@levr-one/cli 0.9.29 → 0.10.0

package/README.md

@@ -142,16 +142,15 @@ levr push ./results.xml --source "backend-unit-tests" --run-name "nightly"
 
 **Flags:**
 
-| Flag                        | Alias | Description                                                                                |
-| --------------------------- | ----- | ------------------------------------------------------------------------------------------ |
-| `--team-id <uuid>`          | `-t`  | Team ID (optional; server resolves default if omitted. Or set `LEVR_TEAM_ID`)              |
-| `--source <name>`           | `-s`  | Automation source name — groups recurring imports and remembers team (auto-detected in CI) |
-| `--run-name <name>`         | `-r`  | Name for the test run                                                                      |
-| `--format <type>`           | `-f`  | File format: `junit`, `gherkin`, `cucumber-json`, `ctrf-json` (auto-detected if omitted)   |
-| `--parent-folder-id <uuid>` |       | Destination folder ID                                                                      |
-| `--create-run`              |       | Force run creation for structure-only imports                                              |
-| `--update-mode <mode>`      |       | `update` (default) or `create_new`                                                         |
-| `--verbose`                 | `-v`  | Show detailed output                                                                       |
+| Flag                         | Alias | Description                                                                                                  |
+| ---------------------------- | ----- | ------------------------------------------------------------------------------------------------------------ |
+| `--workspace-id <uuid>`      | `-w`  | Workspace ID (required for multi-workspace JWT auth)                                                         |
+| `--team-id <uuid>`           | `-t`  | Team ID (optional; server resolves default if omitted. Or set `LEVR_TEAM_ID`)                                |
+| `--source <name>`            | `-s`  | Automation source name — groups recurring imports and remembers team (auto-detected in CI). Required unless `--automation-source` is set |
+| `--automation-source <uuid>` | `-a`  | UUID of an existing automation source (never creates one). Used instead of `--source`. Or set `LEVR_AUTOMATION_SOURCE_ID` |
+| `--run-name <name>`          | `-r`  | Name for the test run                                                                                        |
+| `--format <type>`            | `-f`  | File format: `junit`, `gherkin`, `cucumber-json`, `ctrf-json` (auto-detected if omitted)                     |
+| `--verbose`                  | `-v`  | Show detailed output                                                                                         |
 
 ### Automation sources
 
@@ -352,6 +351,7 @@ All configuration is via environment variables. Flags take precedence.
 | `LEVR_MCP_URL`  | MCP server URL written by `levr mcp add` (derived from the API URL when unset)          | derived                |
 | `LEVR_TEAM_ID`  | Default team ID (optional; server resolves from automation source or workspace default) |                        |
 | `LEVR_SOURCE`   | Automation source name override (groups imports, remembers team)                        |                        |
+| `LEVR_AUTOMATION_SOURCE_ID` | UUID of an existing automation source; used instead of the source name (same as `--automation-source`) |            |
 
 ## Troubleshooting
 

package/dist/{addHandler-D6OI7Mx7.js → addHandler-uD4hQvb7.js}

@@ -2,9 +2,9 @@ import { getApiUrl } from "./env-CHeKHu5S.js";
 import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { basename, delimiter, dirname, join, resolve } from "node:path";
 import { homedir } from "node:os";
+import { execFileSync } from "node:child_process";
 import { applyEdits, modify, parse, printParseErrorCode } from "jsonc-parser";
 import { TomlError, parse as parse$1 } from "smol-toml";
-import { execFileSync } from "node:child_process";
 
 //#region ../mcp-harnesses/dist/format/toml-render.js
 /**

package/dist/cli.js

@@ -175,7 +175,7 @@ Examples:
 		aliases: { y: "yes" }
 	},
 	loader: async () => {
-		const { mcpAddHandler } = await import("./addHandler-D6OI7Mx7.js");
+		const { mcpAddHandler } = await import("./addHandler-uD4hQvb7.js");
 		return mcpAddHandler;
 	}
 });
@@ -213,7 +213,7 @@ Examples:
 		aliases: { d: "device-code" }
 	},
 	loader: async () => {
-		const { loginHandler } = await import("./loginHandler-C2Ax94AS.js");
+		const { loginHandler } = await import("./loginHandler-CX2L4fjs.js");
 		return loginHandler;
 	}
 });
@@ -252,7 +252,7 @@ Examples:
 	},
 	parameters: {},
 	loader: async () => {
-		const { statusHandler } = await import("./statusHandler-BuAkYg-T.js");
+		const { statusHandler } = await import("./statusHandler-BvK4zSEf.js");
 		return statusHandler;
 	}
 });
@@ -339,19 +339,6 @@ Examples:
 				brief: "File format (auto-detected if omitted)",
 				optional: true
 			},
-			"parent-folder-id": {
-				kind: "parsed",
-				parse: String,
-				brief: "Destination folder ID",
-				placeholder: "uuid",
-				optional: true
-			},
-			"update-mode": {
-				kind: "enum",
-				values: ["update", "create_new"],
-				default: "update",
-				brief: "How to handle existing tests"
-			},
 			verbose: {
 				kind: "boolean",
 				default: false,
@@ -369,7 +356,7 @@ Examples:
 		}
 	},
 	loader: async () => {
-		const { pushHandler } = await import("./pushHandler-DEuoXQXJ.js");
+		const { pushHandler } = await import("./pushHandler-Ck7lMC39.js");
 		return pushHandler;
 	}
 });
@@ -489,7 +476,7 @@ Examples:
 		}
 	},
 	loader: async () => {
-		const { importHandler } = await import("./importHandler-B42PBtOB.js");
+		const { importHandler } = await import("./importHandler-TVAFta_i.js");
 		return importHandler;
 	}
 });
@@ -510,7 +497,7 @@ Examples:
 	},
 	parameters: {},
 	loader: async () => {
-		const { listHandler } = await import("./listHandler-DmG_OvBC.js");
+		const { listHandler } = await import("./listHandler-AYN1KpE-.js");
 		return listHandler;
 	}
 });
@@ -543,7 +530,7 @@ Examples:
 		flags: {}
 	},
 	loader: async () => {
-		const { selectHandler } = await import("./selectHandler-DmpxYqaN.js");
+		const { selectHandler } = await import("./selectHandler-CzolM41G.js");
 		return selectHandler;
 	}
 });
@@ -560,14 +547,83 @@ Examples:
 	},
 	parameters: {},
 	loader: async () => {
-		const { currentHandler } = await import("./currentHandler-CHydiFui.js");
+		const { currentHandler } = await import("./currentHandler-BBHqC26D.js");
 		return currentHandler;
 	}
 });
 
