@gravity-rail/cli 0.16.0 → 0.17.0

package/dist/gr.js

@@ -207,7 +207,7 @@ var init_pagination = __esm({
   }
 });
 
-// ../sdk/dist/chunk-GP6ICMWF.js
+// ../sdk/dist/chunk-PJFEGUHM.js
 function getCookieValue(name) {
   if (typeof document === "undefined") return void 0;
   const cookies = document.cookie.split(";");
@@ -265,8 +265,8 @@ function setOrgAuthHeader(headers2, token) {
   headers2.set(orgAuthHeaderName(token), token);
 }
 var ApiError, BaseApiClient;
-var init_chunk_GP6ICMWF = __esm({
-  "../sdk/dist/chunk-GP6ICMWF.js"() {
+var init_chunk_PJFEGUHM = __esm({
+  "../sdk/dist/chunk-PJFEGUHM.js"() {
     ApiError = class extends Error {
       statusCode;
       /** Legacy string-array errors — kept for non-validation callers. */
@@ -276,6 +276,13 @@ var init_chunk_GP6ICMWF = __esm({
        * Populated when the backend returns a WorkflowValidationErrorResponse.
        */
       validationErrors;
+      /**
+       * The raw structured `detail` object when the backend returned one (a body
+       * with `error: true` or a `code`). Declared here rather than bolted on with
+       * `as any` at the throw site so consumers can narrow it with a type guard —
+       * see `isMemberContactConflict` in `types/member-types`.
+       */
+      errorData;
       constructor(message, statusCode, errors, validationErrors) {
         super(message);
         this.statusCode = statusCode;
@@ -3213,7 +3220,7 @@ var init_libphonenumber_js = __esm({
   }
 });
 
