@metabase/cli 0.4.1-alpha.release-65-integration-branch.5cbe297 → 0.5.1

package/dist/{client-1UIUBA_V.mjs → client-BBwYPXDW.mjs}

@@ -1,38 +1,39 @@
-import { ct as InternalError, dt as ResponseShapeError, ft as TimeoutError, gt as formatZodIssue, ht as errorMessage, ot as ConfigError } from "./cli.mjs";
+import { At as formatZodIssue, Et as TimeoutError, Mt as isNonInterruptFailure, P as CapabilityError, Q as parseJsonOrPlain, Tt as ResponseShapeError, W as HttpError, Y as isPlainObject, kt as errorMessage, n as isMethodKey, r as methodRequirements, wt as PartialWriteError, xt as InternalError, yt as ConfigError } from "./cli.mjs";
 import { n as Notification, r as NotificationCardPayload, t as CARD_PAYLOAD_TYPE } from "./notification-DaA4bBHW.mjs";
-import { P as HttpError, Z as PROBE_PATH, z as parseJsonOrPlain } from "./runtime-X6hVzSMW.mjs";
-import { n as createTransport } from "./transport-BmNrb0Lz.mjs";
+import { L as profileFromProperties, Z as SessionProperties } from "./runtime-Ckns6TKK.mjs";
+import { n as featureFailures, r as supersedingFeature, t as checkFeatures } from "./requirement-check-BE3PuGsC.mjs";
+import { n as createTransport } from "./transport-0qFZhEuP.mjs";
 import { f as FieldWithDataSensitivity, h as fieldRemappedValueSchema, m as fieldDetailSchema, n as FieldBaseType, o as FieldSearchMatches, s as FieldSemanticType, u as FieldValues } from "./field-5nivEfd6.mjs";
 import { a as TemporalUnit, r as ParameterValues } from "./parameter-Celg0wZa.mjs";
 import { r as PivotExportFormat, t as DatasetQuery } from "./query-BKtMP5eH.mjs";
 import { a as CardQueryResult, t as Card } from "./card-P5mBknsl.mjs";
-import { b as TableVisibilityType, p as TableQueryMetadata, s as TableDataLayerTier, t as Table, u as TableForeignKey, v as TableSelectors } from "./table-Ci6bhZkb.mjs";
-import { t as Database } from "./database-BT7DVgSr.mjs";
+import { b as TableVisibilityType, p as TableQueryMetadata, s as TableDataLayerTier, t as Table, u as TableForeignKey, v as TableSelectors } from "./table-zAdW5_3H.mjs";
+import { t as Database } from "./database-2HYCdHqK.mjs";
 import { t as Snippet } from "./snippet-CyKAgIZl.mjs";
-import { o as compiledQuerySchema, r as QueryMetadata } from "./dataset-BmvCxGoE.mjs";
-import { c as CollectionItem, m as CollectionTreeNode, r as Collection } from "./collection-BgPYl2c5.mjs";
+import { r as QueryMetadata, t as CompiledQuery } from "./dataset-D-x2Ho2i.mjs";
+import { c as CollectionItem, m as CollectionTreeNode, r as Collection } from "./collection-B2wRXyTF.mjs";
 import { t as ContentTranslationUploadResult } from "./content-translation-BrHOrmj9.mjs";
 import { l as Dashcard, o as DashboardDetail, r as DashboardCopy, t as Dashboard } from "./dashboard-Phz3XpRM.mjs";
 import { a as DataActionExecuteResult, s as dataActionSchema } from "./data-action-DZxVB_hD.mjs";
-import { r as pollUntil } from "./poll-DFZRtTA_.mjs";
-import { i as DependencyEntity, s as DependencyGraph, t as BreakingSource, u as DependencyNode } from "./dependency-B4J1bwFh.mjs";
-import { t as Document } from "./document-COQzVLjW.mjs";
-import { i as EidTranslateResult } from "./eid-translation-zEHtr5Oc.mjs";
+import { r as pollUntil } from "./poll-CX3jPtXb.mjs";
+import { i as DependencyEntity, s as DependencyGraph, t as BreakingSource, u as DependencyNode } from "./dependency-qP1hx2YN.mjs";
+import { t as Document } from "./document-UMG6me2P.mjs";
+import { i as EidTranslateResult } from "./eid-translation-Ba92VOHe.mjs";
 import { c as SyncRemoteChanges, d as SyncTask, i as SyncExportPreflight, l as SyncSettingsUpdateResult, m as isSyncTaskTerminal, n as SyncDirtyItem, t as SyncBranchCreated } from "./git-sync-COokpYgc.mjs";
-import { t as Glossary } from "./glossary-CdW6RFId.mjs";
-import { a as libraryWireSchema, i as LibraryPublishTablesInput, n as LibraryCollectionInfo, o as toLibrary } from "./library-C4M8TF2N.mjs";
+import { t as Glossary } from "./glossary-QN-hHfOT.mjs";
+import { a as libraryWireSchema, i as LibraryPublishTablesInput, n as LibraryCollectionInfo, o as toLibrary } from "./library-BKSFtIV9.mjs";
 import { t as Measure } from "./measure-CtfjqJFP.mjs";
 import { r as ModerationReviewCreateInput, t as ModerationReview } from "./moderation-review-BdqEH6N1.mjs";
 import { t as Pulse } from "./pulse-Dz0ocv0l.mjs";
 import { a as TransformDagTransform, d as TransformTarget, g as transformRowSchema, h as transformDetailSchema, i as TransformDagRunResult, l as TransformRunSummary, m as isTransformRunTerminal, o as TransformRun, p as isTransformRunFailed, u as TransformSourceTableEntry } from "./transform-DiW7bREn.mjs";
-import { r as SearchResult } from "./search-BAXg-EJw.mjs";
+import { r as SearchResult } from "./search-CXRavT7G.mjs";
 import { t as Segment } from "./segment-OsrbUDzw.mjs";
 import { t as Setting } from "./setting-DTiLCW8g.mjs";
 import { n as SetupResult } from "./setup-CO7QV-ao.mjs";
-import { i as TimelineEvent, t as Timeline } from "./timeline-CCSU2qOS.mjs";
-import { c as transformJobSchema, n as TransformJobActiveResult, s as transformJobRunResultSchema } from "./transform-job-CCguL6LP.mjs";
+import { i as TimelineEvent, t as Timeline } from "./timeline-DcsCXNUt.mjs";
+import { c as transformJobSchema, n as TransformJobActiveResult, s as transformJobRunResultSchema } from "./transform-job-ClX8e5iO.mjs";
 import { t as TransformTag } from "./transform-tag-CcElGp3C.mjs";
-import { i as TransformTestRunResult, t as TransformTest } from "./transform-test-BjjCQ2xm.mjs";
+import { i as TransformTestRunResult, t as TransformTest } from "./transform-test-Bexa_K89.mjs";
 import { t as UploadResult } from "./upload-DAtxBBms.mjs";
 import { z } from "zod";
 //#region \0rolldown/runtime.js
@@ -48,14 +49,14 @@ var __exportAll = (all, no_symbols) => {
 };
 //#endregion
 //#region ../client/src/resources/pivot-export.ts
-const PivotedExportsSetting = z.object({ "enable-pivoted-exports": z.boolean() });
+const PivotedExportsProperty = SessionProperties.extend({ "enable-pivoted-exports": z.boolean() });
 /**
 * Refuse a pivoted export the server would answer with plain rows: a JSON export keeps only the
 * ungrouped rows, and an admin can turn pivoted CSV and XLSX exports off.
 */
 async function assertPivotedExport(transport, format, options) {
 	if (!PivotExportFormat.safeParse(format).success) throw new ConfigError(`a ${format} export cannot be pivoted; only ${PivotExportFormat.options.join(" and ")} can`);
-	if (!(await transport.requestParsed(PivotedExportsSetting, "/api/session/properties", { ...options }))["enable-pivoted-exports"]) throw new ConfigError("the server has pivoted exports turned off (the enable-pivoted-exports setting), so it would export the plain rows");
+	if (!(await transport.probe(PivotedExportsProperty, options))["enable-pivoted-exports"]) throw new ConfigError("the server has pivoted exports turned off (the enable-pivoted-exports setting), so it would export the plain rows");
 }
 //#endregion
 //#region ../client/src/resources/card.ts
@@ -63,7 +64,6 @@ const CardApiList = z.array(Card);
 function cardResource(transport) {
 	/** List cards. `f` picks a server-side preset; `model_id` scopes the presets that need an id. */
 	async function list(params = {}, options = {}) {
-		await transport.require("card.list", options);
 		return {
 			data: await transport.requestParsed(CardApiList, "/api/card", {
 				...options,
@@ -77,12 +77,10 @@ function cardResource(transport) {
 	}
 	/** Get one card by id. */
 	async function get(id, options = {}) {
-		await transport.require("card.get", options);
 		return transport.requestParsed(Card, `/api/card/${id}`, { ...options });
 	}
 	/** Create a card — a question, a model, or a metric — from a full card body. */
 	async function create(params, options = {}) {
-		await transport.require("card.create", options);
 		return transport.requestParsed(Card, "/api/card", {
 			...options,
 			method: "POST",
@@ -91,7 +89,6 @@ function cardResource(transport) {
 	}
 	/** Update a card by id, patching only the fields the body carries. */
 	async function update(id, params, options = {}) {
-		await transport.require("card.update", options);
 		return transport.requestParsed(Card, `/api/card/${id}`, {
 			...options,
 			method: "PUT",
@@ -100,12 +97,10 @@ function cardResource(transport) {
 	}
 	/** Archive (soft-delete) a card by id. Metabase models this as an update, not its own endpoint. */
 	async function archive(id, options = {}) {
-		await transport.require("card.archive", options);
 		return update(id, { archived: true }, options);
 	}
 	/** Run a saved card and return the query result envelope. */
 	async function query(id, params, options = {}) {
-		await transport.require("card.query", options);
 		return transport.requestParsed(CardQueryResult, `/api/card/${id}/query`, {
 			...options,
 			method: "POST",
@@ -121,9 +116,8 @@ function cardResource(transport) {
 	* there before the wire.
