@gravity-rail/sdk 0.8.0 → 0.10.1

package/dist/index.cjs

@@ -54,6 +54,7 @@ __export(src_exports, {
   DEFAULT_VOICE_INFERENCE_MODEL: () => DEFAULT_VOICE_INFERENCE_MODEL,
   DataCategory: () => DataCategory,
   DataFieldType: () => DataFieldType,
+  DataRecordRetirementResponseReason: () => DataRecordRetirementResponseReason,
   DataSensitivity: () => DataSensitivity,
   DataTypeRecordScope: () => DataTypeRecordScope,
   DriverMode: () => DriverMode,
@@ -77,6 +78,9 @@ __export(src_exports, {
   McpServerState: () => McpServerState,
   MemberFeature: () => MemberFeature,
   MemberFilterBuilder: () => MemberFilterBuilder,
+  MemberImportMatchInfoMatchType: () => MemberImportMatchInfoMatchType,
+  MemberImportPreviewRowAction: () => MemberImportPreviewRowAction,
+  MemberImportValidationError: () => MemberImportValidationError,
   MemberLabelBuilder: () => MemberLabelBuilder,
   MemberType: () => MemberType,
   MenuItemResponseItemType: () => MenuItemResponseItemType,
@@ -99,7 +103,11 @@ __export(src_exports, {
   PERMISSION_NONE: () => PERMISSION_NONE,
   PERMISSION_USE: () => PERMISSION_USE,
   PERMISSION_VERIFY: () => PERMISSION_VERIFY,
+  PIDS_DISPOSITIONS: () => PIDS_DISPOSITIONS,
+  PIDS_SOURCES: () => PIDS_SOURCES,
   ProductType: () => ProductType,
+  QUERY_VALUELESS_OPS: () => QUERY_VALUELESS_OPS,
+  QueriesApi: () => QueriesApi,
   REALTIME_MODEL_CUSTOM: () => REALTIME_MODEL_CUSTOM,
   REALTIME_MODEL_GEMINI: () => REALTIME_MODEL_GEMINI,
   REALTIME_MODEL_GEMINI_VERTEX: () => REALTIME_MODEL_GEMINI_VERTEX,
@@ -129,7 +137,6 @@ __export(src_exports, {
   TTS_MODEL_ELEVENLABS_FLASH: () => TTS_MODEL_ELEVENLABS_FLASH,
   TTS_MODEL_ELEVENLABS_MULTILINGUAL: () => TTS_MODEL_ELEVENLABS_MULTILINGUAL,
   TTS_MODEL_ELEVENLABS_TURBO: () => TTS_MODEL_ELEVENLABS_TURBO,
-  TTS_MODEL_POCKET: () => TTS_MODEL_POCKET,
   TTS_PREVIEW_PROVIDERS: () => TTS_PREVIEW_PROVIDERS,
   TaskBuilder: () => TaskBuilder,
   TemplatesApi: () => TemplatesApi,
@@ -231,6 +238,22 @@ function parseOrgAuthChallenge(wwwAuthenticate) {
     authUrl: authUrlMatch[1]
   };
 }
+function getRequestOrgCookieName(cookieName) {
+  if (cookieName.startsWith("orgToken")) {
+    return cookieName.replace(/^orgToken/, "requestOrgToken");
+  }
+  if (cookieName.startsWith("orgSession")) {
+    return cookieName.replace(/^orgSession/, "requestOrgSession");
+  }
+  return null;
+}
+function orgAuthHeaderName(token) {
+  return token.startsWith("gr_sess_") ? "X-Org-Session" : "X-Org-Token";
+}
+function setOrgAuthHeader(headers, token) {
+  if (!token) return;
+  headers.set(orgAuthHeaderName(token), token);
+}
 var BaseApiClient = class {
   baseUrl;
   apiKey;
@@ -241,15 +264,15 @@ var BaseApiClient = class {
   orgAuthHandler;
   orgAuthInProgress = null;
   actingMemberUuid;
-  orgToken;
+  orgSession;
   /**
-   * The org_uuid that issued the current orgToken. Tracked so we can detect
+   * The org_uuid that issued the current org auth credential. Tracked so we can detect
    * a 401 challenge from a *different* org and re-fire the handler — the
-   * orgToken is an opaque JWE we cannot decrypt client-side, so without this
-   * the original guard `!this.orgToken` would prevent re-auth across orgs and
-   * surface as a silent 401 in multi-org CLI workflows.
+   * credential is opaque to the client, so without this the original guard
+   * `!this.orgSession` would prevent re-auth across orgs and surface as a silent
+   * 401 in multi-org CLI workflows.
    */
-  orgTokenOrgUuid;
+  orgSessionOrgUuid;
   constructor(apiKey, baseUrl, customFetch) {
     this.baseUrl = baseUrl;
     this.apiKey = apiKey;
@@ -296,18 +319,25 @@ var BaseApiClient = class {
     return this.actingMemberUuid;
   }
   /**
-   * Set the org token for cross-domain requests.
-   * When set, all API requests will include the X-Org-Token header,
-   * allowing org-level SSO verification without cookies.
+   * Set the opaque org session credential for cross-domain requests.
+   * Opaque gr_sess_ values use X-Org-Session. Legacy orgToken JWE values still
+   * use X-Org-Token through setOrgToken() during the migration window.
    *
-   * `orgUuid` is the org that issued the token; passing it lets the 401
-   * handler detect a stale token when a subsequent request targets a
+   * `orgUuid` is the org that issued the credential; passing it lets the 401
+   * handler detect a stale session when a subsequent request targets a
    * different org and re-fire the org-auth handler instead of silently
    * 401-ing. Callers without that context (legacy / unknown) may omit it.
    */
+  setOrgSession(session, orgUuid) {
+    this.orgSession = session;
+    this.orgSessionOrgUuid = session ? orgUuid : void 0;
+  }
+  /**
+   * @deprecated Legacy compatibility for stateless orgToken JWE credentials.
+   * Prefer setOrgSession() for opaque org browser sessions.
+   */
   setOrgToken(token, orgUuid) {
-    this.orgToken = token;
-    this.orgTokenOrgUuid = token ? orgUuid : void 0;
+    this.setOrgSession(token, orgUuid);
   }
   async fetch(endpoint, options) {
     try {
@@ -328,9 +358,7 @@ var BaseApiClient = class {
       if (this.actingMemberUuid) {
         headers.set("X-Acting-Member", this.actingMemberUuid);
       }
-      if (this.orgToken) {
-        headers.set("X-Org-Token", this.orgToken);
-      }
+      setOrgAuthHeader(headers, this.orgSession);
       const fullUrl = `${this.baseUrl}/api/v2/${endpoint}`;
       const response = await this.fetchFunction(fullUrl, {
         ...options,
@@ -354,31 +382,28 @@ var BaseApiClient = class {
           try {
             return await this.fetch(endpoint, options);
           } catch (retryError) {
-            this.orgToken = void 0;
-            this.orgTokenOrgUuid = void 0;
+            this.orgSession = void 0;
+            this.orgSessionOrgUuid = void 0;
             throw retryError;
           }
         }
         if (response.status === 401) {
           const orgAuthInfo = parseOrgAuthChallenge(response.headers.get("WWW-Authenticate"));
-          if (orgAuthInfo && this.orgToken && this.orgTokenOrgUuid && this.orgTokenOrgUuid !== orgAuthInfo.orgUuid) {
-            this.orgToken = void 0;
-            this.orgTokenOrgUuid = void 0;
+          if (orgAuthInfo && this.orgSession && this.orgSessionOrgUuid && this.orgSessionOrgUuid !== orgAuthInfo.orgUuid) {
+            this.orgSession = void 0;
+            this.orgSessionOrgUuid = void 0;
           }
-          if (orgAuthInfo && !this.orgToken) {
-            const requestCookieName = orgAuthInfo.cookieName.replace(
-              /^orgToken/,
-              "requestOrgToken"
-            );
-            const cachedOrgToken = getCookieValue(requestCookieName);
-            if (cachedOrgToken) {
-              this.orgToken = cachedOrgToken;
-              this.orgTokenOrgUuid = orgAuthInfo.orgUuid;
+          if (orgAuthInfo && !this.orgSession) {
+            const requestCookieName = getRequestOrgCookieName(orgAuthInfo.cookieName);
+            const cachedOrgSession = requestCookieName ? getCookieValue(requestCookieName) : void 0;
+            if (cachedOrgSession) {
+              this.orgSession = cachedOrgSession;
+              this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
               try {
                 return await this.fetch(endpoint, options);
               } catch (retryError) {
-                this.orgToken = void 0;
-                this.orgTokenOrgUuid = void 0;
+                this.orgSession = void 0;
+                this.orgSessionOrgUuid = void 0;
                 throw retryError;
               }
             }
@@ -394,20 +419,20 @@ var BaseApiClient = class {
                 })();
               }
               await this.orgAuthInProgress;
-              const postHandlerToken = getCookieValue(requestCookieName) ?? this.orgToken;
-              if (!postHandlerToken) {
+              const postHandlerSession = (requestCookieName ? getCookieValue(requestCookieName) : void 0) ?? this.orgSession;
+              if (!postHandlerSession) {
                 throw new ApiError(
-                  "Organization authentication did not issue a token",
+                  "Organization authentication did not issue a session",
                   401
                 );
               }
-              this.orgToken = postHandlerToken;
-              this.orgTokenOrgUuid = orgAuthInfo.orgUuid;
+              this.orgSession = postHandlerSession;
+              this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
               try {
                 return await this.fetch(endpoint, options);
               } catch (retryError) {
-                this.orgToken = void 0;
-                this.orgTokenOrgUuid = void 0;
+                this.orgSession = void 0;
+                this.orgSessionOrgUuid = void 0;
                 throw retryError;
               }
             }
@@ -482,9 +507,7 @@ ${formattedErrors}`, response.status);
       if (this.actingMemberUuid) {
         headers.set("X-Acting-Member", this.actingMemberUuid);
       }
-      if (this.orgToken) {
-        headers.set("X-Org-Token", this.orgToken);
-      }
+      setOrgAuthHeader(headers, this.orgSession);
       const response = await this.fetchFunction(`${this.baseUrl}/api/v2/${endpoint}`, {
         ...options,
         ...this.apiKey ? {} : { credentials: "include" },
@@ -507,31 +530,28 @@ ${formattedErrors}`, response.status);
           try {
             return await this.fetchRaw(endpoint, options, allowedErrorStatuses);
           } catch (retryError) {
-            this.orgToken = void 0;
-            this.orgTokenOrgUuid = void 0;
+            this.orgSession = void 0;
+            this.orgSessionOrgUuid = void 0;
             throw retryError;
           }
         }
         if (response.status === 401) {
           const orgAuthInfo = parseOrgAuthChallenge(response.headers.get("WWW-Authenticate"));
-          if (orgAuthInfo && this.orgToken && this.orgTokenOrgUuid && this.orgTokenOrgUuid !== orgAuthInfo.orgUuid) {
-            this.orgToken = void 0;
-            this.orgTokenOrgUuid = void 0;
+          if (orgAuthInfo && this.orgSession && this.orgSessionOrgUuid && this.orgSessionOrgUuid !== orgAuthInfo.orgUuid) {
+            this.orgSession = void 0;
+            this.orgSessionOrgUuid = void 0;
           }
-          if (orgAuthInfo && !this.orgToken) {
-            const requestCookieName = orgAuthInfo.cookieName.replace(
-              /^orgToken/,
-              "requestOrgToken"
-            );
-            const cachedOrgToken = getCookieValue(requestCookieName);
-            if (cachedOrgToken) {
-              this.orgToken = cachedOrgToken;
-              this.orgTokenOrgUuid = orgAuthInfo.orgUuid;
+          if (orgAuthInfo && !this.orgSession) {
+            const requestCookieName = getRequestOrgCookieName(orgAuthInfo.cookieName);
+            const cachedOrgSession = requestCookieName ? getCookieValue(requestCookieName) : void 0;
+            if (cachedOrgSession) {
+              this.orgSession = cachedOrgSession;
+              this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
               try {
                 return await this.fetchRaw(endpoint, options, allowedErrorStatuses);
               } catch (retryError) {
-                this.orgToken = void 0;
-                this.orgTokenOrgUuid = void 0;
+                this.orgSession = void 0;
+                this.orgSessionOrgUuid = void 0;
                 throw retryError;
               }
             }
@@ -547,20 +567,20 @@ ${formattedErrors}`, response.status);
                 })();
               }
               await this.orgAuthInProgress;
-              const postHandlerToken = getCookieValue(requestCookieName) ?? this.orgToken;
-              if (!postHandlerToken) {
+              const postHandlerSession = (requestCookieName ? getCookieValue(requestCookieName) : void 0) ?? this.orgSession;
+              if (!postHandlerSession) {
                 throw new ApiError(
-                  "Organization authentication did not issue a token",
+                  "Organization authentication did not issue a session",
                   401
                 );
               }
-              this.orgToken = postHandlerToken;
-              this.orgTokenOrgUuid = orgAuthInfo.orgUuid;
+              this.orgSession = postHandlerSession;
+              this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
               try {
                 return await this.fetchRaw(endpoint, options, allowedErrorStatuses);
               } catch (retryError) {
-                this.orgToken = void 0;
-                this.orgTokenOrgUuid = void 0;
+                this.orgSession = void 0;
+                this.orgSessionOrgUuid = void 0;
                 throw retryError;
               }
             }
@@ -599,9 +619,7 @@ ${formattedErrors}`, response.status);
       if (this.actingMemberUuid) {
         headers.set("X-Acting-Member", this.actingMemberUuid);
       }
-      if (this.orgToken) {
-        headers.set("X-Org-Token", this.orgToken);
-      }
+      setOrgAuthHeader(headers, this.orgSession);
       const fullUrl = `${this.baseUrl}/${path}`;
       const response = await this.fetchFunction(fullUrl, {
         ...options,
@@ -1310,15 +1328,11 @@ var AuthApi = class extends BaseApiClient {
       body: JSON.stringify({ email, organizationUuid, redirectUrl })
     });
   }
-  /** Validate a magic link token and optional OTP to complete authentication. */
-  async validateMagicLink(token, otp) {
-    const body = { token };
-    if (otp) {
-      body.otp = otp;
-    }
+  /** Validate a magic link token to complete authentication. */
+  async validateMagicLink(token) {
     return await this.fetch(`auth/validate-magic-link`, {
       method: "POST",
-      body: JSON.stringify(body)
+      body: JSON.stringify({ token })
     });
   }
   // ===== EMAIL VERIFICATION METHODS =====
@@ -1824,6 +1838,26 @@ var CallsApi = class extends BaseApiClient {
   async getMessageTiming(wid, chatId) {
     return this.fetch(`w/${wid}/recordings/chat/${chatId}/message-timing`);
   }
+  /** List the recorded audio chunks for a chat (metadata only). */
+  async listChatRecordings(wid, chatId, options = {}) {
+    const params = new URLSearchParams();
+    if (options.role) params.set("role", options.role);
+    return this.fetch(
+      `w/${wid}/recordings/chat/${chatId}${params.toString() ? `?${params.toString()}` : ""}`
+    );
+  }
+  /**
+   * Get a single short-lived presigned URL to download the complete call
+   * recording as one WAV file. The first request assembles + caches the
+   * full-call WAV; later requests reuse it.
+   */
+  async getCallRecordingDownloadUrl(wid, chatId, options = {}) {
+    const params = new URLSearchParams();
+    if (options.expiresIn !== void 0) params.set("expires_in", String(options.expiresIn));
+    return this.fetch(
+      `w/${wid}/recordings/chat/${chatId}/download-url${params.toString() ? `?${params.toString()}` : ""}`
+    );
+  }
 };
 