-// ../sdk/dist/chunk-4B7T6MBH.js
+// ../sdk/dist/chunk-CEFOCGYO.js
 function sanitizePhoneForBackend(phoneNumber) {
   try {
     let parsed = parsePhoneNumber4(phoneNumber);
@@ -3386,11 +3393,11 @@ function createApiModules(apiKey, baseUrl3, customFetch) {
     connectionSync: new ConnectionSyncApi(apiKey, baseUrl3, customFetch),
     mcpServers: new McpServersApi(apiKey, baseUrl3, customFetch),
     members: new MembersApi(apiKey, baseUrl3, customFetch),
-    milestones: new MilestonesApi(apiKey, baseUrl3, customFetch),
     motd: new MotdApi(apiKey, baseUrl3, customFetch),
     trackedLinks: new TrackedLinksApi(apiKey, baseUrl3, customFetch),
     confluence: new ConfluenceApi(apiKey, baseUrl3, customFetch),
     mondayIntegration: new MondayIntegrationApi(apiKey, baseUrl3, customFetch),
+    interventionRequests: new InterventionRequestsApi(apiKey, baseUrl3, customFetch),
     notificationRules: new NotificationRulesApi(apiKey, baseUrl3, customFetch),
     oauth: new OAuthApi(apiKey, baseUrl3, customFetch),
     operatorGroups: new OperatorApi(apiKey, baseUrl3, customFetch),
@@ -3400,6 +3407,7 @@ function createApiModules(apiKey, baseUrl3, customFetch) {
     pronunciations: new PronunciationsApi(apiKey, baseUrl3, customFetch),
     qualifications: new QualificationsApi(apiKey, baseUrl3, customFetch),
     personas: new PersonasApi(apiKey, baseUrl3, customFetch),
+    metrics: new MetricsApi(apiKey, baseUrl3, customFetch),
     queries: new QueriesApi(apiKey, baseUrl3, customFetch),
     reports: new ReportsApi(apiKey, baseUrl3, customFetch),
     salesforce: new SalesforceApi(apiKey, baseUrl3, customFetch),
@@ -3549,6 +3557,7 @@ function bindDashboardsMethods(target, dashboards) {
   target.deleteDashboard = dashboards.deleteDashboard.bind(dashboards);
   target.getDashboardChannelStats = dashboards.getDashboardChannelStats.bind(dashboards);
   target.getDashboardWorkflowAssignmentStats = dashboards.getDashboardWorkflowAssignmentStats.bind(dashboards);
+  target.getConfigurationHealth = dashboards.getConfigurationHealth.bind(dashboards);
 }
 function bindMotdMethods(target, motd) {
   target.getMotd = motd.getMotd.bind(motd);
@@ -3945,7 +3954,7 @@ function bindWorkflowsMethods(target, workflows, workflowNotes, voice, superviso
   target.updateSupervisor = supervisors.updateSupervisor.bind(supervisors);
   target.deleteSupervisor = supervisors.deleteSupervisor.bind(supervisors);
 }
-function bindCalendarsMethods(target, calendars, milestones) {
+function bindCalendarsMethods(target, calendars) {
   target.getCalendars = calendars.getCalendars.bind(calendars);
   target.getCalendar = calendars.getCalendar.bind(calendars);
   target.createCalendar = calendars.createCalendar.bind(calendars);
@@ -3977,11 +3986,6 @@ function bindCalendarsMethods(target, calendars, milestones) {
   target.linkCalendarToGoogle = calendars.linkCalendarToGoogle.bind(calendars);
   target.unlinkCalendarFromGoogle = calendars.unlinkCalendarFromGoogle.bind(calendars);
   target.syncCalendarWithGoogle = calendars.syncCalendarWithGoogle.bind(calendars);
-  target.getMilestones = milestones.getMilestones.bind(milestones);
-  target.getMilestone = milestones.getMilestone.bind(milestones);
-  target.createMilestone = milestones.createMilestone.bind(milestones);
-  target.updateMilestone = milestones.updateMilestone.bind(milestones);
-  target.deleteMilestone = milestones.deleteMilestone.bind(milestones);
 }
 function bindCommunicationsMethods(target, phoneNumbers, inboxes, notificationRules) {
   target.getPhoneNumbers = phoneNumbers.getPhoneNumbers.bind(phoneNumbers);
@@ -4324,6 +4328,11 @@ function bindOrgMethods(target, org) {
   target.updateBusinessProfile = org.updateBusinessProfile.bind(org);
   target.submitBusinessProfile = org.submitBusinessProfile.bind(org);
   target.cancelBusinessProfile = org.cancelBusinessProfile.bind(org);
+  target.listLegalEntities = org.listLegalEntities.bind(org);
+  target.getLegalEntity = org.getLegalEntity.bind(org);
+  target.createLegalEntity = org.createLegalEntity.bind(org);
+  target.getVoiceTrustProducts = org.getVoiceTrustProducts.bind(org);
+  target.syncVoiceTrustProducts = org.syncVoiceTrustProducts.bind(org);
   target.createOrganizationWorkspace = org.createOrganizationWorkspace.bind(org);
   target.getOrgBillingCustomer = org.getOrgBillingCustomer.bind(org);
 }
@@ -4398,6 +4407,16 @@ function bindPersonasMethods(target, personas) {
   target.updatePersona = personas.updatePersona.bind(personas);
   target.deletePersona = personas.deletePersona.bind(personas);
 }
+function bindMetricsMethods(target, metrics) {
+  target.listMetrics = metrics.listMetrics.bind(metrics);
+  target.getMetric = metrics.getMetric.bind(metrics);
+  target.createMetric = metrics.createMetric.bind(metrics);
+  target.updateMetric = metrics.updateMetric.bind(metrics);
+  target.deleteMetric = metrics.deleteMetric.bind(metrics);
+  target.listMetricObservations = metrics.listMetricObservations.bind(metrics);
+  target.getMetricSeries = metrics.getMetricSeries.bind(metrics);
+  target.computeChatMetrics = metrics.computeChatMetrics.bind(metrics);
+}
 function bindQueriesMethods(target, queries) {
   target.getQueryFields = queries.getQueryFields.bind(queries);
   target.validateQuery = queries.validateQuery.bind(queries);
@@ -4447,10 +4466,10 @@ function bindSupportRequestMethods(target, supportRequests) {
   target.reopenWorkspaceSupportRequest = supportRequests.reopenWorkspaceSupportRequest.bind(supportRequests);
   target.clickWorkspaceSupportRequestResource = supportRequests.clickWorkspaceSupportRequestResource.bind(supportRequests);
 }
-var AbilitiesApi, AccessGrantsApi, AgentTasksApi, AgentsApi, AIModelsApi, ApiKeysApi, AppsApi, AssignmentsApi, VoiceApi, AuthApi, BuildersApi, CalendarsApi, CallsApi, CELApi, ChatsApi, ConfluenceApi, CustomToolkitsApi, DataTypesApi, DiscordBotsApi, SlackAppsApi, EventsApi, FeaturesApi, FhirConnectionsApi, InboundFaxStatus, DocumoFaxApi, HealthieApi, FilesApi, InboxesApi, InquiriesApi, AppConnectionsApi, McpServersApi, MemberImportValidationError, MembersApi, MilestonesApi, MondayIntegrationApi, NotificationRulesApi, OperatorApi, OrgApi, OAuthConnectionsApi, OAuthApi, PhoneNumbersApi, PronunciationsApi, PromptsApi, PersonasApi, QueriesApi, QualificationsApi, ReportsApi, SalesforceApi, ConnectionSyncApi, HubspotApi, SitesApi, SubscriptionsApi, SupportRequestsApi, CustomersApi, ResellersApi, SupervisorsApi, TasksApi, TemplatesApi, ToolkitsApi, JourneysApi, WorkflowsApi, WorkflowNotesApi, EventRuleEventType, DriverMode, WorkspaceInvitationsApi, WorkspacesApi, DashboardsApi, TeamsAppsApi, ExperimentsApi, PatientSyncConnectionsApi, MotdApi, TrackedLinksApi, WORKSPACE_METHOD_NAMES, WORKSPACE_METHOD_NAME_SET, GravityRailClient, WIDGET_SLUGS, CHAT_TYPES, BUILTIN_ASSISTANT_CHAT_TYPES, MEMBER_AGENT_CHAT_TYPES;
-var init_chunk_4B7T6MBH = __esm({
-  "../sdk/dist/chunk-4B7T6MBH.js"() {
-    init_chunk_GP6ICMWF();
+var AbilitiesApi, AccessGrantsApi, AgentTasksApi, AgentsApi, AIModelsApi, ApiKeysApi, AppsApi, AssignmentsApi, VoiceApi, AuthApi, BuildersApi, CalendarsApi, CallsApi, CELApi, ChatsApi, ConfluenceApi, CustomToolkitsApi, DataTypesApi, DiscordBotsApi, SlackAppsApi, EventsApi, FeaturesApi, FhirConnectionsApi, InboundFaxStatus, DocumoFaxApi, HealthieApi, FilesApi, InboxesApi, InquiriesApi, AppConnectionsApi, McpServersApi, MemberImportValidationError, MembersApi, MondayIntegrationApi, NotificationRulesApi, OperatorApi, OrgApi, OAuthConnectionsApi, OAuthApi, PhoneNumbersApi, PronunciationsApi, PromptsApi, PersonasApi, QueriesApi, QualificationsApi, ReportsApi, SalesforceApi, ConnectionSyncApi, HubspotApi, SitesApi, SubscriptionsApi, SupportRequestsApi, CustomersApi, ResellersApi, SupervisorsApi, TasksApi, TemplatesApi, ToolkitsApi, JourneysApi, WorkflowsApi, WorkflowNotesApi, EventRuleEventType, DriverMode, WorkspaceInvitationsApi, WorkspacesApi, DashboardsApi, TeamsAppsApi, ExperimentsApi, PatientSyncConnectionsApi, MotdApi, InterventionRequestsApi, MetricsApi, TrackedLinksApi, WORKSPACE_METHOD_NAMES, WORKSPACE_METHOD_NAME_SET, GravityRailClient, WIDGET_SLUGS, CHAT_TYPES, BUILTIN_ASSISTANT_CHAT_TYPES, MEMBER_AGENT_CHAT_TYPES;
+var init_chunk_CEFOCGYO = __esm({
+  "../sdk/dist/chunk-CEFOCGYO.js"() {
+    init_chunk_PJFEGUHM();
     init_libphonenumber_js();
     AbilitiesApi = class extends BaseApiClient {
       /**
@@ -5815,7 +5834,7 @@ var init_chunk_4B7T6MBH = __esm({
           `w/${wid}/chats/${chatId}/skills`
         );
       }
-      /** List built-in skills that can be selected before starting a Manager Chat. */
+      /** List built-in skills selectable before a Manager Chat (and on Routine manager tasks). */
       async getManagerSkills(wid) {
         return this.fetch(`w/${wid}/chats/manager/skills`);
       }
@@ -8217,12 +8236,34 @@ var init_chunk_4B7T6MBH = __esm({
           body: JSON.stringify(memberRole)
         });
       }
-      /** Delete a member role. */
+      /** Delete a member role. Default roles (``systemKey`` set) return 403. */
       async deleteMemberRole(wid, id) {
         return this.fetch(`w/${wid}/member-roles/${id}`, {
           method: "DELETE"
         });
       }
+      /**
+       * Describe legacy duplicate default roles in this workspace. Read-only.
+       *
+       * Workspaces seeded by older versions of the product can carry the same
+       * default role under several spellings ("manager" next to "Manager"). This
+       * reports which ones should be merged and exactly how many members and
+       * references each merge would move.
+       */
+      async getMemberRoleCleanupPlan(wid) {
+        return this.fetch(`w/${wid}/member-roles/cleanup-plan`);
+      }
+      /**
+       * Move every member and reference from one role to another, then delete the
+       * source role. Requires `member_roles:admin`. The source cannot be a default
+       * role.
+       */
+      async mergeMemberRoles(wid, request) {
+        return this.fetch(`w/${wid}/member-roles/cleanup/merge`, {
+          method: "POST",
+          body: JSON.stringify(request)
+        });
+      }
       // Import/Export Members API
       /**
        * Read-only preview classifying each CSV row before any write (GRA-5545).
@@ -8524,44 +8565,6 @@ var init_chunk_4B7T6MBH = __esm({
         return this.fetch(`w/${wid}/members/${memberId}/sync-links`);
       }
     };
-    MilestonesApi = class extends BaseApiClient {
-      /** List milestones in a workspace with optional pagination and sorting. */
-      async getMilestones(wid, options = {}) {
-        const params = new URLSearchParams();
-        if (options.page) params.append("page", options.page.toString());
-        if (options.pageSize) params.append("pageSize", options.pageSize.toString());
-        if (options.sortBy) params.append("sortBy", options.sortBy);
-        if (options.sortOrder) params.append("sortOrder", options.sortOrder);
-        if (options.search) params.append("search", options.search);
-        return this.fetch(
-          `w/${wid}/milestones${params.toString() ? `?${params.toString()}` : ""}`
-        );
-      }
-      /** Get a single milestone by ID. */
-      async getMilestone(wid, id) {
-        return this.fetch(`w/${wid}/milestones/${id}`);
-      }
-      /** Create a new milestone in a workspace. */
-      async createMilestone(wid, milestone) {
-        return this.fetch(`w/${wid}/milestones`, {
-          method: "POST",
-          body: JSON.stringify(milestone)
-        });
-      }
-      /** Update an existing milestone with partial data. */
-      async updateMilestone(wid, id, milestone) {
-        return this.fetch(`w/${wid}/milestones/${id}`, {
-          method: "PUT",
-          body: JSON.stringify(milestone)
-        });
-      }
-      /** Delete a milestone by ID. */
-      async deleteMilestone(wid, id) {
-        return this.fetch(`w/${wid}/milestones/${id}`, {
-          method: "DELETE"
-        });
-      }
-    };
     MondayIntegrationApi = class extends BaseApiClient {
       /**
        * Get list of boards from the workspace Monday.com connection
@@ -8844,6 +8847,41 @@ var init_chunk_4B7T6MBH = __esm({
       async getCurrentOrgMember(orgIdOrUuid) {
         return this.fetch(`o/${orgIdOrUuid}/me`);
       }
+      /**
+       * Update the settings an org admin owns: name, slug and contact details.
+       *
+       * Deliberately NOT the admin organization update — `primary` and
+       * `enforceCreditLimit` are superuser-only and are not fields on this
+       * endpoint's request model at all.
+       */
+      async updateOrganizationSettings(orgIdOrUuid, data) {
+        return this.fetch(`o/${orgIdOrUuid}`, {
+          method: "PATCH",
+          body: JSON.stringify(data)
+        });
+      }
+      /**
+       * Read this organization's SSO configuration.
+       *
+       * Org-scoped (`org:admin`), unlike the SSO fields on the superuser admin
+       * organization update — an org admin owns their own identity provider.
+       */
+      async getOrgSsoConfig(orgIdOrUuid) {
+        return this.fetch(`o/${orgIdOrUuid}/sso`);
+      }
+      /** Configure this organization's SSO. Requires `org:admin`. */
+      async updateOrgSsoConfig(orgIdOrUuid, data) {
+        return this.fetch(`o/${orgIdOrUuid}/sso`, {
+          method: "PUT",
+          body: JSON.stringify(data)
+        });
+      }
+      /** Remove this organization's SSO configuration. Requires `org:admin`. */
+      async deleteOrgSsoConfig(orgIdOrUuid) {
+        return this.fetch(`o/${orgIdOrUuid}/sso`, {
+          method: "DELETE"
+        });
+      }
       /**
        * Get the billing customer UUID for an organization.
        */
@@ -8964,6 +9002,22 @@ var init_chunk_4B7T6MBH = __esm({
       async getOrganizationWorkspace(orgIdOrUuid, workspaceUuid) {
         return this.fetch(`o/${orgIdOrUuid}/workspaces/${workspaceUuid}`);
       }
+      /**
+       * Workspace cards for the organization page: identity plus the GLB-side
+       * counts. Any org member may call it — members get the workspaces they
+       * belong to, org:read holders get all of them.
+       */
+      async getOrganizationWorkspaceSummaries(orgIdOrUuid) {
+        return this.fetch(`o/${orgIdOrUuid}/workspaces/summary`);
+      }
+      /**
+       * Workspace-schema aggregates for one card, plus the caller's own member
+       * role. Separate from the list because it opens a session against the
+       * workspace's own schema — each card fetches its own.
+       */
+      async getOrganizationWorkspaceStats(orgIdOrUuid, workspaceUuid) {
+        return this.fetch(`o/${orgIdOrUuid}/workspaces/${workspaceUuid}/stats`);
+      }
       /**
        * Create a workspace in an organization.
        */
@@ -12330,6 +12384,32 @@ var init_chunk_4B7T6MBH = __esm({
           `w/${wid}/dashboards/stats/workflow-assignments`
         );
       }
+      /**
+       * Current saved-configuration health across every family (Workflow
+       * configuration, Journey authoring, Workflow access, Routine → Workflow
+       * access, and the workspace lint).
+       *
+       * Requires ALL of `workflows:read`, `journeys:read`, `automations:read`,
+       * `datatypes:read`, `members:read`, and `member_roles:read` — a pruned
+       * subset would render as "all configuration is healthy".
+       *
+       * `page`/`pageSize` bound the response only; every family is evaluated in
+       * full before the issue list is sliced. `check`/`severity` narrow the issue
+       * list server-side, before pagination — filtering a single page in the
+       * client cannot find a match that lives on a later one. `summary` and
+       * `checks` are always workspace-global.
+       */
+      async getConfigurationHealth(wid, options) {
+        const params = new URLSearchParams();
+        if (options?.page !== void 0) params.append("page", options.page.toString());
+        if (options?.pageSize !== void 0) params.append("pageSize", options.pageSize.toString());
+        if (options?.check !== void 0) params.append("check", options.check);
+        if (options?.severity !== void 0) params.append("severity", options.severity);
+        const query = params.toString();
+        return this.fetch(
+          `w/${wid}/configuration-health${query ? `?${query}` : ""}`
+        );
+      }
     };
     TeamsAppsApi = class extends BaseApiClient {
       /**
@@ -12516,6 +12596,80 @@ var init_chunk_4B7T6MBH = __esm({
         return this.fetch(`w/${wid}/motd${query ? `?${query}` : ""}`);
       }
     };
+    InterventionRequestsApi = class extends BaseApiClient {
+      /** List intervention requests in a workspace, newest first. */
+      async getInterventionRequests(wid, params = {}) {
+        const query = new URLSearchParams();
+        if (params.kind) query.set("kind", params.kind);
+        if (params.openOnly) query.set("openOnly", "true");
+        if (params.chatId !== void 0) query.set("chatId", String(params.chatId));
+        if (params.unroutedOnly) query.set("unroutedOnly", "true");
+        if (params.limit !== void 0) query.set("limit", String(params.limit));
+        const qs = query.toString();
+        return this.fetch(
+          `w/${wid}/intervention-requests${qs ? `?${qs}` : ""}`
+        );
+      }
+    };
+    MetricsApi = class extends BaseApiClient {
+      /** List metric definitions in the workspace, paginated. */
+      async listMetrics(wid, params) {
+        const q = new URLSearchParams();
+        if (params?.page !== void 0) q.set("page", String(params.page));
+        if (params?.pageSize !== void 0) q.set("pageSize", String(params.pageSize));
+        if (params?.includeArchived !== void 0)
+          q.set("includeArchived", String(params.includeArchived));
+        if (params?.source) q.set("source", params.source);
+        const qs = q.toString() ? `?${q.toString()}` : "";
+        return this.fetch(`w/${wid}/metrics${qs}`);
+      }
+      async getMetric(wid, id) {
+        return this.fetch(`w/${wid}/metrics/${id}`);
+      }
+      async createMetric(wid, data) {
+        return this.fetch(`w/${wid}/metrics`, {
+          method: "POST",
+          body: JSON.stringify(data)
+        });
+      }
+      async updateMetric(wid, id, data) {
+        return this.fetch(`w/${wid}/metrics/${id}`, {
+          method: "PUT",
+          body: JSON.stringify(data)
+        });
+      }
+      /** Soft-archive a metric (observations retained). */
+      async deleteMetric(wid, id) {
+        return this.fetch(`w/${wid}/metrics/${id}`, { method: "DELETE" });
+      }
+      async listMetricObservations(wid, metricId, params) {
+        const q = new URLSearchParams();
+        q.set("start", params.start);
+        q.set("end", params.end);
+        if (params.page !== void 0) q.set("page", String(params.page));
+        if (params.pageSize !== void 0) q.set("pageSize", String(params.pageSize));
+        return this.fetch(
+          `w/${wid}/metrics/${metricId}/observations?${q.toString()}`
+        );
+      }
+      async getMetricSeries(wid, metricId, params) {
+        const q = new URLSearchParams();
+        q.set("start", params.start);
+        q.set("end", params.end);
+        if (params.bucket) q.set("bucket", params.bucket);
+        if (params.aggregation) q.set("aggregation", params.aggregation);
+        return this.fetch(
+          `w/${wid}/metrics/${metricId}/series?${q.toString()}`
+        );
+      }
+      /** On-demand compute of enabled chat-source metrics for one chat. */
+      async computeChatMetrics(wid, data) {
+        return this.fetch(`w/${wid}/metrics/compute-for-chat`, {
+          method: "POST",
+          body: JSON.stringify(data)
+        });
+      }
+    };
     TrackedLinksApi = class extends BaseApiClient {
       /** Header counters plus whether shortening is configured and enabled. */
       async getTrackedLinkSummary(wid, options = {}) {
@@ -12709,7 +12863,6 @@ var init_chunk_4B7T6MBH = __esm({
       "createMemberMemory",
       "createMemberRole",
       "createMenuItem",
-      "createMilestone",
       "createNotificationRule",
       "createOperatorGroup",
       "createPage",
@@ -12776,7 +12929,6 @@ var init_chunk_4B7T6MBH = __esm({
       "deleteMemberMemory",
       "deleteMemberRole",
       "deleteMenuItem",
-      "deleteMilestone",
       "deleteMondayConnection",
       "deleteNotificationRule",
       "deleteOperatorGroup",
@@ -12927,6 +13079,7 @@ var init_chunk_4B7T6MBH = __esm({
       "getChatsNeedsResponse",
       "getChildThreadMessages",
       "getClientWorkspace",
+      "getConfigurationHealth",
       "getConfluenceStatus",
       "getConnectionSyncCapabilities",
       "getConnectionSyncCheckpoint",
@@ -13053,6 +13206,7 @@ var init_chunk_4B7T6MBH = __esm({
       "getMemberMemory",
       "getMemberRecordCounts",
       "getMemberRole",
+      "getMemberRoleCleanupPlan",
       "getMemberRoleByUuid",
       "getMemberRoles",
       "getMemberSyncLinks",
@@ -13061,8 +13215,6 @@ var init_chunk_4B7T6MBH = __esm({
       "getMembersMessageActivity",
       "getMenuItems",
       "getMessageTiming",
-      "getMilestone",
-      "getMilestones",
       "getMondayConnectionBoardColumns",
       "getMondayConnectionBoardGroups",
       "getMondayConnectionBoards",
@@ -13225,6 +13377,14 @@ var init_chunk_4B7T6MBH = __esm({
       "listHealthiePatients",
       "listHealthieProviders",
       "listPersonas",
+      "listMetrics",
+      "getMetric",
+      "createMetric",
+      "updateMetric",
+      "deleteMetric",
+      "listMetricObservations",
+      "getMetricSeries",
+      "computeChatMetrics",
       "listPushSubscriptions",
       "listSalesforceObjects",
       "listScenarios",
@@ -13235,6 +13395,7 @@ var init_chunk_4B7T6MBH = __esm({
       "markEmailAsRead",
       "markEmailAsUnread",
       "markNotificationAsRead",
+      "mergeMemberRoles",
       "previewImportMembers",
       "previewImportWorkspace",
       "previewRoutineWorkflowAccess",
@@ -13363,7 +13524,6 @@ var init_chunk_4B7T6MBH = __esm({
       "updateMemberLabel",
       "updateMemberRole",
       "updateMenuItem",
-      "updateMilestone",
       "updateMondaySyncConfig",
       "updateNotificationRule",
       "updateOperatorGroup",
@@ -13551,6 +13711,8 @@ var init_chunk_4B7T6MBH = __esm({
       createMemberRole;
       updateMemberRole;
       deleteMemberRole;
+      getMemberRoleCleanupPlan;
+      mergeMemberRoles;
       // Member Fields
       getMemberFields;
       getMemberFieldDefinitions;
@@ -13611,6 +13773,15 @@ var init_chunk_4B7T6MBH = __esm({
       createPersona;
       updatePersona;
       deletePersona;
+      // Metrics API (customer-defined outcome metrics)
+      listMetrics;
+      getMetric;
+      createMetric;
+      updateMetric;
+      deleteMetric;
+      listMetricObservations;
+      getMetricSeries;
+      computeChatMetrics;
       // Dashboards API
       getDashboards;
       getDashboard;
@@ -13619,6 +13790,7 @@ var init_chunk_4B7T6MBH = __esm({
       deleteDashboard;
       getDashboardChannelStats;
       getDashboardWorkflowAssignmentStats;
+      getConfigurationHealth;
       // MOTD API
       getMotd;
       // Tracked Links analytics (#10934)
@@ -13772,6 +13944,11 @@ var init_chunk_4B7T6MBH = __esm({
       updateBusinessProfile;
       submitBusinessProfile;
       cancelBusinessProfile;
+      listLegalEntities;
+      getLegalEntity;
+      createLegalEntity;
+      getVoiceTrustProducts;
+      syncVoiceTrustProducts;
       createOrganizationWorkspace;
       getOrgBillingCustomer;
       getVapidPublicKey;
@@ -14033,11 +14210,6 @@ var init_chunk_4B7T6MBH = __esm({
       linkCalendarToGoogle;
       unlinkCalendarFromGoogle;
       syncCalendarWithGoogle;
-      getMilestones;
-      getMilestone;
-      createMilestone;
-      updateMilestone;
-      deleteMilestone;
       // Communications API
       getPhoneNumbers;
       getAvailablePhoneNumbers;
@@ -14417,6 +14589,7 @@ var init_chunk_4B7T6MBH = __esm({
         bindAgentsMethods(this, apis.agents);
         bindQualificationsMethods(this, apis.qualifications);
         bindPersonasMethods(this, apis.personas);
+        bindMetricsMethods(this, apis.metrics);
         bindQueriesMethods(this, apis.queries);
         bindDashboardsMethods(this, apis.dashboards);
         bindMotdMethods(this, apis.motd);
@@ -14433,7 +14606,7 @@ var init_chunk_4B7T6MBH = __esm({
         bindFilesMethods(this, apis.files);
         bindEventsMethods(this, apis.events);
         bindWorkflowsMethods(this, apis.workflows, apis.workflowNotes, apis.voice, apis.supervisors);
-        bindCalendarsMethods(this, apis.calendars, apis.milestones);
+        bindCalendarsMethods(this, apis.calendars);
         bindCommunicationsMethods(this, apis.phoneNumbers, apis.inboxes, apis.notificationRules);
         bindToolkitsMethods(
           this,
@@ -14606,9 +14779,9 @@ var init_chunk_2YLKG4TT = __esm({
 var SEARCHABLE_EVENT_RULE_SOURCE_FIELDS;
 var init_dist = __esm({
   "../sdk/dist/index.js"() {
-    init_chunk_4B7T6MBH();
+    init_chunk_CEFOCGYO();
     init_chunk_2YLKG4TT();
-    init_chunk_GP6ICMWF();
+    init_chunk_PJFEGUHM();
     SEARCHABLE_EVENT_RULE_SOURCE_FIELDS = [
       "taskId",
       "dataTypeId",
@@ -16469,6 +16642,19 @@ var COMMON_ARGS = [
   { name: "id", description: "Entity ID" },
   { name: "uuid", description: "Entity UUID" }
 ];
+var ORG_UUID_ARG = {
+  name: "org-uuid",
+  aliases: ["org"],
+  description: "Organization UUID or ID",
+  required: true
+};
+function requireOrgRef(args) {
+  const val = args["org-uuid"] ?? args.org;
+  if (typeof val !== "string" || !val) {
+    throw new CLIError("Missing required argument: --org-uuid");
+  }
+  return val;
+}
 function parseArgs(defs, argv) {
   const allDefs = [...defs, ...COMMON_ARGS];
   const result3 = {};
@@ -16980,8 +17166,8 @@ var CommandRegistry = class {
     const key = cmd.path.join(" ");
     this.commands.set(key, cmd);
   }
-  registerCommands(commands3) {
-    for (const cmd of commands3) {
+  registerCommands(commands4) {
+    for (const cmd of commands4) {
       this.registerCommand(cmd);
     }
   }
@@ -17500,6 +17686,42 @@ var FEEDBACK_COLUMNS = [
   },
   COL.created()
 ];
+async function respondWithValue(ctx, workspace, args) {
+  const chatId = requireIdOrUuidFrom(args, "chat-id", "id");
+  const chat = await requireAuth(ctx).apiClient.getChat(workspace, chatId);
+  const interrupt = chat?.interrupt;
+  if (!interrupt || !interrupt.interruptId) {
+    throw new Error("No pending interrupt on this chat.");
+  }
+  const raw = args.value;
+  if (typeof raw !== "string" || !raw.length) {
+    throw new Error(
+      `A --value is required. For a form pass the field map as JSON, e.g. --value '{"channels":"sms,voice","days":"2"}'; for a choice list pass the chosen value.`
+    );
+  }
+  const url = `${ctx.envConfig.apiUrl}/api/v2/w/${workspace}/chats/${chat.id}/inference/hitl`;
+  const response = await fetch(url, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${requireAuth(ctx).accessToken}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({ chosenValue: raw, interruptId: interrupt.interruptId })
+  });
+  if (!response.ok) {
+    throw new Error(
+      `Resume failed (${response.status}): ${(await response.text()).slice(0, 400)}`
+    );
+  }
+  outputSingle(
+    {
+      status: "resumed",
+      chatId: chat.id,
+      next: `gr chats inspect --id ${chat.id} -w ${workspace}`
+    },
+    ctx
+  );
+}
 async function respondToInterrupt(ctx, workspace, args, decisionType) {
   const chatId = requireIdOrUuidFrom(args, "chat-id", "id");
   const chat = await requireAuth(ctx).apiClient.getChat(workspace, chatId);
@@ -17532,6 +17754,27 @@ async function respondToInterrupt(ctx, workspace, args, decisionType) {
   if (streamError) throw new Error(`Inference error: ${streamError}`);
   outputSingle({ role: "assistant", content: buffered }, ctx, MESSAGE_COLUMNS2);
 }
+function isDevProfile(env) {
+  return env === "dev" || env === "development" || env === "local";
+}
+function isLocalApiOrigin(apiUrl) {
+  if (!apiUrl) return false;
+  try {
+    const host = new URL(apiUrl).hostname.replace(/^\[|\]$/g, "");
+    return host === "localhost" || host === "127.0.0.1" || host === "::1" || host.endsWith(".gravityrail.test");
+  } catch {
+    return false;
+  }
+}
+async function shouldRedactChatContent(ctx, apiClient, workspace) {
+  if (isDevProfile(ctx.env) && isLocalApiOrigin(ctx.envConfig?.apiUrl)) return false;
+  try {
+    const ws = await apiClient.getWorkspace(workspace);
+    return ws.phiPostureDecision !== "allow_non_phi";
+  } catch {
+    return true;
+  }
+}
 var chatsDomain = {
   name: "chats",
   description: "Manage chats",
@@ -17728,6 +17971,28 @@ var chatsDomain = {
         await respondToInterrupt(ctx, workspace, args, decisionType);
       }
     },
+    {
+      path: ["chats", "interrupt", "respond"],
+      description: "Answer a chat's pending UI interrupt (form or choice list) with a value, and stream the continued reply.",
+      mutates: true,
+      requiresWorkspace: true,
+      args: [
+        {
+          name: "chat-id",
+          aliases: ["id"],
+          description: "Chat ID (numeric id preferred; uuid accepted)",
+          required: true
+        },
+        {
+          name: "value",
+          description: `The answer. For a form, the field map as JSON (e.g. '{"channels":"sms,voice","days":"2"}'); for a choice list, the chosen value.`,
+          required: true
+        }
+      ],
+      handler: async ({ ctx, workspace, args }) => {
+        await respondWithValue(ctx, workspace, args);
+      }
+    },
     {
       path: ["chats", "interrupt", "deny"],
       description: "Reject a chat's pending approval request with a reason.",
@@ -17758,7 +18023,17 @@ var chatsDomain = {
           description: "Chat ID (numeric id preferred; uuid accepted)",
           required: true
         },
-        { name: "stream", description: "Stream the AI response via AG-UI", isFlag: true }
+        { name: "stream", description: "Stream the AI response via AG-UI", isFlag: true },
+        {
+          // Read by the handler below since this command was written, but
+          // never declared — so `--auto-approve` parsed as nothing and the
+          // turn stopped on every tool call anyway. Driving a manager turn
+          // from the CLI meant approving each exec by hand, which is why
+          // multi-turn QA was impractical.
+          name: "auto-approve",
+          description: "Approve tool calls automatically for this turn (development QA). Capability round-trips (screenshots, browser, forms) still prompt.",
+          isFlag: true
+        }
       ],
       handler: async ({ ctx, workspace, args, data }) => {
         const content = typeof data === "string" ? data : data?.content;
@@ -17793,7 +18068,11 @@ var chatsDomain = {
           );
           process.stdout.write("\n");
           if (!streamed.trim()) {
-            await printPendingApproval(ctx, workspace, chatId);
+            if (!await printPendingApproval(ctx, workspace, chatId)) {
+              throw new Error(
+                `No response was produced for chat ${chatId}, and no approval is pending. The inference stream ended without emitting anything \u2014 usually the turn never started.`
+              );
+            }
           }
         } else {
           const aguiClient = new AGUIClient({
@@ -17823,6 +18102,9 @@ var chatsDomain = {
               chatId
             );
             if (await printPendingApproval(ctx, workspace, chatId, chat)) return;
+            throw new Error(
+              `No response was produced for chat ${chatId}, and no approval is pending. The inference stream ended without emitting anything \u2014 usually the turn never started. Check the API log for "Inference stream timed out for key inference:${workspace}:${chatId}" and the temporal-worker log for an "inference-${workspace}-${chatId}" workflow.`
+            );
           }
           outputSingle(
             {
@@ -17965,6 +18247,8 @@ var chatsDomain = {
           authed.apiClient.getChat(workspace, chatId),
           authed.apiClient.getChatMessages(workspace, chatId)
         ]);
+        const redact = await shouldRedactChatContent(ctx, authed.apiClient, workspace);
+        const hide = (value) => redact ? "[REDACTED]" : value;
         const result3 = {
           chat: {
             id: chat.id,
@@ -17980,7 +18264,7 @@ var chatsDomain = {
             // field projections (#20262). Always an array so the key
             // survives JSON serialization even when the API omits it.
             participants: (chat.participants ?? []).map((p) => ({
-              name: "[REDACTED]",
+              name: hide(p.name),
               role: p.role,
               memberId: p.memberId ?? null,
               memberType: p.memberType ?? null
@@ -17988,11 +18272,13 @@ var chatsDomain = {
           },
           // Deliberate allow-list — never spread the API message. PHI
           // lives in content and (if ever added) sttMetadata.words
-          // (#21973); both must stay out of inspect output.
+          // (#21973), so nothing beyond these three keys is emitted; the
+          // content itself is gated on posture (see
+          // shouldRedactChatContent), not blanket-hidden.
           messages: messages.map((m) => ({
             id: m.id,
             role: m.role,
-            content: "[REDACTED]"
+            content: hide(m.content)
           }))
         };
         const assignmentId = chat.assignmentId;
@@ -18010,7 +18296,7 @@ var chatsDomain = {
             dataRecords: assignment.dataRecords?.map((dr) => ({
               id: dr.id,
               dataTypeId: dr.dataTypeId,
-              fieldValues: "[REDACTED]"
+              fieldValues: hide(dr.fieldValues)
             }))
           };
         }
@@ -19370,8 +19656,6 @@ Provisioning started. Watch it come up with:
             "inboxes",
             "routines",
             "memberFilters",
-            "milestones",
-            "milestoneGoals",
             "customToolkits",
             "customTools",
             "pages",
@@ -19452,8 +19736,6 @@ Provisioning started. Watch it come up with:
             "inboxes",
             "routines",
             "memberFilters",
-            "milestones",
-            "milestoneGoals",
             "customToolkits",
             "customTools",
             "pages",
@@ -21865,9 +22147,160 @@ var journeysDomain = {
   ]
 };
 
