@gravity-rail/sdk 0.7.4 → 0.10.1

package/dist/{chunk-ANY7WLOD.js → chunk-2BJG4GYM.js}

@@ -1,464 +1,56 @@
-// src/api/base.ts
-function getCookieValue(name) {
-  if (typeof document === "undefined") return void 0;
-  const cookies = document.cookie.split(";");
-  for (const cookie of cookies) {
-    const trimmedCookie = cookie.trim();
-    const eqIndex = trimmedCookie.indexOf("=");
-    if (eqIndex === -1) continue;
-    const cookieName = trimmedCookie.substring(0, eqIndex);
-    const cookieValue = trimmedCookie.substring(eqIndex + 1);
-    if (cookieName === name) {
-      return cookieValue;
-    }
-  }
-  return void 0;
-}
-function isApiValidationError(value) {
-  if (!value || typeof value !== "object") return false;
-  const v = value;
-  return typeof v.field === "string" && typeof v.kind === "string" && typeof v.message === "string";
-}
-var ApiError = class extends Error {
-  statusCode;
-  /** Legacy string-array errors — kept for non-validation callers. */
-  errors;
-  /**
-   * Structured workflow-expression validation errors (CEL/Jinja).
-   * Populated when the backend returns a WorkflowValidationErrorResponse.
-   */
-  validationErrors;
-  constructor(message, statusCode, errors, validationErrors) {
-    super(message);
-    this.statusCode = statusCode;
-    this.errors = errors;
-    this.validationErrors = validationErrors;
-  }
-};
-function requiresStepUpAuth(wwwAuthenticate) {
-  if (!wwwAuthenticate) return false;
-  return wwwAuthenticate.includes('error="insufficient_user_authentication"');
-}
-function parseOrgAuthChallenge(wwwAuthenticate) {
-  if (!wwwAuthenticate) return null;
-  if (!wwwAuthenticate.includes('realm="org"')) return null;
-  const orgUuidMatch = wwwAuthenticate.match(/org_uuid="([^"]+)"/);
-  const cookieNameMatch = wwwAuthenticate.match(/cookie_name="([^"]+)"/);
-  const authUrlMatch = wwwAuthenticate.match(/auth_url="([^"]+)"/);
-  if (!orgUuidMatch?.[1] || !cookieNameMatch?.[1] || !authUrlMatch?.[1]) {
-    console.warn("Invalid org auth challenge header: missing required fields");
-    return null;
-  }
-  return {
-    orgUuid: orgUuidMatch[1],
-    cookieName: cookieNameMatch[1],
-    authUrl: authUrlMatch[1]
-  };
-}
-var BaseApiClient = class {
-  baseUrl;
-  apiKey;
-  isCrossDomain;
-  fetchFunction;
-  enhancedAuthHandler;
-  enhancedAuthInProgress = null;
-  orgAuthHandler;
-  orgAuthInProgress = null;
-  actingMemberUuid;
-  orgToken;
-  /**
-   * The org_uuid that issued the current orgToken. Tracked so we can detect
-   * a 401 challenge from a *different* org and re-fire the handler — the
-   * orgToken is an opaque JWE we cannot decrypt client-side, so without this
-   * the original guard `!this.orgToken` would prevent re-auth across orgs and
-   * surface as a silent 401 in multi-org CLI workflows.
-   */
-  orgTokenOrgUuid;
-  constructor(apiKey, baseUrl, customFetch) {
-    this.baseUrl = baseUrl;
-    this.apiKey = apiKey;
-    this.fetchFunction = customFetch || (typeof window !== "undefined" ? fetch.bind(window) : fetch);
-    const apiUrlParsed = new URL(baseUrl);
-    const currentOrigin = typeof window !== "undefined" ? window.location.origin : "";
-    this.isCrossDomain = currentOrigin !== "" && currentOrigin !== apiUrlParsed.origin;
-  }
-  /**
-   * Set the handler for enhanced authentication requirements (RFC 9470 Step-Up Auth).
-   * This handler is called when a 401 response includes WWW-Authenticate header
-   * with error="insufficient_user_authentication".
-   */
-  setEnhancedAuthHandler(handler) {
-    this.enhancedAuthHandler = handler;
-  }
-  /**
-   * Set the handler for organization authentication requirements.
-   * This handler is called when a 401 response includes WWW-Authenticate header
-   * with realm="org". The handler should redirect the user to complete org auth.
-   */
-  setOrgAuthHandler(handler) {
-    this.orgAuthHandler = handler;
-  }
+import {
+  BaseApiClient
+} from "./chunk-FSSXKQR5.js";
+
+// src/api/abilities.ts
+var AbilitiesApi = class extends BaseApiClient {
   /**
-   * Update the API key (used after successful re-authentication).
+   * List available ability types from the registry.
+   * Pass includeSystem to also return auto-injected system abilities.
    */
-  updateApiKey(newApiKey) {
-    this.apiKey = newApiKey;
+  async getAbilityTypes(wid, options = {}) {
+    const params = new URLSearchParams();
+    if (options.includeSystem) params.append("includeSystem", "true");
+    const qs = params.toString() ? `?${params.toString()}` : "";
+    return this.fetch(`w/${wid}/abilities/types${qs}`);
   }
-  /**
-   * Set the acting member UUID for member identity switching.
-   * When set, all API requests will include the X-Acting-Member header.
-   * The backend will validate that the authenticated account owns this member
-   * and use it as the effective identity for the request.
-   */
-  setActingMember(memberUuid) {
-    this.actingMemberUuid = memberUuid;
+  /** Get the full spec for a single ability type by slug. */
+  async getAbilityType(wid, slug) {
+    return this.fetch(
+      `w/${wid}/abilities/types/${encodeURIComponent(slug)}`
+    );
   }
   /**
-   * Get the current acting member UUID.
+   * List configured ability instances for a workflow or task scope.
+   * Exactly one of workflowId / taskId must be provided.
    */
-  getActingMember() {
-    return this.actingMemberUuid;
-  }
-  /**
-   * Set the org token for cross-domain requests.
-   * When set, all API requests will include the X-Org-Token header,
-   * allowing org-level SSO verification without cookies.
-   *
-   * `orgUuid` is the org that issued the token; passing it lets the 401
-   * handler detect a stale token when a subsequent request targets a
-   * different org and re-fire the org-auth handler instead of silently
-   * 401-ing. Callers without that context (legacy / unknown) may omit it.
-   */
-  setOrgToken(token, orgUuid) {
-    this.orgToken = token;
-    this.orgTokenOrgUuid = token ? orgUuid : void 0;
-  }
-  async fetch(endpoint, options) {
-    try {
-      const headers = new Headers({
-        // Don't set Content-Type for FormData — the browser must set it
-        // with the multipart boundary automatically.
-        ...options?.body instanceof FormData ? {} : { "Content-Type": "application/json" },
-        ...options?.headers || {}
-      });
-      if (this.apiKey) {
-        headers.set("Authorization", `Bearer ${this.apiKey}`);
-      } else if (this.isCrossDomain) {
-        const requestToken = getCookieValue("requestToken");
-        if (requestToken) {
-          headers.set("Authorization", `Bearer ${requestToken}`);
-        }
-      }
-      if (this.actingMemberUuid) {
-        headers.set("X-Acting-Member", this.actingMemberUuid);
-      }
-      if (this.orgToken) {
-        headers.set("X-Org-Token", this.orgToken);
-      }
-      const fullUrl = `${this.baseUrl}/api/v2/${endpoint}`;
-      const response = await this.fetchFunction(fullUrl, {
-        ...options,
-        ...this.apiKey ? {} : { credentials: "include" },
-        ...this.isCrossDomain ? { mode: "cors" } : {},
-        headers
-      });
-      if (!response.ok) {
-        if (response.status === 401 && requiresStepUpAuth(response.headers.get("WWW-Authenticate")) && this.enhancedAuthHandler) {
-          if (this.enhancedAuthInProgress) {
-            await this.enhancedAuthInProgress;
-          } else {
-            this.enhancedAuthInProgress = this.enhancedAuthHandler();
-            try {
-              const newToken = await this.enhancedAuthInProgress;
-              this.apiKey = newToken;
-            } finally {
-              this.enhancedAuthInProgress = null;
-            }
-          }
-          try {
-            return await this.fetch(endpoint, options);
-          } catch (retryError) {
-            this.orgToken = void 0;
-            this.orgTokenOrgUuid = void 0;
-            throw retryError;
-          }
-        }
-        if (response.status === 401) {
-          const orgAuthInfo = parseOrgAuthChallenge(response.headers.get("WWW-Authenticate"));
-          if (orgAuthInfo && this.orgToken && this.orgTokenOrgUuid && this.orgTokenOrgUuid !== orgAuthInfo.orgUuid) {
-            this.orgToken = void 0;
-            this.orgTokenOrgUuid = void 0;
-          }
-          if (orgAuthInfo && !this.orgToken) {
-            const requestCookieName = orgAuthInfo.cookieName.replace(
-              /^orgToken/,
-              "requestOrgToken"
-            );
-            const cachedOrgToken = getCookieValue(requestCookieName);
-            if (cachedOrgToken) {
-              this.orgToken = cachedOrgToken;
-              this.orgTokenOrgUuid = orgAuthInfo.orgUuid;
-              try {
-                return await this.fetch(endpoint, options);
-              } catch (retryError) {
-                this.orgToken = void 0;
-                this.orgTokenOrgUuid = void 0;
-                throw retryError;
-              }
-            }
-            if (this.orgAuthHandler) {
-              if (!this.orgAuthInProgress) {
-                const handler = this.orgAuthHandler;
-                this.orgAuthInProgress = (async () => {
-                  try {
-                    await handler(orgAuthInfo);
-                  } finally {
-                    this.orgAuthInProgress = null;
-                  }
-                })();
-              }
-              await this.orgAuthInProgress;
-              const postHandlerToken = getCookieValue(requestCookieName) ?? this.orgToken;
-              if (!postHandlerToken) {
-                throw new ApiError(
-                  "Organization authentication did not issue a token",
-                  401
-                );
-              }
-              this.orgToken = postHandlerToken;
-              this.orgTokenOrgUuid = orgAuthInfo.orgUuid;
-              try {
-                return await this.fetch(endpoint, options);
-              } catch (retryError) {
-                this.orgToken = void 0;
-                this.orgTokenOrgUuid = void 0;
-                throw retryError;
-              }
-            }
-          }
-        }
-        const errorData = await response.json().catch(() => ({}));
-        if (response.status === 401 && endpoint === "account") {
-          throw new Error("unauthorized");
-        }
-        if (Array.isArray(errorData.detail)) {
-          const formattedErrors = errorData.detail.map((error) => {
-            const location = error.loc.join(" > ");
-            return `${location}: ${error.msg}`;
-          }).join("\n");
-          throw new ApiError(`Validation Error:
-${formattedErrors}`, response.status);
-        }
-        if (errorData.errors && Array.isArray(errorData.errors)) {
-          if (errorData.errors.length > 0 && isApiValidationError(errorData.errors[0])) {
-            const validationErrors = errorData.errors.filter(isApiValidationError);
-            const [first] = validationErrors;
-            if (first) {
-              const extra = validationErrors.length > 1 ? ` (+${validationErrors.length - 1} more)` : "";
-              const readable = `${first.field}: ${first.message}${extra}`;
-              throw new ApiError(
-                readable,
-                response.status,
-                validationErrors.map((e) => `${e.field}: ${e.message}`),
-                validationErrors
-              );
-            }
-          }
-          const stringErrors = errorData.errors.filter(
-            (e) => typeof e === "string"
-          );
-          const details = stringErrors.join("; ");
-          const message = errorData.detail ? `${errorData.detail}: ${details}` : `Validation failed: ${details}`;
-          throw new ApiError(message, response.status, stringErrors);
-        }
-        const structuredError = errorData.detail || errorData;
-        if (structuredError && typeof structuredError === "object" && (structuredError.error === true || structuredError.code)) {
-          const message = structuredError.message || structuredError.code || "Unknown error";
-          const error = new ApiError(message, response.status);
-          error.errorData = structuredError;
-          throw error;
-        }
-        const errorMessage = typeof errorData.detail === "string" ? errorData.detail : errorData.message || response.statusText;
-        throw new ApiError(errorMessage, response.status);
-      }
-      if (response.status === 204) {
-        return void 0;
-      }
-      return response.json();
-    } catch (error) {
-      console.warn(error);
-      throw error;
-    }
+  async listAbilities(wid, options) {
+    const params = new URLSearchParams();
+    if (options.workflowId !== void 0)
+      params.append("workflowId", options.workflowId.toString());
+    if (options.taskId !== void 0)
+      params.append("taskId", options.taskId.toString());
+    return this.fetch(`w/${wid}/abilities?${params}`);
   }
-  async fetchRaw(endpoint, options, allowedErrorStatuses = []) {
-    try {
-      const headers = new Headers({
-        ...options?.headers || {}
-      });
-      if (this.apiKey) {
-        headers.set("Authorization", `Bearer ${this.apiKey}`);
-      } else if (this.isCrossDomain) {
-        const requestToken = getCookieValue("requestToken");
-        if (requestToken) {
-          headers.set("Authorization", `Bearer ${requestToken}`);
-        }
-      }
-      if (this.actingMemberUuid) {
-        headers.set("X-Acting-Member", this.actingMemberUuid);
-      }
-      if (this.orgToken) {
-        headers.set("X-Org-Token", this.orgToken);
-      }
-      const response = await this.fetchFunction(`${this.baseUrl}/api/v2/${endpoint}`, {
-        ...options,
-        ...this.apiKey ? {} : { credentials: "include" },
-        ...this.isCrossDomain ? { mode: "cors" } : {},
-        headers
-      });
-      if (!response.ok) {
-        if (response.status === 401 && requiresStepUpAuth(response.headers.get("WWW-Authenticate")) && this.enhancedAuthHandler) {
-          if (this.enhancedAuthInProgress) {
-            await this.enhancedAuthInProgress;
-          } else {
-            this.enhancedAuthInProgress = this.enhancedAuthHandler();
-            try {
-              const newToken = await this.enhancedAuthInProgress;
-              this.apiKey = newToken;
-            } finally {
-              this.enhancedAuthInProgress = null;
-            }
-          }
-          try {
-            return await this.fetchRaw(endpoint, options, allowedErrorStatuses);
-          } catch (retryError) {
-            this.orgToken = void 0;
-            this.orgTokenOrgUuid = void 0;
-            throw retryError;
-          }
-        }
-        if (response.status === 401) {
-          const orgAuthInfo = parseOrgAuthChallenge(response.headers.get("WWW-Authenticate"));
-          if (orgAuthInfo && this.orgToken && this.orgTokenOrgUuid && this.orgTokenOrgUuid !== orgAuthInfo.orgUuid) {
-            this.orgToken = void 0;
-            this.orgTokenOrgUuid = void 0;
-          }
-          if (orgAuthInfo && !this.orgToken) {
-            const requestCookieName = orgAuthInfo.cookieName.replace(
-              /^orgToken/,
-              "requestOrgToken"
-            );
-            const cachedOrgToken = getCookieValue(requestCookieName);
-            if (cachedOrgToken) {
-              this.orgToken = cachedOrgToken;
-              this.orgTokenOrgUuid = orgAuthInfo.orgUuid;
-              try {
-                return await this.fetchRaw(endpoint, options, allowedErrorStatuses);
-              } catch (retryError) {
-                this.orgToken = void 0;
-                this.orgTokenOrgUuid = void 0;
-                throw retryError;
-              }
-            }
-            if (this.orgAuthHandler) {
-              if (!this.orgAuthInProgress) {
-                const handler = this.orgAuthHandler;
-                this.orgAuthInProgress = (async () => {
-                  try {
-                    await handler(orgAuthInfo);
-                  } finally {
-                    this.orgAuthInProgress = null;
-                  }
-                })();
-              }
-              await this.orgAuthInProgress;
-              const postHandlerToken = getCookieValue(requestCookieName) ?? this.orgToken;
-              if (!postHandlerToken) {
-                throw new ApiError(
-                  "Organization authentication did not issue a token",
-                  401
-                );
-              }
-              this.orgToken = postHandlerToken;
-              this.orgTokenOrgUuid = orgAuthInfo.orgUuid;
-              try {
-                return await this.fetchRaw(endpoint, options, allowedErrorStatuses);
-              } catch (retryError) {
-                this.orgToken = void 0;
-                this.orgTokenOrgUuid = void 0;
-                throw retryError;
-              }
-            }
-          }
-        }
-        if (allowedErrorStatuses.includes(response.status)) {
-          return response;
-        }
-        const errorText = await response.text().catch(() => "");
-        throw new ApiError(errorText || response.statusText, response.status);
-      }
-      return response;
-    } catch (error) {
-      console.warn(error);
-      throw error;
-    }
+  /** Create (enable) a configured ability on a workflow or task scope. */
+  async createAbility(wid, body) {
+    return this.fetch(`w/${wid}/abilities`, {
+      method: "POST",
+      body: JSON.stringify(body)
+    });
   }
-  /**
-   * Fetch from root path (not prefixed with /api/v2/)
-   * Used for OAuth and other non-API endpoints
-   */
-  async fetchRoot(path, options) {
-    try {
-      const headers = new Headers({
-        ...options?.body instanceof FormData ? {} : { "Content-Type": "application/json" },
-        ...options?.headers || {}
-      });
-      if (this.apiKey) {
-        headers.set("Authorization", `Bearer ${this.apiKey}`);
-      } else if (this.isCrossDomain) {
-        const requestToken = getCookieValue("requestToken");
-        if (requestToken) {
-          headers.set("Authorization", `Bearer ${requestToken}`);
-        }
-      }
-      if (this.actingMemberUuid) {
-        headers.set("X-Acting-Member", this.actingMemberUuid);
-      }
-      if (this.orgToken) {
-        headers.set("X-Org-Token", this.orgToken);
-      }
-      const fullUrl = `${this.baseUrl}/${path}`;
-      const response = await this.fetchFunction(fullUrl, {
-        ...options,
-        ...this.apiKey ? {} : { credentials: "include" },
-        ...this.isCrossDomain ? { mode: "cors" } : {},
-        headers
-      });
-      if (!response.ok) {
-        if (response.status === 404) {
-          return null;
-        }
-        const errorData = await response.json().catch(() => ({}));
-        const errorMessage = errorData.detail || errorData.message || response.statusText;
-        throw new ApiError(errorMessage, response.status);
-      }
-      if (response.status === 204) {
-        return void 0;
-      }
-      return response.json();
-    } catch (error) {
-      console.warn(error);
-      throw error;
-    }
+  /** Update a configured ability (configure / enable / disable) by UUID. */
+  async updateAbility(wid, abilityUuid, body) {
+    return this.fetch(`w/${wid}/abilities/${abilityUuid}`, {
+      method: "PATCH",
+      body: JSON.stringify(body)
+    });
   }
-};
-
-// src/api/abilities.ts
-var AbilitiesApi = class extends BaseApiClient {
-  /**
-   * List all available ability types from the registry.
-   */
-  async getAbilityTypes(wid) {
-    return this.fetch(`w/${wid}/abilities/types`);
+  /** Delete a configured ability instance by UUID. */
+  async deleteAbility(wid, abilityUuid) {
+    return this.fetch(`w/${wid}/abilities/${abilityUuid}`, {
+      method: "DELETE"
+    });
   }
 };
 