 	*/
 	async function exportQuery(id, format, params, options = {}) {
-		await transport.require("card.exportQuery", options);
-		await transport.requireFeatures(params.csv_include_bom ? ["exportCsvByteOrderMark"] : [], options);
 		if (params.pivot_results) await assertPivotedExport(transport, format, options);
+		await transport.requireFeatures(params.csv_include_bom ? ["exportCsvByteOrderMark"] : [], options);
 		const body = new URLSearchParams({
 			parameters: JSON.stringify(params.parameters),
 			format_rows: String(params.format_rows),
@@ -141,7 +135,6 @@ function cardResource(transport) {
 	* snippets its query references, plus the card's own metadata for a model or a native query.
 	*/
 	async function queryMetadata(id, options = {}) {
-		await transport.require("card.queryMetadata", options);
 		return transport.requestParsed(QueryMetadata, `/api/card/${id}/query_metadata`, { ...options });
 	}
 	return {
@@ -227,7 +220,6 @@ function collectionResource(transport) {
 	* preset includes the Library collections that match it.
 	*/
 	async function list(params = {}, options = {}) {
-		await transport.require("collection.list", options);
 		return {
 			data: await transport.requestParsed(CollectionApiList, "/api/collection", {
 				...options,
@@ -238,12 +230,10 @@ function collectionResource(transport) {
 	}
 	/** Get one collection by id, entity id, or the `root`/`trash` alias. */
 	async function get(ref, options = {}) {
-		await transport.require("collection.get", options);
 		return transport.requestParsed(Collection, `/api/collection/${refPath(ref)}`, { ...options });
 	}
 	/** Create a new collection. */
 	async function create(params, options = {}) {
-		await transport.require("collection.create", options);
 		return transport.requestParsed(Collection, "/api/collection", {
 			...options,
 			method: "POST",
@@ -256,7 +246,6 @@ function collectionResource(transport) {
 	* moves a collection into the trash ignores `parent_id`.
 	*/
 	async function update(ref, params, options = {}) {
-		await transport.require("collection.update", options);
 		return transport.requestParsed(Collection, `/api/collection/${refPath(ref)}`, {
 			...options,
 			method: "PUT",
@@ -265,7 +254,6 @@ function collectionResource(transport) {
 	}
 	/** Archive (soft-delete) a collection. Metabase models this as an update, not its own endpoint. */
 	async function archive(ref, options = {}) {
-		await transport.require("collection.archive", options);
 		return update(ref, { archived: true }, options);
 	}
 	/**
@@ -273,7 +261,6 @@ function collectionResource(transport) {
 	* the caller consumes pages rather than a single list and decides how far to pull.
 	*/
 	async function* itemPages(ref, params = {}, options = {}) {
-		await transport.require("collection.itemPages", options);
 		yield* paginatePages(transport, `/api/collection/${refPath(ref)}/items`, CollectionItem, {
 			query: {
 				models: params.models,
@@ -288,7 +275,6 @@ function collectionResource(transport) {
 	}
 	/** Fetch the collection hierarchy as a forest of nested nodes. */
 	async function tree(params = {}, options = {}) {
-		await transport.require("collection.tree", options);
 		return {
 			data: await transport.requestParsed(CollectionTreeApiList, "/api/collection/tree", {
 				...options,
@@ -308,6 +294,128 @@ function collectionResource(transport) {
 	};
 }
 //#endregion
+//#region ../client/src/version/refusal.ts
+const REFUSAL_STATUSES = /* @__PURE__ */ new Set([
+	400,
+	402,
+	404
+]);
+function explainer(transport, namespace) {
+	function explain(name, method, parameters) {
+		const key = methodKey(namespace, name);
+		return async (...args) => {
+			try {
+				return await method(...args);
+			} catch (error) {
+				throw await explainRefusal(transport, callRequirement(key, parameters, args), error);
+			}
+		};
+	}
+	function explainWalk(name, method, parameters) {
+		const key = methodKey(namespace, name);
+		return async function* (...args) {
+			try {
+				yield* method(...args);
+			} catch (error) {
+				throw await explainRefusal(transport, callRequirement(key, parameters, args), error);
+			}
+		};
+	}
+	function refuse(name, method) {
+		const key = methodKey(namespace, name);
+		return async (...args) => {
+			await transport.requireFeatures(methodRequirements(key), trailingWait(args));
+			return method(...args);
+		};
+	}
+	function refuseAfterReading(name, reader, method) {
+		const key = methodKey(namespace, name);
+		return async (options = {}) => {
+			const properties = await transport.probe(reader, options);
+			const profile = profileFromProperties(properties);
+			for (const failure of featureFailures(methodRequirements(key), profile)) transport.refuseBeforeSending(new CapabilityError(failure));
+			return method(properties);
+		};
+	}
+	return {
+		explain,
+		explainWalk,
+		refuse,
+		refuseAfterReading
+	};
+}
+function trailingWait(args) {
+	const last = args.at(-1);
+	if (isPlainObject(last) && last["signal"] instanceof AbortSignal) return { signal: last["signal"] };
+	return {};
+}
+function methodKey(namespace, name) {
+	const key = `${namespace}.${name}`;
+	if (!isMethodKey(key)) throw new InternalError(`no requirements entry for ${key}`);
+	return key;
+}
+function callRequirement(key, parameters, args) {
+	return {
+		parameters: parameters === void 0 ? [] : parameters(...args),
+		method: methodRequirements(key)
+	};
+}
+/**
+* The error a call failed with, as a `CapabilityError` carrying the server's answer when the server
+* refused it for lacking one of the features `call` needs, and unchanged otherwise. The server's own
+* refusal is the verdict; the profile only names what was missing. The explaining probe is bounded
+* by its own timeout and the client's signal; the error stands when the probe fails, and an
+* interrupt surfaces as one.
+*/
+async function explainRefusal(transport, call, error) {
+	if (!mayBeRefusal(call, error)) return error;
+	let profile;
+	try {
+		profile = await transport.verifiedServer();
+	} catch (probeError) {
+		if (isNonInterruptFailure(probeError)) return error;
+		throw probeError;
+	}
+	const failure = explainedFailure(call, profile, error);
+	return failure === null ? error : new CapabilityError(failure, error);
+}
+/** Every feature `call` needs, parameters first, since a parameter's floor sits above its method's. */
+function callFeatures(call) {
+	return [...call.parameters.map((parameter) => parameter.feature), ...call.method];
+}
+/**
+* Whether `error` may be the server refusing `call` for a feature it lacks. A call that needs no
+* feature cannot be, and neither can a 404 for a missing row, which comes from a route the server
+* serves.
+*/
+function mayBeRefusal(call, error) {
+	if (callFeatures(call).length === 0) return false;
+	if (!(error instanceof HttpError) || error.kind === "resource-missing") return false;
+	return REFUSAL_STATUSES.has(error.status);
+}
+/**
+* The feature `profile` lacks that explains `refusal` of `call`, or `null` when the server has every
+* feature the call needs, so it failed for some other reason, or when the refusal points elsewhere.