-// src/domains/personas.ts
+// src/domains/metrics.ts
 init_output();
+init_context();
+init_errors();
 var COLUMNS11 = [
+  COL.id(),
+  COL.name(),
+  { header: "SLUG", getValue: (item) => item.slug ?? "" },
+  { header: "TYPE", getValue: (item) => item.metricType ?? "" },
+  { header: "SOURCE", getValue: (item) => item.source ?? "" },
+  { header: "UNIT", getValue: (item) => item.unit ?? "" },
+  {
+    header: "ENABLED",
+    getValue: (item) => item.enabled ? "yes" : "no"
+  },
+  COL.created()
+];
+var OBS_COLUMNS = [
+  COL.id(),
+  { header: "VALUE", getValue: (item) => String(item.value ?? "") },
+  { header: "OBSERVED_AT", getValue: (item) => item.observedAt ?? "" },
+  {
+    header: "CHAT_ID",
+    getValue: (item) => item.chatId != null ? String(item.chatId) : ""
+  },
+  {
+    header: "MEMBER_ID",
+    getValue: (item) => item.memberId != null ? String(item.memberId) : ""
+  }
+];
+var metricsDomain = {
+  name: "metrics",
+  description: "Customer-defined outcome metrics (CEL expression or LLM rubric) with time-series readout",
+  commands: [
+    ...crudCommands({
+      prefix: ["metrics"],
+      entityName: "metric",
+      listMethod: "listMetrics",
+      getMethod: "getMetric",
+      createMethod: "createMetric",
+      updateMethod: "updateMetric",
+      deleteMethod: "deleteMetric",
+      columns: COLUMNS11,
+      paginationSupport: "full",
+      createExamples: [
+        `yarn gr metrics create -w $WID --allow-write --data '{"name":"SMS Channel Rate","metricType":"expression","celExpression":"chat.channel == \\"phone-sms\\"","unit":"rate"}'`,
+        `yarn gr metrics create -w $WID --allow-write --data '{"name":"Qualified Engagement","metricType":"rubric","evaluationPrompt":"Did the user show buying intent?","unit":"rate"}'`
+      ],
+      createHelp: "Create a metric definition. metricType is expression (CEL) or rubric (LLM). MVP source is chat only."
+    }),
+    {
+      path: ["metrics", "observations"],
+      description: "List raw observations for a metric in a date range (may include PHI reason)",
+      args: [
+        { name: "id", required: true, description: "Metric ID" },
+        {
+          name: "start",
+          required: true,
+          description: "ISO-8601 inclusive lower bound on observed_at"
+        },
+        {
+          name: "end",
+          required: true,
+          description: "ISO-8601 exclusive upper bound on observed_at"
+        },
+        { name: "page", description: "Page number (default 1)" },
+        { name: "page-size", description: "Page size (default 100)" }
+      ],
+      requiresWorkspace: true,
+      examples: [
+        "yarn gr metrics observations --id 1 --start 2026-07-01T00:00:00Z --end 2026-08-01T00:00:00Z"
+      ],
+      handler: async (hctx) => {
+        const client = requireAuth(hctx.ctx).apiClient;
+        const id = requireNumber(hctx.args, "id");
+        const start = requireString(hctx.args, "start");
+        const end = requireString(hctx.args, "end");
+        const page = hctx.args["page"] != null ? Number(hctx.args["page"]) : void 0;
+        const pageSize = hctx.args["page-size"] != null ? Number(hctx.args["page-size"]) : void 0;
+        const result3 = await client.listMetricObservations(hctx.workspace, id, {
+          start,
+          end,
+          page,
+          pageSize
+        });
+        outputData(result3.items ?? result3, hctx.ctx, OBS_COLUMNS);
+      }
+    },
+    {
+      path: ["metrics", "series"],
+      description: "Time-bucketed aggregation for a metric (numeric only)",
+      args: [
+        { name: "id", required: true, description: "Metric ID" },
+        {
+          name: "start",
+          required: true,
+          description: "ISO-8601 inclusive lower bound on observed_at"
+        },
+        {
+          name: "end",
+          required: true,
+          description: "ISO-8601 exclusive upper bound on observed_at"
+        },
+        { name: "bucket", description: "day | week (default day)" },
+        {
+          name: "aggregation",
+          description: "avg | sum | count | rate (default avg)"
+        }
+      ],
+      requiresWorkspace: true,
+      examples: [
+        "yarn gr metrics series --id 1 --start 2026-07-01T00:00:00Z --end 2026-08-01T00:00:00Z --bucket day"
+      ],
+      handler: async (hctx) => {
+        const client = requireAuth(hctx.ctx).apiClient;
+        const id = requireNumber(hctx.args, "id");
+        const result3 = await client.getMetricSeries(hctx.workspace, id, {
+          start: requireString(hctx.args, "start"),
+          end: requireString(hctx.args, "end"),
+          bucket: hctx.args["bucket"] ?? "day",
+          aggregation: hctx.args["aggregation"] ?? "avg"
+        });
+        outputSingle(result3, hctx.ctx);
+      }
+    },
+    {
+      path: ["metrics", "compute-for-chat"],
+      description: "On-demand evaluate enabled chat-source metrics for one chat (writes observations + dual-write feedback)",
+      args: [
+        {
+          name: "chat-id",
+          required: true,
+          description: "Chat ID to evaluate"
+        }
+      ],
+      requiresWorkspace: true,
+      mutates: true,
+      examples: ["yarn gr metrics compute-for-chat --chat-id 42 --allow-write"],
+      handler: async (hctx) => {
+        const client = requireAuth(hctx.ctx).apiClient;
+        const chatId = requireNumber(hctx.args, "chat-id");
+        if (chatId < 1) {
+          throw new CLIError("--chat-id must be a positive number");
+        }
+        const result3 = await client.computeChatMetrics(hctx.workspace, { chatId });
+        outputSingle(result3, hctx.ctx);
+      }
+    }
+  ]
+};
+
+// src/domains/personas.ts
+init_output();
+var COLUMNS12 = [
   COL.id(),
   COL.name(),
   { header: "AGE", getValue: (item) => item.age != null ? String(item.age) : "" },
@@ -21897,7 +22330,7 @@ var personasDomain = {
       createMethod: "createPersona",
       updateMethod: "updatePersona",
       deleteMethod: "deletePersona",
-      columns: COLUMNS11,
+      columns: COLUMNS12,
       paginationSupport: "full"
     })
   ]
@@ -21956,11 +22389,11 @@ function shuffleInPlace(items) {
   }
   return items;
 }
-function buildModelEvalBatchJobs(scenarios, models, rounds, warmup) {
+function buildModelEvalBatchJobs(scenarios, models, rounds, warmup, realtimeModels = []) {
   if (scenarios.length === 0) {
     throw new CLIError("At least one scenario is required");
   }
-  if (models.length === 0) {
+  if (models.length === 0 && realtimeModels.length === 0) {
     throw new CLIError("At least one model is required");
   }
   if (rounds < 1) {
@@ -21981,12 +22414,60 @@ function buildModelEvalBatchJobs(scenarios, models, rounds, warmup) {
           modelId
         });
       }
+      for (const modelId of realtimeModels) {
+        roundJobs.push({
+          round,
+          warmup: warm,
+          scenarioId: scenario.id,
+          scenarioSlug: scenario.slug,
+          scenarioName: scenario.name,
+          modelId,
+          realtime: true
+        });
+      }
     }
     shuffleInPlace(roundJobs);
     jobs.push(...roundJobs);
   }
   return jobs;
 }
+var REALTIME_AUDIO_USD_PER_MIN = {
+  "xai:realtime:voice-agent": 0.05,
+  // Grok Voice Think Fast 1
+  "xai:realtime:voice-agent-2": 0.08
+  // Grok Voice Think Fast 2
+};
+var DEFAULT_REALTIME_AUDIO_USD_PER_MIN = 0.08;
+var EST_AUDIO_MIN_PER_RUN = 3;
+var EST_TEXT_USD_PER_RUN = 0.012;
+function realtimeAudioUsdPerMin(modelId) {
+  return REALTIME_AUDIO_USD_PER_MIN[modelId] ?? DEFAULT_REALTIME_AUDIO_USD_PER_MIN;
+}
+function estimateRealtimeRunCostUsd(modelId) {
+  return EST_AUDIO_MIN_PER_RUN * realtimeAudioUsdPerMin(modelId) + EST_TEXT_USD_PER_RUN;
+}
+function projectRealtimeBatchCostUsd(jobs) {
+  return jobs.filter((j) => j.realtime).reduce((sum, j) => sum + estimateRealtimeRunCostUsd(j.modelId), 0);
+}
+function actualRealtimeRowCostUsd(row, modelId) {
+  const summary = row.timing_summary;
+  const audioMs = summary ? summary["audio_output_ms_total"] : void 0;
+  if (typeof audioMs === "number" && Number.isFinite(audioMs) && audioMs >= 0) {
+    return audioMs / 6e4 * realtimeAudioUsdPerMin(modelId) + EST_TEXT_USD_PER_RUN;
+  }
+  return estimateRealtimeRunCostUsd(modelId);
+}
+function parseMaxBudgetUsd(raw, flagName) {
+  if (raw === void 0 || raw === null || raw === "") {
+    return void 0;
+  }
+  const value = Number(raw);
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new CLIError(`${flagName} must be a positive number of USD`);
+  }
+  return value;
+}
+var REALTIME_MAX_CONCURRENCY = 4;
 function summarizeCriterionResults(run) {
   if (!run.criterionResults?.length) return void 0;
   return run.criterionResults.map((c) => ({
@@ -21995,7 +22476,7 @@ function summarizeCriterionResults(run) {
     score: c.score ?? null
   }));
 }
-function runToBatchRow(job, workflowId, run, error) {
+function runToBatchRow(job, workflowId, run, error, batchLabel) {
   return {
     ts: (/* @__PURE__ */ new Date()).toISOString(),
     round: job.round,
@@ -22005,6 +22486,8 @@ function runToBatchRow(job, workflowId, run, error) {
     scenario_slug: job.scenarioSlug,
     scenario_name: job.scenarioName,
     model_id: job.modelId,
+    ...job.realtime ? { realtime_model_id: job.modelId } : {},
+    ...batchLabel ? { batch_label: batchLabel } : {},
     run_id: run?.id,
     error,
     failure_reason: run?.failureReason ?? null,
@@ -22059,7 +22542,10 @@ async function executeModelEvalJob(api, options, job, waitTimeoutMs, pollMs, sle
     const started = await api.startTestChatRun(options.workspace, options.workflowId, {
       scenarioId: job.scenarioId,
       driver: DriverMode.AUTO,
-      assistantChatModelId: job.modelId
+      ...job.realtime ? {
+        assistantRealtimeModelId: job.modelId,
+        ...options.realtimeConfig ? { assistantRealtimeModelConfig: options.realtimeConfig } : {}
+      } : { assistantChatModelId: job.modelId }
     });
     let run = await waitForRunTerminal(
       api,
@@ -22080,10 +22566,10 @@ async function executeModelEvalJob(api, options, job, waitTimeoutMs, pollMs, sle
         sleep
       );
     }
-    return runToBatchRow(job, options.workflowId, run);
+    return runToBatchRow(job, options.workflowId, run, void 0, options.batchLabel);
   } catch (e) {
     const message = e instanceof Error ? e.message : String(e);
-    return runToBatchRow(job, options.workflowId, null, message);
+    return runToBatchRow(job, options.workflowId, null, message, options.batchLabel);
   }
 }
 function createSpacingGate(spacingSec, sleep) {
@@ -22101,56 +22587,99 @@ function createSpacingGate(spacingSec, sleep) {
 }
 async function executeModelEvalBatch(api, options) {
   const sleep = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const concurrency = options.concurrency ?? 1;
   const jobs = buildModelEvalBatchJobs(
     options.scenarios,
     options.models,
     options.rounds,
-    options.warmup
+    options.warmup,
+    options.realtimeModels ?? []
   );
   const waitTimeoutMs = options.waitTimeoutSec * 1e3;
   const pollMs = options.pollIntervalSec * 1e3;
   const rows = [];
   let stopBatch = false;
+  let budgetStopped = false;
+  let actualSpendUsd = 0;
   const awaitSpacing = createSpacingGate(options.spacingSec, sleep);
+  const emitProgress = (line) => {
+    if (options.onProgress) {
+      options.onProgress(line);
+    } else {
+      process.stdout.write(`${line}
+`);
+    }
+  };
+  const realtimeJobCount = jobs.filter((j) => j.realtime).length;
+  let concurrency = options.concurrency ?? 1;
+  if (realtimeJobCount > 0 && concurrency > REALTIME_MAX_CONCURRENCY) {
+    emitProgress(
+      `concurrency clamped ${concurrency} -> ${REALTIME_MAX_CONCURRENCY} (realtime models share the provider session pool)`
+    );
+    concurrency = REALTIME_MAX_CONCURRENCY;
+  }
+  if (realtimeJobCount > 0) {
+    const projectedUsd = projectRealtimeBatchCostUsd(jobs);
+    const cap = options.maxBudgetUsd;
+    emitProgress(
+      `realtime budget: projected ~$${projectedUsd.toFixed(2)} for ${realtimeJobCount} realtime run(s)${cap != null ? ` (cap $${cap.toFixed(2)})` : ""}`
+    );
+    if (cap != null && projectedUsd > cap) {
+      throw new CLIError(
+        `Batch aborted before dispatch: projected realtime cost $${projectedUsd.toFixed(2)} exceeds --max-budget-usd $${cap.toFixed(2)}. Reduce rounds/scenarios/models or raise the cap.`
+      );
+    }
+  }
   const recordRow = (job, row) => {
     rows.push(row);
     if (options.outPath) {
       appendFileSync(options.outPath, `${JSON.stringify(row)}
 `);
     }
-    const progress = formatBatchProgressLine(job, row);
-    if (options.onProgress) {
-      options.onProgress(progress);
-    } else {
-      process.stdout.write(`${progress}
-`);
-    }
+    emitProgress(formatBatchProgressLine(job, row));
   };
+  const makeSkippedRow = (job) => ({
+    ...runToBatchRow(
+      job,
+      options.workflowId,
+      null,
+      budgetStopped ? "batch stopped: realtime budget cap reached" : "batch aborted before start",
+      options.batchLabel
+    ),
+    batch_skipped: true
+  });
   const runOne = async (job) => {
     await awaitSpacing();
     if (stopBatch) {
-      return {
-        ...runToBatchRow(job, options.workflowId, null, "batch aborted before start"),
-        batch_skipped: true
-      };
+      return makeSkippedRow(job);
     }
     const row = await executeModelEvalJob(api, options, job, waitTimeoutMs, pollMs, sleep);
     if (isConfigurationBlockerFailure(row.failure_reason)) {
       stopBatch = true;
     }
+    if (job.realtime && !row.batch_skipped) {
+      actualSpendUsd += actualRealtimeRowCostUsd(row, job.modelId);
+      if (options.maxBudgetUsd != null && actualSpendUsd >= options.maxBudgetUsd && !stopBatch) {
+        stopBatch = true;
+        budgetStopped = true;
+        emitProgress(
+          `realtime budget: actual spend ~$${actualSpendUsd.toFixed(2)} reached cap $${options.maxBudgetUsd.toFixed(2)} \u2014 stopping dispatch`
+        );
+      }
+    }
     return row;
   };
   if (concurrency <= 1) {
-    for (const job of jobs) {
+    let stoppedAt = jobs.length;
+    for (const [index, job] of jobs.entries()) {
       if (stopBatch) {
+        stoppedAt = index;
         break;
       }
       const row = await runOne(job);
       recordRow(job, row);
-      if (stopBatch) {
-        break;
-      }
+    }
+    for (const job of jobs.slice(stoppedAt)) {
+      recordRow(job, makeSkippedRow(job));
     }
   } else {
     const results = new Array(jobs.length);
@@ -22166,6 +22695,9 @@ async function executeModelEvalBatch(api, options) {
           return;
         }
         const job = jobs[index];
+        if (job === void 0) {
+          return;
+        }
         const row = await runOne(job);
         results[index] = row;
         recordRow(job, row);
@@ -22174,20 +22706,19 @@ async function executeModelEvalBatch(api, options) {
     const workers = Array.from({ length: Math.min(concurrency, jobs.length) }, () => worker());
     await Promise.all(workers);
     if (stopBatch) {
-      for (let index = 0; index < jobs.length; index++) {
+      jobs.forEach((job, index) => {
         if (results[index] !== void 0) {
-          continue;
+          return;
         }
-        const job = jobs[index];
-        const skipped = {
-          ...runToBatchRow(job, options.workflowId, null, "batch aborted before start"),
-          batch_skipped: true
-        };
+        const skipped = makeSkippedRow(job);
         results[index] = skipped;
         recordRow(job, skipped);
-      }
+      });
     }
   }
+  if (realtimeJobCount > 0) {
+    emitProgress(`realtime budget: total actual spend ~$${actualSpendUsd.toFixed(2)}`);
+  }
   const blockerRow = rows.find((r) => isConfigurationBlockerFailure(r.failure_reason));
   if (blockerRow) {
     throw new CLIError(
@@ -22489,9 +23020,29 @@ var qualificationsDomain = {
         { name: "workflow-id", description: "Workflow ID", required: true },
         {
           name: "models",
-          description: "Comma-separated assistant chat model IDs",
+          description: "Comma-separated assistant chat model IDs (optional with --realtime-models)",
           alias: "m",
-          required: true
+          required: false
+        },
+        {
+          name: "realtime-models",
+          description: "Comma-separated native realtime model IDs (each forwarded as assistantRealtimeModelId)",
+          required: false
+        },
+        {
+          name: "realtime-config",
+          description: "JSON object forwarded as assistantRealtimeModelConfig on realtime jobs",
+          required: false
+        },
+        {
+          name: "batch-label",
+          description: "Label recorded on every JSONL row for cross-batch comparison",
+          required: false
+        },
+        {
+          name: "max-budget-usd",
+          description: "Dispatch cap in USD on realtime spend: abort if pre-flight projection exceeds it, stop dispatching when actuals cross it (in-flight runs still finish and bill)",
+          required: false
         },
         {
           name: "scenario-ids",
@@ -22531,7 +23082,31 @@ var qualificationsDomain = {
         { name: "out", description: "Append JSONL rows to this file" }
       ],
       handler: async ({ ctx, workspace, args }) => {
-        const models = parseCommaSeparatedList(requireString(args, "models"), "--models");
+        const models = args.models ? parseCommaSeparatedList(String(args.models), "--models") : [];
+        const realtimeModels = args["realtime-models"] ? parseCommaSeparatedList(String(args["realtime-models"]), "--realtime-models") : [];
+        if (models.length === 0 && realtimeModels.length === 0) {
+          throw new CLIError("Specify --models and/or --realtime-models");
+        }
+        let realtimeConfig;
+        if (args["realtime-config"]) {
+          if (realtimeModels.length === 0) {
+            throw new CLIError("--realtime-config requires --realtime-models");
+          }
+          let parsed;
+          try {
+            parsed = JSON.parse(String(args["realtime-config"]));
+          } catch {
+            throw new CLIError("--realtime-config is not valid JSON");
+          }
+          if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new CLIError(
+              "--realtime-config must be a JSON object (not an array or null)"
+            );
+          }
+          realtimeConfig = parsed;
+        }
+        const batchLabel = args["batch-label"] ? String(args["batch-label"]) : void 0;
+        const maxBudgetUsd = parseMaxBudgetUsd(args["max-budget-usd"], "--max-budget-usd");
         const allScenarios = Boolean(args["all-scenarios"]);
         const scenarioIdsRaw = args["scenario-ids"];
         if (allScenarios && scenarioIdsRaw) {
@@ -22572,6 +23147,10 @@ var qualificationsDomain = {
           workspace,
           workflowId,
           models,
+          realtimeModels,
+          realtimeConfig,
+          batchLabel,
+          maxBudgetUsd,
           scenarios,
           rounds,
           warmup,
@@ -22888,7 +23467,7 @@ Relations (relationMatch): ${relations.join(", ")}`);
 };
 init_output();
 init_context();
-var COLUMNS12 = [
+var COLUMNS13 = [
   COL.id(),
   COL.name(),
   { header: "SLUG", getValue: (item) => item.slug ?? "" },
@@ -22942,7 +23521,7 @@ var sitesDomain = {
       createMethod: "createSite",
       updateMethod: "updateSite",
       deleteMethod: "deleteSite",
-      columns: COLUMNS12
+      columns: COLUMNS13
     }),
     // Pages sub-resource
     {
@@ -23616,7 +24195,7 @@ var abilitiesDomain = {
 init_output();
 init_pagination();
 init_context();
-var COLUMNS13 = [
+var COLUMNS14 = [
   COL.id(),
   COL.status(),
   { header: "GRANTOR", getValue: (item) => String(item.grantorMemberId ?? "") },
@@ -23633,7 +24212,7 @@ var accessGrantsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getAccessGrants(workspace);
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     },
     {
@@ -23646,7 +24225,7 @@ var accessGrantsDomain = {
           workspace,
           requireString(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS13);
+        outputSingle(result3, ctx, COLUMNS14);
       }
     },
     {
@@ -23659,7 +24238,7 @@ var accessGrantsDomain = {
           workspace,
           data
         );
-        outputSingle(result3, ctx, COLUMNS13);
+        outputSingle(result3, ctx, COLUMNS14);
       }
     },
     {
@@ -23670,7 +24249,7 @@ var accessGrantsDomain = {
         const result3 = await requireAuth(ctx).apiClient.getMyReceivedGrants(workspace, {
           pageSize: 200
         });
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     },
     {
@@ -23681,7 +24260,7 @@ var accessGrantsDomain = {
         const result3 = await requireAuth(ctx).apiClient.getMyGivenGrants(workspace, {
           pageSize: 200
         });
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     },
     {
@@ -23696,7 +24275,7 @@ var accessGrantsDomain = {
           requireString(args, "id"),
           data ?? {}
         );
-        outputSingle(result3, ctx, COLUMNS13);
+        outputSingle(result3, ctx, COLUMNS14);
       }
     },
     {
@@ -23711,7 +24290,7 @@ var accessGrantsDomain = {
           requireString(args, "id"),
           data ?? {}
         );
-        outputSingle(result3, ctx, COLUMNS13);
+        outputSingle(result3, ctx, COLUMNS14);
       }
     },
     {
@@ -23724,7 +24303,7 @@ var accessGrantsDomain = {
           workspace,
           requireNumber(args, "member-id")
         );
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     },
     {
@@ -23749,7 +24328,7 @@ var accessGrantsDomain = {
             pageSize: 200
           }
         );
-        outputData(listResult(result3, false), ctx, COLUMNS13);
+        outputData(listResult(result3, false), ctx, COLUMNS14);
       }
     }
   ]
@@ -23758,7 +24337,7 @@ var accessGrantsDomain = {
 // src/domains/ai-models.ts
 init_output();
 init_context();
-var COLUMNS14 = [
+var COLUMNS15 = [
   { header: "ID", getValue: (item) => String(item.id ?? item.modelId ?? "") },
   { header: "NAME", getValue: (item) => item.name ?? item.displayName ?? "" },
   { header: "PROVIDER", getValue: (item) => item.provider ?? "" },
@@ -23774,7 +24353,7 @@ var aiModelsDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getAllModels();
-        outputData(result3, ctx, COLUMNS14);
+        outputData(result3, ctx, COLUMNS15);
       }
     },
     {
@@ -23783,7 +24362,7 @@ var aiModelsDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getChatModels();
-        outputData(result3, ctx, COLUMNS14);
+        outputData(result3, ctx, COLUMNS15);
       }
     },
     {
@@ -23792,7 +24371,7 @@ var aiModelsDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getRealtimeModels();
-        outputData(result3, ctx, COLUMNS14);
+        outputData(result3, ctx, COLUMNS15);
       }
     },
     {
@@ -23801,7 +24380,7 @@ var aiModelsDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getVoiceModels();
-        outputData(result3, ctx, COLUMNS14);
+        outputData(result3, ctx, COLUMNS15);
       }
     }
   ]
@@ -23810,7 +24389,7 @@ var aiModelsDomain = {
 // src/domains/api-keys.ts
 init_output();
 init_context();
-var COLUMNS15 = [
+var COLUMNS16 = [
   COL.id(),
   COL.name(),
   { header: "PREFIX", getValue: (item) => item.prefix ?? "" },
@@ -23833,7 +24412,7 @@ var apiKeysDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getApiKeys(workspace);
-        outputData(result3, ctx, COLUMNS15);
+        outputData(result3, ctx, COLUMNS16);
       }
     },
     {
@@ -23868,7 +24447,7 @@ var apiKeysDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getGlobalApiKeys();
-        outputData(result3, ctx, COLUMNS15);
+        outputData(result3, ctx, COLUMNS16);
       }
     },
     {
@@ -24534,7 +25113,7 @@ var conciergeDomain = {
 init_errors();
 init_output();
 init_context();
-var COLUMNS16 = [COL.id(), COL.name(), COL.description(), COL.enabled()];
+var COLUMNS17 = [COL.id(), COL.name(), COL.description(), COL.enabled()];
 var TOOL_COLUMNS2 = [COL.id(), COL.name(), COL.description()];
 var customToolkitsDomain = {
   name: "custom-toolkits",
@@ -24548,7 +25127,7 @@ var customToolkitsDomain = {
       createMethod: "createCustomToolkit",
       updateMethod: "updateCustomToolkit",
       deleteMethod: "deleteCustomToolkit",
-      columns: COLUMNS16
+      columns: COLUMNS17
     }),
     {
       path: ["custom-toolkits", "enable"],
@@ -24561,7 +25140,7 @@ var customToolkitsDomain = {
           workspace,
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS16);
+        outputSingle(result3, ctx, COLUMNS17);
       }
     },
     {
@@ -24575,7 +25154,7 @@ var customToolkitsDomain = {
           workspace,
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS16);
+        outputSingle(result3, ctx, COLUMNS17);
       }
     },
     // Tools — nested resource requiring toolkitId
@@ -24693,7 +25272,7 @@ var docsDomain = {
 // src/domains/features.ts
 init_output();
 init_context();
-var COLUMNS17 = [
+var COLUMNS18 = [
   { header: "SLUG", getValue: (item) => item.slug ?? "" },
   COL.name(),
   COL.description()
@@ -24708,7 +25287,7 @@ var featuresDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getFeatureRegistry();
-        outputData(result3, ctx, COLUMNS17);
+        outputData(result3, ctx, COLUMNS18);
       }
     },
     {
@@ -24720,7 +25299,7 @@ var featuresDomain = {
         const result3 = await requireAuth(ctx).apiClient.getFeatureBySlug(
           requireString(args, "slug")
         );
-        outputSingle(result3, ctx, COLUMNS17);
+        outputSingle(result3, ctx, COLUMNS18);
       }
     },
     {
@@ -24729,7 +25308,7 @@ var featuresDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getAvailableWorkspaceFeatures();
-        outputData(result3, ctx, COLUMNS17);
+        outputData(result3, ctx, COLUMNS18);
       }
     }
   ]
@@ -24738,7 +25317,7 @@ var featuresDomain = {
 // src/domains/inboxes.ts
 init_output();
 init_context();
-var COLUMNS18 = [
+var COLUMNS19 = [
   COL.id(),
   COL.name(),
   { header: "EMAIL", getValue: (item) => item.emailAddress ?? "" },
@@ -24763,7 +25342,7 @@ var inboxesDomain = {
       createMethod: "createInbox",
       updateMethod: "updateInbox",
       deleteMethod: "deleteInbox",
-      columns: COLUMNS18
+      columns: COLUMNS19
     }),
     {
       path: ["inboxes", "emails", "list"],
@@ -24850,7 +25429,7 @@ var inboxesDomain = {
 // src/domains/mcp-servers.ts
 init_output();
 init_context();
-var COLUMNS19 = [
+var COLUMNS20 = [
   COL.id(),
   COL.name(),
   { header: "URL", getValue: (item) => item.url ?? "" },
@@ -24868,7 +25447,7 @@ var mcpServersDomain = {
       createMethod: "createMcpServer",
       updateMethod: "updateMcpServer",
       deleteMethod: "deleteMcpServer",
-      columns: COLUMNS19
+      columns: COLUMNS20
     }),
     {
       path: ["mcp-servers", "enable"],
@@ -24881,7 +25460,7 @@ var mcpServersDomain = {
           workspace,
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS19);
+        outputSingle(result3, ctx, COLUMNS20);
       }
     },
     {
@@ -24895,7 +25474,7 @@ var mcpServersDomain = {
           workspace,
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS19);
+        outputSingle(result3, ctx, COLUMNS20);
       }
     },
     {
@@ -24918,7 +25497,7 @@ var mcpServersDomain = {
 init_output();
 init_pagination();
 init_context();
-var COLUMNS20 = [
+var COLUMNS21 = [
   { header: "KEY", getValue: (item) => item.key ?? "" },
   { header: "TYPE", getValue: (item) => item.type ?? "basic" },
   { header: "DESCRIPTION", getValue: (item) => truncate(item.description ?? "", 60) },
@@ -24952,7 +25531,7 @@ var memberMemoriesDomain = {
           type,
           query
         });
-        outputData(listResult(result3, false), ctx, COLUMNS20);
+        outputData(listResult(result3, false), ctx, COLUMNS21);
       }
     },
     {
@@ -24971,7 +25550,7 @@ var memberMemoriesDomain = {
           memberId,
           key
         );
-        outputData(result3, ctx, COLUMNS20);
+        outputData(result3, ctx, COLUMNS21);
       }
     },
     {
@@ -25002,7 +25581,7 @@ var memberMemoriesDomain = {
             ...priority !== void 0 && { priority }
           }
         );
-        outputData(result3, ctx, COLUMNS20);
+        outputData(result3, ctx, COLUMNS21);
       }
     },
     {
@@ -25035,35 +25614,58 @@ var memberMemoriesDomain = {
   ]
 };
 