@@ -621,9 +213,21 @@ var AgentsApi = class extends BaseApiClient {
   async resolveAgentTools(wid, id, options) {
     const params = new URLSearchParams();
     params.append("channel", options.channel);
-    params.append("taskId", options.taskId.toString());
+    if (options.taskId !== void 0) params.append("taskId", options.taskId.toString());
+    if (options.taskUuid !== void 0) params.append("taskUuid", options.taskUuid);
     return this.fetch(`w/${wid}/agents/${id}/resolve-tools?${params}`);
   }
+  /**
+   * List the configured abilities effective for an agent via a task's workflow.
+   * Requires taskId because abilities are scoped to workflows/tasks, not agents.
+   */
+  async listAgentAbilities(wid, id, options) {
+    const params = new URLSearchParams();
+    params.append("taskId", options.taskId.toString());
+    return this.fetch(
+      `w/${wid}/agents/${id}/abilities?${params}`
+    );
+  }
 };
 
 // src/api/ai-models.ts
@@ -681,7 +285,11 @@ var AIModelsApi = class extends BaseApiClient {
     return this.fetch(url);
   }
   /**
-   * Get available speech-to-text models
+   * Get available speech-to-text models.
+   *
+   * Returns the per-shape `STTModelsResponse` so callers see `languages` and
+   * `capabilities` on each model (the chat-shape `AIModelsResponse` it used
+   * to return doesn't include either).
    */
   async getSTTModels(provider) {
     const searchParams = new URLSearchParams();
@@ -1076,15 +684,11 @@ var AuthApi = class extends BaseApiClient {
       body: JSON.stringify({ email, organizationUuid, redirectUrl })
     });
   }
-  /** Validate a magic link token and optional OTP to complete authentication. */
-  async validateMagicLink(token, otp) {
-    const body = { token };
-    if (otp) {
-      body.otp = otp;
-    }
+  /** Validate a magic link token to complete authentication. */
+  async validateMagicLink(token) {
     return await this.fetch(`auth/validate-magic-link`, {
       method: "POST",
-      body: JSON.stringify(body)
+      body: JSON.stringify({ token })
     });
   }
   // ===== EMAIL VERIFICATION METHODS =====
@@ -1590,6 +1194,26 @@ var CallsApi = class extends BaseApiClient {
   async getMessageTiming(wid, chatId) {
     return this.fetch(`w/${wid}/recordings/chat/${chatId}/message-timing`);
   }
+  /** List the recorded audio chunks for a chat (metadata only). */
+  async listChatRecordings(wid, chatId, options = {}) {
+    const params = new URLSearchParams();
+    if (options.role) params.set("role", options.role);
+    return this.fetch(
+      `w/${wid}/recordings/chat/${chatId}${params.toString() ? `?${params.toString()}` : ""}`
+    );
+  }
+  /**
+   * Get a single short-lived presigned URL to download the complete call
+   * recording as one WAV file. The first request assembles + caches the
+   * full-call WAV; later requests reuse it.
+   */
+  async getCallRecordingDownloadUrl(wid, chatId, options = {}) {
+    const params = new URLSearchParams();
+    if (options.expiresIn !== void 0) params.set("expires_in", String(options.expiresIn));
+    return this.fetch(
+      `w/${wid}/recordings/chat/${chatId}/download-url${params.toString() ? `?${params.toString()}` : ""}`
+    );
+  }
 };
 