+//#endregion
+//#region src/commands/gates/run.ts
+const gatesRunCommand = buildCommand({
+	docs: {
+		brief: "Run a deliverable's gate commands and report the raw results",
+		fullDescription: `Verify a deliverable's gates, run every local command EXACTLY as the
+server returned it (/bin/bash -c, from the current directory — run it from the
+repo root), and report the raw exit code and output tails so the server can
+derive each verdict.
+
+Each command is printed before it runs; use --dry-run to read them first. The
+server validates every local command before handing it out: a command that
+fails its check comes back as a verification error, never as a command to run.
+
+Guided gates are listed, not run: perform them and report what you observed
+with report_gate_results step_results[].
+
+Exit code 0 when every gate passes after the report, 1 otherwise.
+
+Examples:
+  levr gates run ENG-50
+  levr gates run ENG-50 --dry-run      # list the commands; run and report nothing
+  levr gates run <issue-uuid> --json`
+	},
+	parameters: {
+		positional: {
+			kind: "tuple",
+			parameters: [{
+				parse: String,
+				brief: "Deliverable issue identifier (ENG-50) or UUID",
+				placeholder: "issue",
+				optional: false
+			}]
+		},
+		flags: {
+			"workspace-id": {
+				kind: "parsed",
+				parse: String,
+				brief: "Workspace ID (required for multi-workspace JWT auth)",
+				placeholder: "uuid",
+				optional: true
+			},
+			"dry-run": {
+				kind: "boolean",
+				default: false,
+				brief: "List the commands and the report entries they would produce; run nothing"
+			},
+			json: {
+				kind: "boolean",
+				default: false,
+				brief: "Print machine-readable JSON"
+			},
+			verbose: {
+				kind: "boolean",
+				default: false,
+				brief: "Show detailed output"
+			}
+		},
+		aliases: {
+			w: "workspace-id",
+			v: "verbose"
+		}
+	},
+	loader: async () => {
+		const { gatesRunHandler } = await import("./runHandler-COp3W6GN.js");
+		return gatesRunHandler;
+	}
+});
+
 //#endregion
 //#region package.json
-var version = "0.9.29";
+var version = "0.10.0";
 
 //#endregion
 //#region src/app.ts
@@ -587,6 +643,10 @@ const workspaceRoutes = buildRouteMap({
 	},
 	docs: { brief: "Manage workspace selection" }
 });
+const gatesRoutes = buildRouteMap({
+	routes: { run: gatesRunCommand },
+	docs: { brief: "Run a deliverable's gates and report the raw results" }
+});
 const routes = buildRouteMap({
 	routes: {
 		mcp: buildRouteMap({
@@ -595,6 +655,7 @@ const routes = buildRouteMap({
 		}),
 		auth: authRoutes,
 		workspace: workspaceRoutes,
+		gates: gatesRoutes,
 		push: pushCommand,
 		import: importCommand,
 		completion: completionCommand

package/dist/{importHandler-B42PBtOB.js → importHandler-TVAFta_i.js}

@@ -1,7 +1,7 @@
 import { getApiUrl, getTeamId } from "./env-CHeKHu5S.js";
-import { authGetProfileV1, configureClient, teamFindAllV1, testCaseImportCommitV1, testCaseImportPreviewV1 } from "./sdk-client-CQa-x1zl.js";
+import { authGetProfileV1, configureClient, teamFindAllV1, testCaseImportCommitV1, testCaseImportPreviewV1 } from "./sdk-client-DHD7tgY0.js";
 import "./workspace-store-DDOxnut1.js";
-import { resolveWorkspace } from "./resolve-workspace-DmqApDw5.js";
+import { resolveWorkspace } from "./resolve-workspace-Ba9NuCRq.js";
 import "./token-refresh-Cu5RpkLJ.js";
 import { resolveToken } from "./resolve-token-DbQsmn03.js";
 import chalk from "chalk";

package/dist/{listHandler-DmG_OvBC.js → listHandler-AYN1KpE-.js}

@@ -1,5 +1,5 @@
 import "./env-CHeKHu5S.js";
-import { authGetSitesV1, configureClient } from "./sdk-client-CQa-x1zl.js";
+import { authGetSitesV1, configureClient } from "./sdk-client-DHD7tgY0.js";
 import { loadWorkspace } from "./workspace-store-DDOxnut1.js";
 import "./token-refresh-Cu5RpkLJ.js";
 import { resolveToken } from "./resolve-token-DbQsmn03.js";

package/dist/{loginHandler-C2Ax94AS.js → loginHandler-CX2L4fjs.js}

@@ -1,7 +1,7 @@
 import { CLI_CLIENT_ID, getApiUrl, getAuthUrl, setSessionApiUrl, writeCredentials } from "./env-CHeKHu5S.js";
-import { configureClient } from "./sdk-client-CQa-x1zl.js";
+import { configureClient } from "./sdk-client-DHD7tgY0.js";
 import "./workspace-store-DDOxnut1.js";
-import { autoSelectWorkspace } from "./resolve-workspace-DmqApDw5.js";
+import { autoSelectWorkspace } from "./resolve-workspace-Ba9NuCRq.js";
 import chalk from "chalk";
 import { createHash, randomBytes } from "node:crypto";
 import { createServer } from "node:http";

package/dist/{pushHandler-DEuoXQXJ.js → pushHandler-Ck7lMC39.js}

@@ -1,13 +1,13 @@
 import { getApiUrl, getAutomationSourceIdOverride, getSourceOverride, getTeamId } from "./env-CHeKHu5S.js";
-import { client, configureClient, uploadImport } from "./sdk-client-CQa-x1zl.js";
+import { client, configureClient, uploadImport } from "./sdk-client-DHD7tgY0.js";
 import "./workspace-store-DDOxnut1.js";
-import { resolveWorkspace } from "./resolve-workspace-DmqApDw5.js";
+import { resolveWorkspace } from "./resolve-workspace-Ba9NuCRq.js";
 import "./token-refresh-Cu5RpkLJ.js";
 import { resolveToken } from "./resolve-token-DbQsmn03.js";
 import { readFileSync, statSync } from "node:fs";
 import { basename } from "node:path";
-import ora from "ora";
 import { execSync } from "node:child_process";
+import ora from "ora";
 
 //#region ../ci-env/dist/providers/github.js
 const MAX_EVENT_PAYLOAD_BYTES = 5 * 1024 * 1024;
@@ -429,7 +429,6 @@ async function pushHandler(flags, file) {
 		this.logger.debug(`Team: ${uploadTeamId ?? (automationSourceId ? "(automation source's team)" : "(server default)")}`);
 		this.logger.debug(`File: ${file} (${formatBytes(fileStat.size)})`);
 		if (flags.format) this.logger.debug(`Format: ${flags.format}`);
-		if (flags["update-mode"]) this.logger.debug(`Update mode: ${flags["update-mode"]}`);
 		if (automationSourceId) this.logger.debug(`Automation source: ${automationSourceId} (${automationSourceOrigin})`);
 		else if (sourceName) this.logger.debug(`Source: ${sourceName} (${sourceOrigin})`);
 		if (ciMeta) {
@@ -452,9 +451,7 @@ async function pushHandler(flags, file) {
 			file: new File([fileBuffer], fileName),
 			fileName,
 			format: flags.format,
-			parentFolderId: flags["parent-folder-id"],
 			runName: flags["run-name"],
-			updateMode: flags["update-mode"],
 			...automationSourceId ? { automationSourceId } : { automationSource: sourceName },
 			importMetadata: ciMeta
 		});

package/dist/{resolve-workspace-DmqApDw5.js → resolve-workspace-Ba9NuCRq.js}

@@ -1,4 +1,4 @@
-import { authGetSitesV1 } from "./sdk-client-CQa-x1zl.js";
+import { authGetSitesV1 } from "./sdk-client-DHD7tgY0.js";
 import { clearWorkspace, loadWorkspace, saveWorkspace } from "./workspace-store-DDOxnut1.js";
 