-// src/domains/milestones.ts
+// src/domains/intervention-requests.ts
 init_output();
-var COLUMNS21 = [
+var COLUMNS22 = [
   COL.id(),
-  COL.name(),
-  COL.status(),
-  { header: "DUE DATE", getValue: (item) => item.dueDate ?? "" }
+  { header: "KIND", getValue: (item) => item.kind ?? "" },
+  { header: "CHAT", getValue: (item) => item.chatId ?? "" },
+  {
+    header: "STATUS",
+    getValue: (item) => item.resolvedAt ? item.resolution ?? "resolved" : "open"
+  },
+  // Zero is the interesting value: the intervention was requested and nobody
+  // was told, which is what `--unrouted` filters for.
+  { header: "NOTIFIED", getValue: (item) => item.notifiedCount ?? 0 },
+  { header: "REASON", getValue: (item) => item.reasonCode ?? "" },
+  { header: "CREATED", getValue: (item) => item.createdAt ?? "" }
 ];
-var milestonesDomain = {
-  name: "milestones",
-  description: "Manage milestones",
+var interventionRequestsDomain = {
+  name: "interventions",
+  description: "Inspect intervention requests \u2014 escalations and other asks for a person",
   commands: [
-    ...crudCommands({
-      prefix: ["milestones"],
-      entityName: "milestone",
-      listMethod: "getMilestones",
-      getMethod: "getMilestone",
-      createMethod: "createMilestone",
-      updateMethod: "updateMilestone",
-      deleteMethod: "deleteMilestone",
-      columns: COLUMNS21,
-      paginationSupport: "full"
-    })
+    {
+      path: ["interventions", "list"],
+      description: "List intervention requests (escalations etc). Newest first. Read-only.",
+      requiresWorkspace: true,
+      args: [
+        { name: "kind", description: "escalation | contributor_input | approval" },
+        { name: "open", description: "Only unresolved requests", isFlag: true },
+        { name: "chat-id", description: "Only requests for this chat" },
+        {
+          name: "unrouted",
+          description: "Only requests that notified NOBODY \u2014 escalations that reached no one",
+          isFlag: true
+        },
+        { name: "limit", description: "Max rows (default 50, max 200)" }
+      ],
+      handler: async ({ ctx, workspace, args, requireAuth: requireAuth2, outputData: outputData2 }) => {
+        const result3 = await requireAuth2(ctx).apiClient.getInterventionRequests(workspace, {
+          kind: args["kind"],
+          openOnly: Boolean(args["open"]),
+          chatId: args["chat-id"] ? Number(args["chat-id"]) : void 0,
+          unroutedOnly: Boolean(args["unrouted"]),
+          limit: args["limit"] ? Number(args["limit"]) : void 0
+        });
+        outputData2(result3, ctx, COLUMNS22);
+      }
+    }
   ]
 };
 