+*/
+function explainedFailure(call, profile, refusal) {
+	const failure = checkFeatures(callFeatures(call), profile);
+	if (failure === null || pointsElsewhere(call, profile, refusal)) return null;
+	return failure;
+}
+function pointsElsewhere(call, profile, refusal) {
+	if (refusal.status !== 400 || checkFeatures(call.method, profile) !== null) return false;
+	const named = rejectedFields(refusal);
+	const gated = new Set(call.parameters.filter((parameter) => checkFeatures([parameter.feature], profile) !== null).flatMap((parameter) => parameter.fields));
+	return named.some((field) => !gated.has(field));
+}
+function rejectedFields(refusal) {
+	return [refusal.fieldErrors, refusal.specificFieldErrors].flatMap((errors) => errors === null ? [] : Object.keys(errors).map(topLevelField));
+}
+function topLevelField(path) {
+	const end = path.indexOf(".");
+	return end === -1 ? path : path.slice(0, end);
+}
+//#endregion
 //#region ../client/src/resources/csv-upload.ts
 const CSV_CONTENT_TYPE = "text/csv";
 function buildCsvFormData(file) {
@@ -319,14 +427,13 @@ function buildCsvFormData(file) {
 //#region ../client/src/resources/content-translation.ts
 const CONTENT_TRANSLATION_PATH = "/api/ee/content-translation";
 function contentTranslationResource(transport) {
+	const { explain } = explainer(transport, "contentTranslation");
 	/** Download the complete content translation dictionary as CSV. */
 	async function download(options = {}) {
-		await transport.require("contentTranslation.download", options);
 		return transport.requestStream(`${CONTENT_TRANSLATION_PATH}/csv`, options);
 	}
 	/** Replace the complete content translation dictionary with the attached CSV. */
 	async function upload(file, options = {}) {
-		await transport.require("contentTranslation.upload", options);
 		const form = buildCsvFormData(file);
 		return transport.requestParsed(ContentTranslationUploadResult, `${CONTENT_TRANSLATION_PATH}/upload-dictionary`, {
 			...options,
@@ -335,8 +442,8 @@ function contentTranslationResource(transport) {
 		});
 	}
 	return {
-		download,
-		upload
+		download: explain("download", download),
+		upload: explain("upload", upload)
 	};
 }
 //#endregion
@@ -347,7 +454,6 @@ function dashboardResource(transport) {
 	const card = cardResource(transport);
 	/** List dashboards. `f` picks a server-side preset. */
 	async function list(params = {}, options = {}) {
-		await transport.require("dashboard.list", options);
 		return {
 			data: await transport.requestParsed(DashboardApiList, "/api/dashboard", {
 				...options,
@@ -358,7 +464,6 @@ function dashboardResource(transport) {
 	}
 	/** Get one dashboard by id, with its dashcards, tabs and parameters. */
 	async function get(id, options = {}) {
-		await transport.require("dashboard.get", options);
 		return transport.requestParsed(DashboardDetail, `/api/dashboard/${id}`, { ...options });
 	}
 	/**
@@ -366,7 +471,6 @@ function dashboardResource(transport) {
 	* puts content on a fresh dashboard.
 	*/
 	async function create(params, options = {}) {
-		await transport.require("dashboard.create", options);
 		return transport.requestParsed(Dashboard, "/api/dashboard", {
 			...options,
 			method: "POST",
@@ -378,7 +482,6 @@ function dashboardResource(transport) {
 	* full replacements: whatever the body omits is deleted from the dashboard.
 	*/
 	async function update(id, params, options = {}) {
-		await transport.require("dashboard.update", options);
 		return transport.requestParsed(DashboardDetail, `/api/dashboard/${id}`, {
 			...options,
 			method: "PUT",
@@ -396,7 +499,6 @@ function dashboardResource(transport) {
 	* is duplicated. Action, link and placeholder dashcards are not copied.
 	*/
 	async function copy(id, params = {}, options = {}) {
-		await transport.require("dashboard.copy", options);
 		return transport.requestParsed(DashboardCopy, `/api/dashboard/${id}/copy`, {
 			...options,
 			method: "POST",
@@ -409,7 +511,6 @@ function dashboardResource(transport) {
 	* an archive is a state change on the dashboard itself, and its dashcards are not part of it.
 	*/
 	async function archive(id, options = {}) {
-		await transport.require("dashboard.archive", options);
 		return transport.requestParsed(Dashboard, `/api/dashboard/${id}`, {
 			...options,
 			method: "PUT",
@@ -422,7 +523,6 @@ function dashboardResource(transport) {
 	* currently stands.
 	*/
 	async function updateDashcard(dashboardId, dashcardId, params, options = {}) {
-		await transport.require("dashboard.updateDashcard", options);
 		const dashboard = await get(dashboardId, options);
 		const target = dashboard.dashcards.find((dashcard) => dashcard.id === dashcardId);
 		if (target === void 0) throw new ConfigError(`dashcard ${dashcardId} not found on dashboard ${dashboardId}`);
@@ -441,7 +541,6 @@ function dashboardResource(transport) {
 	* any other way propagates as the failure it was.
 	*/
 	async function checkCardReferences(dashcards, options = {}) {
-		await transport.require("dashboard.checkCardReferences", options);
 		const grouped = groupByCardId(collectCardReferences(dashcards));
 		return (await Promise.all(Array.from(grouped.entries()).map(async ([cardId, references]) => ({
 			references,
@@ -461,7 +560,7 @@ function dashboardResource(transport) {
 		} catch (error) {
 			if (!(error instanceof HttpError)) throw error;
 			if (error.kind === "resource-missing") return { reason: "missing" };
-			if (error.kind === "auth") return {
+			if (error.kind === "auth" || error.kind === "forbidden") return {
 				reason: "unreadable",
 				detail: error.userMessage
 			};
@@ -472,7 +571,6 @@ function dashboardResource(transport) {
 	* Fetch the selectable values for a dashboard parameter, through the chain-filter value endpoint.
 	*/
 	async function parameterValues(dashboardId, parameterId, options = {}) {
-		await transport.require("dashboard.parameterValues", options);
 		return transport.requestParsed(ParameterValues, `/api/dashboard/${dashboardId}/params/${encodeURIComponent(parameterId)}/values`, { ...options });
 	}
 	/**
@@ -480,7 +578,6 @@ function dashboardResource(transport) {
 	* substring, capped at the first 1000 matches.
 	*/
 	async function searchParameterValues(dashboardId, parameterId, query, options = {}) {
-		await transport.require("dashboard.searchParameterValues", options);
 		const parameter = encodeURIComponent(parameterId);
 		return transport.requestParsed(ParameterValues, `/api/dashboard/${dashboardId}/params/${parameter}/search/${encodeURIComponent(query)}`, { ...options });
 	}
@@ -533,14 +630,20 @@ function stripEntityId(dashcard) {
 }
 //#endregion
 //#region ../client/src/resources/data-action.ts
+function collectionFeatures(params) {
+	return params.collection_id === void 0 ? [] : [{
+		feature: "dataActionCollections",
+		fields: ["collection_id"]
+	}];
+}
 function dataActionResource(transport) {
+	const { explain } = explainer(transport, "dataAction");
 	async function readSchema(options) {
 		const { features } = await transport.server(options);
 		return dataActionSchema(features);
 	}
 	/** List the unarchived data actions the caller can see. `GET /api/action` answers a bare array. */
 	async function list(options = {}) {
-		await transport.require("dataAction.list", options);
 		const schema = await readSchema(options);
 		return {
 			data: await transport.requestParsed(z.array(schema), "/api/action", { ...options }),
@@ -549,13 +652,11 @@ function dataActionResource(transport) {
 	}
 	/** Get one unarchived data action by id. */
 	async function get(id, options = {}) {
-		await transport.require("dataAction.get", options);
 		const schema = await readSchema(options);
 		return transport.requestParsed(schema, `/api/action/${id}`, { ...options });
 	}
 	/** Create a data action — a parameterized native query that writes to a database — in a collection. */
 	async function create(params, options = {}) {
-		await transport.require("dataAction.create", options);
 		const schema = await readSchema(options);
 		return transport.requestParsed(schema, "/api/action", {
 			...options,
@@ -565,7 +666,6 @@ function dataActionResource(transport) {
 	}
 	/** Update a data action by id, patching only the fields the body carries. */
 	async function update(id, params, options = {}) {
-		await transport.require("dataAction.update", options);
 		const schema = await readSchema(options);
 		return transport.requestParsed(schema, `/api/action/${id}`, {
 			...options,
@@ -575,12 +675,10 @@ function dataActionResource(transport) {
 	}
 	/** Archive (soft-delete) a data action by id. Metabase models this as an update, not its own endpoint. */
 	async function archive(id, options = {}) {
-		await transport.require("dataAction.archive", options);
 		return update(id, { archived: true }, options);
 	}
 	/** Delete a data action by id, removing it and the dashboard buttons that run it. */
 	async function remove(id, options = {}) {
-		await transport.require("dataAction.delete", options);
 		await transport.requestRaw(`/api/action/${id}`, {
 			...options,
 			method: "DELETE",
@@ -589,7 +687,6 @@ function dataActionResource(transport) {
 	}
 	/** Execute a data action by id with parameter values keyed by parameter id. */
 	async function execute(id, params, options = {}) {
-		await transport.require("dataAction.execute", options);
 		return transport.requestParsed(DataActionExecuteResult, `/api/action/${id}/execute`, {
 			...options,
 			method: "POST",
@@ -599,8 +696,8 @@ function dataActionResource(transport) {
 	return {
 		list,
 		get,
-		create,
-		update,
+		create: explain("create", create),
+		update: explain("update", update, (_id, params) => collectionFeatures(params)),
 		archive,
 		delete: remove,
 		execute
@@ -619,7 +716,6 @@ const SYNC_COMPLETE = "complete";
 function databaseResource(transport) {
 	/** List databases. `include` hydrates each database's tables; `saved` adds the Saved Questions virtual database. */
 	async function list(params = {}, options = {}) {
-		await transport.require("database.list", options);
 		const response = await transport.requestParsed(DatabaseApiList, "/api/database", {
 			...options,
 			query: {
@@ -634,7 +730,6 @@ function databaseResource(transport) {
 	}
 	/** Get one database by id. `include` hydrates its tables, and `tables.fields` their fields too. */
 	async function get(id, params = {}, options = {}) {
-		await transport.require("database.get", options);
 		return transport.requestParsed(Database, `/api/database/${id}`, {
 			...options,
 			query: { include: params.include }
@@ -642,7 +737,6 @@ function databaseResource(transport) {
 	}
 	/** List the schema names in a database. */
 	async function schemas(id, options = {}) {
-		await transport.require("database.schemas", options);
 		return {
 			data: await transport.requestParsed(DatabaseApiSchemaList, `/api/database/${id}/schemas`, { ...options }),
 			total: null
@@ -650,7 +744,6 @@ function databaseResource(transport) {
 	}
 	/** List the tables one schema of a database holds. */
 	async function schemaTables(id, schema, options = {}) {
-		await transport.require("database.schemaTables", options);
 		return {
 			data: await transport.requestParsed(DatabaseApiSchemaTableList, `/api/database/${id}/schema/${encodeURIComponent(schema)}`, { ...options }),
 			total: null
@@ -661,7 +754,6 @@ function databaseResource(transport) {
 	* pass `wait` to poll the database until it reports its initial sync complete.
