
         );
-        outputData(result3, ctx, COLUMNS20);
+        outputData(result3, ctx, COLUMNS21);
       }
     },
     {
@@ -24736,7 +25581,7 @@ var memberMemoriesDomain = {
             ...priority !== void 0 && { priority }
           }
         );
-        outputData(result3, ctx, COLUMNS20);
+        outputData(result3, ctx, COLUMNS21);
       }
     },
     {
@@ -24769,35 +25614,58 @@ var memberMemoriesDomain = {
   ]
 };
 
-// src/domains/milestones.ts
+// src/domains/intervention-requests.ts
 init_output();
-var COLUMNS21 = [
+var COLUMNS22 = [
   COL.id(),
-  COL.name(),
-  COL.status(),
-  { header: "DUE DATE", getValue: (item) => item.dueDate ?? "" }
+  { header: "KIND", getValue: (item) => item.kind ?? "" },
+  { header: "CHAT", getValue: (item) => item.chatId ?? "" },
+  {
+    header: "STATUS",
+    getValue: (item) => item.resolvedAt ? item.resolution ?? "resolved" : "open"
+  },
+  // Zero is the interesting value: the intervention was requested and nobody
+  // was told, which is what `--unrouted` filters for.
+  { header: "NOTIFIED", getValue: (item) => item.notifiedCount ?? 0 },
+  { header: "REASON", getValue: (item) => item.reasonCode ?? "" },
+  { header: "CREATED", getValue: (item) => item.createdAt ?? "" }
 ];
-var milestonesDomain = {
-  name: "milestones",
-  description: "Manage milestones",
+var interventionRequestsDomain = {
+  name: "interventions",
+  description: "Inspect intervention requests \u2014 escalations and other asks for a person",
   commands: [
-    ...crudCommands({
-      prefix: ["milestones"],
-      entityName: "milestone",
-      listMethod: "getMilestones",
-      getMethod: "getMilestone",
-      createMethod: "createMilestone",
-      updateMethod: "updateMilestone",
-      deleteMethod: "deleteMilestone",
-      columns: COLUMNS21,
-      paginationSupport: "full"
-    })
+    {
+      path: ["interventions", "list"],
+      description: "List intervention requests (escalations etc). Newest first. Read-only.",
+      requiresWorkspace: true,
+      args: [
+        { name: "kind", description: "escalation | contributor_input | approval" },
+        { name: "open", description: "Only unresolved requests", isFlag: true },
+        { name: "chat-id", description: "Only requests for this chat" },
+        {
+          name: "unrouted",
+          description: "Only requests that notified NOBODY \u2014 escalations that reached no one",
+          isFlag: true
+        },
+        { name: "limit", description: "Max rows (default 50, max 200)" }
+      ],
+      handler: async ({ ctx, workspace, args, requireAuth: requireAuth2, outputData: outputData2 }) => {
+        const result3 = await requireAuth2(ctx).apiClient.getInterventionRequests(workspace, {
+          kind: args["kind"],
+          openOnly: Boolean(args["open"]),
+          chatId: args["chat-id"] ? Number(args["chat-id"]) : void 0,
+          unroutedOnly: Boolean(args["unrouted"]),
+          limit: args["limit"] ? Number(args["limit"]) : void 0
+        });
+        outputData2(result3, ctx, COLUMNS22);
+      }
+    }
   ]
 };
 
 // src/domains/notification-rules.ts
 init_output();
-var COLUMNS22 = [
+var COLUMNS23 = [
   COL.id(),
   COL.name(),
   { header: "TYPE", getValue: (item) => item.noticeType ?? "" },
@@ -24814,7 +25682,7 @@ var notificationRulesDomain = {
       createMethod: "createNotificationRule",
       updateMethod: "updateNotificationRule",
       deleteMethod: "deleteNotificationRule",
-      columns: COLUMNS22
+      columns: COLUMNS23
     })
   ]
 };
@@ -24878,7 +25746,7 @@ var oauthDomain = {
 // src/domains/operator-groups.ts
 init_output();
 init_context();
-var COLUMNS23 = [COL.id(), COL.name(), COL.description()];
+var COLUMNS24 = [COL.id(), COL.name(), COL.description()];
 var operatorGroupsDomain = {
   name: "operator-groups",
   description: "Manage operator groups",
@@ -24891,7 +25759,7 @@ var operatorGroupsDomain = {
       createMethod: "createOperatorGroup",
       updateMethod: "updateOperatorGroup",
       deleteMethod: "deleteOperatorGroup",
-      columns: COLUMNS23
+      columns: COLUMNS24
     }),
     {
       path: ["operator-groups", "add-member"],
@@ -24972,13 +25840,6 @@ var ORG_DOMAIN_COLUMNS = [
     maxWidth: 80
   }
 ];
-function requireOrgId(args) {
-  const val = args["org-uuid"] ?? args.org;
-  if (typeof val !== "string" || !val) {
-    throw new CLIError("Missing required argument: --org-uuid");
-  }
-  return val;
-}
 function requireDomainUuid(args) {
   const val = args["domain-uuid"] ?? args.uuid;
   if (typeof val !== "string" || !val) {
@@ -24993,7 +25854,7 @@ function requireDomain(args) {
   }
   return val;
 }
-var ORG_UUID_ARG = {
+var ORG_UUID_ARG2 = {