 // src/api/cel.ts
@@ -1674,6 +1298,17 @@ var ChatsApi = class extends BaseApiClient {
   async getChatTokenUsage(wid, chatId) {
     return this.fetch(`w/${wid}/chats/${chatId}/token-usage`);
   }
+  /** List scheduled callbacks for a chat (newest first). */
+  async getChatCallbacks(wid, chatId) {
+    return this.fetch(`w/${wid}/chats/${chatId}/callbacks`);
+  }
+  /** Cancel a pending scheduled callback on a chat. */
+  async cancelChatCallback(wid, chatId, callbackId) {
+    return this.fetch(
+      `w/${wid}/chats/${chatId}/callbacks/${callbackId}/cancel`,
+      { method: "POST" }
+    );
+  }
   /** Get todo items extracted from a chat. */
   async getChatTodos(wid, chatId) {
     return this.fetch(`w/${wid}/chats/${chatId}/todos`);
@@ -1712,9 +1347,11 @@ var ChatsApi = class extends BaseApiClient {
   }
   /** Create a new chat. */
   async createChat(wid, chat) {
+    const { agentMemberId, ...rest } = chat;
+    const payload = agentMemberId !== void 0 && rest.assistantMemberId === void 0 ? { ...rest, assistantMemberId: agentMemberId } : rest;
     return this.fetch(`w/${wid}/chats`, {
       method: "POST",
-      body: JSON.stringify(chat)
+      body: JSON.stringify(payload)
     });
   }
   /**
@@ -1777,7 +1414,8 @@ var ChatsApi = class extends BaseApiClient {
       }
     );
   }
-  /** List messages in a chat with optional pagination. */
+  /** List messages in a chat with optional pagination.
+   *  ``id`` is the numeric chat id (documented) or the chat uuid (accepted). */
   async getChatMessages(wid, id, limit, offset) {
     const params = new URLSearchParams();
     if (limit) params.append("limit", limit.toString());
@@ -2157,6 +1795,7 @@ var DataTypesApi = class extends BaseApiClient {
   async getDataRecords(wid, dataTypeId, options) {
     const params = new URLSearchParams();
     if (options?.memberId !== void 0) params.append("member_id", options.memberId.toString());
+    if (options?.memberIds?.length) params.append("member_ids", options.memberIds.join(","));
     if (options?.search) params.append("search", options.search);
     if (options?.searchField) params.append("search_field", options.searchField);
     if (options?.page) params.append("page", options.page.toString());
@@ -2499,6 +2138,13 @@ var EventsApi = class extends BaseApiClient {
       method: "DELETE"
     });
   }
+  /** Send a one-off test webhook for an existing webhook event rule. */
+  async testWebhook(wid, id, request) {
+    return this.fetch(`w/${wid}/event-rules/${id}/test-webhook`, {
+      method: "POST",
+      body: JSON.stringify(request)
+    });
+  }
   /** Reorder event rules by specifying the desired rule ID sequence. */
   async reorderEventRules(wid, ruleIds) {
     return this.fetch(`w/${wid}/event-rules/reorder`, {
@@ -3003,6 +2649,18 @@ var FilesApi = class extends BaseApiClient {
   async getFile(wid, id) {
     return this.fetch(`w/${wid}/files/${id}`);
   }
+  /**
+   * Download the given files + folders (folders recursively) as a single ZIP.
+   * Returns the raw archive bytes for the caller to save.
+   */
+  async downloadFilesZip(wid, fileIds, folderIds) {
+    const response = await this.fetchRaw(`w/${wid}/files/download/zip`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ file_ids: fileIds, folder_ids: folderIds })
+    });
+    return response.blob();
+  }
   /** Create a new file record in the workspace. */
   async createFile(wid, file) {
     return this.fetch(`w/${wid}/files`, {
@@ -3493,6 +3151,12 @@ var AppConnectionsApi = class extends BaseApiClient {
    * values are intentionally never exposed. Operators can also add a
    * new key via the UI's "Add custom field key" free-text action.
    */
+  async setDefaultGooglePlatformAccount(wid, connectionUuid, credentialUuid) {
+    return this.fetch(
+      `w/${wid}/app-connections/google/platform-apps/${connectionUuid}/accounts/${credentialUuid}/default`,
+      { method: "POST" }
+    );
+  }
   async listConnectionMemberFieldKeys(wid, connectionId) {
     return this.fetch(
       `w/${wid}/app-connections/${connectionId}/member-field-keys`
@@ -3613,6 +3277,31 @@ var McpServersApi = class extends BaseApiClient {
 };
 
 // src/api/members.ts
+var MemberImportValidationError = class extends Error {
+  validationErrors;
+  constructor(message, validationErrors) {
+    super(message);
+    this.name = "MemberImportValidationError";
+    this.validationErrors = validationErrors;
+  }
+};
+function throwMemberImportError(errorBody, fallback) {
+  let detail = errorBody?.detail;
+  if (typeof detail === "string") {
+    try {
+      const parsed = JSON.parse(detail);
+      if (parsed && typeof parsed === "object") detail = parsed;
+    } catch {
+    }
+  }
+  if (detail && typeof detail === "object") {
+    const { message, errors } = detail;
+    if (Array.isArray(errors)) {
+      throw new MemberImportValidationError(message || fallback, errors);
+    }
+  }
+  throw new Error(typeof detail === "string" ? detail : fallback);
+}
 var MembersApi = class extends BaseApiClient {
   /** Get the currently authenticated member for a workspace. */
   async getCurrentMember(wid) {
@@ -3653,8 +3342,10 @@ var MembersApi = class extends BaseApiClient {
     });
   }
   /** List workspace members with pagination, filtering, and sorting. */
-  async getWorkspaceMembers(wid, page = 1, pageSize = 10, filters, search, role, sortBy, sortOrder, memberType, isArchived = false, isManager, memberTypes, hasAccount, excludeIds) {
+  async getWorkspaceMembers(wid, page = 1, pageSize = 10, filters, search, role, sortBy, sortOrder, memberType, isArchived = false, isManager, memberTypes, hasAccount, excludeIds, memberFilterId, query) {
     const params = new URLSearchParams();
+    if (memberFilterId != null) params.append("memberFilterId", memberFilterId.toString());
+    if (query != null) params.append("query", JSON.stringify(query));
     if (page) params.append("page", page.toString());
     if (pageSize) params.append("pageSize", pageSize.toString());
     if (sortBy) params.append("sortBy", sortBy);
@@ -3727,6 +3418,17 @@ var MembersApi = class extends BaseApiClient {
       method: "POST"
     });
   }
+  /**
+   * Send the member an SMS asking them to confirm their phone number. When they
+   * reply, a trusted phone auth binding is created so they can use SMS as
+   * themselves without an account (member-attested alternative to the
+   * members:admin "Trusted" override).
+   */
+  async sendMemberPhoneConfirmation(wid, memberId) {
+    return this.fetch(`w/${wid}/members/${memberId}/phone-confirmation`, {
+      method: "POST"
+    });
+  }
   // Member Filter APIs
   /** List all saved member filters for a workspace. */
   async getMemberFilters(wid) {
@@ -3750,6 +3452,22 @@ var MembersApi = class extends BaseApiClient {
       body: JSON.stringify(data)
     });
   }
+  /**
+   * Convert a legacy rules filter to a query-engine predicate. One-way and
+   * transactional: on success the filter's legacy rules are gone and
+   * `query` holds the equivalent IR predicate. 409 if already query-format;
+   * 422 when rules have no engine equivalent.
+   *
+   * With `dryRun: true` the same validation runs but nothing persists: the
+   * response previews the normalized predicate in `query` while `rules`
+   * stay intact on the filter.
+   */
+  async convertMemberFilterToQuery(wid, filterId, opts) {
+    const suffix = opts?.dryRun ? "?dryRun=true" : "";
+    return this.fetch(`w/${wid}/member-filters/${filterId}/convert${suffix}`, {
+      method: "PUT"
+    });
+  }
   /** Delete a saved member filter. */
   async deleteMemberFilter(wid, filterId) {
     return this.fetch(`w/${wid}/member-filters/${filterId}`, {
@@ -3827,48 +3545,98 @@ var MembersApi = class extends BaseApiClient {
     });
   }
   // Import/Export Members API
-  /** Import members from a CSV file, streaming progress updates via callback. */
-  async importMembers(wid, file, newMemberRoleId, onProgress) {
+  /**
+   * Read-only preview classifying each CSV row before any write (GRA-5545).
+   *
+   * Returns create/update/unchanged/conflict/error counts. For phone-only
+   * identity conflicts it also returns existing vs incoming identity so the
+   * operator can decide whether to skip or explicitly overwrite before
+   * committing. Requires MEMBERS_ADMIN and is bulk-PHI audited server-side.
+   */
+  async previewImportMembers(wid, file, newMemberRoleId, options) {
     const formData = new FormData();
     formData.append("file", file);
     const params = new URLSearchParams();
     params.append("new_member_role_id", newMemberRoleId.toString());
-    const response = await fetch(
-      `${this.baseUrl}/api/v2/w/${wid}/members/import?${params.toString()}`,
+    if (options?.trustEmailAddresses) {
+      params.append("trust_email_addresses", "true");
+    }
+    if (options?.trustPhoneNumbers) {
+      params.append("trust_phone_numbers", "true");
+    }
+    const response = await this.fetchRaw(
+      `w/${wid}/members/import/preview?${params.toString()}`,
       {
         method: "POST",
-        body: formData,
-        credentials: "include"
-      }
+        body: formData
+      },
+      [400, 413]
     );
     if (!response.ok) {
-      const error = await response.json();
-      if (error.detail && typeof error.detail === "object") {
-        const { message, errors } = error.detail;
-        if (errors && Array.isArray(errors)) {
-          const importError = new Error(message || "Import validation failed");
-          importError.validationErrors = errors;
-          throw importError;
-        }
-      }
-      throw new Error(error.detail || "Import failed");
+      const error = await response.json().catch(() => ({}));
+      throwMemberImportError(error, "Import preview failed");
+    }
+    return response.json();
+  }
+  /**
+   * Import members from a CSV file, streaming progress updates via callback.
+   *
+   * ``identityConflictPolicy`` (default 'skip') controls how a row matching an
+   * existing member ONLY by phone with different identity fields is handled.
+   * Send 'overwrite_identity_fields' only after the operator confirms a preview.
+   */
+  async importMembers(wid, file, newMemberRoleId, onProgress, options) {
+    const formData = new FormData();
+    formData.append("file", file);
+    const params = new URLSearchParams();
+    params.append("new_member_role_id", newMemberRoleId.toString());
+    if (options?.trustEmailAddresses) {
+      params.append("trust_email_addresses", "true");
+    }
+    if (options?.trustPhoneNumbers) {
+      params.append("trust_phone_numbers", "true");
+    }
+    if (options?.identityConflictPolicy) {
+      params.append("identity_conflict_policy", options.identityConflictPolicy);
+    }
+    const response = await this.fetchRaw(
+      `w/${wid}/members/import?${params.toString()}`,
+      {
+        method: "POST",
+        body: formData
+      },
+      [400, 413]
+    );
+    if (!response.ok) {
+      const error = await response.json().catch(() => ({}));
+      throwMemberImportError(error, "Import failed");
     }
     if (onProgress && response.body) {
       const reader = response.body.getReader();
       const decoder = new TextDecoder();
+      let buffer = "";
       while (true) {
         const { done, value } = await reader.read();
         if (done) break;
-        const chunk = decoder.decode(value);
-        const lines = chunk.split("\n").filter((line) => line.trim());
+        buffer += decoder.decode(value, { stream: true });
+        const lines = buffer.split("\n");
+        buffer = lines.pop() ?? "";
         for (const line of lines) {
+          const trimmed = line.trim();
+          if (!trimmed) continue;
           try {
-            const progress = JSON.parse(line);
-            onProgress(progress);
+            onProgress(JSON.parse(trimmed));
           } catch {
           }
         }
       }
+      const tail = buffer.trim();
+      if (tail) {
+        try {
+          onProgress(JSON.parse(tail));
+        } catch {
+        }
+      }
     }
     return { success: true };
   }
@@ -4060,6 +3828,17 @@ var MembersApi = class extends BaseApiClient {
       { method: "DELETE" }
     );
   }
+  /** Bulk-create members in a workspace. */
+  async bulkCreateMembers(wid, request) {
+    return this.fetch(`w/${wid}/members/bulk`, {
+      method: "POST",
+      body: JSON.stringify(request)
+    });
+  }
+  /** Get all sync links for a member across app connections. */
+  async getMemberSyncLinks(wid, memberId) {
+    return this.fetch(`w/${wid}/members/${memberId}/sync-links`);
+  }
 };
 