 	*/
 	async function syncSchema(id, params = {}, options = {}) {
-		await transport.require("database.syncSchema", options);
 		const ack = await transport.requestParsed(DatabaseTaskAck, `/api/database/${id}/sync_schema`, {
 			...options,
 			method: "POST"
@@ -683,7 +775,6 @@ function databaseResource(transport) {
 	}
 	/** Trigger a rescan of the cached field values across a database. */
 	async function rescanValues(id, options = {}) {
-		await transport.require("database.rescanValues", options);
 		return {
 			id,
 			status: (await transport.requestParsed(DatabaseTaskAck, `/api/database/${id}/rescan_values`, {
@@ -709,7 +800,6 @@ function datasetResource(transport) {
 	* MBQL, or native — rather than a reference to a saved one, so nothing here is a card.
 	*/
 	async function query(body, options = {}) {
-		await transport.require("dataset.query", options);
 		return transport.requestParsed(CardQueryResult, "/api/dataset", {
 			...options,
 			method: "POST",
@@ -721,9 +811,7 @@ function datasetResource(transport) {
 	* defaults server-side to true.
 	*/
 	async function native(datasetQuery, params = {}, options = {}) {
-		await transport.require("dataset.native", options);
-		const { features } = await transport.server(options);
-		return transport.requestParsed(compiledQuerySchema(features), "/api/dataset/native", {
+		return transport.requestParsed(CompiledQuery, "/api/dataset/native", {
 			...options,
 			method: "POST",
 			body: {
@@ -738,7 +826,6 @@ function datasetResource(transport) {
 	* widens the field filter.
 	*/
 	async function queryMetadata(datasetQuery, options = {}) {
-		await transport.require("dataset.queryMetadata", options);
 		return transport.requestParsed(QueryMetadata, "/api/dataset/query_metadata", {
 			...options,
 			method: "POST",
@@ -757,9 +844,8 @@ function datasetResource(transport) {
 	* there before the wire.
 	*/
 	async function exportQuery(format, params, options = {}) {
-		await transport.require("dataset.exportQuery", options);
-		await transport.requireFeatures(params.csv_include_bom ? ["exportCsvByteOrderMark"] : [], options);
 		if (params.pivot_results) await assertPivotedExport(transport, format, options);
+		await transport.requireFeatures(params.csv_include_bom ? ["exportCsvByteOrderMark"] : [], options);
 		const exported = params.pivot_results ? {
 			...params.query,
 			"was-pivot": true
@@ -787,15 +873,20 @@ function datasetResource(transport) {
 //#region ../client/src/resources/dependency.ts
 const DependencyNodeApiList = z.array(DependencyNode);
 const DependencyEntityApiList = z.array(DependencyEntity);
+function graphTypeFeatures(type) {
+	return type === "measure" ? [{
+		feature: "measureDependencyGraph",
+		fields: ["type"]
+	}] : [];
+}
 function dependencyResource(transport) {
+	const { explain, explainWalk } = explainer(transport, "dependency");
 	/**
 	* The upstream dependency graph of one entity. `nodes` holds the starting entity plus every
 	* entity it depends on, directly or transitively; each edge runs from the dependent to what it
 	* depends on. A measure starts a graph only on a server with `measureDependencyGraph`.
 	*/
 	async function graph(type, id, options = {}) {
-		await transport.require("dependency.graph", options);
-		if (type === "measure") await transport.requireFeatures(["measureDependencyGraph"], options);
 		return transport.requestParsed(DependencyGraph, "/api/ee/dependencies/graph", {
 			...options,
 			query: {
@@ -811,7 +902,6 @@ function dependencyResource(transport) {
 	* personal collections, and `sort-column` / `sort-direction` order the result.
 	*/
 	async function dependents(type, id, params = {}, options = {}) {
-		await transport.require("dependency.dependents", options);
 		return {
 			data: await transport.requestParsed(DependencyNodeApiList, "/api/ee/dependencies/graph/dependents", {
 				...options,
@@ -837,7 +927,6 @@ function dependencyResource(transport) {
 	* `sort-direction` order the result.
 	*/
 	async function broken(type, id, params = {}, options = {}) {
-		await transport.require("dependency.broken", options);
 		return {
 			data: await transport.requestParsed(DependencyEntityApiList, "/api/ee/dependencies/graph/broken", {
 				...options,
@@ -864,7 +953,6 @@ function dependencyResource(transport) {
 	* This endpoint pages on the server, so the caller consumes pages and decides how far to pull.
 	*/
 	async function* unreferencedPages(params = {}, options = {}) {
-		await transport.require("dependency.unreferencedPages", options);
 		if (queryLeavesNoKind(params)) {
 			yield {
 				items: [],
@@ -888,7 +976,6 @@ function dependencyResource(transport) {
 	* caller consumes pages and decides how far to pull.
 	*/
 	async function* breakingPages(params = {}, options = {}) {
-		await transport.require("dependency.breakingPages", options);
 		if (queryLeavesNoKind(params)) {
 			yield {
 				items: [],
@@ -905,11 +992,11 @@ function dependencyResource(transport) {
 		});
 	}
 	return {
-		graph,
-		dependents,
-		broken,
-		unreferencedPages,
-		breakingPages
+		graph: explain("graph", graph, graphTypeFeatures),
+		dependents: explain("dependents", dependents),
+		broken: explain("broken", broken),
+		unreferencedPages: explainWalk("unreferencedPages", unreferencedPages),
+		breakingPages: explainWalk("breakingPages", breakingPages)
 	};
 }
 function queryLeavesNoKind(params) {
@@ -931,9 +1018,9 @@ function itemListQuery(params) {
 //#region ../client/src/resources/document.ts
 const DocumentApiList = z.object({ items: z.array(Document) }).loose();
 function documentResource(transport) {
+	const { explain } = explainer(transport, "document");
 	/** Get existing documents. */
 	async function list(options = {}) {
-		await transport.require("document.list", options);
 		return {
 			data: (await transport.requestParsed(DocumentApiList, "/api/document", { ...options })).items,
 			total: null
@@ -941,12 +1028,10 @@ function documentResource(transport) {
 	}
 	/** Return an existing document by id. */
 	async function get(id, options = {}) {
-		await transport.require("document.get", options);
 		return transport.requestParsed(Document, `/api/document/${id}`, { ...options });
 	}
 	/** Create a new document. */
 	async function create(params, options = {}) {
-		await transport.require("document.create", options);
 		return transport.requestParsed(Document, "/api/document", {
 			...options,
 			method: "POST",
@@ -955,7 +1040,6 @@ function documentResource(transport) {
 	}
 	/** Update an existing document by id. */
 	async function update(id, params, options = {}) {
-		await transport.require("document.update", options);
 		return transport.requestParsed(Document, `/api/document/${id}`, {
 			...options,
 			method: "PUT",
@@ -964,7 +1048,6 @@ function documentResource(transport) {
 	}
 	/** Archive (soft-delete) a document by id. Metabase models this as an update, not its own endpoint. */
 	async function archive(id, options = {}) {
-		await transport.require("document.archive", options);
 		return update(id, { archived: true }, options);
 	}
 	/**
@@ -972,7 +1055,6 @@ function documentResource(transport) {
 	* it. An archived source is not found.
 	*/
 	async function copy(id, params = {}, options = {}) {
-		await transport.require("document.copy", options);
 		return transport.requestParsed(Document, `/api/document/${id}/copy`, {
 			...options,
 			method: "POST",
@@ -985,7 +1067,7 @@ function documentResource(transport) {
 		create,
 		update,
 		archive,
-		copy
+		copy: explain("copy", copy)
 	};
 }
 //#endregion
@@ -997,7 +1079,6 @@ function eidTranslationResource(transport) {
 	* lookup succeeded — the numeric id.