   name: "org-uuid",
   aliases: ["org"],
   description: "Organization UUID or ID",
@@ -25014,13 +25875,13 @@ function emailVerifyCommand(path4, description) {
     description,
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       `yarn gr ${path4.join(" ")} --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write`
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.verifyOrgDomainEmail(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25033,13 +25894,13 @@ function siteVerifyCommand(path4, description) {
     description,
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       `yarn gr ${path4.join(" ")} --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write`
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.verifyOrgDomainSite(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25053,7 +25914,7 @@ function registerDomainCommand(path4) {
     mutates: true,
     requiresWorkspace: false,
     args: [
-      ORG_UUID_ARG,
+      ORG_UUID_ARG2,
       { name: "domain", description: "Domain to register, e.g. example.com", required: true }
     ],
     examples: [
@@ -25061,7 +25922,7 @@ function registerDomainCommand(path4) {
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.registerOrgDomain(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomain(hctx.args)
       );
       outputSingle(result3, hctx.ctx, ORG_DOMAIN_COLUMNS);
@@ -25073,11 +25934,11 @@ var domainCommands = [
     path: ["org", "domains", "list"],
     description: "List domains registered to an organization",
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG],
+    args: [ORG_UUID_ARG2],
     examples: ["yarn gr org domains list --org-uuid $ORG_UUID"],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.listOrgDomains(
-        requireOrgId(hctx.args)
+        requireOrgRef(hctx.args)
       );
       outputData(result3, hctx.ctx, ORG_DOMAIN_COLUMNS);
     }
@@ -25086,11 +25947,11 @@ var domainCommands = [
     path: ["org", "domains", "get"],
     description: "Get a registered organization domain",
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: ["yarn gr org domains get --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID"],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.getOrgDomain(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx, ORG_DOMAIN_COLUMNS);
@@ -25103,13 +25964,13 @@ var domainCommands = [
     description: "Verify domain ownership by checking the _gravity-verify TXT record",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       "yarn gr org domains verify-ownership --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.verifyOrgDomainOwnership(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25120,13 +25981,16 @@ var domainCommands = [
     description: "Delete a registered organization domain",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       "yarn gr org domains delete --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
     ],
     handler: async (hctx) => {
       const domainUuid = requireDomainUuid(hctx.args);
-      await requireAuth(hctx.ctx).apiClient.deleteOrgDomain(requireOrgId(hctx.args), domainUuid);
+      await requireAuth(hctx.ctx).apiClient.deleteOrgDomain(
+        requireOrgRef(hctx.args),
+        domainUuid
+      );
       process.stdout.write(`Deleted org domain ${domainUuid}
 `);
     }
@@ -25136,13 +26000,13 @@ var domainCommands = [
     description: "Enable email DNS records on a verified organization domain",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       "yarn gr org domains email enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.enableOrgDomainEmail(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25152,11 +26016,11 @@ var domainCommands = [
     path: ["org", "domains", "email", "get"],
     description: "Get email DNS setup and status for an organization domain",
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: ["yarn gr org domains email get --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID"],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.getOrgDomainEmail(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25176,7 +26040,7 @@ var domainCommands = [
     mutates: true,
     requiresWorkspace: false,
     args: [
-      ORG_UUID_ARG,
+      ORG_UUID_ARG2,
       DOMAIN_UUID_ARG,
       {
         name: "confirm",
@@ -25190,7 +26054,7 @@ var domainCommands = [
     handler: async (hctx) => {
       const domainUuid = requireDomainUuid(hctx.args);
       const result3 = await requireAuth(hctx.ctx).apiClient.disableOrgDomainEmail(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         domainUuid,
         hctx.args.confirm === true
       );
@@ -25213,13 +26077,13 @@ var domainCommands = [