 // src/domains/notification-rules.ts
 init_output();
-var COLUMNS22 = [
+var COLUMNS23 = [
   COL.id(),
   COL.name(),
   { header: "TYPE", getValue: (item) => item.noticeType ?? "" },
@@ -25080,7 +25682,7 @@ var notificationRulesDomain = {
       createMethod: "createNotificationRule",
       updateMethod: "updateNotificationRule",
       deleteMethod: "deleteNotificationRule",
-      columns: COLUMNS22
+      columns: COLUMNS23
     })
   ]
 };
@@ -25144,7 +25746,7 @@ var oauthDomain = {
 // src/domains/operator-groups.ts
 init_output();
 init_context();
-var COLUMNS23 = [COL.id(), COL.name(), COL.description()];
+var COLUMNS24 = [COL.id(), COL.name(), COL.description()];
 var operatorGroupsDomain = {
   name: "operator-groups",
   description: "Manage operator groups",
@@ -25157,7 +25759,7 @@ var operatorGroupsDomain = {
       createMethod: "createOperatorGroup",
       updateMethod: "updateOperatorGroup",
       deleteMethod: "deleteOperatorGroup",
-      columns: COLUMNS23
+      columns: COLUMNS24
     }),
     {
       path: ["operator-groups", "add-member"],
@@ -25238,13 +25840,6 @@ var ORG_DOMAIN_COLUMNS = [
     maxWidth: 80
   }
 ];
-function requireOrgId(args) {
-  const val = args["org-uuid"] ?? args.org;
-  if (typeof val !== "string" || !val) {
-    throw new CLIError("Missing required argument: --org-uuid");
-  }
-  return val;
-}
 function requireDomainUuid(args) {
   const val = args["domain-uuid"] ?? args.uuid;
   if (typeof val !== "string" || !val) {
@@ -25259,7 +25854,7 @@ function requireDomain(args) {
   }
   return val;
 }
-var ORG_UUID_ARG = {
+var ORG_UUID_ARG2 = {
   name: "org-uuid",
   aliases: ["org"],
   description: "Organization UUID or ID",
@@ -25280,13 +25875,13 @@ function emailVerifyCommand(path4, description) {
     description,
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       `yarn gr ${path4.join(" ")} --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write`
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.verifyOrgDomainEmail(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25299,13 +25894,13 @@ function siteVerifyCommand(path4, description) {
     description,
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       `yarn gr ${path4.join(" ")} --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write`
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.verifyOrgDomainSite(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25319,7 +25914,7 @@ function registerDomainCommand(path4) {
     mutates: true,
     requiresWorkspace: false,
     args: [
-      ORG_UUID_ARG,
+      ORG_UUID_ARG2,
       { name: "domain", description: "Domain to register, e.g. example.com", required: true }
     ],
     examples: [
@@ -25327,7 +25922,7 @@ function registerDomainCommand(path4) {
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.registerOrgDomain(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomain(hctx.args)
       );
       outputSingle(result3, hctx.ctx, ORG_DOMAIN_COLUMNS);
@@ -25339,11 +25934,11 @@ var domainCommands = [
     path: ["org", "domains", "list"],
     description: "List domains registered to an organization",
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG],
+    args: [ORG_UUID_ARG2],
     examples: ["yarn gr org domains list --org-uuid $ORG_UUID"],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.listOrgDomains(
-        requireOrgId(hctx.args)
+        requireOrgRef(hctx.args)
       );
       outputData(result3, hctx.ctx, ORG_DOMAIN_COLUMNS);
     }
@@ -25352,11 +25947,11 @@ var domainCommands = [
     path: ["org", "domains", "get"],
     description: "Get a registered organization domain",
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: ["yarn gr org domains get --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID"],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.getOrgDomain(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx, ORG_DOMAIN_COLUMNS);
@@ -25369,13 +25964,13 @@ var domainCommands = [
     description: "Verify domain ownership by checking the _gravity-verify TXT record",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       "yarn gr org domains verify-ownership --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.verifyOrgDomainOwnership(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25386,13 +25981,16 @@ var domainCommands = [
     description: "Delete a registered organization domain",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       "yarn gr org domains delete --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
     ],
     handler: async (hctx) => {
       const domainUuid = requireDomainUuid(hctx.args);
-      await requireAuth(hctx.ctx).apiClient.deleteOrgDomain(requireOrgId(hctx.args), domainUuid);
+      await requireAuth(hctx.ctx).apiClient.deleteOrgDomain(
+        requireOrgRef(hctx.args),
+        domainUuid
+      );
       process.stdout.write(`Deleted org domain ${domainUuid}
 `);
     }
@@ -25402,13 +26000,13 @@ var domainCommands = [
     description: "Enable email DNS records on a verified organization domain",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       "yarn gr org domains email enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.enableOrgDomainEmail(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25418,11 +26016,11 @@ var domainCommands = [
     path: ["org", "domains", "email", "get"],
     description: "Get email DNS setup and status for an organization domain",
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: ["yarn gr org domains email get --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID"],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.getOrgDomainEmail(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25442,7 +26040,7 @@ var domainCommands = [
     mutates: true,
     requiresWorkspace: false,
     args: [
-      ORG_UUID_ARG,
+      ORG_UUID_ARG2,
       DOMAIN_UUID_ARG,
       {
         name: "confirm",
@@ -25456,7 +26054,7 @@ var domainCommands = [
     handler: async (hctx) => {
       const domainUuid = requireDomainUuid(hctx.args);
       const result3 = await requireAuth(hctx.ctx).apiClient.disableOrgDomainEmail(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         domainUuid,
         hctx.args.confirm === true
       );
@@ -25479,13 +26077,13 @@ var domainCommands = [
     description: "Enable custom site CNAME verification on a verified organization domain",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: [
       "yarn gr org domains site enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
     ],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.enableOrgDomainSite(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25495,11 +26093,11 @@ var domainCommands = [
     path: ["org", "domains", "site", "get"],
     description: "Get custom site CNAME setup and status for an organization domain",
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
     examples: ["yarn gr org domains site get --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID"],
     handler: async (hctx) => {
       const result3 = await requireAuth(hctx.ctx).apiClient.getOrgDomainSite(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         requireDomainUuid(hctx.args)
       );
       outputSingle(result3, hctx.ctx);
@@ -25519,7 +26117,7 @@ var domainCommands = [
     mutates: true,
     requiresWorkspace: false,
     args: [
-      ORG_UUID_ARG,
+      ORG_UUID_ARG2,
       DOMAIN_UUID_ARG,
       {
         name: "confirm",
@@ -25533,7 +26131,7 @@ var domainCommands = [
     handler: async (hctx) => {
       const domainUuid = requireDomainUuid(hctx.args);
       const result3 = await requireAuth(hctx.ctx).apiClient.disableOrgDomainSite(
-        requireOrgId(hctx.args),
+        requireOrgRef(hctx.args),
         domainUuid,
         hctx.args.confirm === true
       );
@@ -25568,6 +26166,229 @@ var orgDomain = {
   ]
 };
 