 // src/api/cel.ts
@@ -1908,6 +1942,17 @@ var ChatsApi = class extends BaseApiClient {
   async getChatTokenUsage(wid, chatId) {
     return this.fetch(`w/${wid}/chats/${chatId}/token-usage`);
   }
+  /** List scheduled callbacks for a chat (newest first). */
+  async getChatCallbacks(wid, chatId) {
+    return this.fetch(`w/${wid}/chats/${chatId}/callbacks`);
+  }
+  /** Cancel a pending scheduled callback on a chat. */
+  async cancelChatCallback(wid, chatId, callbackId) {
+    return this.fetch(
+      `w/${wid}/chats/${chatId}/callbacks/${callbackId}/cancel`,
+      { method: "POST" }
+    );
+  }
   /** Get todo items extracted from a chat. */
   async getChatTodos(wid, chatId) {
     return this.fetch(`w/${wid}/chats/${chatId}/todos`);
@@ -1946,9 +1991,11 @@ var ChatsApi = class extends BaseApiClient {
   }
   /** Create a new chat. */
   async createChat(wid, chat) {
+    const { agentMemberId, ...rest } = chat;
+    const payload = agentMemberId !== void 0 && rest.assistantMemberId === void 0 ? { ...rest, assistantMemberId: agentMemberId } : rest;
     return this.fetch(`w/${wid}/chats`, {
       method: "POST",
-      body: JSON.stringify(chat)
+      body: JSON.stringify(payload)
     });
   }
   /**
@@ -2011,7 +2058,8 @@ var ChatsApi = class extends BaseApiClient {
       }
     );
   }
-  /** List messages in a chat with optional pagination. */
+  /** List messages in a chat with optional pagination.
+   *  ``id`` is the numeric chat id (documented) or the chat uuid (accepted). */
   async getChatMessages(wid, id, limit, offset) {
     const params = new URLSearchParams();
     if (limit) params.append("limit", limit.toString());
@@ -2391,6 +2439,7 @@ var DataTypesApi = class extends BaseApiClient {
   async getDataRecords(wid, dataTypeId, options) {
     const params = new URLSearchParams();
     if (options?.memberId !== void 0) params.append("member_id", options.memberId.toString());
+    if (options?.memberIds?.length) params.append("member_ids", options.memberIds.join(","));
     if (options?.search) params.append("search", options.search);
     if (options?.searchField) params.append("search_field", options.searchField);
     if (options?.page) params.append("page", options.page.toString());
@@ -2795,6 +2844,13 @@ var EventsApi = class extends BaseApiClient {
       method: "DELETE"
     });
   }
+  /** Send a one-off test webhook for an existing webhook event rule. */
+  async testWebhook(wid, id, request) {
+    return this.fetch(`w/${wid}/event-rules/${id}/test-webhook`, {
+      method: "POST",
+      body: JSON.stringify(request)
+    });
+  }
   /** Reorder event rules by specifying the desired rule ID sequence. */
   async reorderEventRules(wid, ruleIds) {
     return this.fetch(`w/${wid}/event-rules/reorder`, {
@@ -3272,6 +3328,25 @@ var FhirConnectionsApi = class extends BaseApiClient {
   }
 };
 
+// src/api/patientsync-connections.ts
+var PatientSyncConnectionsApi = class extends BaseApiClient {
+  /** Create or update the workspace's PatientSync connection (singleton). */
+  async configurePatientSync(wid, data) {
+    return this.fetch(
+      `w/${wid}/app-connections/patientsync/configure`,
+      { method: "POST", body: JSON.stringify(data) }
+    );
+  }
+  /** Read the PatientSync connection status (never returns the API key). */
+  async getPatientSyncStatus(wid) {
+    return this.fetch(`w/${wid}/app-connections/patientsync/status`);
+  }
+  /** Delete the workspace's PatientSync connection. */
+  async deletePatientSyncConnection(wid) {
+    return this.fetch(`w/${wid}/app-connections/patientsync/`, { method: "DELETE" });
+  }
+};
+
 // src/api/healthie.ts
 var HealthieApi = class extends BaseApiClient {
   async configureHealthie(wid, data) {
@@ -3392,6 +3467,18 @@ var FilesApi = class extends BaseApiClient {
   async getFile(wid, id) {
     return this.fetch(`w/${wid}/files/${id}`);
   }
+  /**
+   * Download the given files + folders (folders recursively) as a single ZIP.
+   * Returns the raw archive bytes for the caller to save.
+   */
+  async downloadFilesZip(wid, fileIds, folderIds) {
+    const response = await this.fetchRaw(`w/${wid}/files/download/zip`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ file_ids: fileIds, folder_ids: folderIds })
+    });
+    return response.blob();
+  }
   /** Create a new file record in the workspace. */
   async createFile(wid, file) {
     return this.fetch(`w/${wid}/files`, {
@@ -4008,6 +4095,31 @@ var McpServersApi = class extends BaseApiClient {
 };
 