 //#region src/workspace/resolve-workspace.ts

package/dist/runHandler-COp3W6GN.js

@@ -0,0 +1,320 @@
+import "./env-CHeKHu5S.js";
+import { client, configureClient, issueFindAllV1, issueGateVerificationReportGateResultsV1, issueGateVerificationVerifyGatesV1 } from "./sdk-client-DHD7tgY0.js";
+import "./workspace-store-DDOxnut1.js";
+import { resolveWorkspace } from "./resolve-workspace-Ba9NuCRq.js";
+import "./token-refresh-Cu5RpkLJ.js";
+import { resolveToken } from "./resolve-token-DbQsmn03.js";
+import { existsSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+
+//#region src/commands/gates/gate-runner.ts
+/**
+* ENG-5967 F — run a deliverable's gate `local_commands` and build the
+* `report_gate_results` payload from RAW facts.
+*
+* The contract with the server (`POST /v1/issue/:id/gate-results`, the same
+* one the `report_gate_results` MCP tool takes):
+*
+*  - each `local_commands[]` entry is run EXACTLY as returned, through
+*    `/bin/bash -c` (the shell the qinetic-mcp executor uses — see
+*    `chooseShell`), from the current directory — no rewriting and no
+*    splitting. The server decided what to run; this reports what happened.
+*    `levr gates run` prints each command first; there is no local
+*    allowlist — the server validates every command it hands out
+*    (`validateGateCommand`, review R3-01) and returns one that fails as a
+*    verification error;
+*  - one result per command, carrying its `link_id`, `gate_type`, `step_id`
+*    and `rule_hash`, and ONE raw step: the command, its exit code and the
+*    last `GATE_STEP_TAIL_LIMIT` chars of stdout and stderr. A compound
+*    command (`cd <ws> && yarn test:unit …`) stays one step: the server
+*    judges it per top-level command (review R2-01), so reporting it whole
+*    is as strict as the MCP executor's split;
+*  - `status` is only the exit code's opinion. The server re-derives every
+*    verdict from the steps (a test runner by its exit code and output, an
+*    L4 judge by the verdict it stated), which is why the output must be the
+*    command's own — a terminal proxy that rewrites it (RTK's `PASS (8)
+*    FAIL (0)`) hides the signals the server reads. Spawning the commands
+*    from this process means no proxy ever sees them.
+*
+* Why not the qinetic-mcp executor: it splits `&&` chains and rewrites paths
+* for the Levr monorepo — the opposite of "exactly as returned". The CLI
+* shares its wire contract, not its code, and imports
+* no `@levr/*` value module (so the published bundle's inlined set is
+* unchanged). The documented no-install helper
+* (`packages/help-content/docs/gates/running-gates.mdx`) implements this same
+* contract; `gate-runner.helper.test.ts` holds the two to identical output.
+*/
+/** The server's `GATE_STEP_TAIL_LIMIT` (`@levr/shared`), in chars. */
+const GATE_STEP_TAIL_LIMIT = 4e3;
+/** How long one command may run before it is killed (15 min). */
+const GATE_COMMAND_TIMEOUT_MS = 900 * 1e3;
+/** Keep the END of a stream — where runner summaries and verdicts are. */
+function tail(value, limit = GATE_STEP_TAIL_LIMIT) {
+	const s = value ?? "";
+	return s.length <= limit ? s : s.slice(-limit);
+}
+/**
+* No POSIX shell to run gate commands in — ENG-5967 F-020. Thrown by
+* `chooseShell`; `levr gates run` turns it into a refusal before anything
+* runs or is reported.
+*/
+var NoPosixShellError = class extends Error {
+	constructor(platform) {
+		super(platform === "win32" ? "Gate commands are bash, and no `bash` or `sh` was found on PATH. Install Git for Windows (Git Bash — https://git-scm.com/download/win) or run levr inside WSL, then re-run. Nothing was run or reported." : "Gate commands are bash, and neither /bin/bash nor /bin/sh exists on this machine. Install bash, then re-run. Nothing was run or reported.");
+		this.name = "NoPosixShellError";
+	}
+};
+/**
+* The shell a gate command runs in — ENG-5967 F-020.
+*
+* Gate commands are written for, and run by the qinetic-mcp executor with,
+* `/bin/bash` (`execSync(…, { shell: '/bin/bash' })`), and some use bash-only
+* syntax (`${#v}`, arrays, `shopt`, `[[ ]]`). So:
+*
+*  - POSIX (`process.platform !== 'win32'`): `/bin/bash -c` when it exists,
+*    else `/bin/sh -c` (a minimal image without bash; a bash-only command
+*    then fails loudly with a syntax error, never silently passes);
+*  - Windows: `bash -c` from PATH (Git Bash, WSL), else `sh -c` from PATH.
+*
+* With NEITHER, `NoPosixShellError` — never `cmd.exe`. cmd has no POSIX
+* semantics at all (`&&` aside, quoting, `$(…)`, `test`, pipes into `grep`
+* all differ), so a gate "run" there reports failures that say nothing about
+* the code; refusing, and naming what to install, is the honest answer.
+*
+* `has` answers whether a shell is available — an absolute path is checked
+* on disk, a bare name by trying to run it. Injectable for tests.
+*/
+function chooseShell(platform = process.platform, has = shellExists) {
+	const file = (platform === "win32" ? ["bash", "sh"] : ["/bin/bash", "/bin/sh"]).find((c) => has(c));
+	if (!file) throw new NoPosixShellError(platform);
+	return {
+		file,
+		args: (c) => ["-c", c]
+	};
+}
+function shellExists(shell) {
+	if (shell.startsWith("/")) return existsSync(shell);
+	return spawnSync(shell, ["-c", "exit 0"], { stdio: "ignore" }).status === 0;
+}
+/**
+* Run one command with the chosen shell (`chooseShell`), synchronously, in
+* the current directory. A command killed by a signal or a timeout reports
+* exit code 1 and says why on stderr — never 0.
+*/
+const runInShell = (command) => {
+	const shell = chooseShell();
+	const r = spawnSync(shell.file, shell.args(command), {
+		encoding: "utf8",
+		maxBuffer: 64 * 1024 * 1024,
+		timeout: GATE_COMMAND_TIMEOUT_MS
+	});
+	const stderr = (r.stderr ?? "") + (r.error ? `\n[runner] ${r.error.message}` : "") + (r.signal ? `\n[runner] killed by ${r.signal}` : "");
+	return {
+		exitCode: typeof r.status === "number" ? r.status : 1,
+		stdout: r.stdout ?? "",
+		stderr
+	};
+};
+/** The report entry for one command and what running it produced. */
+function toReportResult(command, outcome) {
+	const step = {
+		command: command.command,
+		exit_code: outcome.exitCode,
+		stdout_tail: tail(outcome.stdout),
+		stderr_tail: tail(outcome.stderr),
+		...command.step_id ? { step_id: command.step_id } : {}
+	};
+	return {
+		gate_type: command.gate_type,
+		link_id: command.link_id,
+		status: outcome.exitCode === 0 ? "pass" : "fail",
+		output: tail(`${outcome.stdout}${outcome.stderr}`),
+		...command.expected !== void 0 ? { expected: command.expected } : {},
+		...command.step_id ? { step_id: command.step_id } : {},
+		...command.rule_hash ? { rule_hash: command.rule_hash } : {},
+		steps: [step]
+	};
+}