     description: "Enable custom site CNAME verification on a verified organization domain",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       "yarn gr org domains site enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.enableOrgDomainSite(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25229,11 +26093,11 @@ var domainCommands = [
     path: ["org", "domains", "site", "get"],
     description: "Get custom site CNAME setup and status for an organization domain",
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: ["yarn gr org domains site get --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID"],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.getOrgDomainSite(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25253,7 +26117,7 @@ var domainCommands = [
     mutates: true,
     requiresWorkspace: false,
     args: [
-      ORG_UUID_ARG,
+      ORG_UUID_ARG2,
       DOMAIN_UUID_ARG,
       {
         name: "confirm",
@@ -25267,7 +26131,7 @@ var domainCommands = [
     handler: async (hctx) => {
       const domainUuid = requireDomainUuid(hctx.args);
       const result3 = await requireAuth(hctx.ctx).apiClient.disableOrgDomainSite(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         domainUuid,
         hctx.args.confirm === true
       );
@@ -25302,6 +26166,229 @@ var orgDomain = {
   ]
 };
 
+// src/domains/org-legal-entities.ts
+init_context();
+init_errors();
+init_output();
+var LEGAL_ENTITY_COLUMNS = [
+  { header: "UUID", getValue: (e) => e.uuid ?? "" },
+  { header: "LEGAL NAME", getValue: (e) => e.legalName ?? "" },
+  { header: "PRIMARY", getValue: (e) => e.isPrimary ? "yes" : "" },
+  { header: "ID TYPE", getValue: (e) => e.registrationIdentifierType ?? "" },
+  { header: "PROFILE SID", getValue: (e) => e.customerProfileSid ?? "" },
+  // The CACHED status hint. `org business-profile get` reads Twilio live.
+  { header: "PROFILE STATUS (cached)", getValue: (e) => e.customerProfileStatus ?? "" }
+];
+var LEGAL_ENTITY_UUID_ARG = {
+  name: "legal-entity-uuid",
+  aliases: ["legal-entity", "entity-uuid"],
+  description: "Legal entity UUID (omit to use the org primary entity)",
+  required: false
+};
+var TRUST_PRODUCT_ENTITY_UUID_ARG = { ...LEGAL_ENTITY_UUID_ARG, required: true };
+var TRUST_PRODUCT_COLUMNS = [
+  { header: "PRODUCT", getValue: (p) => p.product ?? "" },
+  { header: "STATUS", getValue: (p) => p.status ?? "(none)" },
+  { header: "TRUST PRODUCT SID", getValue: (p) => p.trustProductSid ?? "(none)" },
+  // CNAM only; blank for the other two rather than absent, so the column lines up.
+  { header: "DISPLAY NAME", getValue: (p) => p.displayName ?? "" }
+];
+function optionalEntityUuid(args) {
+  const val = args["legal-entity-uuid"] ?? args["legal-entity"] ?? args["entity-uuid"];
+  return typeof val === "string" && val ? val : void 0;
+}
+function requireEntityUuid(args) {
+  const val = optionalEntityUuid(args);
+  if (!val) {
+    throw new CLIError("Missing required argument: --legal-entity-uuid");
+  }
+  return val;
+}
+function requireBody(data) {
+  if (data && typeof data === "object" && !Array.isArray(data)) return data;
+  throw new CLIError(
+    `Missing or invalid --data. Pass a JSON object, e.g. --data '{"key":"value"}' (or --file body.json). Arrays are not accepted.`
+  );
+}
+function submittability(profile) {
+  if (profile.evaluationStatus === "compliant") return "yes";
+  if (profile.evaluationStatus === "noncompliant") return "no (noncompliant)";
+  if (profile.status && profile.status !== "draft") return `n/a (${profile.status})`;
+  return "no (never evaluated)";
+}
+var commands2 = [
+  {
+    path: ["org", "legal-entities", "list"],
+    description: "List an org's legal entities (one Twilio Customer Profile each). Requires org admin \u2014 staff join via `gr admin organizations join --role platform_support`.",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG],
+    examples: ["yarn gr org legal-entities list --org-uuid $ORG_UUID"],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.listLegalEntities(
+        requireOrgRef(hctx.args)
+      );
+      outputData(result3.legalEntities ?? [], hctx.ctx, LEGAL_ENTITY_COLUMNS);
+    }
+  },
+  {
+    path: ["org", "legal-entities", "get"],
+    description: "Get one legal entity",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, { ...LEGAL_ENTITY_UUID_ARG, required: true }],
+    examples: [
+      "yarn gr org legal-entities get --org-uuid $ORG_UUID --legal-entity-uuid $ENTITY_UUID"
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.getLegalEntity(
+        requireOrgRef(hctx.args),
+        requireEntityUuid(hctx.args)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "legal-entities", "create"],