 // src/api/members.ts
+var MemberImportValidationError = class extends Error {
+  validationErrors;
+  constructor(message, validationErrors) {
+    super(message);
+    this.name = "MemberImportValidationError";
+    this.validationErrors = validationErrors;
+  }
+};
+function throwMemberImportError(errorBody, fallback) {
+  let detail = errorBody?.detail;
+  if (typeof detail === "string") {
+    try {
+      const parsed = JSON.parse(detail);
+      if (parsed && typeof parsed === "object") detail = parsed;
+    } catch {
+    }
+  }
+  if (detail && typeof detail === "object") {
+    const { message, errors } = detail;
+    if (Array.isArray(errors)) {
+      throw new MemberImportValidationError(message || fallback, errors);
+    }
+  }
+  throw new Error(typeof detail === "string" ? detail : fallback);
+}
 var MembersApi = class extends BaseApiClient {
   /** Get the currently authenticated member for a workspace. */
   async getCurrentMember(wid) {
@@ -4048,8 +4160,10 @@ var MembersApi = class extends BaseApiClient {
     });
   }
   /** List workspace members with pagination, filtering, and sorting. */
-  async getWorkspaceMembers(wid, page = 1, pageSize = 10, filters, search, role, sortBy, sortOrder, memberType, isArchived = false, isManager, memberTypes, hasAccount, excludeIds) {
+  async getWorkspaceMembers(wid, page = 1, pageSize = 10, filters, search, role, sortBy, sortOrder, memberType, isArchived = false, isManager, memberTypes, hasAccount, excludeIds, memberFilterId, query) {
     const params = new URLSearchParams();
+    if (memberFilterId != null) params.append("memberFilterId", memberFilterId.toString());
+    if (query != null) params.append("query", JSON.stringify(query));
     if (page) params.append("page", page.toString());
     if (pageSize) params.append("pageSize", pageSize.toString());
     if (sortBy) params.append("sortBy", sortBy);
@@ -4122,6 +4236,17 @@ var MembersApi = class extends BaseApiClient {
       method: "POST"
     });
   }
+  /**
+   * Send the member an SMS asking them to confirm their phone number. When they
+   * reply, a trusted phone auth binding is created so they can use SMS as
+   * themselves without an account (member-attested alternative to the
+   * members:admin "Trusted" override).
+   */
+  async sendMemberPhoneConfirmation(wid, memberId) {
+    return this.fetch(`w/${wid}/members/${memberId}/phone-confirmation`, {
+      method: "POST"
+    });
+  }
   // Member Filter APIs
   /** List all saved member filters for a workspace. */
   async getMemberFilters(wid) {
@@ -4145,6 +4270,22 @@ var MembersApi = class extends BaseApiClient {
       body: JSON.stringify(data)
     });
   }
+  /**
+   * Convert a legacy rules filter to a query-engine predicate. One-way and
+   * transactional: on success the filter's legacy rules are gone and
+   * `query` holds the equivalent IR predicate. 409 if already query-format;
+   * 422 when rules have no engine equivalent.
+   *
+   * With `dryRun: true` the same validation runs but nothing persists: the
+   * response previews the normalized predicate in `query` while `rules`
+   * stay intact on the filter.
+   */
+  async convertMemberFilterToQuery(wid, filterId, opts) {
+    const suffix = opts?.dryRun ? "?dryRun=true" : "";
+    return this.fetch(`w/${wid}/member-filters/${filterId}/convert${suffix}`, {
+      method: "PUT"
+    });
+  }
   /** Delete a saved member filter. */
   async deleteMemberFilter(wid, filterId) {
     return this.fetch(`w/${wid}/member-filters/${filterId}`, {
@@ -4222,48 +4363,98 @@ var MembersApi = class extends BaseApiClient {
     });
   }
   // Import/Export Members API
-  /** Import members from a CSV file, streaming progress updates via callback. */
-  async importMembers(wid, file, newMemberRoleId, onProgress) {
+  /**
+   * Read-only preview classifying each CSV row before any write (GRA-5545).
+   *
+   * Returns create/update/unchanged/conflict/error counts. For phone-only
+   * identity conflicts it also returns existing vs incoming identity so the
+   * operator can decide whether to skip or explicitly overwrite before
+   * committing. Requires MEMBERS_ADMIN and is bulk-PHI audited server-side.
+   */
+  async previewImportMembers(wid, file, newMemberRoleId, options) {
     const formData = new FormData();
     formData.append("file", file);
     const params = new URLSearchParams();
     params.append("new_member_role_id", newMemberRoleId.toString());
-    const response = await fetch(
-      `${this.baseUrl}/api/v2/w/${wid}/members/import?${params.toString()}`,
+    if (options?.trustEmailAddresses) {
+      params.append("trust_email_addresses", "true");
+    }
+    if (options?.trustPhoneNumbers) {
+      params.append("trust_phone_numbers", "true");
+    }
+    const response = await this.fetchRaw(
+      `w/${wid}/members/import/preview?${params.toString()}`,
       {
         method: "POST",
-        body: formData,
-        credentials: "include"
-      }
+        body: formData
+      },
+      [400, 413]
     );
     if (!response.ok) {
-      const error = await response.json();
-      if (error.detail && typeof error.detail === "object") {
-        const { message, errors } = error.detail;
-        if (errors && Array.isArray(errors)) {
-          const importError = new Error(message || "Import validation failed");
-          importError.validationErrors = errors;
-          throw importError;
-        }
-      }
-      throw new Error(error.detail || "Import failed");
+      const error = await response.json().catch(() => ({}));
+      throwMemberImportError(error, "Import preview failed");
+    }
+    return response.json();
+  }
+  /**
+   * Import members from a CSV file, streaming progress updates via callback.
+   *
+   * ``identityConflictPolicy`` (default 'skip') controls how a row matching an
+   * existing member ONLY by phone with different identity fields is handled.
+   * Send 'overwrite_identity_fields' only after the operator confirms a preview.
+   */
+  async importMembers(wid, file, newMemberRoleId, onProgress, options) {
+    const formData = new FormData();
+    formData.append("file", file);
+    const params = new URLSearchParams();
+    params.append("new_member_role_id", newMemberRoleId.toString());
+    if (options?.trustEmailAddresses) {
+      params.append("trust_email_addresses", "true");
+    }
+    if (options?.trustPhoneNumbers) {
+      params.append("trust_phone_numbers", "true");
+    }
+    if (options?.identityConflictPolicy) {
+      params.append("identity_conflict_policy", options.identityConflictPolicy);
+    }
+    const response = await this.fetchRaw(
+      `w/${wid}/members/import?${params.toString()}`,
+      {
+        method: "POST",
+        body: formData
+      },
+      [400, 413]
+    );
+    if (!response.ok) {
+      const error = await response.json().catch(() => ({}));
+      throwMemberImportError(error, "Import failed");
     }
     if (onProgress && response.body) {
       const reader = response.body.getReader();
       const decoder = new TextDecoder();
+      let buffer = "";
       while (true) {
         const { done, value } = await reader.read();
         if (done) break;
-        const chunk = decoder.decode(value);
-        const lines = chunk.split("\n").filter((line) => line.trim());
+        buffer += decoder.decode(value, { stream: true });
+        const lines = buffer.split("\n");
+        buffer = lines.pop() ?? "";
         for (const line of lines) {
+          const trimmed = line.trim();
+          if (!trimmed) continue;
           try {
-            const progress = JSON.parse(line);
-            onProgress(progress);
+            onProgress(JSON.parse(trimmed));
           } catch {
           }
         }
       }
+      const tail = buffer.trim();
+      if (tail) {
+        try {
+          onProgress(JSON.parse(tail));
+        } catch {
+        }
+      }
     }
     return { success: true };
   }
@@ -4455,6 +4646,17 @@ var MembersApi = class extends BaseApiClient {
       { method: "DELETE" }
     );
   }
+  /** Bulk-create members in a workspace. */
+  async bulkCreateMembers(wid, request) {
+    return this.fetch(`w/${wid}/members/bulk`, {
+      method: "POST",
+      body: JSON.stringify(request)
+    });
+  }
+  /** Get all sync links for a member across app connections. */
+  async getMemberSyncLinks(wid, memberId) {
+    return this.fetch(`w/${wid}/members/${memberId}/sync-links`);
+  }
 };
 