 // src/api/milestones.ts
@@ -4556,6 +4335,7 @@ var OrgApi = class extends BaseApiClient {
    */
   async searchPhoneNumbers(orgUuid, params) {
     const query = new URLSearchParams();
+    if (params?.country) query.set("country", params.country);
     if (params?.numberType) query.set("number_type", params.numberType);
     if (params?.areaCode) query.set("area_code", params.areaCode);
     if (params?.contains) query.set("contains", params.contains);
@@ -4567,11 +4347,20 @@ var OrgApi = class extends BaseApiClient {
   }
   /**
    * Purchase a phone number from Twilio for this org inventory (org admin only).
+   *
+   * Numbers in regulated countries (e.g. Australia) require a Twilio regulatory
+   * bundle and an address — pass `bundleSid` and `addressSid` for those.
    */
-  async purchasePhoneNumber(orgUuid, phoneNumber, numberType) {
+  async purchasePhoneNumber(orgUuid, phoneNumber, numberType, opts) {
     return this.fetch(`o/${orgUuid}/phone-numbers/purchase`, {
       method: "POST",
-      body: JSON.stringify({ phoneNumber, numberType })
+      body: JSON.stringify({
+        phoneNumber,
+        numberType,
+        country: opts?.country,
+        bundleSid: opts?.bundleSid,
+        addressSid: opts?.addressSid
+      })
     });
   }
   /**
@@ -4779,6 +4568,90 @@ var OrgApi = class extends BaseApiClient {
       method: "POST"
     });
   }
+  /**
+   * List the org's A2P brands (broker resources). The SMS-consent editor uses
+   * this to pick which brand's consent config to edit.
+   */
+  async listA2PBrands(orgUuid) {
+    return this.fetch(`o/${orgUuid}/a2p-brands`);
+  }
+  /**
+   * Fetch a brand's resolved A2P campaign config. The response carries both the
+   * raw `overrides` and the `resolved` payload (defaults + overrides) the editor
+   * previews — including the canonical SMS consent text.
+   */
+  async getA2PCampaignConfig(orgUuid, brandUuid) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/campaign-config`
+    );
+  }
+  /**
+   * Partial-update a brand's A2P campaign config. Returns the freshly resolved
+   * config so the editor's live preview updates without a second round-trip.
+   */
+  async updateA2PCampaignConfig(orgUuid, brandUuid, data) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/campaign-config`,
+      {
+        method: "PUT",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  /**
+   * Published Sites across the org's workspaces that can be linked as this
+   * brand's enrollment (opt-in) surface. Org-authorized, so it works even when
+   * the admin isn't a member of the workspace holding the Site.
+   */
+  async listA2PEnrollmentSiteCandidates(orgUuid, brandUuid) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-site/candidates`
+    );
+  }
+  /**
+   * Link the brand to a published enrollment Site (sets `site_uuid`). Returns
+   * the refreshed campaign config so the editor's link state updates inline.
+   */
+  async linkA2PEnrollmentSite(orgUuid, brandUuid, data) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-site`,
+      {
+        method: "PUT",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  /**
+   * Provision (or reuse) a patient-enrollment Site for the brand and link it —
+   * the one-click path behind the SMS Consent tab. `workspaceUuid` is required
+   * only when the org has multiple workspaces. Returns the refreshed campaign
+   * config so the editor's link state updates inline. Idempotent.
+   */
+  async provisionA2PEnrollmentSite(orgUuid, brandUuid, data = {}) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-site/provision`,
+      {
+        method: "POST",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  /** Clear the brand's enrollment-site link. */
+  async unlinkA2PEnrollmentSite(orgUuid, brandUuid) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-site`,
+      { method: "DELETE" }
+    );
+  }
+  /**
+   * The brand-addressable enrollment form URL (carries `?brand=…`). Outreach
+   * appends each patient's `external_id`. `url` is null until a Site is linked.
+   */
+  async getA2PBrandEnrollmentUrl(orgUuid, brandUuid) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-url`
+    );
+  }
   /**
    * List available member roles for a workspace in the organization.
    */
@@ -4803,58 +4676,53 @@ var OrgApi = class extends BaseApiClient {
 function getOAuthPath(providerSlug, action) {
   if (providerSlug === "google_calendar") {
     return `oauth/google/calendar/${action}`;
-  } else if (providerSlug === "gmail") {
+  }
+  if (providerSlug === "gmail") {
     return `oauth/google/gmail/${action}`;
-  } else {
-    return `oauth/${providerSlug}/${action}`;
   }
+  if (providerSlug === "gdrive") {
+    return `oauth/google/drive/${action}`;
+  }
+  return `oauth/${providerSlug}/${action}`;
+}
+function buildAuthorizeQuery(options) {
+  if (!options) return "";
+  const params = new URLSearchParams();
+  if (options.credentialUuid) params.set("credentialUuid", options.credentialUuid);
+  if (options.loginHint) params.set("loginHint", options.loginHint);
+  if (options.redirect) params.set("redirect", options.redirect);
+  const qs = params.toString();
+  return qs ? `?${qs}` : "";
 }
 var OAuthConnectionsApi = class extends BaseApiClient {
-  /**
-   * Get the connection status for an OAuth provider
-   */
   async getConnectionStatus(providerSlug) {
     const path = getOAuthPath(providerSlug, "status");
     return this.fetchRoot(path);
   }
-  /**
-   * Get the authorization URL to start OAuth flow
-   */
-  async getAuthorizationUrl(providerSlug) {
-    const path = getOAuthPath(providerSlug, "authorize");
+  async listAccounts(providerSlug) {
+    const path = getOAuthPath(providerSlug, "accounts");
     return this.fetchRoot(path);
   }
-  /**
-   * Disconnect an OAuth provider
-   */
-  async disconnect(providerSlug) {
+  async getAuthorizationUrl(providerSlug, options) {
+    const path = getOAuthPath(providerSlug, "authorize") + buildAuthorizeQuery(options);
+    return this.fetchRoot(path);
+  }
+  async disconnect(providerSlug, credentialUuid) {
     const path = getOAuthPath(providerSlug, "disconnect");
-    return this.fetchRoot(path, { method: "DELETE" });
+    const qs = credentialUuid ? `?credentialUuid=${encodeURIComponent(credentialUuid)}` : "";
+    return this.fetchRoot(`${path}${qs}`, { method: "DELETE" });
   }
 };
 var OAuthApi = class extends BaseApiClient {
-  /**
-   * Get all available OAuth/API key scopes with metadata.
-   *
-   * This returns the full scope definitions from the backend,
-   * ensuring the UI always shows the correct scopes.
-   */
   async getAvailableScopes() {
     return this.fetch("oauth/scopes");
   }
-  /**
-   * Create an authorization code for OAuth flow
-   * This is called after the user approves the authorization request
-   */
   async authorize(request) {
     return this.fetch("oauth/authorize", {
       method: "POST",
       body: JSON.stringify(request)
     });
   }
-  /**
-   * Exchange authorization code for access token
-   */
   async exchangeOAuthToken(request) {
     const formData = new URLSearchParams();
     formData.append("grant_type", request.grant_type);
@@ -5148,6 +5016,37 @@ var PersonasApi = class extends BaseApiClient {
   }
 };
 