+    description: "Create a legal entity (its business profile is filled in separately)",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG],
+    examples: [
+      `yarn gr org legal-entities create --org-uuid $ORG_UUID --data '{"legalName":"Acme Health"}' --allow-write`
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.createLegalEntity(
+        requireOrgRef(hctx.args),
+        requireBody(hctx.data)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "business-profile", "get"],
+    description: "Read a legal entity's business profile LIVE from Twilio. SUBMITTABLE is derived from evaluationStatus, not status.",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, LEGAL_ENTITY_UUID_ARG],
+    examples: ["yarn gr org business-profile get --org-uuid $ORG_UUID"],
+    handler: async (hctx) => {
+      const profile = await requireAuth(hctx.ctx).apiClient.getBusinessProfile(
+        requireOrgRef(hctx.args),
+        optionalEntityUuid(hctx.args)
+      );
+      outputSingle(
+        hctx.ctx.outputFormat === "json" ? profile : {
+          status: profile.status ?? "(none)",
+          evaluationStatus: profile.evaluationStatus ?? "(not evaluated)",
+          SUBMITTABLE: submittability(profile),
+          customerProfileSid: profile.customerProfileSid ?? "(none)",
+          legalName: profile.businessInfo?.legalName ?? "(missing)",
+          authorizedReps: (profile.authorizedReps ?? []).length,
+          hasAddress: profile.address ? "yes" : "no",
+          failureReasons: (profile.failureReasons ?? []).join("; ") || "(none)",
+          profileRecoveryFailed: profile.profileRecoveryFailed ? "YES" : "no"
+        },
+        hctx.ctx
+      );
+    }
+  },
+  {
+    path: ["org", "business-profile", "update"],
+    description: "Upsert the business profile (idempotent via cached SIDs). Returns the fresh compliance evaluation.",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, LEGAL_ENTITY_UUID_ARG],
+    examples: [
+      "yarn gr org business-profile update --org-uuid $ORG_UUID --file profile.json --allow-write"
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.updateBusinessProfile(
+        requireOrgRef(hctx.args),
+        requireBody(hctx.data),
+        optionalEntityUuid(hctx.args)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "business-profile", "submit"],
+    description: "Submit the business profile to Twilio for review. Free \u2014 the paid step is brand registration, which is separate. 412 if not currently compliant, 409 if a review is already in flight.",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, LEGAL_ENTITY_UUID_ARG],
+    examples: ["yarn gr org business-profile submit --org-uuid $ORG_UUID --allow-write"],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.submitBusinessProfile(
+        requireOrgRef(hctx.args),
+        optionalEntityUuid(hctx.args)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "business-profile", "cancel"],
+    description: "Cancel an in-flight Twilio review, resetting the profile to draft so it can be edited and resubmitted",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, LEGAL_ENTITY_UUID_ARG],
+    examples: ["yarn gr org business-profile cancel --org-uuid $ORG_UUID --allow-write"],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.cancelBusinessProfile(
+        requireOrgRef(hctx.args),
+        optionalEntityUuid(hctx.args)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "trust-products", "list"],
+    description: "Read an entity's CACHED voice trust product state (CNAM / SHAKEN-STIR / Voice Integrity) from trust_hub_state. No Twilio calls \u2014 run `sync` to reconcile.",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, TRUST_PRODUCT_ENTITY_UUID_ARG],
+    examples: [
+      "yarn gr org trust-products list --org-uuid $ORG_UUID --legal-entity-uuid $ENTITY_UUID --env prod"
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.getVoiceTrustProducts(
+        requireOrgRef(hctx.args),
+        requireEntityUuid(hctx.args)
+      );
+      outputData(result3.products, hctx.ctx, TRUST_PRODUCT_COLUMNS);
+    }
+  },
+  {
+    path: ["org", "trust-products", "sync"],
+    description: "Reconcile voice trust products against Twilio: claim products staged outside the app and refresh non-terminal statuses. This is the prerequisite for `admin phone-numbers migrate`, whose preflight reads the cached state. 409 if another Trust Hub operation holds the org lock \u2014 retry shortly.",
+    // Writes trust_hub_state and calls Twilio. Read-only in business terms
+    // (it discovers, it does not create or submit), but it mutates our cache,
+    // so it takes --allow-write like every other state-changing verb.