+/**
+* Run every command, in order, and build the `results[]` payload.
+* `onBefore` is called BEFORE each command runs (to print it), `onEach`
+* after, with its result.
+*/
+function runLocalCommands(commands, run = runInShell, onEach, onBefore) {
+	return commands.map((command, index) => {
+		onBefore?.(command, index);
+		const result = toReportResult(command, run(command.command));
+		onEach?.(command, result);
+		return result;
+	});
+}
+
+//#endregion
+//#region src/commands/gates/runHandler.ts
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+* Seams for tests: the shell runner (production: `chooseShell`'s bash), and
+* the shell resolution checked BEFORE anything runs (F-020).
+*/
+const gatesRunDeps = {
+	run: runInShell,
+	resolveShell: () => chooseShell()
+};
+/**
+* `levr gates run <issue>` — ENG-5967 F. Verify the deliverable's gates, run
+* each `local_commands` entry exactly as returned, report the raw facts, and
+* list any guided gates (which a person or agent performs and reports with
+* `report_gate_results` step_results — this command never reports them).
+*
+* ENG-5967 F-008 — the commands come from the server, so nothing runs unseen:
+*  - every command is printed BEFORE it runs (to stderr under `--json`, so
+*    the JSON on stdout stays parseable);
+*  - `--dry-run` lists the commands and the report entries they would
+*    produce, and runs NOTHING.
+* There is no local allowlist (user decision 2026-09-25, review R3-01): the
+* SERVER validates every local command it renders (`validateGateCommand`)
+* and returns one that fails as a verification error, never as a command.
+*
+* Exit code: 0 when the server's summary after the report is `all_pass`
+* (or, with nothing to run, already all_pass); 1 otherwise, so a CI step can
+* gate on it.
+*/
+async function gatesRunHandler(flags, issue) {
+	if (flags.verbose) this.logger.setVerbose(true);
+	const out = (s) => this.process.stdout.write(`${s}\n`);
+	let auth;
+	try {
+		auth = await resolveToken();
+	} catch (err) {
+		this.logger.error(err instanceof Error ? err.message : "Authentication failed.");
+		this.process.exitCode = 1;
+		return;
+	}
+	configureClient(auth);
+	if (auth.type === "jwt") try {
+		const ws = await resolveWorkspace(flags["workspace-id"]);
+		client.setConfig({
+			...client.getConfig(),
+			workspaceId: ws.workspaceId
+		});
+	} catch (err) {
+		this.logger.error(err instanceof Error ? err.message : "Workspace resolution failed.");
+		this.process.exitCode = 1;
+		return;
+	}
+	let issueId = issue;
+	if (!UUID_RE.test(issue)) {
+		const found = await issueFindAllV1({ query: {
+			"filter.identifier": [`$eq:${issue}`],
+			limit: 1
+		} });
+		const row = found.data?.data?.[0];
+		if (found.error || !row) {
+			this.logger.error(`Issue ${issue} not found in this workspace.`);
+			this.process.exitCode = 1;
+			return;
+		}
+		issueId = row.id;
+	}
+	const verified = await issueGateVerificationVerifyGatesV1({ path: { id: issueId } });
+	if (verified.error) {
+		this.logger.error(`verify-gates failed (${String(verified.response?.status ?? "unknown")}): ${JSON.stringify(verified.error)}`);
+		this.process.exitCode = 1;
+		return;
+	}
+	const summary = verified.data;
+	const commands = summary.local_commands ?? [];
+	const tasks = summary.manual_tasks ?? [];
+	const label = summary.deliverable ?? issue;
+	if (commands.length === 0) {
+		if (!flags.json) {
+			out(`${label}: no local commands to run (status ${summary.status ?? "unknown"}, ${summary.gates_passing ?? 0}/${summary.gates_total ?? 0} gates passing).`);
+			printManualTasks(out, tasks);
+		} else out(JSON.stringify({ verify: summary }, null, 2));
+		this.process.exitCode = summary.status === "all_pass" ? 0 : 1;
+		return;
+	}
+	if (flags["dry-run"]) {
+		out(JSON.stringify({
+			dry_run: true,
+			deliverable: label,
+			commands: commands.map((c) => ({
+				test_name: c.test_name ?? c.gate_type,
+				gate_type: c.gate_type,
+				link_id: c.link_id,
+				command: c.command,
+				...c.expected !== void 0 ? { expected: c.expected } : {},
+				...c.step_id ? { step_id: c.step_id } : {},
+				...c.rule_hash ? { rule_hash: c.rule_hash } : {}
+			})),
+			report_entry_shape: {
+				gate_type: "<gate_type>",
+				link_id: "<link_id>",
+				status: "pass | fail (exit code 0 or not)",
+				output: "<last 4000 chars of stdout+stderr>",
+				step_id: "<step_id>",
+				rule_hash: "<rule_hash>",
+				steps: [{
+					command: "<command, exactly as above>",
+					exit_code: "<n>",
+					stdout_tail: "<last 4000 chars>",
+					stderr_tail: "<last 4000 chars>"
+				}]
+			}
+		}, null, 2));
+		if (!flags.json) printManualTasks(out, tasks);
+		return;
+	}
+	try {
+		gatesRunDeps.resolveShell();
+	} catch (error) {
+		if (!(error instanceof NoPosixShellError)) throw error;
+		this.logger.error(error.message);
+		this.process.exitCode = 1;
+		return;
+	}
+	const announce = (s) => flags.json ? this.process.stderr.write(`${s}\n`) : out(s);
+	const results = runLocalCommands(commands, gatesRunDeps.run, (_command, result) => {
+		if (flags.json) return;
+		out(`  [exit ${result.steps[0].exit_code}]`);
+	}, (command, index) => {
+		announce(`[${index + 1}/${commands.length}] ${command.test_name ?? command.gate_type}: ${command.command}`);
+	});
+	const reported = await issueGateVerificationReportGateResultsV1({
+		path: { id: issueId },
+		body: { results }
+	});
+	if (reported.error) {
+		this.logger.error(`gate-results failed (${String(reported.response?.status ?? "unknown")}): ${JSON.stringify(reported.error)}`);
+		this.process.exitCode = 1;
+		return;
+	}
+	const after = reported.data;
+	if (flags.json) out(JSON.stringify({
+		results,
+		report: after
+	}, null, 2));
+	else {
+		out("");
+		out(`${after.deliverable ?? label}: ${after.status ?? "unknown"} — ${after.gates_passing ?? 0}/${after.gates_total ?? 0} gates passing`);
+		for (const g of after.gates ?? []) {
+			if (g.status === "pass") continue;
+			out(`  ${String(g.status).toUpperCase()} ${g.test_name ?? g.gate_type}: ${String(g.actual ?? "").slice(0, 300)}`);
+		}
+		for (const r of after.receipts ?? []) if (!r.accepted) out(`  REJECTED ${r.link_id}: ${r.reason ?? ""}`);
+		printManualTasks(out, tasks);
+	}
+	this.process.exitCode = after.status === "all_pass" ? 0 : 1;
+}
+function printManualTasks(out, tasks) {
+	if (tasks.length === 0) return;
+	out("");
+	out(`${tasks.length} guided gate(s) — perform each and report what you OBSERVED with report_gate_results step_results[] (not run by this command):`);
+	for (const t of tasks) {
+		out(`  - [${t.link_id}] ${t.test_name ?? t.gate_type}: ${t.instruction}`);
+		if (t.expected) out(`    expected: ${t.expected}`);
+	}
+}
+
+//#endregion
+export { gatesRunHandler };