 // src/api/milestones.ts
@@ -4951,6 +5153,7 @@ var OrgApi = class extends BaseApiClient {
    */
   async searchPhoneNumbers(orgUuid, params) {
     const query = new URLSearchParams();
+    if (params?.country) query.set("country", params.country);
     if (params?.numberType) query.set("number_type", params.numberType);
     if (params?.areaCode) query.set("area_code", params.areaCode);
     if (params?.contains) query.set("contains", params.contains);
@@ -4962,11 +5165,20 @@ var OrgApi = class extends BaseApiClient {
   }
   /**
    * Purchase a phone number from Twilio for this org inventory (org admin only).
+   *
+   * Numbers in regulated countries (e.g. Australia) require a Twilio regulatory
+   * bundle and an address — pass `bundleSid` and `addressSid` for those.
    */
-  async purchasePhoneNumber(orgUuid, phoneNumber, numberType) {
+  async purchasePhoneNumber(orgUuid, phoneNumber, numberType, opts) {
     return this.fetch(`o/${orgUuid}/phone-numbers/purchase`, {
       method: "POST",
-      body: JSON.stringify({ phoneNumber, numberType })
+      body: JSON.stringify({
+        phoneNumber,
+        numberType,
+        country: opts?.country,
+        bundleSid: opts?.bundleSid,
+        addressSid: opts?.addressSid
+      })
     });
   }
   /**
@@ -5174,6 +5386,90 @@ var OrgApi = class extends BaseApiClient {
       method: "POST"
     });
   }
+  /**
+   * List the org's A2P brands (broker resources). The SMS-consent editor uses
+   * this to pick which brand's consent config to edit.
+   */
+  async listA2PBrands(orgUuid) {
+    return this.fetch(`o/${orgUuid}/a2p-brands`);
+  }
+  /**
+   * Fetch a brand's resolved A2P campaign config. The response carries both the
+   * raw `overrides` and the `resolved` payload (defaults + overrides) the editor
+   * previews — including the canonical SMS consent text.
+   */
+  async getA2PCampaignConfig(orgUuid, brandUuid) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/campaign-config`
+    );
+  }
+  /**
+   * Partial-update a brand's A2P campaign config. Returns the freshly resolved
+   * config so the editor's live preview updates without a second round-trip.
+   */
+  async updateA2PCampaignConfig(orgUuid, brandUuid, data) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/campaign-config`,
+      {
+        method: "PUT",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  /**
+   * Published Sites across the org's workspaces that can be linked as this
+   * brand's enrollment (opt-in) surface. Org-authorized, so it works even when
+   * the admin isn't a member of the workspace holding the Site.
+   */
+  async listA2PEnrollmentSiteCandidates(orgUuid, brandUuid) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-site/candidates`
+    );
+  }
+  /**
+   * Link the brand to a published enrollment Site (sets `site_uuid`). Returns
+   * the refreshed campaign config so the editor's link state updates inline.
+   */
+  async linkA2PEnrollmentSite(orgUuid, brandUuid, data) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-site`,
+      {
+        method: "PUT",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  /**
+   * Provision (or reuse) a patient-enrollment Site for the brand and link it —
+   * the one-click path behind the SMS Consent tab. `workspaceUuid` is required
+   * only when the org has multiple workspaces. Returns the refreshed campaign
+   * config so the editor's link state updates inline. Idempotent.
+   */
+  async provisionA2PEnrollmentSite(orgUuid, brandUuid, data = {}) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-site/provision`,
+      {
+        method: "POST",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  /** Clear the brand's enrollment-site link. */
+  async unlinkA2PEnrollmentSite(orgUuid, brandUuid) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-site`,
+      { method: "DELETE" }
+    );
+  }
+  /**
+   * The brand-addressable enrollment form URL (carries `?brand=…`). Outreach
+   * appends each patient's `external_id`. `url` is null until a Site is linked.
+   */
+  async getA2PBrandEnrollmentUrl(orgUuid, brandUuid) {
+    return this.fetch(
+      `o/${orgUuid}/a2p-brands/${brandUuid}/enrollment-url`
+    );
+  }
   /**
    * List available member roles for a workspace in the organization.
    */
@@ -5198,58 +5494,53 @@ var OrgApi = class extends BaseApiClient {
 function getOAuthPath(providerSlug, action) {
   if (providerSlug === "google_calendar") {
     return `oauth/google/calendar/${action}`;
-  } else if (providerSlug === "gmail") {
+  }
+  if (providerSlug === "gmail") {
     return `oauth/google/gmail/${action}`;
-  } else {
-    return `oauth/${providerSlug}/${action}`;
   }
+  if (providerSlug === "gdrive") {
+    return `oauth/google/drive/${action}`;
+  }
+  return `oauth/${providerSlug}/${action}`;
+}
+function buildAuthorizeQuery(options) {
+  if (!options) return "";
+  const params = new URLSearchParams();
+  if (options.credentialUuid) params.set("credentialUuid", options.credentialUuid);
+  if (options.loginHint) params.set("loginHint", options.loginHint);
+  if (options.redirect) params.set("redirect", options.redirect);
+  const qs = params.toString();
+  return qs ? `?${qs}` : "";
 }
 var OAuthConnectionsApi = class extends BaseApiClient {
-  /**
-   * Get the connection status for an OAuth provider
-   */
   async getConnectionStatus(providerSlug) {
     const path = getOAuthPath(providerSlug, "status");
     return this.fetchRoot(path);
   }
-  /**
-   * Get the authorization URL to start OAuth flow
-   */
-  async getAuthorizationUrl(providerSlug) {
-    const path = getOAuthPath(providerSlug, "authorize");
+  async listAccounts(providerSlug) {
+    const path = getOAuthPath(providerSlug, "accounts");
     return this.fetchRoot(path);
   }
-  /**
-   * Disconnect an OAuth provider
-   */
-  async disconnect(providerSlug) {
+  async getAuthorizationUrl(providerSlug, options) {
+    const path = getOAuthPath(providerSlug, "authorize") + buildAuthorizeQuery(options);
+    return this.fetchRoot(path);
+  }
+  async disconnect(providerSlug, credentialUuid) {
     const path = getOAuthPath(providerSlug, "disconnect");
-    return this.fetchRoot(path, { method: "DELETE" });
+    const qs = credentialUuid ? `?credentialUuid=${encodeURIComponent(credentialUuid)}` : "";
+    return this.fetchRoot(`${path}${qs}`, { method: "DELETE" });
   }
 };
 var OAuthApi = class extends BaseApiClient {
-  /**
-   * Get all available OAuth/API key scopes with metadata.
-   *
-   * This returns the full scope definitions from the backend,
-   * ensuring the UI always shows the correct scopes.
-   */
   async getAvailableScopes() {
     return this.fetch("oauth/scopes");
   }
-  /**
-   * Create an authorization code for OAuth flow
-   * This is called after the user approves the authorization request
-   */
   async authorize(request) {
     return this.fetch("oauth/authorize", {
       method: "POST",
       body: JSON.stringify(request)
     });
   }
-  /**
-   * Exchange authorization code for access token
-   */
   async exchangeOAuthToken(request) {
     const formData = new URLSearchParams();
     formData.append("grant_type", request.grant_type);
@@ -5543,6 +5834,37 @@ var PersonasApi = class extends BaseApiClient {
   }
 };
 
+// src/api/queries.ts
+var QueriesApi = class extends BaseApiClient {
+  /** Queryable namespace: native fields, operators per type, DataType record fields. */
+  async getQueryFields(wid) {
+    return this.fetch(`w/${wid}/queries/fields`, {
+      method: "GET"
+    });
+  }
+  /** Structure / field / access / cost validation without execution. */
+  async validateQuery(wid, query) {
+    return this.fetch(`w/${wid}/queries/validate`, {
+      method: "POST",
+      body: JSON.stringify({ query })
+    });
+  }
+  /** Bounded sample run (limit capped server-side). */
+  async previewQuery(wid, query, mode) {
+    return this.fetch(`w/${wid}/queries/preview`, {
+      method: "POST",
+      body: JSON.stringify({ query, mode })
+    });
+  }
+  /** Execute a query (rows / count / aggregate). */
+  async runQuery(wid, query, mode) {
+    return this.fetch(`w/${wid}/queries/run`, {
+      method: "POST",
+      body: JSON.stringify({ query, mode })
+    });
+  }
+};
+
 // src/api/qualifications.ts
 var QualificationsApi = class extends BaseApiClient {
   /** List qualifications in a workspace, paginated. */
@@ -5594,6 +5916,9 @@ var QualificationsApi = class extends BaseApiClient {
   async listTestChatRuns(wid, workflowId, params) {
     const query = new URLSearchParams();
     if (params?.scenarioId !== void 0) query.set("scenarioId", String(params.scenarioId));
+    if (params?.assistantChatModelId !== void 0) {
+      query.set("assistantChatModelId", params.assistantChatModelId);
+    }
     if (params?.limit !== void 0) query.set("limit", String(params.limit));
     const qs = query.toString() ? `?${query.toString()}` : "";
     return this.fetch(
@@ -6028,6 +6353,112 @@ var SitesApi = class extends BaseApiClient {
   async getSite(wid, id) {
     return this.fetch(`w/${wid}/sites/${id}`);
   }
+  /** Get a site's sharing settings. */
+  async getSiteSharing(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/sharing`);
+  }
+  /** Update a site's sharing settings. */
+  async updateSiteSharing(wid, siteId, data) {
+    return this.fetch(`w/${wid}/sites/${siteId}/sharing`, {
+      method: "PUT",
+      body: JSON.stringify(data)
+    });
+  }
+  /** Get a site's source tree. */
+  async getSiteSource(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source`);
+  }
+  /** Starter templates the caller may seed (superuser-only ones filtered server-side). */
+  async getSiteSourceTemplates(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/templates`);
+  }
+  /** Create a site's source tree with starter files if it does not exist. */
+  async createSiteSource(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source`, {
+      method: "POST"
+    });
+  }
+  /** Build a site's source without publishing. */
+  async buildSiteSource(wid, siteId) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/build`, {
+      method: "POST"
+    });
+  }
+  /**
+   * Build and publish a site's source. Optionally label the published version
+   * with a `name` and `note`; both default to null (the UI then shows
+   * "Version {version}").
+   */
+  async publishSiteSource(wid, siteId, options) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/publish`, {
+      method: "POST",
+      body: JSON.stringify({
+        name: options?.name ?? null,
+        note: options?.note ?? null
+      })
+    });
+  }
+  /**
+   * Reset a site's source files: load a starter template and/or wipe existing
+   * files. `template` selects which starter to seed when `loadDefaults` is set
+   * (defaults to "hello-world"; "patient-enrollment" is the other built-in).
+   */
+  async resetSiteSource(wid, siteId, options) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/reset`, {
+      method: "POST",
+      body: JSON.stringify({
+        load_defaults: options.loadDefaults,
+        delete_existing: options.deleteExisting,
+        ...options.template ? { template: options.template } : {}
+      })
+    });
+  }
+  /**
+   * Re-point the published release to a prior version from the history. A pure
+   * pointer move (no rebuild); the other versions stay in the history.
+   */
+  async rollbackSiteSource(wid, siteId, releaseUuid) {
+    return this.fetch(`w/${wid}/sites/${siteId}/source/rollback`, {
+      method: "POST",
+      body: JSON.stringify({ release_uuid: releaseUuid })
+    });
+  }
+  /**
+   * Export the site's source tree as a ZIP archive (editor-gated server-side).
+   * Returns the raw archive bytes for the caller to save.
+   */
+  async downloadSiteSourceZip(wid, siteId) {
+    const response = await this.fetchRaw(`w/${wid}/sites/${siteId}/source/download`);
+    return response.blob();
+  }
+  /**
+   * Replace the site's source tree with the contents of an uploaded ZIP
+   * (clears the existing source first, like a reset that loads a template).
+   */
+  async importSiteSourceZip(wid, siteId, file) {
+    const form = new FormData();
+    form.append("file", file, "source.zip");
+    return this.fetch(`w/${wid}/sites/${siteId}/source/import`, {
+      method: "POST",
+      body: form
+    });
+  }
+  /**
+   * Get a theme's settings schema, the site's saved values, and capabilities.
+   * Pass `theme` to resolve the schema for a theme other than the saved one
+   * (e.g. one the builder has selected but not yet saved).
+   */
+  async getThemeSettings(wid, siteId, theme) {
+    const query = theme ? `?theme=${encodeURIComponent(theme)}` : "";
+    return this.fetch(`w/${wid}/sites/${siteId}/theme-settings${query}`);
+  }
+  /** Save values for the active theme's settings (validated against the schema). */
+  async updateThemeSettings(wid, siteId, values) {
+    return this.fetch(`w/${wid}/sites/${siteId}/theme-settings`, {
+      method: "PUT",
+      body: JSON.stringify({ values })
+    });
+  }
   /** Get a single site by UUID. */
   async getSiteByUuid(wid, uuid) {
     return this.fetch(`s/${wid}/${uuid}`);
@@ -6383,6 +6814,16 @@ var SupportRequestsApi = class extends BaseApiClient {
       body: JSON.stringify(data)
     });
   }
+  /**
+   * Reopen a resolved support request (e.g. staff resolved it prematurely).
+   * The server rejects requests that are not in the `resolved` state.
+   */
+  async reopenWorkspaceSupportRequest(workspaceUuid, uuid, data = {}) {
+    return this.fetch(`w/${workspaceUuid}/support-requests/${uuid}/reopen`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
   /**
    * Record a click on a pushed resource (Proactive Support). For a
    * manager_prompt, pass the Manager Chat UUID it opened so the
@@ -7317,6 +7758,20 @@ var BulkMemberResultStatus = {
   updated: "updated",
   failed: "failed"
 };
+var MemberImportMatchInfoMatchType = {
+  external_id: "external_id",
+  email: "email",
+  phone: "phone",
+  account_email: "account_email",
+  account_phone: "account_phone"
+};
+var MemberImportPreviewRowAction = {
+  create: "create",
+  update: "update",
+  unchanged: "unchanged",
+  conflict: "conflict",
+  error: "error"
+};
 