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, TRUST_PRODUCT_ENTITY_UUID_ARG],
+    examples: [
+      "yarn gr org trust-products sync --org-uuid $ORG_UUID --legal-entity-uuid $ENTITY_UUID --env prod --allow-write"
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.syncVoiceTrustProducts(
+        requireOrgRef(hctx.args),
+        requireEntityUuid(hctx.args)
+      );
+      if (hctx.ctx.outputFormat !== "table") {
+        outputSingle(result3, hctx.ctx);
+        return;
+      }
+      const discovered = result3.discovered ?? [];
+      console.log(
+        discovered.length > 0 ? `Discovered ${discovered.length} product(s): ${discovered.join(", ")}` : "No new products discovered \u2014 already up to date."
+      );
+      outputData(result3.products, hctx.ctx, TRUST_PRODUCT_COLUMNS);
+    }
+  }
+];
+var orgLegalEntitiesDomain = {
+  name: "org",
+  description: "Legal entities and business profiles (Twilio Customer Profiles)",
+  commands: commands2
+};
+
 // src/domains/org-phone-numbers.ts
 init_dist();
 init_context();
@@ -25326,14 +26413,7 @@ var AVAILABLE_PHONE_COLUMNS = [
   { header: "Region", getValue: (p) => p.region ?? "" },
   { header: "Type", getValue: (p) => p.phoneNumberType ?? "" }
 ];
-function requireOrgUuid(args) {
-  const val = args["org-uuid"] ?? args["org"];
-  if (typeof val !== "string" || !val) {
-    throw new CLIError("Missing required argument: --org-uuid");
-  }
-  return val;
-}
-var commands2 = [
+var commands3 = [
   {
     path: ["org", "phone-numbers", "list"],
     description: "List all phone numbers owned by an organization",
@@ -25343,7 +26423,7 @@ var commands2 = [
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const result3 = await getOrgApi(hctx).listPhoneNumbers(orgUuid);
       outputData(result3, hctx.ctx, PROVIDER_PHONE_COLUMNS);
     }
@@ -25366,7 +26446,7 @@ var commands2 = [
     requiresWorkspace: false,
     columns: AVAILABLE_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const result3 = await getOrgApi(hctx).searchPhoneNumbers(orgUuid, {
         country: hctx.args.country ?? "US",
         numberType: hctx.args["number-type"] ?? "local",
@@ -25402,7 +26482,7 @@ var commands2 = [
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const phoneNumber = hctx.args["phone-number"];
       if (!phoneNumber) throw new CLIError("Missing required argument: --phone-number");
       const numberType = hctx.args["number-type"] ?? "local";
@@ -25431,7 +26511,7 @@ var commands2 = [
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const providerPhoneUuid = hctx.args["provider-phone-uuid"];
       const workspaceUuid = hctx.args["workspace-uuid"];
       if (!providerPhoneUuid)
@@ -25463,7 +26543,7 @@ Create a workspace phone linked to this provider number (sets Twilio webhooks):
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const providerPhoneUuid = hctx.args["provider-phone-uuid"];
       const newWorkspaceUuid = hctx.args["new-workspace-uuid"];
       if (!providerPhoneUuid)
@@ -25489,7 +26569,7 @@ Create a workspace phone linked to this provider number (sets Twilio webhooks):
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const providerPhoneUuid = hctx.args["provider-phone-uuid"];
       if (!providerPhoneUuid)
         throw new CLIError("Missing required argument: --provider-phone-uuid");
@@ -25507,7 +26587,7 @@ Create a workspace phone linked to this provider number (sets Twilio webhooks):
     ],
     requiresWorkspace: false,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const providerPhoneUuid = hctx.args["provider-phone-uuid"];
       if (!providerPhoneUuid)
         throw new CLIError("Missing required argument: --provider-phone-uuid");
@@ -25519,7 +26599,7 @@ Create a workspace phone linked to this provider number (sets Twilio webhooks):
 var orgPhoneNumbersDomain = {
   name: "org",
   description: "Organization management",
-  commands: commands2
+  commands: commands3
 };
 
 // src/domains/phone-numbers.ts
@@ -28434,7 +29514,7 @@ function requireCallerRole(args, flag) {
   }
   return role;
 }
-var COLUMNS24 = [
+var COLUMNS25 = [
   COL.id(),
   { header: "NUMBER", getValue: (item) => item.phoneNumber ?? item.number ?? "" },
   { header: "LABEL", getValue: (item) => item.label ?? item.name ?? "" },
@@ -28461,7 +29541,7 @@ var phoneNumbersDomain = {
       entityName: "phone number",