 	*/
 	async function translate(params, options = {}) {
-		await transport.require("eidTranslation.translate", options);
 		return transport.requestParsed(EidTranslateResult, "/api/eid-translation/translate", {
 			...options,
 			method: "POST",
@@ -1051,6 +1132,7 @@ const Erd = z.object({
 //#region ../client/src/resources/erd.ts
 const ERD_PATH = "/api/ee/erd";
 function erdResource(transport) {
+	const { explain } = explainer(transport, "erd");
 	/**
 	* Get the entity relationship diagram of a database: the readable tables as nodes, each with its
 	* fields, and the foreign keys between them as edges. `table-ids` makes those tables the focal
@@ -1058,7 +1140,6 @@ function erdResource(transport) {
 	* none.
 	*/
 	async function get(params, options = {}) {
-		await transport.require("erd.get", options);
 		return transport.requestParsed(Erd, ERD_PATH, {
 			...options,
 			query: {
@@ -1068,7 +1149,7 @@ function erdResource(transport) {
 			}
 		});
 	}
-	return { get };
+	return { get: explain("get", get) };
 }
 //#endregion
 //#region ../client/src/resources/optional-parsed.ts
@@ -1086,12 +1167,12 @@ async function fetchOptionalParsed(client, path, schema, options = {}) {
 //#region ../client/src/resources/field.ts
 const FieldApiSummary = z.tuple([z.tuple([z.literal("count"), z.number().int()]), z.tuple([z.literal("distincts"), z.number().int()])]);
 function fieldResource(transport) {
+	const { refuse } = explainer(transport, "field");
 	/**
 	* Get one field by id. A server that labels data sensitivity answers `data_sensitivity`, `null`
 	* for an unlabelled field; any other answers the field without the key (`hasDataSensitivity`).
 	*/
 	async function get(id, options = {}) {
-		await transport.require("field.get", options);
 		const { features } = await transport.server(options);
 		return transport.requestParsed(fieldDetailSchema(features), `/api/field/${id}`, { ...options });
 	}
@@ -1102,7 +1183,6 @@ function fieldResource(transport) {
 	* the label is refused there before the wire. Answers the field the way `get` does.
 	*/
 	async function update(id, params, options = {}) {
-		await transport.require("field.update", options);
 		await transport.requireFeatures(params.data_sensitivity === void 0 ? [] : ["fieldDataSensitivity"], options);
 		const { features } = await transport.server(options);
 		return transport.requestParsed(fieldDetailSchema(features), `/api/field/${id}`, {
@@ -1113,11 +1193,11 @@ function fieldResource(transport) {
 	}
 	/**
 	* Label a field's data sensitivity by hand. A person's label is never overwritten by the server's
-	* classifier; `null` withdraws it, so whatever label the classifier wrote shows again. Answers
-	* the field with the label it now carries.
+	* classifier; `null` withdraws it, so whatever label the classifier wrote shows again. A server
+	* without the column drops the key silently, so the label is refused there before the wire.
+	* Answers the field with the label it now carries.
 	*/
 	async function setDataSensitivity(id, params, options = {}) {
-		await transport.require("field.setDataSensitivity", options);
 		return transport.requestParsed(FieldWithDataSensitivity, `/api/field/${id}`, {
 			...options,
 			method: "PUT",
@@ -1133,7 +1213,6 @@ function fieldResource(transport) {
 	* `value` against the display value, ignoring both `searchId` and `limit`.
 	*/
 	async function search(id, searchId, params, options = {}) {
-		await transport.require("field.search", options);
 		return transport.requestParsed(FieldSearchMatches, `/api/field/${id}/search/${searchId}`, {
 			...options,
 			query: {
@@ -1148,7 +1227,6 @@ function fieldResource(transport) {
 	* `value` and ignores any text after it, refusing only a `value` that has none.
 	*/
 	async function remapping(id, remappedId, params, options = {}) {
-		await transport.require("field.remapping", options);
 		const { features } = await transport.server(options);
 		return fetchOptionalParsed(transport, `/api/field/${id}/remapping/${remappedId}`, fieldRemappedValueSchema(features, id === remappedId), {
 			...options,
@@ -1157,7 +1235,6 @@ function fieldResource(transport) {
 	}
 	/** Get the row count and the distinct-value count for a field. */
 	async function summary(id, options = {}) {
-		await transport.require("field.summary", options);
 		const [[, count], [, distincts]] = await transport.requestParsed(FieldApiSummary, `/api/field/${id}/summary`, { ...options });
 		return {
 			field_id: id,
@@ -1167,13 +1244,12 @@ function fieldResource(transport) {
 	}
 	/** Get the cached distinct values Metabase holds for a field. */
 	async function values(id, options = {}) {
-		await transport.require("field.values", options);
 		return transport.requestParsed(FieldValues, `/api/field/${id}/values`, { ...options });
 	}
 	return {
 		get,
 		update,
-		setDataSensitivity,
+		setDataSensitivity: refuse("setDataSensitivity", setDataSensitivity),
 		search,
 		remapping,
 		summary,
@@ -1205,22 +1281,22 @@ const SyncStashStarted = z.object({
 	task_id: z.number().int().positive()
 });
 const RemoteSyncSetting = z.string().nullable();
-const RemoteSyncBranchProperty = z.object({ "remote-sync-branch": z.string().nullable().optional() });
-const FORBIDDEN_STATUS = 403;
-const UNREGISTERED_STATUS = 404;
+const RemoteSyncBranchProperty = SessionProperties.extend({ "remote-sync-branch": z.string().nullable().optional() });
+const RemoteSyncUrlProperty = SessionProperties.extend({ "remote-sync-url": z.string().nullable().optional() });
+const BRANCH_UNREADABLE_MESSAGE = "the remote-sync-branch setting is not readable: only admins see it, and a server without remote sync has none";
+const BRANCH_UNSET_MESSAGE = "git-sync tracks no branch: the remote-sync-branch setting is unset";
 function isRemoteUnreadable(error) {
 	if (!(error instanceof HttpError)) return false;
-	return error.status === FORBIDDEN_STATUS || error.status === UNREGISTERED_STATUS;
+	return error.status === 403 || error.status === 404;
 }
 function gitSyncResource(transport) {
+	const { explain, refuse, refuseAfterReading } = explainer(transport, "gitSync");
 	/** Get the running or most recently finished sync task, or null when the server has none. */
 	async function currentTask(options = {}) {
-		await transport.require("gitSync.currentTask", options);
 		return fetchOptionalParsed(transport, "/api/ee/remote-sync/current-task", SyncTask, options);
 	}
 	/** Request cancellation of the running sync task, and answer it in the state that left it. */
 	async function cancelTask(options = {}) {
-		await transport.require("gitSync.cancelTask", options);
 		return transport.requestParsed(SyncTask, "/api/ee/remote-sync/current-task/cancel", {
 			...options,
 			method: "POST"
@@ -1228,12 +1304,10 @@ function gitSyncResource(transport) {
 	}
 	/** Whether Metabase holds content changes the remote has not been told about. */
 	async function isDirty(options = {}) {
-		await transport.require("gitSync.isDirty", options);
 		return (await transport.requestParsed(SyncDirtyFlag, "/api/ee/remote-sync/is-dirty", { ...options })).is_dirty;
 	}
 	/** List the objects whose local state differs from the remote. */
 	async function dirty(options = {}) {
-		await transport.require("gitSync.dirty", options);
 		return {
 			data: (await transport.requestParsed(SyncDirtyList, "/api/ee/remote-sync/dirty", { ...options })).dirty,
 			total: null
@@ -1244,7 +1318,6 @@ function gitSyncResource(transport) {
 	* comparison; `force-refresh` re-reads the remote instead.
 	*/
 	async function hasRemoteChanges(params = {}, options = {}) {
-		await transport.require("gitSync.hasRemoteChanges", options);
 		return transport.requestParsed(SyncRemoteChanges, "/api/ee/remote-sync/has-remote-changes", {
 			...options,
 			query: { "force-refresh": params["force-refresh"] }
@@ -1255,14 +1328,16 @@ function gitSyncResource(transport) {
 	* pass `wait` to poll that task until it reaches a terminal status. A server already up to date
 	* answers no task id, and there is then nothing to poll. A server that guards the tracked branch
 	* refuses with 409 when `expected_branch` disagrees with the setting; left out, it is the tracked
-	* branch as read just before the request. `merge` folds the remote's changes into local content
-	* by a three-way merge and keeps un-pushed local changes, where a plain import refuses on a dirty
+	* branch as read just before the request, on every server with remote sync. A server that guards
+	* the branch also requires it, so there the request is refused before the wire when the setting
+	* is unset or hidden from the caller; a server without the guard ignores the assertion, and gets
+	* none when there is none to read. `merge` folds the remote's changes into local content by a
+	* three-way merge and keeps un-pushed local changes, where a plain import refuses on a dirty
 	* instance.