+// src/api/queries.ts
+var QueriesApi = class extends BaseApiClient {
+  /** Queryable namespace: native fields, operators per type, DataType record fields. */
+  async getQueryFields(wid) {
+    return this.fetch(`w/${wid}/queries/fields`, {
+      method: "GET"
+    });
+  }
+  /** Structure / field / access / cost validation without execution. */
+  async validateQuery(wid, query) {
+    return this.fetch(`w/${wid}/queries/validate`, {
+      method: "POST",
+      body: JSON.stringify({ query })
+    });
+  }
+  /** Bounded sample run (limit capped server-side). */
+  async previewQuery(wid, query, mode) {
+    return this.fetch(`w/${wid}/queries/preview`, {
+      method: "POST",
+      body: JSON.stringify({ query, mode })
+    });
+  }
+  /** Execute a query (rows / count / aggregate). */
+  async runQuery(wid, query, mode) {
+    return this.fetch(`w/${wid}/queries/run`, {
+      method: "POST",
+      body: JSON.stringify({ query, mode })
+    });
+  }
+};
+
 // src/api/qualifications.ts
 var QualificationsApi = class extends BaseApiClient {
   /** List qualifications in a workspace, paginated. */
@@ -5199,6 +5098,9 @@ var QualificationsApi = class extends BaseApiClient {
   async listTestChatRuns(wid, workflowId, params) {
     const query = new URLSearchParams();
     if (params?.scenarioId !== void 0) query.set("scenarioId", String(params.scenarioId));
+    if (params?.assistantChatModelId !== void 0) {
+      query.set("assistantChatModelId", params.assistantChatModelId);
+    }
     if (params?.limit !== void 0) query.set("limit", String(params.limit));
     const qs = query.toString() ? `?${query.toString()}` : "";
     return this.fetch(
@@ -5633,6 +5535,112 @@ var SitesApi = class extends BaseApiClient {
   async getSite(wid, id) {
     return this.fetch(`w/${wid}/sites/${id}`);
   }
+  /** Get a site's sharing settings. */
+  async getSiteSharing(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/sharing`);
+  }
+  /** Update a site's sharing settings. */
+  async updateSiteSharing(wid, siteId, data) {
+    return this.fetch(`w/${wid}/sites/${siteId}/sharing`, {
+      method: "PUT",
+      body: JSON.stringify(data)
+    });
+  }
+  /** Get a site's source tree. */
+  async getSiteSource(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source`);
+  }
+  /** Starter templates the caller may seed (superuser-only ones filtered server-side). */
+  async getSiteSourceTemplates(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/templates`);
+  }
+  /** Create a site's source tree with starter files if it does not exist. */
+  async createSiteSource(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source`, {
+      method: "POST"
+    });
+  }
+  /** Build a site's source without publishing. */
+  async buildSiteSource(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/build`, {
+      method: "POST"
+    });
+  }
+  /**
+   * Build and publish a site's source. Optionally label the published version
+   * with a `name` and `note`; both default to null (the UI then shows
+   * "Version {version}").
+   */
+  async publishSiteSource(wid, siteId, options) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/publish`, {
+      method: "POST",
+      body: JSON.stringify({
+        name: options?.name ?? null,
+        note: options?.note ?? null
+      })
+    });
+  }
+  /**
+   * Reset a site's source files: load a starter template and/or wipe existing
+   * files. `template` selects which starter to seed when `loadDefaults` is set
+   * (defaults to "hello-world"; "patient-enrollment" is the other built-in).
+   */
+  async resetSiteSource(wid, siteId, options) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/reset`, {
+      method: "POST",
+      body: JSON.stringify({
+        load_defaults: options.loadDefaults,
+        delete_existing: options.deleteExisting,
+        ...options.template ? { template: options.template } : {}
+      })
+    });
+  }
+  /**
+   * Re-point the published release to a prior version from the history. A pure
+   * pointer move (no rebuild); the other versions stay in the history.
+   */
+  async rollbackSiteSource(wid, siteId, releaseUuid) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/rollback`, {
+      method: "POST",
+      body: JSON.stringify({ release_uuid: releaseUuid })
+    });
+  }
+  /**
+   * Export the site's source tree as a ZIP archive (editor-gated server-side).
+   * Returns the raw archive bytes for the caller to save.
+   */
+  async downloadSiteSourceZip(wid, siteId) {
+    const response = await this.fetchRaw(`w/${wid}/sites/${siteId}/source/download`);
+    return response.blob();
+  }
+  /**
+   * Replace the site's source tree with the contents of an uploaded ZIP
+   * (clears the existing source first, like a reset that loads a template).
+   */
+  async importSiteSourceZip(wid, siteId, file) {
+    const form = new FormData();
+    form.append("file", file, "source.zip");
+    return this.fetch(`w/${wid}/sites/${siteId}/source/import`, {
+      method: "POST",
+      body: form
+    });
+  }
+  /**
+   * Get a theme's settings schema, the site's saved values, and capabilities.
+   * Pass `theme` to resolve the schema for a theme other than the saved one
+   * (e.g. one the builder has selected but not yet saved).
+   */
+  async getThemeSettings(wid, siteId, theme) {
+    const query = theme ? `?theme=${encodeURIComponent(theme)}` : "";
+    return this.fetch(`w/${wid}/sites/${siteId}/theme-settings${query}`);
+  }
+  /** Save values for the active theme's settings (validated against the schema). */
+  async updateThemeSettings(wid, siteId, values) {
+    return this.fetch(`w/${wid}/sites/${siteId}/theme-settings`, {
+      method: "PUT",
+      body: JSON.stringify({ values })
+    });
+  }
   /** Get a single site by UUID. */
   async getSiteByUuid(wid, uuid) {
     return this.fetch(`s/${wid}/${uuid}`);
@@ -5848,6 +5856,28 @@ var SubscriptionsApi = class extends BaseApiClient {
   async getSubscriptions() {
     return this.fetch("subscriptions");
   }
+  /**
+   * Create a Stripe Checkout session to purchase an organization plan.
+   * Returns the checkout URL to open in a browser. The organization, billing
+   * customer, and subscription are created on payment by the checkout
+   * completion handler.
+   */
+  async createCheckoutSession(productId, planPeriod = "month") {
+    return this.fetch(`subscriptions/checkout-session`, {
+      method: "POST",
+      credentials: "include",
+      body: JSON.stringify({ productId, planPeriod }),
+      headers: { "Content-Type": "application/json" }
+    });
+  }
+  /**
+   * List self-service, purchasable plans (org or workspace). Only plans with a
+   * paid Stripe price are returned. No auth required.
+   */
+  async listSelfServeProducts(productType) {
+    const qs = productType ? `?product_type=${productType}` : "";
+    return this.fetch(`products/self-service${qs}`);
+  }
   /** List all subscriptions associated with a workspace. */
   async getWorkspaceSubscriptions(wid) {
     return this.fetch(`w/${wid}/subscriptions`);
@@ -5888,6 +5918,10 @@ var SubscriptionsApi = class extends BaseApiClient {
       }
     });
   }
+  /** List line items for a subscription. */
+  async getSubscriptionItems(subscriptionId) {
+    return this.fetch(`subscriptions/${subscriptionId}/items`);
+  }
   /** Purchase extra credits on a subscription (org-level). */
   async purchaseCredits(subscriptionId, amountCents) {
     return this.fetch(`subscriptions/${subscriptionId}/purchase-credits`, {
@@ -5989,6 +6023,16 @@ var SupportRequestsApi = class extends BaseApiClient {
       body: JSON.stringify(data)
     });
   }
+  /**
+   * Reopen a resolved support request (e.g. staff resolved it prematurely).
+   * The server rejects requests that are not in the `resolved` state.
+   */
+  async reopenWorkspaceSupportRequest(workspaceUuid, uuid, data = {}) {
+    return this.fetch(`w/${workspaceUuid}/support-requests/${uuid}/reopen`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
   /**
    * Record a click on a pushed resource (Proactive Support). For a
    * manager_prompt, pass the Manager Chat UUID it opened so the
@@ -6143,6 +6187,12 @@ var TasksApi = class extends BaseApiClient {
     if (options.workflowId) {
       params.append("workflow_id", options.workflowId.toString());
     }
+    if (options.sortBy) {
+      params.append("sortBy", options.sortBy);
+    }
+    if (options.sortOrder) {
+      params.append("sortOrder", options.sortOrder);
+    }
     return this.fetch(
       `w/${wid}/tasks${params.toString() ? `?${params.toString()}` : ""}`
     );
@@ -6513,9 +6563,17 @@ var WorkflowsApi = class extends BaseApiClient {
       `w/${wid}/workflows/activity/batch?${params.toString()}`
     );
   }
-  /** Get the Mermaid diagram representation of a workflow. */
-  async getWorkflowDiagram(wid, id) {
-    return this.fetch(`w/${wid}/workflows/${id}/diagram`);
+  /**
+   * Get the Mermaid diagram representation of a workflow.
+   *
+   * By default only active tasks are rendered. Pass `includeArchived: true`
+   * to also render archived tasks (distinctly styled). `taskCount` is always
+   * the total (active + archived); `archivedTaskCount` breaks out the archived
+   * portion so the active count can be derived.
+   */
+  async getWorkflowDiagram(wid, id, options = {}) {
+    const query = options.includeArchived ? "?include_archived=true" : "";
+    return this.fetch(`w/${wid}/workflows/${id}/diagram${query}`);
   }
   /**
    * Get workflow thumbnail URL.
@@ -6909,6 +6967,20 @@ var BulkMemberResultStatus = {
   updated: "updated",
   failed: "failed"
 };
+var MemberImportMatchInfoMatchType = {
+  external_id: "external_id",
+  email: "email",
+  phone: "phone",
+  account_email: "account_email",
+  account_phone: "account_phone"
+};
+var MemberImportPreviewRowAction = {
+  create: "create",
+  update: "update",
+  unchanged: "unchanged",
+  conflict: "conflict",
+  error: "error"
+};
 
 // src/types/member-types.ts
 var MemberType = /* @__PURE__ */ ((MemberType2) => {
@@ -6952,6 +7024,9 @@ var EventRuleObjectType = /* @__PURE__ */ ((EventRuleObjectType2) => {
 })(EventRuleObjectType || {});
 var EventRuleEventType = /* @__PURE__ */ ((EventRuleEventType2) => {
   EventRuleEventType2["TASK_EXECUTE"] = "task:execute";
+  EventRuleEventType2["TASK_ENTER"] = "task:enter";
+  EventRuleEventType2["TASK_COMMAND"] = "task:command";
+  EventRuleEventType2["TASK_EXIT"] = "task:exit";
   EventRuleEventType2["MEMBER_JOINED"] = "workspace:member_joined";
   EventRuleEventType2["MEMBER_LEFT"] = "workspace:member_left";
   EventRuleEventType2["DATA_RECORD_CREATED"] = "data_record:created";
@@ -6985,6 +7060,7 @@ var EventRuleActionType = /* @__PURE__ */ ((EventRuleActionType2) => {
   EventRuleActionType2["SWITCH_TASK_ACTION"] = "task:switch";
   EventRuleActionType2["ASSISTANT_MESSAGE"] = "assistant:message";
   EventRuleActionType2["FORM_FIELD_UPDATE"] = "form:update_field";
+  EventRuleActionType2["CEL_MUTATE"] = "record:cel_mutate";
   EventRuleActionType2["MESSAGE_VALIDATION"] = "message:validation";
   EventRuleActionType2["CHAT_CREATE"] = "chat:create";
   EventRuleActionType2["CHAT_CONTINUE"] = "chat:continue";
@@ -7135,7 +7211,6 @@ var ModelProvider = {
   aws: "aws",
   elevenlabs: "elevenlabs",
   deepgram: "deepgram",
-  pocket: "pocket",
   xai: "xai",
   custom: "custom"
 };
@@ -7165,7 +7240,10 @@ var TTS_MODEL_ELEVENLABS_MULTILINGUAL = "elevenlabs:tts:eleven_multilingual_v2";
 var TTS_MODEL_DEEPGRAM_AURA_2 = "deepgram:tts:aura-2";
 var TTS_MODEL_AWS_POLLY_GENERATIVE = "aws:tts:polly-generative";
 var TTS_MODEL_AWS_POLLY_NEURAL = "aws:tts:polly-neural";
-var TTS_MODEL_POCKET = "pocket:tts:default";
+
+// src/types/pids-types.ts
+var PIDS_DISPOSITIONS = ["true_positive", "false_positive", "needs_more_context"];
+var PIDS_SOURCES = ["scheduled", "backfill", "pre_llm"];
 