       listMethod: "getPhoneNumbers",
       archiveMethod: "archivePhoneNumber",
-      columns: COLUMNS24
+      columns: COLUMNS25
     }),
     {
       path: ["phone-numbers", "get"],
@@ -28511,7 +29591,7 @@ ${PHONE_NUMBER_FIELD_REFERENCE}`,
           );
           const record = asPhoneRecord(result3);
           const warnings = collectPhoneNumberWarnings(record);
-          outputData([record], ctx, COLUMNS24);
+          outputData([record], ctx, COLUMNS25);
           if (warnings.length > 0) {
             process.stderr.write("\nWarnings after create:\n");
             for (const w of warnings) {
@@ -28543,7 +29623,7 @@ ${PHONE_NUMBER_FIELD_REFERENCE}`,
             id,
             data
           );
-          outputData([result3], ctx, COLUMNS24);
+          outputData([result3], ctx, COLUMNS25);
         } catch (err) {
           return enrichPhoneNumberApiError(err);
         }
@@ -28831,7 +29911,7 @@ ${formatRoutingSimulation(sim, phone)}
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getAvailablePhoneNumbers(workspace);
-        outputData(result3, ctx, COLUMNS24);
+        outputData(result3, ctx, COLUMNS25);
       }
     },
     {
@@ -28856,7 +29936,7 @@ ${formatRoutingSimulation(sim, phone)}
         const id = requireNumberFrom(args, "phone-number-id", "id");
         const providerPhoneUuid = requireString(args, "provider-phone-uuid");
         const result3 = await auth.apiClient.linkPhoneNumber(workspace, id, providerPhoneUuid);
-        outputData([result3], auth, COLUMNS24);
+        outputData([result3], auth, COLUMNS25);
       }
     },
     {
@@ -28869,7 +29949,7 @@ ${formatRoutingSimulation(sim, phone)}
           workspace,
           data
         );
-        outputData([result3], ctx, COLUMNS24);
+        outputData([result3], ctx, COLUMNS25);
       }
     },
     {
@@ -29021,7 +30101,7 @@ function normalizePronunciationUpdatePayload(data) {
 }
 
 // src/domains/pronunciations.ts
-var COLUMNS25 = [
+var COLUMNS26 = [
   COL.id(),
   { header: "TERM", getValue: (item) => item.term ?? "" },
   { header: "RESPELLING", getValue: (item) => item.respelling ?? "" },
@@ -29043,7 +30123,7 @@ var pronunciationsDomain = {
         const auth = requireAuth(ctx);
         const orgUuid = await resolveOrgUuidFromWorkspace(auth.apiClient, workspace);
         const result3 = await auth.apiClient.getPronunciationEntries(orgUuid);
-        outputData(result3, ctx, COLUMNS25);
+        outputData(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29057,7 +30137,7 @@ var pronunciationsDomain = {
         const orgUuid = await resolveOrgUuidFromWorkspace(auth.apiClient, workspace);
         const payload = normalizePronunciationCreatePayload(data);
         const result3 = await auth.apiClient.createPronunciationEntry(orgUuid, payload);
-        outputSingle(result3, ctx, COLUMNS25);
+        outputSingle(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29075,7 +30155,7 @@ var pronunciationsDomain = {
           requireNumber(args, "id"),
           payload
         );
-        outputSingle(result3, ctx, COLUMNS25);
+        outputSingle(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29099,7 +30179,7 @@ var pronunciationsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getMyPronunciations();
-        outputData(result3, ctx, COLUMNS25);
+        outputData(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29110,7 +30190,7 @@ var pronunciationsDomain = {
       handler: async ({ ctx, data }) => {
         const payload = normalizePronunciationCreatePayload(data);
         const result3 = await requireAuth(ctx).apiClient.createMyPronunciation(payload);
-        outputSingle(result3, ctx, COLUMNS25);
+        outputSingle(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29417,7 +30497,7 @@ ${ROUTINE_FIELD_REFERENCE}`,
 // src/domains/subscriptions.ts
 init_output();
 init_context();
-var COLUMNS26 = [
+var COLUMNS27 = [
   COL.id(),
   COL.status(),
   { header: "PLAN", getValue: (item) => item.planName ?? item.plan ?? "" },
@@ -29433,7 +30513,7 @@ var subscriptionsDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getSubscriptions();
-        outputData(result3, ctx, COLUMNS26);
+        outputData(result3, ctx, COLUMNS27);
       }
     },
     {