 	*/
 	async function importFromRemote(params = {}, options = {}) {
-		await transport.require("gitSync.import", options);
+		const expectedBranch = await expectedBranchFor(params.expected_branch, options);
 		await requireMerge(params.merge, options);
-		const expectedBranch = await guardedBranch(params.expected_branch, options);
 		const started = await transport.requestParsed(SyncImportStarted, "/api/ee/remote-sync/import", {
 			...options,
 			method: "POST",
@@ -1284,28 +1359,38 @@ function gitSyncResource(transport) {
 			final: await settle(params.wait, options)
 		};
 	}
-	async function requireMerge(merge, options) {
-		if (merge === true) await transport.requireFeatures(["remoteSyncMerge"], options);
+	async function expectedBranchFor(given, options) {
+		if (given !== void 0) return given;
+		return importAssertion(await readTrackedBranch(options));
 	}
-	async function guardedBranch(given, options) {
+	async function exportBranchFor(given, options) {
 		if (given !== void 0) return given;
-		const { features } = await transport.server(options);
-		if (!features.remoteSyncBranchGuard) return;
-		return trackedBranch(options);
+		return exportBranch(await readTrackedBranch(options));
+	}
+	async function readTrackedBranch(options) {
+		const properties = await transport.probe(RemoteSyncBranchProperty, options);
+		return {
+			tracked: properties["remote-sync-branch"],
+			features: profileFromProperties(properties).features
+		};
+	}
+	async function requireMerge(merge, options) {
+		if (merge === true) await transport.requireFeatures(["remoteSyncMerge"], options);
 	}
 	/**
 	* Export Metabase's content to the remote. The endpoint queues a task and returns at once; pass
 	* `wait` to poll that task until it reaches a terminal status. A server that guards the tracked
-	* branch refuses with 409 when `branch` is not the tracked one; left out, it is the tracked branch
-	* as read just before the request there, and the server's own default elsewhere. When the remote
-	* has moved past the last sync, a plain export ends in a `conflict` task where `merge` is
-	* available, and is refused with 400 before any task elsewhere; `merge` folds the remote's changes
-	* in by a three-way merge instead, and `force` overwrites them.
+	* branch refuses with 409 when `branch` is not the tracked one; left out, it is the tracked
+	* branch as read just before the request, and the request is refused before the wire when the
+	* setting is unset or hidden from the caller. A server without the guard exports to a named
+	* `branch` and tracks it from then on; left out, it gets none and exports to its own. When the
+	* remote has moved past the last sync, a plain export ends in a `conflict` task where `merge` is
+	* available, and is refused with 400 before any task elsewhere; `merge` folds the remote's
+	* changes in by a three-way merge instead, and `force` overwrites them.
 	*/
 	async function exportToRemote(params = {}, options = {}) {
-		await transport.require("gitSync.export", options);
+		const branchName = await exportBranchFor(params.branch, options);
 		await requireMerge(params.merge, options);
-		const branchName = await guardedBranch(params.branch, options);
 		const started = await transport.requestParsed(SyncExportStarted, "/api/ee/remote-sync/export", {
 			...options,
 			method: "POST",
@@ -1333,7 +1418,6 @@ function gitSyncResource(transport) {
 	* otherwise.
 	*/
 	async function exportPreflight(params, options = {}) {
-		await transport.require("gitSync.exportPreflight", options);
 		return transport.requestParsed(SyncExportPreflight, "/api/ee/remote-sync/export-preflight", {
 			...options,
 			query: { branch: params.branch }
@@ -1344,7 +1428,6 @@ function gitSyncResource(transport) {
 	* queues a task and returns at once; pass `wait` to poll that task to a terminal status.
 	*/
 	async function stash(params, options = {}) {
-		await transport.require("gitSync.stash", options);
 		const started = await transport.requestParsed(SyncStashStarted, "/api/ee/remote-sync/stash", {
 			...options,
 			method: "POST",
@@ -1367,7 +1450,6 @@ function gitSyncResource(transport) {
 	}
 	/** List the branches the configured remote carries. */
 	async function branches(options = {}) {
-		await transport.require("gitSync.branches", options);
 		return {
 			data: (await transport.requestParsed(SyncBranchList, "/api/ee/remote-sync/branches", { ...options })).items,
 			total: null
@@ -1375,7 +1457,6 @@ function gitSyncResource(transport) {
 	}
 	/** Create a branch on the remote and point git-sync at it. */
 	async function createBranch(params, options = {}) {
-		await transport.require("gitSync.createBranch", options);
 		return transport.requestParsed(SyncBranchCreated, "/api/ee/remote-sync/create-branch", {
 			...options,
 			method: "POST",
@@ -1384,19 +1465,42 @@ function gitSyncResource(transport) {
 	}
 	/**
 	* Mark one collection as git-synced, or unmark it. The server cascades the flag to descendants
-	* by location prefix, and may queue an export task to carry the change to the remote.
+	* by location prefix, and may queue an import task to bring the instance in line with the
+	* remote. A server without `remoteSyncCollectionsOnlyUpdate` validates every settings update as
+	* a remote configuration and fails one naming no remote, after it has applied the flag, so it is
+	* sent the remote's URL and its token as the server shows it, which it checks against the remote
+	* and keeps as they are, or a blank URL when no remote is configured, which clears the remote
+	* settings that are already empty.
 	*/
 	async function setCollectionSynced(collectionId, synced, options = {}) {
-		await transport.require("gitSync.setCollectionSynced", options);
 		return transport.requestParsed(SyncSettingsUpdateResult, "/api/ee/remote-sync/settings", {
 			...options,
 			method: "PUT",
-			body: { collections: { [collectionId]: synced } }
+			body: await settingsUpdateBody({ [collectionId]: synced }, options)
 		});
 	}
+	async function settingsUpdateBody(collections, options) {
+		const { features } = await transport.server(options);
+		if (features.remoteSyncCollectionsOnlyUpdate) return { collections };
+		const url = (await transport.probe(RemoteSyncUrlProperty, options))["remote-sync-url"];
+		if (url === void 0) return { collections };
+		if (url === null) return {
+			collections,
+			"remote-sync-url": ""
+		};
+		const token = await fetchOptionalParsed(transport, "/api/setting/remote-sync-token", RemoteSyncSetting, options);
+		if (token === null) return {
+			collections,
+			"remote-sync-url": url
+		};
+		return {
+			collections,
+			"remote-sync-url": url,
+			"remote-sync-token": token
+		};
+	}
 	/** The collections currently in git-sync's scope. */
 	async function syncedCollections(options = {}) {
-		await transport.require("gitSync.syncedCollections", options);
 		return {
 			data: (await listCollectionsAs(transport, SyncScopeCollection, options)).filter((entry) => entry.is_remote_synced === true),
 			total: null
@@ -1404,7 +1508,6 @@ function gitSyncResource(transport) {
 	}
 	/** The remote's URL, or null when none is configured or the caller may not read it. */
 	async function remoteUrl(options = {}) {
-		await transport.require("gitSync.remoteUrl", options);
 		try {
 			const url = await fetchOptionalParsed(transport, "/api/setting/remote-sync-url", RemoteSyncSetting, options);
 			return url === "" ? null : url;
@@ -1414,21 +1517,22 @@ function gitSyncResource(transport) {
 		}
 	}
 	/**
-	* The branch git-sync tracks, or null when none is configured. Refuses when the caller may not
-	* read the setting (it is admin-only) or the server has no remote-sync module, rather than
-	* reading either as unset.
+	* The branch git-sync tracks, or null when none is configured. Refuses when the server has no
+	* remote sync or the caller may not read the setting (it is admin-only), rather than reading
+	* either as unset.
 	*/
-	async function branch(options = {}) {
-		await transport.require("gitSync.branch", options);
-		const tracked = (await transport.requestParsed(RemoteSyncBranchProperty, PROBE_PATH, { ...options }))["remote-sync-branch"];
-		if (tracked === void 0) throw new ConfigError("the remote-sync-branch setting is not readable: it is visible to admins only, and absent on a server without the remote-sync module");
+	function branch(properties) {
+		const tracked = properties["remote-sync-branch"];
+		if (tracked === void 0) throw new ConfigError(BRANCH_UNREADABLE_MESSAGE);
 		return tracked;
 	}
-	/** The branch git-sync tracks, refused when none is configured or the caller may not read it. */
-	async function trackedBranch(options = {}) {
-		await transport.require("gitSync.trackedBranch", options);
-		const tracked = await branch(options);
-		if (tracked === null) throw new ConfigError("git-sync tracks no branch: the remote-sync-branch setting is unset");
+	/**
+	* The branch git-sync tracks, refused when none is configured, the server has no remote sync, or
+	* the caller may not read it.
+	*/
+	function trackedBranch(properties) {
+		const tracked = branch(properties);
+		if (tracked === null) throw new ConfigError(BRANCH_UNSET_MESSAGE);
 		return tracked;
 	}
 	/**
@@ -1436,7 +1540,6 @@ function gitSyncResource(transport) {
 	* answers null, which is terminal in the same sense: nothing further will happen.