 // src/types/member-types.ts
 var MemberType = /* @__PURE__ */ ((MemberType2) => {
@@ -7360,6 +7815,9 @@ var EventRuleObjectType = /* @__PURE__ */ ((EventRuleObjectType2) => {
 })(EventRuleObjectType || {});
 var EventRuleEventType = /* @__PURE__ */ ((EventRuleEventType2) => {
   EventRuleEventType2["TASK_EXECUTE"] = "task:execute";
+  EventRuleEventType2["TASK_ENTER"] = "task:enter";
+  EventRuleEventType2["TASK_COMMAND"] = "task:command";
+  EventRuleEventType2["TASK_EXIT"] = "task:exit";
   EventRuleEventType2["MEMBER_JOINED"] = "workspace:member_joined";
   EventRuleEventType2["MEMBER_LEFT"] = "workspace:member_left";
   EventRuleEventType2["DATA_RECORD_CREATED"] = "data_record:created";
@@ -7393,6 +7851,7 @@ var EventRuleActionType = /* @__PURE__ */ ((EventRuleActionType2) => {
   EventRuleActionType2["SWITCH_TASK_ACTION"] = "task:switch";
   EventRuleActionType2["ASSISTANT_MESSAGE"] = "assistant:message";
   EventRuleActionType2["FORM_FIELD_UPDATE"] = "form:update_field";
+  EventRuleActionType2["CEL_MUTATE"] = "record:cel_mutate";
   EventRuleActionType2["MESSAGE_VALIDATION"] = "message:validation";
   EventRuleActionType2["CHAT_CREATE"] = "chat:create";
   EventRuleActionType2["CHAT_CONTINUE"] = "chat:continue";
@@ -7525,6 +7984,12 @@ var InvitationStatus = /* @__PURE__ */ ((InvitationStatus2) => {
   return InvitationStatus2;
 })(InvitationStatus || {});
 
+// src/types/generated/data.ts
+var DataRecordRetirementResponseReason = {
+  monday_item_archived: "monday_item_archived",
+  monday_item_deleted: "monday_item_deleted"
+};
+
 // src/types/data-types.ts
 var DataFieldType = /* @__PURE__ */ ((DataFieldType2) => {
   DataFieldType2["ENUM"] = "enum";
@@ -7586,7 +8051,6 @@ var ModelProvider = {
   aws: "aws",
   elevenlabs: "elevenlabs",
   deepgram: "deepgram",
-  pocket: "pocket",
   xai: "xai",
   custom: "custom"
 };
@@ -7616,7 +8080,10 @@ var TTS_MODEL_ELEVENLABS_MULTILINGUAL = "elevenlabs:tts:eleven_multilingual_v2";
 var TTS_MODEL_DEEPGRAM_AURA_2 = "deepgram:tts:aura-2";
 var TTS_MODEL_AWS_POLLY_GENERATIVE = "aws:tts:polly-generative";
 var TTS_MODEL_AWS_POLLY_NEURAL = "aws:tts:polly-neural";
-var TTS_MODEL_POCKET = "pocket:tts:default";
+
+// src/types/pids-types.ts
+var PIDS_DISPOSITIONS = ["true_positive", "false_positive", "needs_more_context"];
+var PIDS_SOURCES = ["scheduled", "backfill", "pre_llm"];
 
 // src/types/calendar-types.ts
 var CalendarPermissionType = /* @__PURE__ */ ((CalendarPermissionType2) => {
@@ -8285,6 +8752,7 @@ function createApiModules(apiKey, baseUrl, customFetch) {
     events: new EventsApi(apiKey, baseUrl, customFetch),
     experiments: new ExperimentsApi(apiKey, baseUrl, customFetch),
     fhirConnections: new FhirConnectionsApi(apiKey, baseUrl, customFetch),
+    patientSyncConnections: new PatientSyncConnectionsApi(apiKey, baseUrl, customFetch),
     healthie: new HealthieApi(apiKey, baseUrl, customFetch),
     hubspot: new HubspotApi(apiKey, baseUrl, customFetch),
     features: new FeaturesApi(apiKey, baseUrl, customFetch),
@@ -8308,6 +8776,7 @@ function createApiModules(apiKey, baseUrl, customFetch) {
     pronunciations: new PronunciationsApi(apiKey, baseUrl, customFetch),
     qualifications: new QualificationsApi(apiKey, baseUrl, customFetch),
     personas: new PersonasApi(apiKey, baseUrl, customFetch),
+    queries: new QueriesApi(apiKey, baseUrl, customFetch),
     reports: new ReportsApi(apiKey, baseUrl, customFetch),
     salesforce: new SalesforceApi(apiKey, baseUrl, customFetch),
     sites: new SitesApi(apiKey, baseUrl, customFetch),
@@ -8352,6 +8821,7 @@ var WORKSPACE_METHOD_NAMES = [
   "cancelAgentTask",
   "cancelAssignment",
   "cancelCalendarEvent",
+  "cancelChatCallback",
   "cancelCredentialUpdateInvite",
   "checkAvailability",
   "checkSiteDomainAvailability",
@@ -8366,6 +8836,7 @@ var WORKSPACE_METHOD_NAMES = [
   "commentOnWorkspaceSupportRequest",
   "configureConfluence",
   "configureHealthie",
+  "configurePatientSync",
   "configureHubspot",
   "configureMondayConnection",
   "configureSalesforce",
@@ -8396,6 +8867,7 @@ var WORKSPACE_METHOD_NAMES = [
   "createExperiment",
   "createExperimentAssignment",
   "createExperimentGroup",
+  "convertMemberFilterToQuery",
   "createFhirConnection",
   "createFile",
   "createFileLabel",
@@ -8460,6 +8932,7 @@ var WORKSPACE_METHOD_NAMES = [
   "deleteExperimentAssignment",
   "deleteExperimentGroup",
   "deleteFhirConnection",
+  "deletePatientSyncConnection",
   "deleteFile",
   "deleteFileLabel",
   "deleteFolder",
@@ -8595,6 +9068,7 @@ var WORKSPACE_METHOD_NAMES = [
   "getCelContext",
   "getChat",
   "getChatAssignmentTasks",
+  "getChatCallbacks",
   "getChatEmails",
   "getChatFilter",
   "getChatFilterByUuid",
@@ -8661,6 +9135,7 @@ var WORKSPACE_METHOD_NAMES = [
   "getHealthieAvailableSlots",
   "getHealthieReconciliationMatches",
   "getHealthieStatus",
+  "getPatientSyncStatus",
   "getHubspotContactProperties",
   "getHubspotManagedRules",
   "getHubspotReconciliationMatches",
@@ -8706,6 +9181,7 @@ var WORKSPACE_METHOD_NAMES = [
   "getMemberRole",
   "getMemberRoleByUuid",
   "getMemberRoles",
+  "getMemberSyncLinks",
   "getMemberSyncSummary",
   "getMemberUsage",
   "getMembersMessageActivity",
@@ -8870,6 +9346,7 @@ var WORKSPACE_METHOD_NAMES = [
   "markEmailAsRead",
   "markEmailAsUnread",
   "markNotificationAsRead",
+  "previewImportMembers",
   "previewImportWorkspace",
   "previewSchedule",
   "previewTTS",
@@ -9096,6 +9573,8 @@ function bindTasksMethods(target, tasks, abilities) {
 function bindChatsMethods(target, chats) {
   target.getChats = chats.getChats.bind(chats);
   target.getChat = chats.getChat.bind(chats);
+  target.getChatCallbacks = chats.getChatCallbacks.bind(chats);
+  target.cancelChatCallback = chats.cancelChatCallback.bind(chats);
   target.getChatTokenUsage = chats.getChatTokenUsage.bind(chats);
   target.getChatTodos = chats.getChatTodos.bind(chats);
   target.getChatSkills = chats.getChatSkills.bind(chats);
@@ -9145,6 +9624,8 @@ function bindCallsMethods(target, calls, cel) {
   target.initiateCall = calls.initiateCall.bind(calls);
   target.getVoiceToken = calls.getVoiceToken.bind(calls);
   target.getMessageTiming = calls.getMessageTiming.bind(calls);
+  target.listChatRecordings = calls.listChatRecordings.bind(calls);
+  target.getCallRecordingDownloadUrl = calls.getCallRecordingDownloadUrl.bind(calls);
   target.getCelContext = cel.getCelContext.bind(cel);
 }
 