+// src/domains/org-legal-entities.ts
+init_context();
+init_errors();
+init_output();
+var LEGAL_ENTITY_COLUMNS = [
+  { header: "UUID", getValue: (e) => e.uuid ?? "" },
+  { header: "LEGAL NAME", getValue: (e) => e.legalName ?? "" },
+  { header: "PRIMARY", getValue: (e) => e.isPrimary ? "yes" : "" },
+  { header: "ID TYPE", getValue: (e) => e.registrationIdentifierType ?? "" },
+  { header: "PROFILE SID", getValue: (e) => e.customerProfileSid ?? "" },
+  // The CACHED status hint. `org business-profile get` reads Twilio live.
+  { header: "PROFILE STATUS (cached)", getValue: (e) => e.customerProfileStatus ?? "" }
+];
+var LEGAL_ENTITY_UUID_ARG = {
+  name: "legal-entity-uuid",
+  aliases: ["legal-entity", "entity-uuid"],
+  description: "Legal entity UUID (omit to use the org primary entity)",
+  required: false
+};
+var TRUST_PRODUCT_ENTITY_UUID_ARG = { ...LEGAL_ENTITY_UUID_ARG, required: true };
+var TRUST_PRODUCT_COLUMNS = [
+  { header: "PRODUCT", getValue: (p) => p.product ?? "" },
+  { header: "STATUS", getValue: (p) => p.status ?? "(none)" },
+  { header: "TRUST PRODUCT SID", getValue: (p) => p.trustProductSid ?? "(none)" },
+  // CNAM only; blank for the other two rather than absent, so the column lines up.
+  { header: "DISPLAY NAME", getValue: (p) => p.displayName ?? "" }
+];
+function optionalEntityUuid(args) {
+  const val = args["legal-entity-uuid"] ?? args["legal-entity"] ?? args["entity-uuid"];
+  return typeof val === "string" && val ? val : void 0;
+}
+function requireEntityUuid(args) {
+  const val = optionalEntityUuid(args);
+  if (!val) {
+    throw new CLIError("Missing required argument: --legal-entity-uuid");
+  }
+  return val;
+}
+function requireBody(data) {
+  if (data && typeof data === "object" && !Array.isArray(data)) return data;
+  throw new CLIError(
+    `Missing or invalid --data. Pass a JSON object, e.g. --data '{"key":"value"}' (or --file body.json). Arrays are not accepted.`
+  );
+}
+function submittability(profile) {
+  if (profile.evaluationStatus === "compliant") return "yes";
+  if (profile.evaluationStatus === "noncompliant") return "no (noncompliant)";
+  if (profile.status && profile.status !== "draft") return `n/a (${profile.status})`;
+  return "no (never evaluated)";
+}
+var commands2 = [
+  {
+    path: ["org", "legal-entities", "list"],
+    description: "List an org's legal entities (one Twilio Customer Profile each). Requires org admin \u2014 staff join via `gr admin organizations join --role platform_support`.",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG],
+    examples: ["yarn gr org legal-entities list --org-uuid $ORG_UUID"],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.listLegalEntities(
+        requireOrgRef(hctx.args)
+      );
+      outputData(result3.legalEntities ?? [], hctx.ctx, LEGAL_ENTITY_COLUMNS);
+    }
+  },
+  {
+    path: ["org", "legal-entities", "get"],
+    description: "Get one legal entity",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, { ...LEGAL_ENTITY_UUID_ARG, required: true }],
+    examples: [
+      "yarn gr org legal-entities get --org-uuid $ORG_UUID --legal-entity-uuid $ENTITY_UUID"
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.getLegalEntity(
+        requireOrgRef(hctx.args),
+        requireEntityUuid(hctx.args)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "legal-entities", "create"],
+    description: "Create a legal entity (its business profile is filled in separately)",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG],
+    examples: [
+      `yarn gr org legal-entities create --org-uuid $ORG_UUID --data '{"legalName":"Acme Health"}' --allow-write`
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.createLegalEntity(
+        requireOrgRef(hctx.args),
+        requireBody(hctx.data)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "business-profile", "get"],
+    description: "Read a legal entity's business profile LIVE from Twilio. SUBMITTABLE is derived from evaluationStatus, not status.",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, LEGAL_ENTITY_UUID_ARG],
+    examples: ["yarn gr org business-profile get --org-uuid $ORG_UUID"],
+    handler: async (hctx) => {
+      const profile = await requireAuth(hctx.ctx).apiClient.getBusinessProfile(
+        requireOrgRef(hctx.args),
+        optionalEntityUuid(hctx.args)
+      );
+      outputSingle(
+        hctx.ctx.outputFormat === "json" ? profile : {
+          status: profile.status ?? "(none)",
+          evaluationStatus: profile.evaluationStatus ?? "(not evaluated)",
+          SUBMITTABLE: submittability(profile),
+          customerProfileSid: profile.customerProfileSid ?? "(none)",
+          legalName: profile.businessInfo?.legalName ?? "(missing)",
+          authorizedReps: (profile.authorizedReps ?? []).length,
+          hasAddress: profile.address ? "yes" : "no",
+          failureReasons: (profile.failureReasons ?? []).join("; ") || "(none)",
+          profileRecoveryFailed: profile.profileRecoveryFailed ? "YES" : "no"
+        },
+        hctx.ctx
+      );
+    }
+  },
+  {
+    path: ["org", "business-profile", "update"],
+    description: "Upsert the business profile (idempotent via cached SIDs). Returns the fresh compliance evaluation.",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, LEGAL_ENTITY_UUID_ARG],
+    examples: [
+      "yarn gr org business-profile update --org-uuid $ORG_UUID --file profile.json --allow-write"
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.updateBusinessProfile(
+        requireOrgRef(hctx.args),
+        requireBody(hctx.data),
+        optionalEntityUuid(hctx.args)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "business-profile", "submit"],
+    description: "Submit the business profile to Twilio for review. Free \u2014 the paid step is brand registration, which is separate. 412 if not currently compliant, 409 if a review is already in flight.",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, LEGAL_ENTITY_UUID_ARG],
+    examples: ["yarn gr org business-profile submit --org-uuid $ORG_UUID --allow-write"],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.submitBusinessProfile(
+        requireOrgRef(hctx.args),
+        optionalEntityUuid(hctx.args)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "business-profile", "cancel"],
+    description: "Cancel an in-flight Twilio review, resetting the profile to draft so it can be edited and resubmitted",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, LEGAL_ENTITY_UUID_ARG],
+    examples: ["yarn gr org business-profile cancel --org-uuid $ORG_UUID --allow-write"],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.cancelBusinessProfile(
+        requireOrgRef(hctx.args),
+        optionalEntityUuid(hctx.args)
+      );
+      outputSingle(result3, hctx.ctx);
+    }
+  },
+  {
+    path: ["org", "trust-products", "list"],
+    description: "Read an entity's CACHED voice trust product state (CNAM / SHAKEN-STIR / Voice Integrity) from trust_hub_state. No Twilio calls \u2014 run `sync` to reconcile.",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, TRUST_PRODUCT_ENTITY_UUID_ARG],
+    examples: [
+      "yarn gr org trust-products list --org-uuid $ORG_UUID --legal-entity-uuid $ENTITY_UUID --env prod"
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.getVoiceTrustProducts(
+        requireOrgRef(hctx.args),
+        requireEntityUuid(hctx.args)
+      );
+      outputData(result3.products, hctx.ctx, TRUST_PRODUCT_COLUMNS);
+    }
+  },
+  {
+    path: ["org", "trust-products", "sync"],
+    description: "Reconcile voice trust products against Twilio: claim products staged outside the app and refresh non-terminal statuses. This is the prerequisite for `admin phone-numbers migrate`, whose preflight reads the cached state. 409 if another Trust Hub operation holds the org lock \u2014 retry shortly.",
+    // Writes trust_hub_state and calls Twilio. Read-only in business terms
+    // (it discovers, it does not create or submit), but it mutates our cache,
+    // so it takes --allow-write like every other state-changing verb.
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG, TRUST_PRODUCT_ENTITY_UUID_ARG],
+    examples: [
+      "yarn gr org trust-products sync --org-uuid $ORG_UUID --legal-entity-uuid $ENTITY_UUID --env prod --allow-write"
+    ],
+    handler: async (hctx) => {
+      const result3 = await requireAuth(hctx.ctx).apiClient.syncVoiceTrustProducts(
+        requireOrgRef(hctx.args),
+        requireEntityUuid(hctx.args)
+      );
+      if (hctx.ctx.outputFormat !== "table") {
+        outputSingle(result3, hctx.ctx);
+        return;
+      }
+      const discovered = result3.discovered ?? [];
+      console.log(
+        discovered.length > 0 ? `Discovered ${discovered.length} product(s): ${discovered.join(", ")}` : "No new products discovered \u2014 already up to date."
+      );
+      outputData(result3.products, hctx.ctx, TRUST_PRODUCT_COLUMNS);
+    }
+  }
+];
+var orgLegalEntitiesDomain = {
+  name: "org",
+  description: "Legal entities and business profiles (Twilio Customer Profiles)",
+  commands: commands2
+};
+
 // src/domains/org-phone-numbers.ts
 init_dist();
 init_context();
@@ -25592,14 +26413,7 @@ var AVAILABLE_PHONE_COLUMNS = [
   { header: "Region", getValue: (p) => p.region ?? "" },
   { header: "Type", getValue: (p) => p.phoneNumberType ?? "" }
 ];
-function requireOrgUuid(args) {
-  const val = args["org-uuid"] ?? args["org"];
-  if (typeof val !== "string" || !val) {
-    throw new CLIError("Missing required argument: --org-uuid");
-  }
-  return val;
-}
-var commands2 = [
+var commands3 = [
   {
     path: ["org", "phone-numbers", "list"],
     description: "List all phone numbers owned by an organization",
@@ -25609,7 +26423,7 @@ var commands2 = [
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const result3 = await getOrgApi(hctx).listPhoneNumbers(orgUuid);
       outputData(result3, hctx.ctx, PROVIDER_PHONE_COLUMNS);
     }
@@ -25632,7 +26446,7 @@ var commands2 = [
     requiresWorkspace: false,
     columns: AVAILABLE_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const result3 = await getOrgApi(hctx).searchPhoneNumbers(orgUuid, {
         country: hctx.args.country ?? "US",
         numberType: hctx.args["number-type"] ?? "local",
@@ -25668,7 +26482,7 @@ var commands2 = [
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const phoneNumber = hctx.args["phone-number"];
       if (!phoneNumber) throw new CLIError("Missing required argument: --phone-number");
       const numberType = hctx.args["number-type"] ?? "local";
@@ -25697,7 +26511,7 @@ var commands2 = [
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const providerPhoneUuid = hctx.args["provider-phone-uuid"];
       const workspaceUuid = hctx.args["workspace-uuid"];
       if (!providerPhoneUuid)
@@ -25729,7 +26543,7 @@ Create a workspace phone linked to this provider number (sets Twilio webhooks):
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const providerPhoneUuid = hctx.args["provider-phone-uuid"];
       const newWorkspaceUuid = hctx.args["new-workspace-uuid"];
       if (!providerPhoneUuid)
@@ -25755,7 +26569,7 @@ Create a workspace phone linked to this provider number (sets Twilio webhooks):
     requiresWorkspace: false,
     columns: PROVIDER_PHONE_COLUMNS,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const providerPhoneUuid = hctx.args["provider-phone-uuid"];
       if (!providerPhoneUuid)
         throw new CLIError("Missing required argument: --provider-phone-uuid");
@@ -25773,7 +26587,7 @@ Create a workspace phone linked to this provider number (sets Twilio webhooks):
     ],
     requiresWorkspace: false,
     handler: async (hctx) => {
-      const orgUuid = requireOrgUuid(hctx.args);
+      const orgUuid = requireOrgRef(hctx.args);
       const providerPhoneUuid = hctx.args["provider-phone-uuid"];
       if (!providerPhoneUuid)
         throw new CLIError("Missing required argument: --provider-phone-uuid");
@@ -25785,7 +26599,7 @@ Create a workspace phone linked to this provider number (sets Twilio webhooks):
 var orgPhoneNumbersDomain = {
   name: "org",
   description: "Organization management",
-  commands: commands2
+  commands: commands3
 };
 