@@ -29442,7 +30522,7 @@ var subscriptionsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getWorkspaceSubscriptions(workspace);
-        outputData(result3, ctx, COLUMNS26);
+        outputData(result3, ctx, COLUMNS27);
       }
     },
     {
@@ -29455,7 +30535,7 @@ var subscriptionsDomain = {
         const result3 = await requireAuth(ctx).apiClient.cancelSubscription(
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS26);
+        outputSingle(result3, ctx, COLUMNS27);
       }
     },
     {
@@ -29467,7 +30547,7 @@ var subscriptionsDomain = {
         const result3 = await requireAuth(ctx).apiClient.reactivateSubscription(
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS26);
+        outputSingle(result3, ctx, COLUMNS27);
       }
     },
     {
@@ -29481,7 +30561,7 @@ var subscriptionsDomain = {
           requireNumber(args, "id"),
           data
         );
-        outputSingle(result3, ctx, COLUMNS26);
+        outputSingle(result3, ctx, COLUMNS27);
       }
     }
   ]
@@ -29740,7 +30820,7 @@ var supportDomain = {
 
 // src/domains/supervisors.ts
 init_output();
-var COLUMNS27 = [
+var COLUMNS28 = [
   COL.id(),
   COL.name(),
   { header: "TYPE", getValue: (item) => item.type ?? "" },
@@ -29758,7 +30838,7 @@ var supervisorsDomain = {
       createMethod: "createSupervisor",
       updateMethod: "updateSupervisor",
       deleteMethod: "deleteSupervisor",
-      columns: COLUMNS27
+      columns: COLUMNS28
     })
   ]
 };
@@ -30108,7 +31188,7 @@ var widgetDomainsDomain = {
         }
       ],
       examples: [
-        "gr widget-domains enable -w $WID --domain <uuid> --widgets chat,operator --allow-write",
+        "gr widget-domains enable -w $WID --domain <uuid> --widgets chat,operator-tools --allow-write",
         "gr widget-domains enable -w $WID --domain <uuid> --widgets chat --allow-subdomains --port 4444 --allow-write"
       ],
       handler: async ({ ctx, workspace, args }) => {
@@ -30154,7 +31234,7 @@ var widgetDomainsDomain = {
 // src/domains/integrations/app-connections.ts
 init_output();
 init_context();
-var COLUMNS28 = [
+var COLUMNS29 = [
   COL.id(),
   COL.name(),
   { header: "TYPE", getValue: (item) => item.type ?? "" },
@@ -30195,7 +31275,7 @@ var appConnectionsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.listAvailableAppConnections(workspace);
-        outputData(result3, ctx, COLUMNS28);
+        outputData(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30204,7 +31284,7 @@ var appConnectionsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.listAppConnections(workspace);
-        outputData(result3, ctx, COLUMNS28);
+        outputData(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30228,7 +31308,7 @@ var appConnectionsDomain = {
         const result3 = await requireAuth(ctx).apiClient.enablePlatformApp(workspace, {
           slug: requireString(args, "slug")
         });
-        outputSingle(result3, ctx, COLUMNS28);
+        outputSingle(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30241,7 +31321,7 @@ var appConnectionsDomain = {
           workspace,
           requireString(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS28);
+        outputSingle(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30256,7 +31336,7 @@ var appConnectionsDomain = {
           requireString(args, "id"),
           data
         );
-        outputSingle(result3, ctx, COLUMNS28);
+        outputSingle(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30603,7 +31683,7 @@ var confluenceDomain = {
 // src/domains/integrations/discord-bots.ts
 init_output();
 init_context();
-var COLUMNS29 = [COL.id(), COL.name(), COL.status()];
+var COLUMNS30 = [COL.id(), COL.name(), COL.status()];
 var discordBotsDomain = {
   name: "discord-bots",
   description: "Manage Discord bot integrations",
@@ -30616,7 +31696,7 @@ var discordBotsDomain = {
       createMethod: "createDiscordBot",
       updateMethod: "updateDiscordBot",
       deleteMethod: "deleteDiscordBot",
-      columns: COLUMNS29,
+      columns: COLUMNS30,
       paginationSupport: "full"
     }),
     {
@@ -30678,7 +31758,7 @@ var discordBotsDomain = {
 // src/domains/integrations/fhir-connections.ts
 init_output();
 init_context();
-var COLUMNS30 = [
+var COLUMNS31 = [
   COL.id(),
   COL.name(),
   { header: "URL", getValue: (item) => item.baseUrl ?? "" },
@@ -30696,7 +31776,7 @@ var fhirConnectionsDomain = {