@@ -9187,6 +9668,9 @@ function bindMembersMethods(target, members) {
   target.deleteMember = members.deleteMember.bind(members);
   target.archiveMember = members.archiveMember.bind(members);
   target.unarchiveMember = members.unarchiveMember.bind(members);
+  target.sendMemberPhoneConfirmation = members.sendMemberPhoneConfirmation.bind(members);
+  target.bulkCreateMembers = members.bulkCreateMembers.bind(members);
+  target.previewImportMembers = members.previewImportMembers.bind(members);
   target.importMembers = members.importMembers.bind(members);
   target.exportMembers = members.exportMembers.bind(members);
   target.getMembersMessageActivity = members.getMembersMessageActivity.bind(members);
@@ -9194,6 +9678,7 @@ function bindMembersMethods(target, members) {
   target.getMemberFilter = members.getMemberFilter.bind(members);
   target.createMemberFilter = members.createMemberFilter.bind(members);
   target.updateMemberFilter = members.updateMemberFilter.bind(members);
+  target.convertMemberFilterToQuery = members.convertMemberFilterToQuery.bind(members);
   target.deleteMemberFilter = members.deleteMemberFilter.bind(members);
   target.getMemberFilterCount = members.getMemberFilterCount.bind(members);
   target.getMemberLabels = members.getMemberLabels.bind(members);
@@ -9223,6 +9708,7 @@ function bindMembersMethods(target, members) {
   target.getMemberMemories = members.getMemberMemories.bind(members);
   target.createMemberMemory = members.createMemberMemory.bind(members);
   target.deleteMemberMemory = members.deleteMemberMemory.bind(members);
+  target.getMemberSyncLinks = members.getMemberSyncLinks.bind(members);
 }
 
 // src/client/bindings/workspaces.ts
@@ -9356,6 +9842,19 @@ function bindSitesMethods(target, sites) {
   target.checkSiteSlugAvailability = sites.checkSiteSlugAvailability.bind(sites);
   target.checkSiteDomainAvailability = sites.checkSiteDomainAvailability.bind(sites);
   target.getSite = sites.getSite.bind(sites);
+  target.getSiteSharing = sites.getSiteSharing.bind(sites);
+  target.updateSiteSharing = sites.updateSiteSharing.bind(sites);
+  target.getSiteSource = sites.getSiteSource.bind(sites);
+  target.getSiteSourceTemplates = sites.getSiteSourceTemplates.bind(sites);
+  target.createSiteSource = sites.createSiteSource.bind(sites);
+  target.buildSiteSource = sites.buildSiteSource.bind(sites);
+  target.publishSiteSource = sites.publishSiteSource.bind(sites);
+  target.resetSiteSource = sites.resetSiteSource.bind(sites);
+  target.rollbackSiteSource = sites.rollbackSiteSource.bind(sites);
+  target.downloadSiteSourceZip = sites.downloadSiteSourceZip.bind(sites);
+  target.importSiteSourceZip = sites.importSiteSourceZip.bind(sites);
+  target.getThemeSettings = sites.getThemeSettings.bind(sites);
+  target.updateThemeSettings = sites.updateThemeSettings.bind(sites);
   target.getSiteByUuid = sites.getSiteByUuid.bind(sites);
   target.getSiteRenderedPage = sites.getSiteRenderedPage.bind(sites);
   target.getSiteRenderedMenu = sites.getSiteRenderedMenu.bind(sites);
@@ -9388,6 +9887,7 @@ function bindSitesMethods(target, sites) {
 function bindFilesMethods(target, files) {
   target.getFiles = files.getFiles.bind(files);
   target.getFile = files.getFile.bind(files);
+  target.downloadFilesZip = files.downloadFilesZip.bind(files);
   target.createFile = files.createFile.bind(files);
   target.uploadFile = files.uploadFile.bind(files);
   target.updateFile = files.updateFile.bind(files);
@@ -9429,6 +9929,7 @@ function bindEventsMethods(target, events) {
   target.createEventRule = events.createEventRule.bind(events);
   target.updateEventRule = events.updateEventRule.bind(events);
   target.deleteEventRule = events.deleteEventRule.bind(events);
+  target.testWebhook = events.testWebhook.bind(events);
   target.reorderEventRules = events.reorderEventRules.bind(events);
   target.getWebhookLogs = events.getWebhookLogs.bind(events);
   target.getRuleExecutions = events.getRuleExecutions.bind(events);
@@ -9679,12 +10180,13 @@ function bindAppsMethods(target, apps, builders, inquiries, oauth, oauthConnecti
   target.exchangeOAuthToken = oauth.exchangeOAuthToken.bind(oauth);
   target.getAvailableScopes = oauth.getAvailableScopes.bind(oauth);
   target.getOAuthConnectionStatus = oauthConnections.getConnectionStatus.bind(oauthConnections);
+  target.listOAuthAccounts = oauthConnections.listAccounts.bind(oauthConnections);
   target.getOAuthAuthorizationUrl = oauthConnections.getAuthorizationUrl.bind(oauthConnections);
   target.disconnectOAuthProvider = oauthConnections.disconnect.bind(oauthConnections);
 }
 
 // src/client/bindings/integrations.ts
-function bindIntegrationsMethods(target, mondayIntegration, discordBots, slackApps, teamsApps, fhirConnections, healthie, salesforce, hubspot, appConnections, connectionSync, confluence) {
+function bindIntegrationsMethods(target, mondayIntegration, discordBots, slackApps, teamsApps, fhirConnections, patientSyncConnections, healthie, salesforce, hubspot, appConnections, connectionSync, confluence) {
   target.getMondayBoards = mondayIntegration.getBoards.bind(mondayIntegration);
   target.getMondayBoardColumns = mondayIntegration.getBoardColumns.bind(mondayIntegration);
   target.getMondayBoardGroups = mondayIntegration.getBoardGroups.bind(mondayIntegration);
@@ -9769,6 +10271,9 @@ function bindIntegrationsMethods(target, mondayIntegration, discordBots, slackAp
   target.fhirGetEncounterSyncRuns = fhirConnections.fhirGetEncounterSyncRuns.bind(fhirConnections);
   target.fhirRefreshEncounterPatient = fhirConnections.fhirRefreshEncounterPatient.bind(fhirConnections);
   target.fhirBackfillEncounterSync = fhirConnections.fhirBackfillEncounterSync.bind(fhirConnections);
+  target.configurePatientSync = patientSyncConnections.configurePatientSync.bind(patientSyncConnections);
+  target.getPatientSyncStatus = patientSyncConnections.getPatientSyncStatus.bind(patientSyncConnections);
+  target.deletePatientSyncConnection = patientSyncConnections.deletePatientSyncConnection.bind(patientSyncConnections);
   target.configureHealthie = healthie.configureHealthie.bind(healthie);
   target.getHealthieStatus = healthie.getHealthieStatus.bind(healthie);
   target.listHealthieProviders = healthie.listHealthieProviders.bind(healthie);
@@ -9962,6 +10467,14 @@ function bindPersonasMethods(target, personas) {
   target.deletePersona = personas.deletePersona.bind(personas);
 }
 
+// src/client/bindings/queries.ts
+function bindQueriesMethods(target, queries) {
+  target.getQueryFields = queries.getQueryFields.bind(queries);
+  target.validateQuery = queries.validateQuery.bind(queries);
+  target.previewQuery = queries.previewQuery.bind(queries);
+  target.runQuery = queries.runQuery.bind(queries);
+}
+
 // src/client/bindings/customers.ts
 function bindCustomersMethods(target, customers) {
   target.getMyCustomers = customers.getMyCustomers.bind(customers);
@@ -10008,6 +10521,7 @@ function bindSupportRequestMethods(target, supportRequests) {
   target.createWorkspaceSupportRequest = supportRequests.createWorkspaceSupportRequest.bind(supportRequests);
   target.commentOnWorkspaceSupportRequest = supportRequests.commentOnWorkspaceSupportRequest.bind(supportRequests);
   target.closeWorkspaceSupportRequest = supportRequests.closeWorkspaceSupportRequest.bind(supportRequests);
+  target.reopenWorkspaceSupportRequest = supportRequests.reopenWorkspaceSupportRequest.bind(supportRequests);
   target.clickWorkspaceSupportRequestResource = supportRequests.clickWorkspaceSupportRequestResource.bind(supportRequests);
 }
 