 // src/domains/phone-numbers.ts
@@ -28700,7 +29514,7 @@ function requireCallerRole(args, flag) {
   }
   return role;
 }
-var COLUMNS24 = [
+var COLUMNS25 = [
   COL.id(),
   { header: "NUMBER", getValue: (item) => item.phoneNumber ?? item.number ?? "" },
   { header: "LABEL", getValue: (item) => item.label ?? item.name ?? "" },
@@ -28727,7 +29541,7 @@ var phoneNumbersDomain = {
       entityName: "phone number",
       listMethod: "getPhoneNumbers",
       archiveMethod: "archivePhoneNumber",
-      columns: COLUMNS24
+      columns: COLUMNS25
     }),
     {
       path: ["phone-numbers", "get"],
@@ -28777,7 +29591,7 @@ ${PHONE_NUMBER_FIELD_REFERENCE}`,
           );
           const record = asPhoneRecord(result3);
           const warnings = collectPhoneNumberWarnings(record);
-          outputData([record], ctx, COLUMNS24);
+          outputData([record], ctx, COLUMNS25);
           if (warnings.length > 0) {
             process.stderr.write("\nWarnings after create:\n");
             for (const w of warnings) {
@@ -28809,7 +29623,7 @@ ${PHONE_NUMBER_FIELD_REFERENCE}`,
             id,
             data
           );
-          outputData([result3], ctx, COLUMNS24);
+          outputData([result3], ctx, COLUMNS25);
         } catch (err) {
           return enrichPhoneNumberApiError(err);
         }
@@ -29097,7 +29911,7 @@ ${formatRoutingSimulation(sim, phone)}
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getAvailablePhoneNumbers(workspace);
-        outputData(result3, ctx, COLUMNS24);
+        outputData(result3, ctx, COLUMNS25);
       }
     },
     {
@@ -29122,7 +29936,7 @@ ${formatRoutingSimulation(sim, phone)}
         const id = requireNumberFrom(args, "phone-number-id", "id");
         const providerPhoneUuid = requireString(args, "provider-phone-uuid");
         const result3 = await auth.apiClient.linkPhoneNumber(workspace, id, providerPhoneUuid);
-        outputData([result3], auth, COLUMNS24);
+        outputData([result3], auth, COLUMNS25);
       }
     },
     {
@@ -29135,7 +29949,7 @@ ${formatRoutingSimulation(sim, phone)}
           workspace,
           data
         );
-        outputData([result3], ctx, COLUMNS24);
+        outputData([result3], ctx, COLUMNS25);
       }
     },
     {
@@ -29287,7 +30101,7 @@ function normalizePronunciationUpdatePayload(data) {
 }
 