package/dist/{sdk-client-CQa-x1zl.js → sdk-client-DHD7tgY0.js}

@@ -103,11 +103,11 @@ const zResponseLabelDto = z.object({
 	archived_by: z.string().nullable().describe("")
 });
 const zUpdateProfileDto = z.object({
-	profileName: z.string().optional(),
+	profileName: z.string().max(250).optional(),
 	providerType: z.number().optional(),
-	apiKey: z.string().optional(),
-	baseUrl: z.string().nullable().optional(),
-	modelName: z.string().optional(),
+	apiKey: z.string().max(1024).optional(),
+	baseUrl: z.string().max(1024).nullable().optional(),
+	modelName: z.string().max(1024).optional(),
 	temperature: z.number().nullable().optional()
 });
 const zSuccessResponseDto = z.object({ success: z.boolean() });
@@ -554,8 +554,8 @@ const zA2aMessageBulkOperationV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/admin-member-profile/zod.js
 const zUpdateMemberProfileDto = z.object({
-	name: z.string().nullable().optional(),
-	username: z.string().nullable().optional()
+	name: z.string().max(256).nullable().optional(),
+	username: z.string().max(39).nullable().optional()
 });
 const zAdminMemberProfileUpdateMemberProfileV1Data = z.object({
 	body: zUpdateMemberProfileDto,
@@ -2640,7 +2640,7 @@ const zSitesResponseDto = z.object({
 	current_workspace_id: z.string().describe("")
 });
 const zSwitchWorkspaceDto = z.object({ workspace_id: z.string() });
-const zCreateWorkspaceDto = z.object({ name: z.string() });
+const zCreateWorkspaceDto = z.object({ name: z.string().max(100) });
 const zAuthLoginV1Data = z.object({
 	body: zLoginDto,
 	url: z.literal("/v1/auth/login")
@@ -2664,8 +2664,8 @@ const zAuthCreateAdditionalWorkspaceV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/autocomplete/zod.js
 const zAutocompleteRequestDto = z.object({
-	prefix: z.string(),
-	suffix: z.string().optional(),
+	prefix: z.string().max(1e4),
+	suffix: z.string().max(1e4).optional(),
 	context: z.object({
 		files: z.array(z.string()).optional(),
 		threadId: z.string().optional(),
@@ -5612,14 +5612,14 @@ const zChatRestoreV1Data = z.object({
 //#region ../sdk/dist/gen/ci-build-event/zod.js
 const zCIBuildEventDto = z.object({
 	workspace_id: z.string(),
-	event_type: z.string(),
-	status: z.string(),
-	branch: z.string().optional(),
-	commit_sha: z.string().optional(),
+	event_type: z.string().max(30),
+	status: z.string().max(20),
+	branch: z.string().max(100).optional(),
+	commit_sha: z.string().max(40).optional(),
 	error_count: z.number().optional(),
 	duration_ms: z.number().optional(),
-	output: z.string().optional(),
-	triggered_by: z.string().optional(),
+	output: z.string().max(1e4).optional(),
+	triggered_by: z.string().max(50).optional(),
 	project_id: z.string().optional()
 });
 const zCIBuildEventResponseDto = z.object({
@@ -6527,7 +6527,7 @@ const zClaudeFileChangeBulkOperationV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/claude-hooks/zod.js
 const zCaptureDto = z.object({
-	session_id: z.string(),
+	session_id: z.string().max(100),
 	hook_type: z.enum([
 		"UserPromptSubmit",
 		"PreToolUse",
@@ -6536,7 +6536,7 @@ const zCaptureDto = z.object({
 	]),
 	prompt: z.string().optional(),
 	response: z.string().optional(),
-	tool_name: z.string().optional(),
+	tool_name: z.string().max(100).optional(),
 	tool_input: z.record(z.string(), z.unknown()).optional(),
 	tool_output: z.string().optional(),
 	input_tokens: z.number().optional(),
@@ -6544,19 +6544,19 @@ const zCaptureDto = z.object({
 	cache_creation_tokens: z.number().optional(),
 	cache_read_tokens: z.number().optional(),
 	raw_payload: z.record(z.string(), z.unknown()).optional(),
-	redirect_type: z.string().optional(),
-	error_type: z.string().optional()
+	redirect_type: z.string().max(50).optional(),
+	error_type: z.string().max(50).optional()
 });
 const zCheckToolDto = z.object({
-	session_id: z.string(),
-	tool_name: z.string()
+	session_id: z.string().max(100),
+	tool_name: z.string().max(100)
 });
 const zResolveCheckpointDto = z.object({
-	session_id: z.string(),
-	checkpoint_id: z.string()
+	session_id: z.string().max(100),
+	checkpoint_id: z.string().max(200)
 });
 const zCreateHookInjectionDto = z.object({
-	session_id: z.string().optional(),
+	session_id: z.string().max(100).optional(),
 	content: z.string(),
 	mode: z.enum([
 		"one_time",
@@ -6569,7 +6569,7 @@ const zCreateHookInjectionDto = z.object({
 });
 const zMarkUsedDto = z.object({ id: z.number() });
 const zRespondDto = z.object({
-	session_id: z.string(),
+	session_id: z.string().max(100),
 	content: z.string(),
 	priority: z.number().optional()
 });
@@ -11073,28 +11073,28 @@ const zEnvironmentNodeDto = z.object({
 	epoch: z.number().describe("")
 });
 const zCreateEnvironmentDto = z.object({
-	name: z.string(),
-	description: z.string().optional(),
-	location: z.string().optional(),
+	name: z.string().max(250),
+	description: z.string().max(65535).optional(),
+	location: z.string().max(250).optional(),
 	all_projects: z.boolean().optional(),
 	resources: z.array(z.object({
-		resource: z.string().describe(""),
-		value: z.string().describe("")
+		resource: z.string().max(250).describe(""),
+		value: z.string().max(4096).describe("")
 	})).optional(),
 	exploration_ids: z.array(z.string()).optional()
 });
 const zUpdateEnvironmentDto = z.object({
-	name: z.string().optional(),
-	description: z.string().nullable(),
-	location: z.string().nullable(),
+	name: z.string().max(250).optional(),
+	description: z.string().max(65535).nullable(),
+	location: z.string().max(250).nullable(),
 	all_projects: z.boolean().optional(),
 	add_resources: z.array(z.object({
-		resource: z.string().describe(""),
-		value: z.string().describe("")
+		resource: z.string().max(250).describe(""),
+		value: z.string().max(4096).describe("")
 	})).optional(),
 	remove_resources: z.array(z.object({
-		resource: z.string().describe(""),
-		value: z.string().describe("")
+		resource: z.string().max(250).describe(""),
+		value: z.string().max(4096).describe("")
 	})).optional(),
 	add_exploration_ids: z.array(z.string()).optional(),
 	remove_exploration_ids: z.array(z.string()).optional()
@@ -11258,7 +11258,7 @@ const zExplorationNodeDto = z.object({
 	}).optional()
 });
 const zCreateExplorationDto = z.object({
-	name: z.string(),
+	name: z.string().max(250),
 	mission: z.string().nullable(),
 	status_id: z.string().nullable(),
 	team_id: z.string().nullable(),
@@ -11266,7 +11266,7 @@ const zCreateExplorationDto = z.object({
 	virtual: z.unknown().optional()
 });
 const zUpdateExplorationDto = z.object({
-	name: z.string().optional(),
+	name: z.string().max(250).optional(),
 	mission: z.string().nullable(),
 	status_id: z.string().nullable(),
 	is_complete: z.boolean().optional(),
@@ -11393,7 +11393,7 @@ const zCreateExplorationItemDto = z.object({
 	exploration_id: z.string().optional(),
 	result: z.string().nullable(),
 	body_md: z.string().nullable(),
-	note_type: z.string().nullable(),
+	note_type: z.string().max(50).nullable(),
 	severity: z.number().nullable(),
 	elapsed: z.number().nullable(),
 	status_id: z.string().nullable(),
@@ -11403,7 +11403,7 @@ const zCreateExplorationItemDto = z.object({
 const zUpdateExplorationItemDto = z.object({
 	result: z.string().nullable(),
 	body_md: z.string().nullable(),
-	note_type: z.string().nullable(),
+	note_type: z.string().max(50).nullable(),
 	severity: z.number().nullable(),
 	elapsed: z.number().nullable(),
 	status_id: z.string().nullable(),
@@ -11436,7 +11436,7 @@ const zGenerateIssueDraftResponseDto = z.object({
 	priority: z.number()
 });
 const zPromoteItemToTestDto = z.object({
-	name: z.string().optional().describe(""),
+	name: z.string().max(500).optional().describe(""),
 	automation_type: z.enum([
 		"manual",
 		"check",
@@ -11452,7 +11452,7 @@ const zPromoteItemToTestDto = z.object({
 	})).optional().describe("")
 });
 const zPromoteItemToIssueDto = z.object({
-	title: z.string().optional().describe(""),
+	title: z.string().max(500).optional().describe(""),
 	description: z.string().optional().describe(""),
 	priority: z.number().optional().describe(""),
 	severity: z.number().optional().describe(""),
@@ -13178,25 +13178,25 @@ const zBulkFolderOperationDto = z.object({
 	]).describe(""),
 	id: z.string().optional().describe(""),
 	data: z.union([z.object({
-		name: z.string(),
+		name: z.string().max(250),
 		description: z.string().optional(),
 		virtual: z.unknown().optional(),
 		assignee_id: z.string().optional(),
 		parent_id: z.string().nullable().optional(),
 		sequence: z.string().optional(),
-		labels: z.array(z.string()).optional(),
+		labels: z.array(z.string().max(80)).optional(),
 		origin: z.enum(["authored", "automation"]).optional(),
 		entity_type: z.enum(["test", "run"]).optional(),
 		is_root: z.unknown().optional().describe("")
 	}), z.object({
-		name: z.string().optional(),
+		name: z.string().max(250).optional(),
 		description: z.string().optional(),
 		virtual: z.unknown().optional(),
 		assignee_id: z.string().optional(),
 		parent_id: z.string().nullable().optional(),
 		sequence: z.string().optional(),
-		add_labels: z.array(z.string()).optional(),
-		remove_labels: z.array(z.string()).optional(),
+		add_labels: z.array(z.string().max(80)).optional(),
+		remove_labels: z.array(z.string().max(80)).optional(),
 		is_root: z.unknown().optional().describe("")
 	})]).optional().describe(""),
 	tx_id: z.string().describe("")
@@ -13233,26 +13233,26 @@ const zBulkFolderResponseDto = z.object({
 	})
 });
 const zCreateFolderDto = z.object({
-	name: z.string(),
+	name: z.string().max(250),
 	description: z.string().optional(),
 	virtual: z.unknown().optional(),
 	assignee_id: z.string().optional(),
 	parent_id: z.string().nullable().optional(),
 	sequence: z.string().optional(),
-	labels: z.array(z.string()).optional(),
+	labels: z.array(z.string().max(80)).optional(),
 	origin: z.enum(["authored", "automation"]).optional(),
 	entity_type: z.enum(["test", "run"]).optional(),
 	is_root: z.unknown().optional().describe("")
 });
 const zUpdateFolderDto = z.object({
-	name: z.string().optional(),
+	name: z.string().max(250).optional(),
 	description: z.string().optional(),
 	virtual: z.unknown().optional(),
 	assignee_id: z.string().optional(),
 	parent_id: z.string().nullable().optional(),
 	sequence: z.string().optional(),
-	add_labels: z.array(z.string()).optional(),
-	remove_labels: z.array(z.string()).optional(),
+	add_labels: z.array(z.string().max(80)).optional(),
+	remove_labels: z.array(z.string().max(80)).optional(),
 	is_root: z.unknown().optional().describe("")
 });
 const zFolderFindAllV1Data = z.object({
@@ -15060,9 +15060,9 @@ const zHealthMemoryDiagnosticsData = z.object({ url: z.literal("/health/memory")
 //#region ../sdk/dist/gen/help/zod.js
 const zHelpSearchV1Data = z.object({
 	query: z.object({
-		"q": z.string(),
+		"q": z.string().max(200),
 		"limit": z.number().optional(),
-		"category": z.string().optional(),
+		"category": z.string().max(100).optional(),
 		"mode": z.enum([
 			"hybrid",
 			"semantic",
@@ -15124,10 +15124,8 @@ const zImportCreateV1Body = z.object({
 		"cucumber-json",
 		"ctrf-json"
 	]).optional().describe(""),
-	parent_folder_id: z.string().optional().describe(""),
-	run_name: z.string().optional().describe(""),
-	update_mode: z.enum(["update", "create_new"]).optional().describe(""),
-	automation_source: z.string().optional().describe(""),
+	run_name: z.string().max(250).optional().describe(""),
+	automation_source: z.string().max(100).optional().describe(""),
 	automation_source_id: z.string().optional().describe(""),
 	import_metadata: z.string().optional().describe("")
 });
@@ -15630,6 +15628,22 @@ const zIntegrationTokenDisconnectGithubV1Data = z.object({ url: z.literal("/v1/i
 const zIntegrationTokenDisconnectGithubUserV1Data = z.object({ url: z.literal("/v1/integrations/github/disconnect_user") });
 const zIntegrationTokenIssueConnectIntentV1Data = z.object({ url: z.literal("/v1/integrations/github/connect-intent") });
 