 // src/types/fhir-connection-types.ts
 var FhirVendor = /* @__PURE__ */ ((FhirVendor2) => {
@@ -7863,6 +7941,25 @@ var ExperimentsApi = class extends BaseApiClient {
   }
 };
 
+// src/api/patientsync-connections.ts
+var PatientSyncConnectionsApi = class extends BaseApiClient {
+  /** Create or update the workspace's PatientSync connection (singleton). */
+  async configurePatientSync(wid, data) {
+    return this.fetch(
+      `w/${wid}/app-connections/patientsync/configure`,
+      { method: "POST", body: JSON.stringify(data) }
+    );
+  }
+  /** Read the PatientSync connection status (never returns the API key). */
+  async getPatientSyncStatus(wid) {
+    return this.fetch(`w/${wid}/app-connections/patientsync/status`);
+  }
+  /** Delete the workspace's PatientSync connection. */
+  async deletePatientSyncConnection(wid) {
+    return this.fetch(`w/${wid}/app-connections/patientsync/`, { method: "DELETE" });
+  }
+};
+
 // src/app-context.ts
 function formatAppContextAsMarkdown(context) {
   if (!context) {
@@ -7953,6 +8050,7 @@ function createApiModules(apiKey, baseUrl, customFetch) {
     events: new EventsApi(apiKey, baseUrl, customFetch),
     experiments: new ExperimentsApi(apiKey, baseUrl, customFetch),
     fhirConnections: new FhirConnectionsApi(apiKey, baseUrl, customFetch),
+    patientSyncConnections: new PatientSyncConnectionsApi(apiKey, baseUrl, customFetch),
     healthie: new HealthieApi(apiKey, baseUrl, customFetch),
     hubspot: new HubspotApi(apiKey, baseUrl, customFetch),
     features: new FeaturesApi(apiKey, baseUrl, customFetch),
@@ -7976,6 +8074,7 @@ function createApiModules(apiKey, baseUrl, customFetch) {
     pronunciations: new PronunciationsApi(apiKey, baseUrl, customFetch),
     qualifications: new QualificationsApi(apiKey, baseUrl, customFetch),
     personas: new PersonasApi(apiKey, baseUrl, customFetch),
+    queries: new QueriesApi(apiKey, baseUrl, customFetch),
     reports: new ReportsApi(apiKey, baseUrl, customFetch),
     salesforce: new SalesforceApi(apiKey, baseUrl, customFetch),
     sites: new SitesApi(apiKey, baseUrl, customFetch),
@@ -8020,6 +8119,7 @@ var WORKSPACE_METHOD_NAMES = [
   "cancelAgentTask",
   "cancelAssignment",
   "cancelCalendarEvent",
+  "cancelChatCallback",
   "cancelCredentialUpdateInvite",
   "checkAvailability",
   "checkSiteDomainAvailability",
@@ -8034,12 +8134,14 @@ var WORKSPACE_METHOD_NAMES = [
   "commentOnWorkspaceSupportRequest",
   "configureConfluence",
   "configureHealthie",
+  "configurePatientSync",
   "configureHubspot",
   "configureMondayConnection",
   "configureSalesforce",
   "convertEmail",
   "convertFile",
   "crawlSite",
+  "createAbility",
   "createAccessGrant",
   "createAgent",
   "createApiKey",
@@ -8063,6 +8165,7 @@ var WORKSPACE_METHOD_NAMES = [
   "createExperiment",
   "createExperimentAssignment",
   "createExperimentGroup",
+  "convertMemberFilterToQuery",
   "createFhirConnection",
   "createFile",
   "createFileLabel",
@@ -8103,6 +8206,7 @@ var WORKSPACE_METHOD_NAMES = [
   "createWorkspaceMember",
   "createWorkspaceSupportRequest",
   "deactivateWorkflowVersion",
+  "deleteAbility",
   "deleteAgent",
   "deleteAssignment",
   "deleteCalendar",
@@ -8126,6 +8230,7 @@ var WORKSPACE_METHOD_NAMES = [
   "deleteExperimentAssignment",
   "deleteExperimentGroup",
   "deleteFhirConnection",
+  "deletePatientSyncConnection",
   "deleteFile",
   "deleteFileLabel",
   "deleteFolder",
@@ -8226,6 +8331,7 @@ var WORKSPACE_METHOD_NAMES = [
   "generateICalToken",
   "generateSiteMediaUploadUrl",
   "getAIUsageReport",
+  "getAbilityType",
   "getAbilityTypes",
   "getAccessGrant",
   "getAccessGrants",
@@ -8260,6 +8366,7 @@ var WORKSPACE_METHOD_NAMES = [
   "getCelContext",
   "getChat",
   "getChatAssignmentTasks",
+  "getChatCallbacks",
   "getChatEmails",
   "getChatFilter",
   "getChatFilterByUuid",
@@ -8326,6 +8433,7 @@ var WORKSPACE_METHOD_NAMES = [
   "getHealthieAvailableSlots",
   "getHealthieReconciliationMatches",
   "getHealthieStatus",
+  "getPatientSyncStatus",
   "getHubspotContactProperties",
   "getHubspotManagedRules",
   "getHubspotReconciliationMatches",
@@ -8371,6 +8479,7 @@ var WORKSPACE_METHOD_NAMES = [
   "getMemberRole",
   "getMemberRoleByUuid",
   "getMemberRoles",
+  "getMemberSyncLinks",
   "getMemberSyncSummary",
   "getMemberUsage",
   "getMembersMessageActivity",
@@ -8513,11 +8622,14 @@ var WORKSPACE_METHOD_NAMES = [
   "linkMemberToMonday",
   "linkMemberToSalesforce",
   "linkPhoneNumber",
+  "listAbilities",
+  "listAgentAbilities",
   "listAppConnections",
   "listAvailableAppConnections",
   "listConfluencePages",
   "listConfluenceSpaces",
   "listConnectionMemberFieldKeys",
+  "setDefaultGooglePlatformAccount",
   "listGoogleCalendars",
   "listHealthieAppointmentTypes",
   "listHealthiePatients",
@@ -8532,6 +8644,7 @@ var WORKSPACE_METHOD_NAMES = [
   "markEmailAsRead",
   "markEmailAsUnread",
   "markNotificationAsRead",
+  "previewImportMembers",
   "previewImportWorkspace",
   "previewSchedule",
   "previewTTS",
@@ -8606,6 +8719,7 @@ var WORKSPACE_METHOD_NAMES = [
   "unlinkMemberFromMonday",
   "unlinkMemberFromSalesforce",
   "unregisterPushSubscription",
+  "updateAbility",
   "updateAgent",
   "updateAssignment",
   "updateCalendar",
@@ -8732,6 +8846,7 @@ function bindAgentsMethods(target, agents) {
   target.archiveAgent = agents.archiveAgent.bind(agents);
   target.unarchiveAgent = agents.unarchiveAgent.bind(agents);
   target.resolveAgentTools = agents.resolveAgentTools.bind(agents);
+  target.listAgentAbilities = agents.listAgentAbilities.bind(agents);
 }
 
 // src/client/bindings/tasks.ts
@@ -8745,12 +8860,19 @@ function bindTasksMethods(target, tasks, abilities) {
   target.unarchiveTask = tasks.unarchiveTask.bind(tasks);
   target.cloneTask = tasks.cloneTask.bind(tasks);
   target.getAbilityTypes = abilities.getAbilityTypes.bind(abilities);
+  target.getAbilityType = abilities.getAbilityType.bind(abilities);
+  target.listAbilities = abilities.listAbilities.bind(abilities);
+  target.createAbility = abilities.createAbility.bind(abilities);
+  target.updateAbility = abilities.updateAbility.bind(abilities);
+  target.deleteAbility = abilities.deleteAbility.bind(abilities);
 }
 
 // src/client/bindings/chats.ts
 function bindChatsMethods(target, chats) {
   target.getChats = chats.getChats.bind(chats);
   target.getChat = chats.getChat.bind(chats);
+  target.getChatCallbacks = chats.getChatCallbacks.bind(chats);
+  target.cancelChatCallback = chats.cancelChatCallback.bind(chats);
   target.getChatTokenUsage = chats.getChatTokenUsage.bind(chats);
   target.getChatTodos = chats.getChatTodos.bind(chats);
   target.getChatSkills = chats.getChatSkills.bind(chats);
@@ -8800,6 +8922,8 @@ function bindCallsMethods(target, calls, cel) {
   target.initiateCall = calls.initiateCall.bind(calls);
   target.getVoiceToken = calls.getVoiceToken.bind(calls);
   target.getMessageTiming = calls.getMessageTiming.bind(calls);
+  target.listChatRecordings = calls.listChatRecordings.bind(calls);
+  target.getCallRecordingDownloadUrl = calls.getCallRecordingDownloadUrl.bind(calls);
   target.getCelContext = cel.getCelContext.bind(cel);
 }
 
@@ -8842,6 +8966,9 @@ function bindMembersMethods(target, members) {
   target.deleteMember = members.deleteMember.bind(members);
   target.archiveMember = members.archiveMember.bind(members);
   target.unarchiveMember = members.unarchiveMember.bind(members);
+  target.sendMemberPhoneConfirmation = members.sendMemberPhoneConfirmation.bind(members);
+  target.bulkCreateMembers = members.bulkCreateMembers.bind(members);
+  target.previewImportMembers = members.previewImportMembers.bind(members);
   target.importMembers = members.importMembers.bind(members);
   target.exportMembers = members.exportMembers.bind(members);
   target.getMembersMessageActivity = members.getMembersMessageActivity.bind(members);
@@ -8849,6 +8976,7 @@ function bindMembersMethods(target, members) {
   target.getMemberFilter = members.getMemberFilter.bind(members);
   target.createMemberFilter = members.createMemberFilter.bind(members);
   target.updateMemberFilter = members.updateMemberFilter.bind(members);
+  target.convertMemberFilterToQuery = members.convertMemberFilterToQuery.bind(members);
   target.deleteMemberFilter = members.deleteMemberFilter.bind(members);
   target.getMemberFilterCount = members.getMemberFilterCount.bind(members);
   target.getMemberLabels = members.getMemberLabels.bind(members);
@@ -8878,6 +9006,7 @@ function bindMembersMethods(target, members) {
   target.getMemberMemories = members.getMemberMemories.bind(members);
   target.createMemberMemory = members.createMemberMemory.bind(members);
   target.deleteMemberMemory = members.deleteMemberMemory.bind(members);
+  target.getMemberSyncLinks = members.getMemberSyncLinks.bind(members);
 }
 