 // src/domains/pronunciations.ts
-var COLUMNS25 = [
+var COLUMNS26 = [
   COL.id(),
   { header: "TERM", getValue: (item) => item.term ?? "" },
   { header: "RESPELLING", getValue: (item) => item.respelling ?? "" },
@@ -29309,7 +30123,7 @@ var pronunciationsDomain = {
         const auth = requireAuth(ctx);
         const orgUuid = await resolveOrgUuidFromWorkspace(auth.apiClient, workspace);
         const result3 = await auth.apiClient.getPronunciationEntries(orgUuid);
-        outputData(result3, ctx, COLUMNS25);
+        outputData(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29323,7 +30137,7 @@ var pronunciationsDomain = {
         const orgUuid = await resolveOrgUuidFromWorkspace(auth.apiClient, workspace);
         const payload = normalizePronunciationCreatePayload(data);
         const result3 = await auth.apiClient.createPronunciationEntry(orgUuid, payload);
-        outputSingle(result3, ctx, COLUMNS25);
+        outputSingle(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29341,7 +30155,7 @@ var pronunciationsDomain = {
           requireNumber(args, "id"),
           payload
         );
-        outputSingle(result3, ctx, COLUMNS25);
+        outputSingle(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29365,7 +30179,7 @@ var pronunciationsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getMyPronunciations();
-        outputData(result3, ctx, COLUMNS25);
+        outputData(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29376,7 +30190,7 @@ var pronunciationsDomain = {
       handler: async ({ ctx, data }) => {
         const payload = normalizePronunciationCreatePayload(data);
         const result3 = await requireAuth(ctx).apiClient.createMyPronunciation(payload);
-        outputSingle(result3, ctx, COLUMNS25);
+        outputSingle(result3, ctx, COLUMNS26);
       }
     },
     {
@@ -29683,7 +30497,7 @@ ${ROUTINE_FIELD_REFERENCE}`,
 // src/domains/subscriptions.ts
 init_output();
 init_context();
-var COLUMNS26 = [
+var COLUMNS27 = [
   COL.id(),
   COL.status(),
   { header: "PLAN", getValue: (item) => item.planName ?? item.plan ?? "" },
@@ -29699,7 +30513,7 @@ var subscriptionsDomain = {
       requiresWorkspace: false,
       handler: async ({ ctx }) => {
         const result3 = await requireAuth(ctx).apiClient.getSubscriptions();
-        outputData(result3, ctx, COLUMNS26);
+        outputData(result3, ctx, COLUMNS27);
       }
     },
     {
@@ -29708,7 +30522,7 @@ var subscriptionsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getWorkspaceSubscriptions(workspace);
-        outputData(result3, ctx, COLUMNS26);
+        outputData(result3, ctx, COLUMNS27);
       }
     },
     {
@@ -29721,7 +30535,7 @@ var subscriptionsDomain = {
         const result3 = await requireAuth(ctx).apiClient.cancelSubscription(
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS26);
+        outputSingle(result3, ctx, COLUMNS27);
       }
     },
     {
@@ -29733,7 +30547,7 @@ var subscriptionsDomain = {
         const result3 = await requireAuth(ctx).apiClient.reactivateSubscription(
           requireNumber(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS26);
+        outputSingle(result3, ctx, COLUMNS27);
       }
     },
     {
@@ -29747,7 +30561,7 @@ var subscriptionsDomain = {
           requireNumber(args, "id"),
           data
         );
-        outputSingle(result3, ctx, COLUMNS26);
+        outputSingle(result3, ctx, COLUMNS27);
       }
     }
   ]
@@ -30006,7 +30820,7 @@ var supportDomain = {
 
 // src/domains/supervisors.ts
 init_output();
-var COLUMNS27 = [
+var COLUMNS28 = [
   COL.id(),
   COL.name(),
   { header: "TYPE", getValue: (item) => item.type ?? "" },
@@ -30024,7 +30838,7 @@ var supervisorsDomain = {
       createMethod: "createSupervisor",
       updateMethod: "updateSupervisor",
       deleteMethod: "deleteSupervisor",
-      columns: COLUMNS27
+      columns: COLUMNS28
     })
   ]
 };
@@ -30420,7 +31234,7 @@ var widgetDomainsDomain = {
 // src/domains/integrations/app-connections.ts
 init_output();
 init_context();
-var COLUMNS28 = [
+var COLUMNS29 = [
   COL.id(),
   COL.name(),
   { header: "TYPE", getValue: (item) => item.type ?? "" },
@@ -30461,7 +31275,7 @@ var appConnectionsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.listAvailableAppConnections(workspace);
-        outputData(result3, ctx, COLUMNS28);
+        outputData(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30470,7 +31284,7 @@ var appConnectionsDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.listAppConnections(workspace);
-        outputData(result3, ctx, COLUMNS28);
+        outputData(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30494,7 +31308,7 @@ var appConnectionsDomain = {
         const result3 = await requireAuth(ctx).apiClient.enablePlatformApp(workspace, {
           slug: requireString(args, "slug")
         });
-        outputSingle(result3, ctx, COLUMNS28);
+        outputSingle(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30507,7 +31321,7 @@ var appConnectionsDomain = {
           workspace,
           requireString(args, "id")
         );
-        outputSingle(result3, ctx, COLUMNS28);
+        outputSingle(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30522,7 +31336,7 @@ var appConnectionsDomain = {
           requireString(args, "id"),
           data
         );
-        outputSingle(result3, ctx, COLUMNS28);
+        outputSingle(result3, ctx, COLUMNS29);
       }
     },
     {
@@ -30869,7 +31683,7 @@ var confluenceDomain = {
 // src/domains/integrations/discord-bots.ts
 init_output();
 init_context();
-var COLUMNS29 = [COL.id(), COL.name(), COL.status()];
+var COLUMNS30 = [COL.id(), COL.name(), COL.status()];
 var discordBotsDomain = {
   name: "discord-bots",
   description: "Manage Discord bot integrations",
@@ -30882,7 +31696,7 @@ var discordBotsDomain = {
       createMethod: "createDiscordBot",
       updateMethod: "updateDiscordBot",
       deleteMethod: "deleteDiscordBot",
-      columns: COLUMNS29,
+      columns: COLUMNS30,
       paginationSupport: "full"
     }),
     {
@@ -30944,7 +31758,7 @@ var discordBotsDomain = {
 // src/domains/integrations/fhir-connections.ts
 init_output();
 init_context();
-var COLUMNS30 = [
+var COLUMNS31 = [
   COL.id(),
   COL.name(),
   { header: "URL", getValue: (item) => item.baseUrl ?? "" },
@@ -30962,7 +31776,7 @@ var fhirConnectionsDomain = {
       createMethod: "createFhirConnection",
       updateMethod: "updateFhirConnection",
       deleteMethod: "deleteFhirConnection",
-      columns: COLUMNS30,
+      columns: COLUMNS31,
       paginationSupport: "full"
     }),
     {
@@ -30985,7 +31799,7 @@ var fhirConnectionsDomain = {
 init_context();
 init_errors();
 init_output();
-var COLUMNS31 = [
+var COLUMNS32 = [
   { header: "CONFIGURED", getValue: (i) => String(i.configured ?? false) },
   { header: "ENABLED", getValue: (i) => String(i.enabled ?? false) },
   { header: "HAS_KEY", getValue: (i) => String(i.hasApiKey ?? false) },
@@ -31014,7 +31828,7 @@ var patientSyncDomain = {
           workspace,
           data
         );
-        outputSingle(result3, ctx, COLUMNS31);
+        outputSingle(result3, ctx, COLUMNS32);
       }
     },
     {
@@ -31023,7 +31837,7 @@ var patientSyncDomain = {
       requiresWorkspace: true,
       handler: async ({ ctx, workspace }) => {
         const result3 = await requireAuth(ctx).apiClient.getPatientSyncStatus(workspace);
-        outputSingle(result3, ctx, COLUMNS31);
+        outputSingle(result3, ctx, COLUMNS32);
       }
     },
     {
@@ -32091,7 +32905,7 @@ var salesforceDomain = {
 init_errors();
 init_output();
 init_context();
-var COLUMNS32 = [COL.id(), COL.name(), COL.status()];
+var COLUMNS33 = [COL.id(), COL.name(), COL.status()];
 function addSlackUrls(data, apiUrl, workspaceUuid) {
   const base = `${apiUrl}/api/v2/w/${workspaceUuid}/app-connections/slack`;
   return {
@@ -32114,7 +32928,7 @@ var slackAppsDomain = {
       entityName: "Slack app",
       listMethod: "getSlackApps",
       deleteMethod: "deleteSlackApp",
-      columns: COLUMNS32,
+      columns: COLUMNS33,
       paginationSupport: "full"
     }),
     {
@@ -32203,7 +33017,7 @@ var slackAppsDomain = {
 init_errors();
 init_output();
 init_context();
-var COLUMNS33 = [COL.id(), COL.name(), COL.status()];
+var COLUMNS34 = [COL.id(), COL.name(), COL.status()];
 function addTeamsUrls(data, apiUrl, workspaceUuid) {
   const base = `${apiUrl}/api/v2/w/${workspaceUuid}/app-connections/teams`;
   return {
@@ -32224,7 +33038,7 @@ var teamsAppsDomain = {
       entityName: "Teams app",
       listMethod: "getTeamsApps",
       deleteMethod: "deleteTeamsApp",
-      columns: COLUMNS33,
+      columns: COLUMNS34,
       paginationSupport: "full"
     }),
     {
@@ -32330,6 +33144,7 @@ function registerPublicDomains(registry) {
   registry.register(qualificationsDomain);
   registry.register(queriesDomain);
   registry.register(personasDomain);
+  registry.register(metricsDomain);
   registry.register(journeysDomain);
   registry.register(abilitiesDomain);
   registry.register(phoneNumbersDomain);
@@ -32337,10 +33152,10 @@ function registerPublicDomains(registry) {
   registry.register(inboxesDomain);
   registry.register(operatorGroupsDomain);
   registry.register(accessGrantsDomain);
+  registry.register(interventionRequestsDomain);
   registry.register(notificationRulesDomain);
   registry.register(supervisorsDomain);
   registry.register(promptsDomain);
-  registry.register(milestonesDomain);
   registry.register(customToolkitsDomain);
   registry.register(mcpServersDomain);
   registry.register(apiKeysDomain);
@@ -32352,6 +33167,7 @@ function registerPublicDomains(registry) {
   registry.register(featuresDomain);
   registry.register(pronunciationsDomain);
   registry.register(orgDomain);
+  registry.register(orgLegalEntitiesDomain);
   registry.register(orgPhoneNumbersDomain);
   registry.register(authManageDomain);
   registry.register(appsDomain);
@@ -35460,7 +36276,7 @@ async function authImportDevCommand(ctx, args) {
 
 // src/commands/organizations.ts
 init_output();
-var COLUMNS34 = [
+var COLUMNS35 = [
   { header: "NAME", getValue: (o) => o.organizationName || "", maxWidth: 35 },
   { header: "SLUG", getValue: (o) => o.organizationSlug || "", maxWidth: 25 },
   { header: "UUID", getValue: (o) => o.organizationUuid },
@@ -35468,7 +36284,7 @@ var COLUMNS34 = [
 ];
 async function organizationsListCommand(ctx) {
   const organizations = await ctx.apiClient.getMyOrganizations();
-  outputData(organizations, ctx, COLUMNS34);
+  outputData(organizations, ctx, COLUMNS35);
 }
 
 // src/commands/whoami.ts
@@ -35793,7 +36609,7 @@ init_concierge_api();
 
 // package.json
 var package_default = {
-  version: "0.16.0"};
+  version: "0.17.0"};
 
 // src/gr.ts
 var VERSION = package_default.version;