+//#endregion
+//#region ../sdk/dist/gen/issue/functions.js
+/**
+* Retrieve a paginated list of issues with optional filtering, sorting, and searching capabilities.
+*/
+const issueFindAllV1 = (options) => {
+	return (options?.client ?? client).get({
+		security: [{
+			scheme: "bearer",
+			type: "http"
+		}],
+		url: "/v1/issue",
+		...options
+	});
+};
+
 //#endregion
 //#region ../sdk/dist/gen/issue/zod.js
 const zCreateIssueDto = z.object({
@@ -16169,7 +16183,7 @@ const zIssueAutomationTestEvidenceBulkOperationV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/issue-deduplicate/zod.js
 const zMergeIntoDto = z.object({ patch: z.object({
-	title: z.string().optional(),
+	title: z.string().max(500).optional(),
 	description: z.string().nullable().optional(),
 	priority: z.number().optional(),
 	due_date: z.string().nullable().optional(),
@@ -16210,6 +16224,35 @@ const zIssueDeduplicateDuplicateVerdictV1Data = z.object({
 //#region ../sdk/dist/gen/issue-export/zod.js
 const zIssueExportExportIssueV1Data = z.object({ url: z.literal("/v1/issue/export") });
 
+//#endregion
+//#region ../sdk/dist/gen/issue-gate-verification/functions.js
+/**
+* Split execution model: API gates run server-side, shell gates are returned as local_commands for the caller to execute locally and report back via POST /v1/issue/:id/gate-results.
+*/
+const issueGateVerificationVerifyGatesV1 = (options) => {
+	return (options?.client ?? client).post({
+		security: [{
+			scheme: "bearer",
+			type: "http"
+		}],
+		url: "/v1/issue/{id}/verify-gates",
+		...options
+	});
+};
+/**
+* After executing local_commands from verify-gates, report results here. Updates gate_instance records, creates gate_result audit trail, and posts verification summary comment to the issue. Report RAW per-step facts in `steps` (exit code, stdout/stderr tails); the server derives the verdict from them. `levr gates run <issue>` does verify → run → report for you.
+*/
+const issueGateVerificationReportGateResultsV1 = (options) => {
+	return (options?.client ?? client).post({
+		security: [{
+			scheme: "bearer",
+			type: "http"
+		}],
+		url: "/v1/issue/{id}/gate-results",
+		...options
+	});
+};
+
 //#endregion
 //#region ../sdk/dist/gen/issue-gate-verification/zod.js
 const zIssueGateVerificationBatchVerifyGatesV1Body = z.object({
@@ -16249,7 +16292,7 @@ const zIssueGateVerificationDeployGatesV1Body = z.object({
 	tests_by_deliverable: z.record(z.string(), z.array(z.object({
 		name: z.string(),
 		required: z.boolean().optional().describe(""),
-		advisory_reason: z.string().optional().describe(""),
+		advisory_reason: z.string().max(2e3).optional().describe(""),
 		data: z.record(z.string(), z.unknown()).optional()
 	}))).describe(""),
 	link_template: z.record(z.string(), z.string()),
@@ -16257,7 +16300,8 @@ const zIssueGateVerificationDeployGatesV1Body = z.object({
 	replace_existing: z.boolean().optional(),
 	rename_reused: z.boolean().optional(),
 	test_origin: z.string().optional(),
-	validate: z.boolean().optional()
+	validate: z.boolean().optional(),
+	change_reason: z.string().max(2e3).optional().describe("")
 });
 const zIssueGateVerificationGateStatusV1Data = z.object({
 	path: z.object({ "id": z.string() }),
@@ -17214,7 +17258,7 @@ const zTransitionIssueDto = z.object({
 	verification_override: z.array(z.object({
 		link_id: z.string(),
 		kind: z.enum(["override", "not_applicable"]),
-		reason: z.string()
+		reason: z.string().max(2e3)
 	})).optional().describe(""),
 	batch_scope: z.array(z.string()).optional().describe("")
 });
@@ -17661,7 +17705,7 @@ const zJiraRefreshProjectsV1Data = z.object({
 const zJiraSearchCatalogueV1Data = z.object({
 	path: z.object({ "id": z.string() }),
 	query: z.object({
-		"query": z.string().optional(),
+		"query": z.string().max(250).optional(),
 		"page": z.number().optional(),
 		"limit": z.number().optional()
 	}).optional(),
@@ -19419,7 +19463,7 @@ const zLabelAssignedTestBulkOperationV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/layer0/zod.js
 const zStartLayer0RunDto = z.object({ topic_id: z.string().describe("") });
-const zPlanTopicDto = z.object({ questions: z.array(z.string()).describe("") });
+const zPlanTopicDto = z.object({ questions: z.array(z.string().max(2e3)).describe("") });
 const zQueryCorpusDto = z.object({
 	query: z.string().describe(""),
 	query_type: z.enum([
@@ -19495,7 +19539,7 @@ const zRecordCaptureDto = z.object({
 	confidence_source: z.number().optional().describe(""),
 	recency: z.string().optional().describe(""),
 	provenance_chain: z.string().optional().describe(""),
-	title: z.string().optional().describe("")
+	title: z.string().max(500).optional().describe("")
 });
 const zAcknowledgeDimensionDto = z.object({
 	capture_ids: z.array(z.string()).optional().describe(""),
@@ -20619,7 +20663,7 @@ const zPasswordResetCompleteResetV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/pat/zod.js
 const zCreatePatDto = z.object({
-	name: z.string(),
+	name: z.string().max(250),
 	expires_in_days: z.number().optional().describe("")
 });
 const zPatCreatedResponseDto = z.object({
@@ -21432,11 +21476,11 @@ const zProductPlanFindOneV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/profile/zod.js
 const zCreateProfileDto = z.object({
-	profileName: z.string(),
+	profileName: z.string().max(250),
 	providerType: z.number(),
-	apiKey: z.string(),
-	baseUrl: z.string().optional(),
-	modelName: z.string(),
+	apiKey: z.string().max(1024),
+	baseUrl: z.string().max(1024).optional(),
+	modelName: z.string().max(1024),
 	temperature: z.number().optional()
 });
 const zCreateProfileResponseDto = z.object({
@@ -22926,19 +22970,19 @@ const zInternalRcaConfigBulkOperationV1Data = z.object({
 //#region ../sdk/dist/gen/qinetic-signal/zod.js
 const zQSignalDto = z.object({
 	workspace_id: z.string(),
-	signal_type: z.string(),
+	signal_type: z.string().max(50),
 	severity: z.enum([
 		"critical",
 		"high",
 		"medium",
 		"low"
 	]),
-	source: z.string(),
-	message: z.string(),
+	source: z.string().max(100),
+	message: z.string().max(1e3),
 	context: z.record(z.string(), z.unknown()).optional(),
-	fingerprint: z.string().optional(),
-	commit_sha: z.string().optional(),
-	branch: z.string().optional(),
+	fingerprint: z.string().max(64).optional(),
+	commit_sha: z.string().max(40).optional(),
+	branch: z.string().max(100).optional(),
 	project_id: z.string().optional()
 });
 const zQSignalResponseDto = z.object({
@@ -24514,14 +24558,14 @@ const zCreateRunDto = z.object({
 	test_scope_id: z.string().nullable(),
 	cycle_id: z.string().nullable(),
 	auto_add_tests_to_team: z.boolean().optional(),
-	name: z.string().optional(),
+	name: z.string().max(250).optional(),
 	triggered_by: z.enum([
 		"user",
 		"ci",
 		"schedule",
 		"pr"
 	]).optional(),
-	host_name: z.string().nullable(),
+	host_name: z.string().max(250).nullable(),
 	environment_ids: z.array(z.string()).optional(),
 	test_inclusions: z.array(z.object({
 		test_id: z.string(),
@@ -24529,19 +24573,19 @@ const zCreateRunDto = z.object({
 		required: z.boolean().optional()
 	})).optional(),
 	folder_id: z.string().nullable(),
-	sequence: z.string().optional(),
+	sequence: z.string().max(255).optional(),
 	required: z.enum(["all", "none"]).optional(),
 	required_test_ids: z.array(z.string()).optional(),
 	not_required_test_ids: z.array(z.string()).optional()
 });
 const zUpdateRunDto = z.object({