 	*/
 	async function waitForTask(wait, options = {}) {
-		await transport.require("gitSync.waitForTask", options);
 		return settle(wait, options);
 	}
 	async function settle(wait, options) {
@@ -1446,25 +1549,38 @@ function gitSyncResource(transport) {
 		}), (task) => task === null || isSyncTaskTerminal(task.status), wait);
 	}
 	return {
-		currentTask,
-		cancelTask,
-		isDirty,
-		dirty,
-		hasRemoteChanges,
-		import: importFromRemote,
-		export: exportToRemote,
-		exportPreflight,
-		stash,
-		branches,
-		createBranch,
-		setCollectionSynced,
-		syncedCollections,
+		currentTask: explain("currentTask", currentTask),
+		cancelTask: explain("cancelTask", cancelTask),
+		isDirty: explain("isDirty", isDirty),
+		dirty: explain("dirty", dirty),
+		hasRemoteChanges: explain("hasRemoteChanges", hasRemoteChanges),
+		import: explain("import", importFromRemote),
+		export: explain("export", exportToRemote),
+		exportPreflight: explain("exportPreflight", exportPreflight),
+		stash: explain("stash", stash),
+		branches: explain("branches", branches),
+		createBranch: explain("createBranch", createBranch),
+		setCollectionSynced: explain("setCollectionSynced", setCollectionSynced),
+		syncedCollections: refuse("syncedCollections", syncedCollections),
 		remoteUrl,
-		branch,
-		trackedBranch,
-		waitForTask
+		branch: refuseAfterReading("branch", RemoteSyncBranchProperty, branch),
+		trackedBranch: refuseAfterReading("trackedBranch", RemoteSyncBranchProperty, trackedBranch),
+		waitForTask: explain("waitForTask", waitForTask)
 	};
 }
+function importAssertion(read) {
+	if (!read.features.remoteSync) return;
+	if (read.features.remoteSyncBranchGuard) return requiredBranch(read.tracked);
+	return typeof read.tracked === "string" ? read.tracked : void 0;
+}
+function exportBranch(read) {
+	if (!read.features.remoteSync || !read.features.remoteSyncBranchGuard) return;
+	return requiredBranch(read.tracked);
+}
+function requiredBranch(tracked) {
+	if (typeof tracked === "string") return tracked;
+	throw new ConfigError(tracked === null ? BRANCH_UNSET_MESSAGE : BRANCH_UNREADABLE_MESSAGE);
+}
 //#endregion
 //#region ../client/src/resources/glossary.ts
 const GlossaryApiList = z.object({ data: z.array(Glossary) }).loose();
@@ -1474,7 +1590,6 @@ function glossaryResource(transport) {
 	* contains it, case-insensitively.
 	*/
 	async function list(params = {}, options = {}) {
-		await transport.require("glossary.list", options);
 		return {
 			data: (await transport.requestParsed(GlossaryApiList, "/api/glossary", {
 				...options,
@@ -1485,7 +1600,6 @@ function glossaryResource(transport) {
 	}
 	/** Create a glossary entry, a term and its definition. Terms are unique. */
 	async function create(params, options = {}) {
-		await transport.require("glossary.create", options);
 		return transport.requestParsed(Glossary, "/api/glossary", {
 			...options,
 			method: "POST",
@@ -1494,7 +1608,6 @@ function glossaryResource(transport) {
 	}
 	/** Replace the term and definition of a glossary entry by id. */
 	async function update(id, params, options = {}) {
-		await transport.require("glossary.update", options);
 		return transport.requestParsed(Glossary, `/api/glossary/${id}`, {
 			...options,
 			method: "PUT",
@@ -1503,7 +1616,6 @@ function glossaryResource(transport) {
 	}
 	/** Delete a glossary entry by id. */
 	async function remove(id, options = {}) {
-		await transport.require("glossary.delete", options);
 		await transport.requestRaw(`/api/glossary/${id}`, {
 			...options,
 			method: "DELETE",
@@ -1536,9 +1648,9 @@ const UNPUBLISH_TABLES_PATH = "/api/ee/data-studio/table/unpublish-tables";
 const LIBRARY_DATA_TYPE = "library-data";
 const PublishTablesResponse = z.object({ target_collection: Collection.nullable() });
 function libraryResource(transport) {
+	const { explain } = explainer(transport, "library");
 	/** Get the Library root and its child collections, or `null` on an instance that has none. */
 	async function get(options = {}) {
-		await transport.require("library.get", options);
 		const { features } = await transport.server(options);
 		const wire = await transport.requestParsed(libraryWireSchema(features), LIBRARY_ROOT_PATH, { ...options });
 		if (wire === null) return null;
@@ -1557,7 +1669,6 @@ function libraryResource(transport) {
 	* back from a refetch, which together make this idempotent.
 	*/
 	async function create(options = {}) {
-		await transport.require("library.create", options);
 		const existing = await get(options);
 		if (existing !== null) return existing;
 		await transport.requestRaw(LIBRARY_ROOT_PATH, {
@@ -1570,7 +1681,6 @@ function libraryResource(transport) {
 	}
 	/** The id of the Library's Data collection, creating the Library first when it does not exist. */
 	async function ensureDataCollectionId(options = {}) {
-		await transport.require("library.ensureDataCollectionId", options);
 		const data = (await create(options)).effective_children.find((child) => child.type === LIBRARY_DATA_TYPE);
 		if (data === void 0) throw new Error("Library has no Data collection to publish into");
 		if (typeof data.id !== "number") throw new Error(`Library Data collection has a non-numeric id ${String(data.id)}`);
@@ -1583,7 +1693,6 @@ function libraryResource(transport) {
 	* `LibraryPublishTablesInput` is refused before any request.
 	*/
 	async function publishTables(params, options = {}) {
-		await transport.require("library.publishTables", options);
 		const body = parseRequestBody(LibraryPublishTablesInput, params, "tables to publish");
 		return (await transport.requestParsed(PublishTablesResponse, PUBLISH_TABLES_PATH, {
 			...options,
@@ -1597,7 +1706,6 @@ function libraryResource(transport) {
 	* table, so selectors that do not match `TableSelectors` are refused before any request.
 	*/
 	async function unpublishTables(params, options = {}) {
-		await transport.require("library.unpublishTables", options);
 		const body = parseRequestBody(TableSelectors, params, "table selectors");
 		await transport.requestRaw(UNPUBLISH_TABLES_PATH, {
 			...options,
@@ -1607,20 +1715,20 @@ function libraryResource(transport) {
 		});
 	}
 	return {
-		get,
-		create,
-		ensureDataCollectionId,
-		publishTables,
-		unpublishTables
+		get: explain("get", get),
+		create: explain("create", create),
+		ensureDataCollectionId: explain("ensureDataCollectionId", ensureDataCollectionId),
+		publishTables: explain("publishTables", publishTables),
+		unpublishTables: explain("unpublishTables", unpublishTables)
 	};
 }
 //#endregion
 //#region ../client/src/resources/measure.ts
 const MeasureApiList = z.array(Measure);
 function measureResource(transport) {
+	const { explain } = explainer(transport, "measure");
 	/** List measures. */
 	async function list(options = {}) {
-		await transport.require("measure.list", options);
 		return {
 			data: await transport.requestParsed(MeasureApiList, "/api/measure", { ...options }),
 			total: null
@@ -1628,12 +1736,10 @@ function measureResource(transport) {
 	}
 	/** Get one measure by id. */
 	async function get(id, options = {}) {
-		await transport.require("measure.get", options);
 		return transport.requestParsed(Measure, `/api/measure/${id}`, { ...options });
 	}
 	/** Create a measure — a saved aggregation tied to a table — from a full measure body. */
 	async function create(params, options = {}) {
-		await transport.require("measure.create", options);
 		return transport.requestParsed(Measure, "/api/measure", {
 			...options,
 			method: "POST",
@@ -1645,7 +1751,6 @@ function measureResource(transport) {
 	* required and lands in the audit log.
 	*/
 	async function update(id, params, options = {}) {
-		await transport.require("measure.update", options);
 		return transport.requestParsed(Measure, `/api/measure/${id}`, {
 			...options,
 			method: "PUT",
@@ -1657,18 +1762,17 @@ function measureResource(transport) {
 	* so it carries the same required `revision_message`.
 	*/
 	async function archive(id, params, options = {}) {
-		await transport.require("measure.archive", options);
 		return update(id, {
 			archived: true,
 			revision_message: params.revision_message
 		}, options);
 	}
 	return {
-		list,
-		get,
-		create,
-		update,
-		archive
+		list: explain("list", list),
+		get: explain("get", get),
+		create: explain("create", create),
+		update: explain("update", update),
+		archive: explain("archive", archive)
 	};
 }
 //#endregion
@@ -1809,12 +1913,12 @@ const MetricDimensionListing = z.object({
 //#endregion
 //#region ../client/src/resources/metric.ts
 function metricResource(transport) {
+	const { explain } = explainer(transport, "metric");
 	/**
 	* Run a metric definition and return the query result envelope: one metric or measure, or an
 	* arithmetic expression over several, each leaf filtered and projected on its own `lib/uuid`.