@@ -10035,6 +10549,8 @@ var GravityRailClient = class {
   // Chats API
   getChats;
   getChat;
+  getChatCallbacks;
+  cancelChatCallback;
   getChatTokenUsage;
   getChatTodos;
   getChatSkills;
@@ -10081,6 +10597,8 @@ var GravityRailClient = class {
   initiateCall;
   getVoiceToken;
   getMessageTiming;
+  listChatRecordings;
+  getCallRecordingDownloadUrl;
   getCelContext;
   // Data Types API
   getDataTypes;
@@ -10117,6 +10635,9 @@ var GravityRailClient = class {
   deleteMember;
   archiveMember;
   unarchiveMember;
+  sendMemberPhoneConfirmation;
+  bulkCreateMembers;
+  previewImportMembers;
   importMembers;
   exportMembers;
   getMembersMessageActivity;
@@ -10124,6 +10645,7 @@ var GravityRailClient = class {
   getMemberFilter;
   createMemberFilter;
   updateMemberFilter;
+  convertMemberFilterToQuery;
   deleteMemberFilter;
   getMemberFilterCount;
   getMemberLabels;
@@ -10157,6 +10679,8 @@ var GravityRailClient = class {
   getMemberMemories;
   createMemberMemory;
   deleteMemberMemory;
+  // Member Sync Links
+  getMemberSyncLinks;
   // Agent Tasks API (operator-facing async sub-agent inspection/cancel)
   getAgentTasks;
   getAgentTask;
@@ -10187,6 +10711,11 @@ var GravityRailClient = class {
   evaluateTestChatRun;
   endTestChatRun;
   // Personas API (workspace-scoped test-identity templates)
+  // Unified Query Engine
+  getQueryFields;
+  validateQuery;
+  previewQuery;
+  runQuery;
   listPersonas;
   getPersona;
   createPersona;
@@ -10405,6 +10934,19 @@ var GravityRailClient = class {
   checkSiteSlugAvailability;
   checkSiteDomainAvailability;
   getSite;
+  getSiteSharing;
+  updateSiteSharing;
+  getSiteSource;
+  getSiteSourceTemplates;
+  createSiteSource;
+  buildSiteSource;
+  publishSiteSource;
+  resetSiteSource;
+  rollbackSiteSource;
+  downloadSiteSourceZip;
+  importSiteSourceZip;
+  getThemeSettings;
+  updateThemeSettings;
   getSiteByUuid;
   getSiteRenderedPage;
   getSiteRenderedMenu;
@@ -10434,6 +10976,7 @@ var GravityRailClient = class {
   // Files API
   getFiles;
   getFile;
+  downloadFilesZip;
   createFile;
   uploadFile;
   updateFile;
@@ -10473,6 +11016,7 @@ var GravityRailClient = class {
   createEventRule;
   updateEventRule;
   deleteEventRule;
+  testWebhook;
   reorderEventRules;
   getWebhookLogs;
   getRuleExecutions;
@@ -10688,6 +11232,7 @@ var GravityRailClient = class {
   exchangeOAuthToken;
   getAvailableScopes;
   getOAuthConnectionStatus;
+  listOAuthAccounts;
   getOAuthAuthorizationUrl;
   disconnectOAuthProvider;
   // Integrations API
@@ -10781,6 +11326,9 @@ var GravityRailClient = class {
   fhirRefreshEncounterPatient;
   fhirBackfillEncounterSync;
   // Healthie API
+  configurePatientSync;
+  getPatientSyncStatus;
+  deletePatientSyncConnection;
   configureHealthie;
   getHealthieStatus;
   listHealthieProviders;
@@ -10909,6 +11457,7 @@ var GravityRailClient = class {
   createWorkspaceSupportRequest;
   commentOnWorkspaceSupportRequest;
   closeWorkspaceSupportRequest;
+  reopenWorkspaceSupportRequest;
   clickWorkspaceSupportRequestResource;
   constructor(apiKey, baseUrl, customFetch) {
     const apis = createApiModules(apiKey, baseUrl, customFetch);
@@ -10923,6 +11472,7 @@ var GravityRailClient = class {
     bindAgentsMethods(this, apis.agents);
     bindQualificationsMethods(this, apis.qualifications);
     bindPersonasMethods(this, apis.personas);
+    bindQueriesMethods(this, apis.queries);
     bindJourneysMethods(this, apis.journeys);
     bindExperimentsMethods(this, apis.experiments);
     bindOperatorMethods(this, apis.operatorGroups);
@@ -10962,6 +11512,7 @@ var GravityRailClient = class {
       apis.slackApps,
       apis.teamsApps,
       apis.fhirConnections,
+      apis.patientSyncConnections,
       apis.healthie,
       apis.salesforce,
       apis.hubspot,
@@ -11015,23 +11566,30 @@ var GravityRailClient = class {
     });
   }
   /**
-   * Set the org token for cross-domain / non-browser clients (e.g. CLI).
-   * When set, all API requests include the X-Org-Token header so the backend
-   * accepts the request without requiring a browser cookie.
+   * Set the org session credential for cross-domain / non-browser clients (e.g. CLI).
+   * Opaque gr_sess_ values use X-Org-Session. Legacy orgToken JWE values still
+   * use X-Org-Token during the migration window.
    *
-   * `orgUuid` is the org that issued the token. Pass it so the SDK can
-   * detect a stale token (e.g. switching orgs mid-session) and re-fire the
+   * `orgUuid` is the org that issued the session. Pass it so the SDK can
+   * detect a stale session (e.g. switching orgs mid-session) and re-fire the
    * org-auth handler instead of silently 401-ing.
    *
    * Propagates to all API modules.
    */
-  setOrgToken(token, orgUuid) {
+  setOrgSession(session, orgUuid) {
     Object.values(this.apis).forEach((api) => {
-      if (typeof api.setOrgToken === "function") {
-        api.setOrgToken(token, orgUuid);
+      if (typeof api.setOrgSession === "function") {
+        api.setOrgSession(session, orgUuid);
       }
     });
   }
+  /**
+   * @deprecated Legacy compatibility for stateless orgToken JWE credentials.
+   * Prefer setOrgSession() for opaque org browser sessions.
+   */
+  setOrgToken(token, orgUuid) {
+    this.setOrgSession(token, orgUuid);
+  }
   /**
    * Update the API key across all modules.
    * Used after successful re-authentication.
@@ -11088,6 +11646,24 @@ var WorkspaceBuilderResource = class {
   _uuid;
   _created = false;
   _existed = false;
+  /** Server-assigned numeric id — available after apply() or adopt(). */
+  get id() {
+    if (this._id === void 0) {
+      throw new Error(
+        `${this.constructor.name} has no id yet \u2014 ids are assigned during apply(). Pass the builder object itself where a reference is needed; refs resolve at apply time.`
+      );
+    }
+    return this._id;
+  }
+  /** Server-assigned uuid — available after apply() or adopt(). */
+  get uuid() {
+    if (this._uuid === void 0) {
+      throw new Error(
+        `${this.constructor.name} has no uuid yet \u2014 uuids are assigned during apply(). Pass the builder object itself where a reference is needed; refs resolve at apply time.`
+      );
+    }
+    return this._uuid;
+  }
   matchKey() {
     return void 0;
   }
@@ -11118,6 +11694,7 @@ var MemberFilterBuilder = class extends WorkspaceBuilderResource {
     this.name = name;
     this.description = options.description ?? "";
   }
+  name;
   description;
   rules = [];
   addRule(objectType, filterType, options = {}) {
@@ -11152,6 +11729,8 @@ var RoutineBuilder = class extends WorkspaceBuilderResource {
     this.active = options.active ?? false;
     this.description = options.description ?? "";
   }
+  name;
+  cronSchedule;
   active;
   description;
   rules = [];
@@ -11213,6 +11792,7 @@ var NotificationRuleBuilder = class extends WorkspaceBuilderResource {
     this.notifyEmail = Boolean(options.notifyEmail ?? options.notify_email);
     this.notifyVoice = Boolean(options.notifyVoice ?? options.notify_voice);
   }
+  name;
   noticeType;
   memberId;
   workflow;
@@ -11437,6 +12017,11 @@ var JourneyStepBuilder = class extends WorkspaceBuilderResource {
     this.workflow = workflow;
     this.description = description;
   }
+  name;
+  journey;
+  order;
+  workflow;
+  description;
   connections = [];
   connectsTo(child, condition, required = false, timeoutSeconds) {
     this.connections.push({ parent: this, child, condition, required, timeoutSeconds });
@@ -11465,6 +12050,7 @@ var JourneyBuilder = class extends WorkspaceBuilderResource {
     this.name = name;
     this.description = options.description ?? "";
   }
+  name;
   description;
   steps = [];
   goals = [];
@@ -11535,6 +12121,9 @@ var RoleUpdate = class extends WorkspaceBuilderResource {
     this.workflowIds = workflowIds;
     this.dataTypeIds = dataTypeIds;
   }
+  roleId;
+  workflowIds;
+  dataTypeIds;
   planLine() {
     const parts = [];
     if (this.workflowIds) parts.push(`workflows=${JSON.stringify(this.workflowIds)}`);
@@ -11581,6 +12170,7 @@ var AbilityDef = class {
       if (inputKey in options) this.perms[outputKey] = options[inputKey];
     }
   }
+  abilityType;
   uuid = crypto.randomUUID();
   config;
   enabled;
@@ -11611,13 +12201,25 @@ var TaskBuilder = class extends WorkspaceBuilderResource {
     this.start = start;
     this.description = description;
   }
+  name;
+  workflow;
+  prompt;
+  start;
+  description;
   transitions = [];
   eventRules = [];
-  transitionsTo(child, when, autoNext = false, required = false) {
+  transitionsTo(child, when, autoNext = false, required = false, celCondition) {
     if (child === this) {
       throw new Error(`Task '${this.name}' cannot transition to itself`);
     }
-    this.transitions.push({ parent: this, child, when, autoNext, required });
+    this.transitions.push({
+      parent: this,
+      child,
+      when,
+      autoNext,
+      required,
+      celCondition
+    });
     return this;
   }
   onEnter(action, params = {}, name) {
@@ -11659,6 +12261,7 @@ var WorkflowBuilder = class extends WorkspaceBuilderResource {
     this.prompt = options.prompt;
     this.agentId = options.agentId ?? options.agent_id;
   }
+  name;
   description;
   prompt;
   agentId;
@@ -11779,6 +12382,7 @@ var AgentBuilder = class extends WorkspaceBuilderResource {
     this.tools = options.tools ?? [];
     this.codeInterpreterEnabled = options.codeInterpreterEnabled ?? options.code_interpreter_enabled ?? false;
   }
+  name;
   chatModelId;
   systemPrompt;
   memberRoleId;
@@ -11830,6 +12434,7 @@ var WorkspaceBuilder = class {
   constructor(client) {
     this.client = client;
   }
+  client;
   resources = [];
   form(name, options = {}) {
     const form = new FormBuilder(name, options.slug, options);
@@ -11954,7 +12559,7 @@ ${"=".repeat(50)}`);
           writeLine(`  Skipped: ${resource.planLine()}`);
         }
       } catch (err) {
-        writeLine(`  FAILED: ${resource.planLine()}: ${summarizeError(err)}`);
+        writeLine(formatApplyFailureLine(resource, err));
         throw new ApplyError(resource, err, summary);
       }
     }
@@ -12105,7 +12710,7 @@ Done! Created ${count} resources.`);
           {
             taskId,
             choicePrompt: transition.when,
-            celCondition: null,
+            celCondition: transition.celCondition ?? null,
             autoNext: transition.autoNext,
             required: transition.required
           }
@@ -12211,16 +12816,21 @@ Done! Created ${count} resources.`);
   }
 };
 var ApplyError = class extends Error {
+  createdSoFar;
+  #resource;
+  #cause;
   constructor(resource, cause, createdSoFar) {
-    super(
-      `Failed creating ${resource.planLine()}: ${summarizeError(cause)}
-Already created: ${JSON.stringify(
-        createdSoFar
-      )}`
-    );
-    this.resource = resource;
-    this.cause = cause;
+    super(formatApplyErrorMessage(resource, cause, createdSoFar));
+    this.name = "ApplyError";
     this.createdSoFar = createdSoFar;
+    this.#resource = resource;
+    this.#cause = cause;
+  }
+  get resource() {
+    return this.#resource;
+  }
+  get cause() {
+    return this.#cause;
   }
 };
 function resourceKey(resource) {
@@ -12331,8 +12941,64 @@ function handleEventRuleApplyFailure(resourceName, err) {
   writeLine(`  FAILED: Event rule on '${resourceName}': ${summary}`);
   throw new Error(`Failed wiring event rule on '${resourceName}': ${summary}`);
 }
+function writeScopeForResource(resource) {
+  if (resource instanceof FormBuilder) return "datatypes:write";
+  if (resource instanceof WorkflowBuilder || resource instanceof TaskBuilder) {
+    return "workflows:write";
+  }
+  if (resource instanceof AgentBuilder) return "agents:write";
+  if (resource instanceof MemberLabelBuilder || resource instanceof MemberFilterBuilder) {
+    return "members:write";
+  }
+  if (resource instanceof RoutineBuilder || resource instanceof NotificationRuleBuilder) {
+    return "automations:admin";
+  }
+  if (resource instanceof JourneyBuilder || resource instanceof JourneyStepBuilder) {
+    return "journeys:write";
+  }
+  if (resource instanceof RoleUpdate) return "member_roles:write";
+  return null;
+}
+function scopeRetryHint(resource) {
+  const scope = writeScopeForResource(resource);
+  return scope ? ` (retry exec with scopes=['${scope}'])` : "";
+}
+function formatApplyFailureLine(resource, err) {
+  const line = `  FAILED: ${resource.planLine()}: ${summarizeError(err)}`;
+  return hasStatus(err, 403) ? `${line}${scopeRetryHint(resource)}` : line;
+}
+function formatApplyErrorMessage(resource, cause, createdSoFar) {
+  let message = `Failed creating ${resource.planLine()}: ${summarizeError(cause)}`;
+  if (hasStatus(cause, 403)) {
+    const scope = writeScopeForResource(resource);
+    if (scope) {
+      message += `
+Retry exec with scopes=['${scope}']`;
+    }
+  }
+  const createdKeys = Object.keys(createdSoFar);
+  if (createdKeys.length > 0) {
+    message += `
+Already created: ${JSON.stringify(createdSoFar)}`;
+  }
+  return message;
+}
 function summarizeError(err) {
-  if (err instanceof Error) return err.name || "Error";
+  if (hasStatus(err, 403)) {
+    return "Insufficient permissions for this operation";
+  }
+  if (err instanceof ApiError) {
+    const msg = err.message.trim();
+    const availableTypesIdx = msg.indexOf("Available types:");
+    if (availableTypesIdx !== -1) {
+      const head = msg.slice(0, availableTypesIdx).trim().replace(/\.$/, "");
+      return head ? `${head}.` : "Request failed";
+    }
+    return msg.length > 240 ? `${msg.slice(0, 237)}...` : msg;
+  }
+  if (err instanceof Error) {
+    return err.name || "Error";
+  }
   return typeof err;
 }
 function hasStatus(err, status) {
@@ -12358,15 +13024,20 @@ var AbilityTypeSlugs = {
   TOOLKITS: "tools:toolkits",
   WEB_SEARCH: "tools:web_search",
   CONVERSATION_HISTORY: "tools:conversation_history",
+  IMAGE_GENERATION: "tools:image_generation",
+  CONVERSATION_CONTROL: "tools:conversation_control",
   // Integration
   CALENDAR_BOOKING: "integration:calendar_booking",
   FILE_ACCESS: "integration:file_access",
   DATA_ACCESS: "integration:data_access",
   GMAIL: "integration:gmail",
+  GOOGLE_CALENDAR: "integration:google_calendar",
+  GOOGLE_DRIVE: "integration:google_drive",
   CHARLESTON_PMD_PAGING: "integration:charleston_pmd_paging",
   // Communication
   PHONE_CALL_TOOLS: "communication:phone_call_tools",
   SEND_SMS: "communication:send_sms",
+  SEND_WHATSAPP: "communication:send_whatsapp",
   MEMBER_ACCESS: "communication:member_access",
   AUDIO_PLAYBACK: "communication:audio_playback",
   // Oversight
@@ -12375,6 +13046,12 @@ var AbilityTypeSlugs = {
   ESCALATION: "oversight:escalation",
   // Identity
   MEMBER_FIELD_VERIFICATION: "identity:member_field_verification",
+  // Delegation
+  CONTRIBUTOR: "delegation:contributor",
+  // Workflow
+  WORKFLOW_RUN: "workflow:run",
+  // Commerce
+  RESELLER: "commerce:reseller",
   // System (auto-injected, hidden from users)
   USER_MESSAGE_RULES: "system:user_message_rules",
   ASSISTANT_MESSAGE_RULES: "chat:assistant_message_rules",
@@ -12396,7 +13073,6 @@ var TTS_PREVIEW_PROVIDERS = [
   "elevenlabs",
   "google",
   "aws",
-  "pocket",
   "deepgram",
   "xai"
 ];
@@ -12411,6 +13087,13 @@ function canPreviewVoice(entity) {
   return TTS_PREVIEW_PROVIDERS.includes(provider);
 }
 