-	name: z.string().optional(),
-	host_name: z.string().nullable(),
+	name: z.string().max(250).optional(),
+	host_name: z.string().max(250).nullable(),
 	is_complete: z.boolean().optional(),
 	project_id: z.string().nullable(),
 	cycle_id: z.string().nullable(),
 	folder_id: z.string().nullable().optional(),
-	sequence: z.string().optional(),
+	sequence: z.string().max(255).optional(),
 	parent_run_id: z.unknown().optional()
 });
 const zRunWithContentDto = z.object({
@@ -24794,8 +24838,8 @@ const zRefreshFolderResultDto = z.object({
 	unchanged: z.number()
 });
 const zCloneRunDto = z.object({
-	name: z.string(),
-	note: z.string().optional(),
+	name: z.string().max(250),
+	note: z.string().max(250).optional(),
 	scope_mode: z.enum(["snapshot", "rescope"])
 });
 const zBulkRunOperationDto = z.object({
@@ -25758,7 +25802,7 @@ const zSchemaBrowserClearErdPositionsV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/search/zod.js
 const zSemanticSearchDto = z.object({
-	query: z.string(),
+	query: z.string().max(2e3),
 	workspace_id: z.string(),
 	entity_type: z.enum([
 		"issue",
@@ -25796,7 +25840,7 @@ const zSearchSemanticSearchV1Data = z.object({
 });
 const zSearchFindUserV1Data = z.object({
 	query: z.object({
-		"query": z.string(),
+		"query": z.string().max(200),
 		"team_id": z.string().optional(),
 		"include_inactive": z.boolean().optional()
 	}).optional(),
@@ -27739,11 +27783,8 @@ const zOmittedHandleQueryV1Data = z.object({ url: z.literal("/v1/cde/steward/que
 const zOpenStreamingRunDto = z.object({
 	id: z.string().optional().describe(""),
 	team_id: z.string().optional().describe(""),
-	automation_source: z.string().describe(""),
-	run_name: z.string().optional().describe(""),
-	parent_folder_id: z.string().optional().describe(""),
-	parent_folder_name: z.string().optional().describe(""),
-	update_mode: z.enum(["update", "create_new"]).optional().describe(""),
+	automation_source: z.string().max(100).describe(""),
+	run_name: z.string().max(250).optional().describe(""),
 	metadata: z.record(z.string(), z.unknown()).optional().describe("")
 });
 const zStreamingRunResponseDto = z.object({
@@ -28369,7 +28410,7 @@ const zCreateTestDto = z.object({
 	labels: z.array(z.string()).optional()
 });
 const zUpdateTestDto = z.object({
-	name: z.string().optional(),
+	name: z.string().max(250).optional(),
 	automation_status: z.enum([
 		"not_automated",
 		"to_automate",
@@ -28449,8 +28490,8 @@ const zUpdateTestDto = z.object({
 		link_to_id: z.string().optional(),
 		unlink: z.boolean().optional()
 	}).optional(),
-	add_labels: z.array(z.string()).optional(),
-	remove_labels: z.array(z.string()).optional()
+	add_labels: z.array(z.string().max(80)).optional(),
+	remove_labels: z.array(z.string().max(80)).optional()
 });
 const zTestBulkOperationDto = z.object({
 	op: z.enum([
@@ -28773,9 +28814,9 @@ const zPreviewImportResponseDto = z.object({
 			"boolean",
 			"unknown"
 		]).optional(),
-		labelPrefix: z.string().optional().describe(""),
-		descriptionHeading: z.string().optional().describe(""),
-		teamQualifier: z.string().optional().describe(""),
+		labelPrefix: z.string().max(60).optional().describe(""),
+		descriptionHeading: z.string().max(80).optional().describe(""),
+		teamQualifier: z.string().max(80).optional().describe(""),
 		team_id: z.string().optional().describe("")
 	})),
 	missing_required: z.array(z.string()),
@@ -28890,9 +28931,9 @@ const zCommitImportDto = z.object({
 			"boolean",
 			"unknown"
 		]).optional(),
-		labelPrefix: z.string().optional().describe(""),
-		descriptionHeading: z.string().optional().describe(""),
-		teamQualifier: z.string().optional().describe(""),
+		labelPrefix: z.string().max(60).optional().describe(""),
+		descriptionHeading: z.string().max(80).optional().describe(""),
+		teamQualifier: z.string().max(80).optional().describe(""),
 		team_id: z.string().optional().describe("")
 	})).optional().describe(""),
 	assignee_plan: z.object({
@@ -29775,12 +29816,12 @@ const zCaptureEventDto = z.object({
 	}).optional().describe(""),
 	raw_payload: z.record(z.string(), z.unknown()).optional().describe(""),
 	duration_ms: z.number().optional().describe(""),
-	agent_key: z.string().optional().describe(""),
-	agent_id: z.string().optional().describe(""),
-	parent_session_id: z.string().optional().describe(""),
+	agent_key: z.string().max(100).optional().describe(""),
+	agent_id: z.string().max(100).optional().describe(""),
+	parent_session_id: z.string().max(100).optional().describe(""),
 	is_sub_agent: z.boolean().optional().describe(""),
-	model_name: z.string().optional().describe(""),
-	issue_identifier: z.string().optional().describe("")
+	model_name: z.string().max(100).optional().describe(""),
+	issue_identifier: z.string().max(50).optional().describe("")
 });
 const zCaptureResultDto = z.object({
 	capture_id: z.string().describe(""),
@@ -30666,14 +30707,14 @@ const zUserPreferenceRestoreV1Data = z.object({
 //#endregion
 //#region ../sdk/dist/gen/verify/zod.js
 const zVerifyDigestRequestDto = z.object({
-	entity: z.string().describe(""),
+	entity: z.string().max(100).describe(""),
 	level: z.union([z.number(), z.number()]).optional().describe(""),
 	due_reason: z.enum([
 		"interval",
 		"dirty",
 		"never_stamped"
 	]).optional().describe(""),
-	pass_id: z.string().optional().describe("")
+	pass_id: z.string().max(64).optional().describe("")
 });
 const zFoldedDigestDto = z.object({
 	n: z.number().describe(""),
@@ -30695,9 +30736,9 @@ const zVerifyDigestResponseDto = z.object({
 	cached: z.boolean().describe("")
 });
 const zVerifyBucketRowsRequestDto = z.object({
-	entity: z.string().describe(""),
+	entity: z.string().max(100).describe(""),
 	buckets: z.array(z.string()).describe(""),
-	after: z.string().optional().describe(""),
+	after: z.string().max(64).optional().describe(""),
 	limit: z.number().optional().describe("")
 });
 const zRowRefDto = z.object({
@@ -30709,7 +30750,7 @@ const zVerifyBucketRowsResponseDto = z.object({
 	next: z.string().nullable().describe("")
 });
 const zVerifyRowsRequestDto = z.object({
-	entity: z.string().describe(""),
+	entity: z.string().max(100).describe(""),
 	ids: z.array(z.string()).describe("")
 });
 const zVerifyRowsResponseDto = z.object({
@@ -31550,9 +31591,9 @@ const zWorkspaceDataGetDataV1Data = z.object({ url: z.literal("/v1/workspace-dat
 //#endregion
 //#region ../sdk/dist/gen/workspace-description/zod.js
 const zSuggestDescriptionRequestDto = z.object({
-	workspace_name: z.string(),
-	company_name: z.string().optional(),
-	company_url: z.string().optional(),
+	workspace_name: z.string().max(250),
+	company_name: z.string().max(250).optional(),
+	company_url: z.string().max(250).optional(),
 	existing_descriptions: z.array(z.string()).optional()
 });
 const zSuggestDescriptionResponseDto = z.object({ suggestion: z.string().nullable() });
@@ -31989,9 +32030,7 @@ async function uploadImport(options) {
 			file: options.file,
 			team_id: options.teamId,
 			format: options.format,
-			parent_folder_id: options.parentFolderId,
 			run_name: options.runName,
-			update_mode: options.updateMode,
 			automation_source: options.automationSource,
 			automation_source_id: options.automationSourceId,
 			import_metadata: options.importMetadata ? JSON.stringify(options.importMetadata) : void 0
@@ -32019,4 +32058,4 @@ function tryReadMessage(err) {
 }
 