 // src/client/bindings/workspaces.ts
@@ -9011,6 +9140,19 @@ function bindSitesMethods(target, sites) {
   target.checkSiteSlugAvailability = sites.checkSiteSlugAvailability.bind(sites);
   target.checkSiteDomainAvailability = sites.checkSiteDomainAvailability.bind(sites);
   target.getSite = sites.getSite.bind(sites);
+  target.getSiteSharing = sites.getSiteSharing.bind(sites);
+  target.updateSiteSharing = sites.updateSiteSharing.bind(sites);
+  target.getSiteSource = sites.getSiteSource.bind(sites);
+  target.getSiteSourceTemplates = sites.getSiteSourceTemplates.bind(sites);
+  target.createSiteSource = sites.createSiteSource.bind(sites);
+  target.buildSiteSource = sites.buildSiteSource.bind(sites);
+  target.publishSiteSource = sites.publishSiteSource.bind(sites);
+  target.resetSiteSource = sites.resetSiteSource.bind(sites);
+  target.rollbackSiteSource = sites.rollbackSiteSource.bind(sites);
+  target.downloadSiteSourceZip = sites.downloadSiteSourceZip.bind(sites);
+  target.importSiteSourceZip = sites.importSiteSourceZip.bind(sites);
+  target.getThemeSettings = sites.getThemeSettings.bind(sites);
+  target.updateThemeSettings = sites.updateThemeSettings.bind(sites);
   target.getSiteByUuid = sites.getSiteByUuid.bind(sites);
   target.getSiteRenderedPage = sites.getSiteRenderedPage.bind(sites);
   target.getSiteRenderedMenu = sites.getSiteRenderedMenu.bind(sites);
@@ -9043,6 +9185,7 @@ function bindSitesMethods(target, sites) {
 function bindFilesMethods(target, files) {
   target.getFiles = files.getFiles.bind(files);
   target.getFile = files.getFile.bind(files);
+  target.downloadFilesZip = files.downloadFilesZip.bind(files);
   target.createFile = files.createFile.bind(files);
   target.uploadFile = files.uploadFile.bind(files);
   target.updateFile = files.updateFile.bind(files);
@@ -9084,6 +9227,7 @@ function bindEventsMethods(target, events) {
   target.createEventRule = events.createEventRule.bind(events);
   target.updateEventRule = events.updateEventRule.bind(events);
   target.deleteEventRule = events.deleteEventRule.bind(events);
+  target.testWebhook = events.testWebhook.bind(events);
   target.reorderEventRules = events.reorderEventRules.bind(events);
   target.getWebhookLogs = events.getWebhookLogs.bind(events);
   target.getRuleExecutions = events.getRuleExecutions.bind(events);
@@ -9299,6 +9443,8 @@ function bindBillingMethods(target, apiKeys, subscriptions, reports) {
   target.updateSubscription = subscriptions.updateSubscription.bind(subscriptions);
   target.addWorkspaceToSubscription = subscriptions.addWorkspaceToSubscription.bind(subscriptions);
   target.purchaseCredits = subscriptions.purchaseCredits.bind(subscriptions);
+  target.createCheckoutSession = subscriptions.createCheckoutSession.bind(subscriptions);
+  target.listSelfServeProducts = subscriptions.listSelfServeProducts.bind(subscriptions);
   target.getAIUsageReport = reports.getAIUsageReport.bind(reports);
   target.getSMSUsageReport = reports.getSMSUsageReport.bind(reports);
   target.getPhoneUsageReport = reports.getPhoneUsageReport.bind(reports);
@@ -9332,12 +9478,13 @@ function bindAppsMethods(target, apps, builders, inquiries, oauth, oauthConnecti
   target.exchangeOAuthToken = oauth.exchangeOAuthToken.bind(oauth);
   target.getAvailableScopes = oauth.getAvailableScopes.bind(oauth);
   target.getOAuthConnectionStatus = oauthConnections.getConnectionStatus.bind(oauthConnections);
+  target.listOAuthAccounts = oauthConnections.listAccounts.bind(oauthConnections);
   target.getOAuthAuthorizationUrl = oauthConnections.getAuthorizationUrl.bind(oauthConnections);
   target.disconnectOAuthProvider = oauthConnections.disconnect.bind(oauthConnections);
 }
 
 // src/client/bindings/integrations.ts
-function bindIntegrationsMethods(target, mondayIntegration, discordBots, slackApps, teamsApps, fhirConnections, healthie, salesforce, hubspot, appConnections, connectionSync, confluence) {
+function bindIntegrationsMethods(target, mondayIntegration, discordBots, slackApps, teamsApps, fhirConnections, patientSyncConnections, healthie, salesforce, hubspot, appConnections, connectionSync, confluence) {
   target.getMondayBoards = mondayIntegration.getBoards.bind(mondayIntegration);
   target.getMondayBoardColumns = mondayIntegration.getBoardColumns.bind(mondayIntegration);
   target.getMondayBoardGroups = mondayIntegration.getBoardGroups.bind(mondayIntegration);
@@ -9422,6 +9569,9 @@ function bindIntegrationsMethods(target, mondayIntegration, discordBots, slackAp
   target.fhirGetEncounterSyncRuns = fhirConnections.fhirGetEncounterSyncRuns.bind(fhirConnections);
   target.fhirRefreshEncounterPatient = fhirConnections.fhirRefreshEncounterPatient.bind(fhirConnections);
   target.fhirBackfillEncounterSync = fhirConnections.fhirBackfillEncounterSync.bind(fhirConnections);
+  target.configurePatientSync = patientSyncConnections.configurePatientSync.bind(patientSyncConnections);
+  target.getPatientSyncStatus = patientSyncConnections.getPatientSyncStatus.bind(patientSyncConnections);
+  target.deletePatientSyncConnection = patientSyncConnections.deletePatientSyncConnection.bind(patientSyncConnections);
   target.configureHealthie = healthie.configureHealthie.bind(healthie);
   target.getHealthieStatus = healthie.getHealthieStatus.bind(healthie);
   target.listHealthieProviders = healthie.listHealthieProviders.bind(healthie);
@@ -9496,6 +9646,7 @@ function bindIntegrationsMethods(target, mondayIntegration, discordBots, slackAp
   target.updatePlatformApp = appConnections.updatePlatformApp.bind(appConnections);
   target.deletePlatformApp = appConnections.deletePlatformApp.bind(appConnections);
   target.listConnectionMemberFieldKeys = appConnections.listConnectionMemberFieldKeys.bind(appConnections);
+  target.setDefaultGooglePlatformAccount = appConnections.setDefaultGooglePlatformAccount.bind(appConnections);
 }
 
 // src/client/bindings/operator-groups.ts
@@ -9533,6 +9684,8 @@ function bindOrgMethods(target, org) {
   target.updateBusinessProfile = org.updateBusinessProfile.bind(org);
   target.submitBusinessProfile = org.submitBusinessProfile.bind(org);
   target.cancelBusinessProfile = org.cancelBusinessProfile.bind(org);
+  target.createOrganizationWorkspace = org.createOrganizationWorkspace.bind(org);
+  target.getOrgBillingCustomer = org.getOrgBillingCustomer.bind(org);
 }
 
 // src/client/bindings/pronunciations.ts
@@ -9612,6 +9765,14 @@ function bindPersonasMethods(target, personas) {
   target.deletePersona = personas.deletePersona.bind(personas);
 }
 
+// src/client/bindings/queries.ts
+function bindQueriesMethods(target, queries) {
+  target.getQueryFields = queries.getQueryFields.bind(queries);
+  target.validateQuery = queries.validateQuery.bind(queries);
+  target.previewQuery = queries.previewQuery.bind(queries);
+  target.runQuery = queries.runQuery.bind(queries);
+}
+
 // src/client/bindings/customers.ts
 function bindCustomersMethods(target, customers) {
   target.getMyCustomers = customers.getMyCustomers.bind(customers);
@@ -9658,6 +9819,7 @@ function bindSupportRequestMethods(target, supportRequests) {
   target.createWorkspaceSupportRequest = supportRequests.createWorkspaceSupportRequest.bind(supportRequests);
   target.commentOnWorkspaceSupportRequest = supportRequests.commentOnWorkspaceSupportRequest.bind(supportRequests);
   target.closeWorkspaceSupportRequest = supportRequests.closeWorkspaceSupportRequest.bind(supportRequests);
+  target.reopenWorkspaceSupportRequest = supportRequests.reopenWorkspaceSupportRequest.bind(supportRequests);
   target.clickWorkspaceSupportRequestResource = supportRequests.clickWorkspaceSupportRequestResource.bind(supportRequests);
 }
 