       createMethod: "createFhirConnection",
       updateMethod: "updateFhirConnection",
       deleteMethod: "deleteFhirConnection",
-      columns: COLUMNS30,
+      columns: COLUMNS31,
       paginationSupport: "full"
     }),
     {
@@ -30719,7 +31799,7 @@ var fhirConnectionsDomain = {
 init_context();
 init_errors();
 init_output();
-var COLUMNS31 = [
+var COLUMNS32 = [
   { header: "CONFIGURED", getValue: (i) => String(i.configured ?? false) },
   { header: "ENABLED", getValue: (i) => String(i.enabled ?? false) },
   { header: "HAS_KEY", getValue: (i) => String(i.hasApiKey ?? false) },
@@ -30748,7 +31828,7 @@ var patientSyncDomain = {
           workspace,
           data
         );
-        outputSingle(result3, ctx, COLUMNS31);
+        outputSingle(result3, ctx, COLUMNS32);
       }
     },
     {
@@ -30757,7 +31837,7 @@ var patientSyncDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getPatientSyncStatus(workspace);
-        outputSingle(result3, ctx, COLUMNS31);
+        outputSingle(result3, ctx, COLUMNS32);
       }
     },
     {
@@ -31825,7 +32905,7 @@ var salesforceDomain = {
 init_errors();
 init_output();
 init_context();
-var COLUMNS32 = [COL.id(), COL.name(), COL.status()];
+var COLUMNS33 = [COL.id(), COL.name(), COL.status()];
 function addSlackUrls(data, apiUrl, workspaceUuid) {
   const base = `${apiUrl}/api/v2/w/${workspaceUuid}/app-connections/slack`;
   return {
@@ -31848,7 +32928,7 @@ var slackAppsDomain = {
       entityName: "Slack app",
       listMethod: "getSlackApps",
       deleteMethod: "deleteSlackApp",
-      columns: COLUMNS32,
+      columns: COLUMNS33,
       paginationSupport: "full"
     }),
     {
@@ -31937,7 +33017,7 @@ var slackAppsDomain = {
 init_errors();
 init_output();
 init_context();
-var COLUMNS33 = [COL.id(), COL.name(), COL.status()];
+var COLUMNS34 = [COL.id(), COL.name(), COL.status()];
 function addTeamsUrls(data, apiUrl, workspaceUuid) {
   const base = `${apiUrl}/api/v2/w/${workspaceUuid}/app-connections/teams`;
   return {
@@ -31958,7 +33038,7 @@ var teamsAppsDomain = {
       entityName: "Teams app",
       listMethod: "getTeamsApps",
       deleteMethod: "deleteTeamsApp",
-      columns: COLUMNS33,
+      columns: COLUMNS34,
       paginationSupport: "full"
     }),
     {
@@ -32064,6 +33144,7 @@ function registerPublicDomains(registry) {
   registry.register(qualificationsDomain);
   registry.register(queriesDomain);
   registry.register(personasDomain);
+  registry.register(metricsDomain);
   registry.register(journeysDomain);
   registry.register(abilitiesDomain);
   registry.register(phoneNumbersDomain);
@@ -32071,10 +33152,10 @@ function registerPublicDomains(registry) {
   registry.register(inboxesDomain);
   registry.register(operatorGroupsDomain);
   registry.register(accessGrantsDomain);
+  registry.register(interventionRequestsDomain);
   registry.register(notificationRulesDomain);
   registry.register(supervisorsDomain);
   registry.register(promptsDomain);
-  registry.register(milestonesDomain);
   registry.register(customToolkitsDomain);
   registry.register(mcpServersDomain);
   registry.register(apiKeysDomain);
@@ -32086,6 +33167,7 @@ function registerPublicDomains(registry) {
   registry.register(featuresDomain);
   registry.register(pronunciationsDomain);
   registry.register(orgDomain);
+  registry.register(orgLegalEntitiesDomain);
   registry.register(orgPhoneNumbersDomain);
   registry.register(authManageDomain);
   registry.register(appsDomain);
@@ -35194,7 +36276,7 @@ async function authImportDevCommand(ctx, args) {
 
 // src/commands/organizations.ts
 init_output();
-var COLUMNS34 = [
+var COLUMNS35 = [
   { header: "NAME", getValue: (o) => o.organizationName || "", maxWidth: 35 },
   { header: "SLUG", getValue: (o) => o.organizationSlug || "", maxWidth: 25 },
   { header: "UUID", getValue: (o) => o.organizationUuid },
@@ -35202,7 +36284,7 @@ var COLUMNS34 = [
 ];
 async function organizationsListCommand(ctx) {
   const organizations = await ctx.apiClient.getMyOrganizations();
-  outputData(organizations, ctx, COLUMNS34);
+  outputData(organizations, ctx, COLUMNS35);
 }
 
 // src/commands/whoami.ts
@@ -35527,7 +36609,7 @@ init_concierge_api();
 
 // package.json
 var package_default = {
-  version: "0.15.0"};
+  version: "0.17.0"};
 
 // src/gr.ts
 var VERSION = package_default.version;