 //#endregion
-export { authGetProfileV1, authGetSitesV1, client, configureClient, teamFindAllV1, testCaseImportCommitV1, testCaseImportPreviewV1, uploadImport };
+export { authGetProfileV1, authGetSitesV1, client, configureClient, issueFindAllV1, issueGateVerificationReportGateResultsV1, issueGateVerificationVerifyGatesV1, teamFindAllV1, testCaseImportCommitV1, testCaseImportPreviewV1, uploadImport };

package/dist/{selectHandler-DmpxYqaN.js → selectHandler-CzolM41G.js}

@@ -1,5 +1,5 @@
 import "./env-CHeKHu5S.js";
-import { authGetSitesV1, configureClient } from "./sdk-client-CQa-x1zl.js";
+import { authGetSitesV1, configureClient } from "./sdk-client-DHD7tgY0.js";
 import { saveWorkspace } from "./workspace-store-DDOxnut1.js";
 import "./token-refresh-Cu5RpkLJ.js";
 import { resolveToken } from "./resolve-token-DbQsmn03.js";

package/dist/{statusHandler-BuAkYg-T.js → statusHandler-BvK4zSEf.js}

@@ -1,5 +1,5 @@
 import { getApiUrl, getPatToken, readCredentials } from "./env-CHeKHu5S.js";
-import { authGetProfileV1, configureClient } from "./sdk-client-CQa-x1zl.js";
+import { authGetProfileV1, configureClient } from "./sdk-client-DHD7tgY0.js";
 import { isTokenExpired } from "./token-refresh-Cu5RpkLJ.js";
 import chalk from "chalk";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@levr-one/cli",
-  "version": "0.9.29",
+  "version": "0.10.0",
   "description": "The command-line interface for Levr",
   "type": "module",
   "license": "MIT",