@@ -9677,9 +9839,16 @@ var GravityRailClient = class {
   unarchiveTask;
   cloneTask;
   getAbilityTypes;
+  getAbilityType;
+  listAbilities;
+  createAbility;
+  updateAbility;
+  deleteAbility;
   // Chats API
   getChats;
   getChat;
+  getChatCallbacks;
+  cancelChatCallback;
   getChatTokenUsage;
   getChatTodos;
   getChatSkills;
@@ -9726,6 +9895,8 @@ var GravityRailClient = class {
   initiateCall;
   getVoiceToken;
   getMessageTiming;
+  listChatRecordings;
+  getCallRecordingDownloadUrl;
   getCelContext;
   // Data Types API
   getDataTypes;
@@ -9762,6 +9933,9 @@ var GravityRailClient = class {
   deleteMember;
   archiveMember;
   unarchiveMember;
+  sendMemberPhoneConfirmation;
+  bulkCreateMembers;
+  previewImportMembers;
   importMembers;
   exportMembers;
   getMembersMessageActivity;
@@ -9769,6 +9943,7 @@ var GravityRailClient = class {
   getMemberFilter;
   createMemberFilter;
   updateMemberFilter;
+  convertMemberFilterToQuery;
   deleteMemberFilter;
   getMemberFilterCount;
   getMemberLabels;
@@ -9802,6 +9977,8 @@ var GravityRailClient = class {
   getMemberMemories;
   createMemberMemory;
   deleteMemberMemory;
+  // Member Sync Links
+  getMemberSyncLinks;
   // Agent Tasks API (operator-facing async sub-agent inspection/cancel)
   getAgentTasks;
   getAgentTask;
@@ -9816,6 +9993,7 @@ var GravityRailClient = class {
   archiveAgent;
   unarchiveAgent;
   resolveAgentTools;
+  listAgentAbilities;
   // Qualifications API
   getQualifications;
   getQualification;
@@ -9831,6 +10009,11 @@ var GravityRailClient = class {
   evaluateTestChatRun;
   endTestChatRun;
   // Personas API (workspace-scoped test-identity templates)
+  // Unified Query Engine
+  getQueryFields;
+  validateQuery;
+  previewQuery;
+  runQuery;
   listPersonas;
   getPersona;
   createPersona;
@@ -9970,6 +10153,8 @@ var GravityRailClient = class {
   updateBusinessProfile;
   submitBusinessProfile;
   cancelBusinessProfile;
+  createOrganizationWorkspace;
+  getOrgBillingCustomer;
   getVapidPublicKey;
   registerPushSubscription;
   unregisterPushSubscription;
@@ -10047,6 +10232,19 @@ var GravityRailClient = class {
   checkSiteSlugAvailability;
   checkSiteDomainAvailability;
   getSite;
+  getSiteSharing;
+  updateSiteSharing;
+  getSiteSource;
+  getSiteSourceTemplates;
+  createSiteSource;
+  buildSiteSource;
+  publishSiteSource;
+  resetSiteSource;
+  rollbackSiteSource;
+  downloadSiteSourceZip;
+  importSiteSourceZip;
+  getThemeSettings;
+  updateThemeSettings;
   getSiteByUuid;
   getSiteRenderedPage;
   getSiteRenderedMenu;
@@ -10076,6 +10274,7 @@ var GravityRailClient = class {
   // Files API
   getFiles;
   getFile;
+  downloadFilesZip;
   createFile;
   uploadFile;
   updateFile;
@@ -10115,6 +10314,7 @@ var GravityRailClient = class {
   createEventRule;
   updateEventRule;
   deleteEventRule;
+  testWebhook;
   reorderEventRules;
   getWebhookLogs;
   getRuleExecutions;
@@ -10298,6 +10498,8 @@ var GravityRailClient = class {
   updateSubscription;
   addWorkspaceToSubscription;
   purchaseCredits;
+  createCheckoutSession;
+  listSelfServeProducts;
   getAIUsageReport;
   getSMSUsageReport;
   getPhoneUsageReport;
@@ -10328,6 +10530,7 @@ var GravityRailClient = class {
   exchangeOAuthToken;
   getAvailableScopes;
   getOAuthConnectionStatus;
+  listOAuthAccounts;
   getOAuthAuthorizationUrl;
   disconnectOAuthProvider;
   // Integrations API
@@ -10421,6 +10624,9 @@ var GravityRailClient = class {
   fhirRefreshEncounterPatient;
   fhirBackfillEncounterSync;
   // Healthie API
+  configurePatientSync;
+  getPatientSyncStatus;
+  deletePatientSyncConnection;
   configureHealthie;
   getHealthieStatus;
   listHealthieProviders;
@@ -10500,6 +10706,7 @@ var GravityRailClient = class {
   updatePlatformApp;
   deletePlatformApp;
   listConnectionMemberFieldKeys;
+  setDefaultGooglePlatformAccount;
   // Pronunciations API
   getPronunciationEntries;
   createPronunciationEntry;
@@ -10548,6 +10755,7 @@ var GravityRailClient = class {
   createWorkspaceSupportRequest;
   commentOnWorkspaceSupportRequest;
   closeWorkspaceSupportRequest;
+  reopenWorkspaceSupportRequest;
   clickWorkspaceSupportRequestResource;
   constructor(apiKey, baseUrl, customFetch) {
     const apis = createApiModules(apiKey, baseUrl, customFetch);
@@ -10562,6 +10770,7 @@ var GravityRailClient = class {
     bindAgentsMethods(this, apis.agents);
     bindQualificationsMethods(this, apis.qualifications);
     bindPersonasMethods(this, apis.personas);
+    bindQueriesMethods(this, apis.queries);
     bindJourneysMethods(this, apis.journeys);
     bindExperimentsMethods(this, apis.experiments);
     bindOperatorMethods(this, apis.operatorGroups);
@@ -10601,6 +10810,7 @@ var GravityRailClient = class {
       apis.slackApps,
       apis.teamsApps,
       apis.fhirConnections,
+      apis.patientSyncConnections,
       apis.healthie,
       apis.salesforce,
       apis.hubspot,
@@ -10654,23 +10864,30 @@ var GravityRailClient = class {
     });
   }
   /**
-   * Set the org token for cross-domain / non-browser clients (e.g. CLI).
-   * When set, all API requests include the X-Org-Token header so the backend
-   * accepts the request without requiring a browser cookie.
+   * Set the org session credential for cross-domain / non-browser clients (e.g. CLI).
+   * Opaque gr_sess_ values use X-Org-Session. Legacy orgToken JWE values still
+   * use X-Org-Token during the migration window.
    *
-   * `orgUuid` is the org that issued the token. Pass it so the SDK can
-   * detect a stale token (e.g. switching orgs mid-session) and re-fire the
+   * `orgUuid` is the org that issued the session. Pass it so the SDK can
+   * detect a stale session (e.g. switching orgs mid-session) and re-fire the
    * org-auth handler instead of silently 401-ing.
    *
    * Propagates to all API modules.
    */
-  setOrgToken(token, orgUuid) {
+  setOrgSession(session, orgUuid) {
     Object.values(this.apis).forEach((api) => {
-      if (typeof api.setOrgToken === "function") {
-        api.setOrgToken(token, orgUuid);
+      if (typeof api.setOrgSession === "function") {
+        api.setOrgSession(session, orgUuid);
       }
     });
   }
+  /**
+   * @deprecated Legacy compatibility for stateless orgToken JWE credentials.
+   * Prefer setOrgSession() for opaque org browser sessions.
+   */
+  setOrgToken(token, orgUuid) {
+    this.setOrgSession(token, orgUuid);
+  }
   /**
    * Update the API key across all modules.
    * Used after successful re-authentication.
@@ -10721,15 +10938,20 @@ var AbilityTypeSlugs = {
   TOOLKITS: "tools:toolkits",
   WEB_SEARCH: "tools:web_search",
   CONVERSATION_HISTORY: "tools:conversation_history",
+  IMAGE_GENERATION: "tools:image_generation",
+  CONVERSATION_CONTROL: "tools:conversation_control",
   // Integration
   CALENDAR_BOOKING: "integration:calendar_booking",
   FILE_ACCESS: "integration:file_access",
   DATA_ACCESS: "integration:data_access",
   GMAIL: "integration:gmail",
+  GOOGLE_CALENDAR: "integration:google_calendar",
+  GOOGLE_DRIVE: "integration:google_drive",
   CHARLESTON_PMD_PAGING: "integration:charleston_pmd_paging",
   // Communication
   PHONE_CALL_TOOLS: "communication:phone_call_tools",
   SEND_SMS: "communication:send_sms",
+  SEND_WHATSAPP: "communication:send_whatsapp",
   MEMBER_ACCESS: "communication:member_access",
   AUDIO_PLAYBACK: "communication:audio_playback",
   // Oversight
@@ -10738,6 +10960,12 @@ var AbilityTypeSlugs = {
   ESCALATION: "oversight:escalation",
   // Identity
   MEMBER_FIELD_VERIFICATION: "identity:member_field_verification",
+  // Delegation
+  CONTRIBUTOR: "delegation:contributor",
+  // Workflow
+  WORKFLOW_RUN: "workflow:run",
+  // Commerce
+  RESELLER: "commerce:reseller",
   // System (auto-injected, hidden from users)
   USER_MESSAGE_RULES: "system:user_message_rules",
   ASSISTANT_MESSAGE_RULES: "chat:assistant_message_rules",
@@ -10759,7 +10987,6 @@ var TTS_PREVIEW_PROVIDERS = [
   "elevenlabs",
   "google",
   "aws",
-  "pocket",
   "deepgram",
   "xai"
 ];
@@ -10774,6 +11001,13 @@ function canPreviewVoice(entity) {
   return TTS_PREVIEW_PROVIDERS.includes(provider);
 }
 
+// src/types/query-engine-types.ts
+var QUERY_VALUELESS_OPS = /* @__PURE__ */ new Set([
+  "isEmpty",
+  "notEmpty",
+  "exists"
+]);
+
 // src/types/chat-types.ts
 var SMS_DELIVERY_FAILURE_STATUSES = /* @__PURE__ */ new Set([
   "failed",
@@ -10999,21 +11233,16 @@ var CHAT_TYPES = {
   ASSIGNMENT: "assignment",
   MANAGER: "manager",
   CONTRIBUTOR: "contributor",
-  DEVELOPER: "developer",
-  MEMBER: "member",
-  /** @deprecated Use MEMBER instead */
-  AGENT: "member",
-  /** @deprecated Use MEMBER instead */
-  DM: "member"
+  DM: "dm"
 };
 var BUILTIN_ASSISTANT_CHAT_TYPES = /* @__PURE__ */ new Set([
   CHAT_TYPES.MANAGER,
-  CHAT_TYPES.CONTRIBUTOR,
-  CHAT_TYPES.DEVELOPER
+  CHAT_TYPES.CONTRIBUTOR
 ]);
+var MEMBER_AGENT_CHAT_TYPES = /* @__PURE__ */ new Set([CHAT_TYPES.DM]);
 var NO_ASSISTANT_PARTICIPANT_CHAT_TYPES = /* @__PURE__ */ new Set([
   ...BUILTIN_ASSISTANT_CHAT_TYPES,
-  CHAT_TYPES.MEMBER
+  ...MEMBER_AGENT_CHAT_TYPES
 ]);
 function usesBuiltinAssistant(chatType) {
   return BUILTIN_ASSISTANT_CHAT_TYPES.has(chatType);
@@ -11806,9 +12035,6 @@ var SCOPE_PRESETS = {
 };
 
 export {
-  getCookieValue,
-  ApiError,
-  BaseApiClient,
   AbilitiesApi,
   AccessGrantsApi,
   AgentTasksApi,
@@ -11838,6 +12064,7 @@ export {
   InquiriesApi,
   AppConnectionsApi,
   McpServersApi,
+  MemberImportValidationError,
   MembersApi,
   MilestonesApi,
   MondayIntegrationApi,
@@ -11850,6 +12077,7 @@ export {
   PronunciationsApi,
   PromptsApi,
   PersonasApi,
+  QueriesApi,
   QualificationsApi,
   ReportsApi,
   SalesforceApi,
@@ -11883,6 +12111,8 @@ export {
   encodePermissions,
   Scope,
   BulkMemberResultStatus,
+  MemberImportMatchInfoMatchType,
+  MemberImportPreviewRowAction,
   MemberType,
   McpServerState,
   ToolkitState,
@@ -11918,7 +12148,8 @@ export {
   TTS_MODEL_DEEPGRAM_AURA_2,
   TTS_MODEL_AWS_POLLY_GENERATIVE,
   TTS_MODEL_AWS_POLLY_NEURAL,
-  TTS_MODEL_POCKET,
+  PIDS_DISPOSITIONS,
+  PIDS_SOURCES,
   FhirVendor,
   FhirConnectionState,
   FhirClientType,
@@ -11962,6 +12193,7 @@ export {
   bindJourneysMethods,
   bindQualificationsMethods,
   bindPersonasMethods,
+  bindQueriesMethods,
   bindCustomersMethods,
   bindResellersMethods,
   bindPromptsMethods,
@@ -11976,6 +12208,7 @@ export {
   TTS_PREVIEW_PROVIDERS,
   getVoiceModelId,
   canPreviewVoice,
+  QUERY_VALUELESS_OPS,
   SMS_DELIVERY_FAILURE_STATUSES,
   isSMSDeliveryFailureStatus,
   BusinessIndustry,
@@ -12020,4 +12253,4 @@ export {
   ScopeManager,
   SCOPE_PRESETS
 };
-//# sourceMappingURL=chunk-ANY7WLOD.js.map
+//# sourceMappingURL=chunk-2BJG4GYM.js.map