+// src/types/query-engine-types.ts
+var QUERY_VALUELESS_OPS = /* @__PURE__ */ new Set([
+  "isEmpty",
+  "notEmpty",
+  "exists"
+]);
+
 // src/types/chat-types.ts
 var SMS_DELIVERY_FAILURE_STATUSES = /* @__PURE__ */ new Set([
   "failed",
@@ -12636,21 +13319,16 @@ var CHAT_TYPES = {
   ASSIGNMENT: "assignment",
   MANAGER: "manager",
   CONTRIBUTOR: "contributor",
-  DEVELOPER: "developer",
-  MEMBER: "member",
-  /** @deprecated Use MEMBER instead */
-  AGENT: "member",
-  /** @deprecated Use MEMBER instead */
-  DM: "member"
+  DM: "dm"
 };
 var BUILTIN_ASSISTANT_CHAT_TYPES = /* @__PURE__ */ new Set([
   CHAT_TYPES.MANAGER,
-  CHAT_TYPES.CONTRIBUTOR,
-  CHAT_TYPES.DEVELOPER
+  CHAT_TYPES.CONTRIBUTOR
 ]);
+var MEMBER_AGENT_CHAT_TYPES = /* @__PURE__ */ new Set([CHAT_TYPES.DM]);
 var NO_ASSISTANT_PARTICIPANT_CHAT_TYPES = /* @__PURE__ */ new Set([
   ...BUILTIN_ASSISTANT_CHAT_TYPES,
-  CHAT_TYPES.MEMBER
+  ...MEMBER_AGENT_CHAT_TYPES
 ]);
 function usesBuiltinAssistant(chatType) {
   return BUILTIN_ASSISTANT_CHAT_TYPES.has(chatType);
@@ -13477,6 +14155,7 @@ var SCOPE_PRESETS = {
   DEFAULT_VOICE_INFERENCE_MODEL,
   DataCategory,
   DataFieldType,
+  DataRecordRetirementResponseReason,
   DataSensitivity,
   DataTypeRecordScope,
   DriverMode,
@@ -13500,6 +14179,9 @@ var SCOPE_PRESETS = {
   McpServerState,
   MemberFeature,
   MemberFilterBuilder,
+  MemberImportMatchInfoMatchType,
+  MemberImportPreviewRowAction,
+  MemberImportValidationError,
   MemberLabelBuilder,
   MemberType,
   MenuItemResponseItemType,
@@ -13522,7 +14204,11 @@ var SCOPE_PRESETS = {
   PERMISSION_NONE,
   PERMISSION_USE,
   PERMISSION_VERIFY,
+  PIDS_DISPOSITIONS,
+  PIDS_SOURCES,
   ProductType,
+  QUERY_VALUELESS_OPS,
+  QueriesApi,
   REALTIME_MODEL_CUSTOM,
   REALTIME_MODEL_GEMINI,
   REALTIME_MODEL_GEMINI_VERTEX,
@@ -13552,7 +14238,6 @@ var SCOPE_PRESETS = {
   TTS_MODEL_ELEVENLABS_FLASH,
   TTS_MODEL_ELEVENLABS_MULTILINGUAL,
   TTS_MODEL_ELEVENLABS_TURBO,
-  TTS_MODEL_POCKET,
   TTS_PREVIEW_PROVIDERS,
   TaskBuilder,
   TemplatesApi,