 	*/
 	async function query(definition, options = {}) {
-		await transport.require("metric.query", options);
 		return transport.requestParsed(CardQueryResult, "/api/metric/dataset", {
 			...options,
 			method: "POST",
@@ -1826,7 +1930,6 @@ function metricResource(transport) {
 	* Takes the same definition `query` does.
 	*/
 	async function breakoutValues(definition, options = {}) {
-		await transport.require("metric.breakoutValues", options);
 		return transport.requestParsed(MetricBreakoutValues, "/api/metric/breakout-values", {
 			...options,
 			method: "POST",
@@ -1838,7 +1941,6 @@ function metricResource(transport) {
 	* add, grouped by source table. `query` filters both by a name substring.
 	*/
 	async function dimensions(id, params = {}, options = {}) {
-		await transport.require("metric.dimensions", options);
 		return transport.requestParsed(MetricDimensionListing, `/api/metric/${id}/dimension`, {
 			...options,
 			query: {
@@ -1849,14 +1951,15 @@ function metricResource(transport) {
 		});
 	}
 	return {
-		query,
-		breakoutValues,
-		dimensions
+		query: explain("query", query),
+		breakoutValues: explain("breakoutValues", breakoutValues),
+		dimensions: explain("dimensions", dimensions)
 	};
 }
 //#endregion
 //#region ../client/src/resources/moderation-review.ts
 function moderationReviewResource(transport) {
+	const { explain } = explainer(transport, "moderationReview");
 	/**
 	* Create a moderation review on a card or dashboard. `status: "verified"` marks the item
 	* verified, `null` or an absent status records a note that leaves it unverified. The new review
@@ -1864,7 +1967,6 @@ function moderationReviewResource(transport) {
 	* A body that does not match `ModerationReviewCreateInput` is refused before any request.
 	*/
 	async function create(params, options = {}) {
-		await transport.require("moderationReview.create", options);
 		const body = parseRequestBody(ModerationReviewCreateInput, params, "moderation review");
 		return transport.requestParsed(ModerationReview, "/api/moderation-review", {
 			...options,
@@ -1872,7 +1974,7 @@ function moderationReviewResource(transport) {
 			body
 		});
 	}
-	return { create };
+	return { create: explain("create", create) };
 }
 //#endregion
 //#region ../client/src/resources/notification.ts
@@ -1903,7 +2005,6 @@ function notificationResource(transport) {
 	* the request pins the card payload type.
 	*/
 	async function list(params = {}, options = {}) {
-		await transport.require("notification.list", options);
 		return {
 			data: await transport.requestParsed(NotificationApiList, "/api/notification", {
 				...options,
@@ -1920,12 +2021,10 @@ function notificationResource(transport) {
 	}
 	/** Get one question alert by id, refusing an id that names a system-event notification. */
 	async function get(id, options = {}) {
-		await transport.require("notification.get", options);
 		return assertCardAlert(await transport.requestParsed(Notification, `/api/notification/${id}`, { ...options }));
 	}
 	/** Create a question alert — its card payload, schedules and handlers — from a full body. */
 	async function create(params, options = {}) {
-		await transport.require("notification.create", options);
 		return transport.requestParsed(Notification, "/api/notification", {
 			...options,
 			method: "POST",
@@ -1934,7 +2033,6 @@ function notificationResource(transport) {
 	}
 	/** Update a question alert by id, merging the patch over the stored notification. */
 	async function update(id, params, options = {}) {
-		await transport.require("notification.update", options);
 		const current = await get(id, options);
 		return transport.requestParsed(Notification, `/api/notification/${id}`, {
 			...options,
@@ -1944,7 +2042,6 @@ function notificationResource(transport) {
 	}
 	/** Archive a question alert by id, stopping every delivery. Metabase models this as an update. */
 	async function archive(id, options = {}) {
-		await transport.require("notification.archive", options);
 		return update(id, { active: false }, options);
 	}
 	/**
@@ -1952,7 +2049,6 @@ function notificationResource(transport) {
 	* body.
 	*/
 	async function send(id, options = {}) {
-		await transport.require("notification.send", options);
 		await get(id, options);
 		await transport.requestRaw(`/api/notification/${id}/send`, {
 			...options,
@@ -2012,7 +2108,6 @@ function permissionResource(transport) {
 	* one database is the question.
 	*/
 	async function graph(options = {}) {
-		await transport.require("permission.graph", options);
 		return transport.requestParsed(PermissionsGraph, "/api/permissions/graph", { ...options });
 	}
 	/**
@@ -2021,12 +2116,10 @@ function permissionResource(transport) {
 	* group up under the database and read `view-data` and `create-queries` down to the table id.
 	*/
 	async function databaseGraph(id, options = {}) {
-		await transport.require("permission.databaseGraph", options);
 		return transport.requestParsed(PermissionsGraph, `/api/permissions/graph/db/${id}`, { ...options });
 	}
 	/** Get the data permissions of one group on every database. Admin only. */
 	async function groupGraph(id, options = {}) {
-		await transport.require("permission.groupGraph", options);
 		return transport.requestParsed(PermissionsGraph, `/api/permissions/graph/group/${id}`, { ...options });
 	}
 	return {
@@ -2048,7 +2141,6 @@ function mergePulseUpdate(current, patch) {
 function pulseResource(transport) {
 	/** List dashboard subscriptions, optionally narrowed to one dashboard or to the archived ones. */
 	async function list(params = {}, options = {}) {
-		await transport.require("pulse.list", options);
 		return {
 			data: await transport.requestParsed(PulseApiList, "/api/pulse", {
 				...options,
@@ -2062,21 +2154,27 @@ function pulseResource(transport) {
 	}
 	/** Get one dashboard subscription by id. */
 	async function get(id, options = {}) {
-		await transport.require("pulse.get", options);
 		return transport.requestParsed(Pulse, `/api/pulse/${id}`, { ...options });
 	}
-	/** Create a dashboard subscription — its cards and its delivery channels — from a full body. */
+	/**
+	* Create a dashboard subscription — its cards and its delivery channels — from a full body.
+	* Non-empty `parameters` need the `dashboard_subscription_filters` premium feature, and are
+	* refused before the wire without it.
+	*/
 	async function create(params, options = {}) {
-		await transport.require("pulse.create", options);
+		await requireSubscriptionFilters(params.parameters, options);
 		return transport.requestParsed(Pulse, "/api/pulse", {
 			...options,
 			method: "POST",
 			body: params
 		});
 	}
-	/** Update a dashboard subscription by id, carrying the server-defaulted flags forward. */
+	/**
+	* Update a dashboard subscription by id, carrying the server-defaulted flags forward. Non-empty
+	* `parameters` are refused as on `create`.
+	*/
 	async function update(id, params, options = {}) {
-		await transport.require("pulse.update", options);
+		await requireSubscriptionFilters(params.parameters, options);
 		const current = await get(id, options);
 		return transport.requestParsed(Pulse, `/api/pulse/${id}`, {
 			...options,
@@ -2089,9 +2187,11 @@ function pulseResource(transport) {
 	* update, and disables each of the subscription's channels as a side effect.
 	*/
 	async function archive(id, options = {}) {
-		await transport.require("pulse.archive", options);
 		return update(id, { archived: true }, options);
 	}
+	async function requireSubscriptionFilters(parameters, options) {
+		if (parameters !== void 0 && parameters.length > 0) await transport.requireFeatures(["dashboardSubscriptionFilters"], options);
+	}
 	return {
 		list,
 		get,
@@ -2194,6 +2294,7 @@ const ReplacementRunStarted = z.object({ run_id: z.number().int().positive() });
 const ReplacementApiRunList = z.array(ReplacementRun);
 const CancelRunResponse = z.object({ success: z.literal(true) });
 function replacementResource(transport) {
+	const { explain } = explainer(transport, "replacement");
 	/**
 	* Check whether every usage of a source entity could be rewritten to read a target entity
 	* instead: the two must share a database, the target must not depend on the source, every source
@@ -2201,7 +2302,6 @@ function replacementResource(transport) {
 	* implicitly or sandboxed. Admins only.
 	*/
 	async function checkReplaceSource(params, options = {}) {
-		await transport.require("replacement.checkReplaceSource", options);
 		return transport.requestParsed(ReplacementCheck, "/api/ee/replacement/check-replace-source", {
 			...options,
 			method: "POST",
@@ -2214,7 +2314,6 @@ function replacementResource(transport) {
 	* while another replacement is running. Admins only.
 	*/
 	async function replaceSource(params, options = {}) {
-		await transport.require("replacement.replaceSource", options);
 		return transport.requestParsed(ReplacementRunStarted, "/api/ee/replacement/replace-source", {
 			...options,
 			method: "POST",
@@ -2229,7 +2328,6 @@ function replacementResource(transport) {
 	* replacement is running. Admins only.
 	*/
 	async function replaceModelWithTransform(params, options = {}) {
-		await transport.require("replacement.replaceModelWithTransform", options);
 		return transport.requestParsed(ReplacementRunStarted, "/api/ee/replacement/replace-model-with-transform", {
 			...options,
 			method: "POST",
@@ -2241,7 +2339,6 @@ function replacementResource(transport) {
 	* `false` only the ended ones. Admins only.
 	*/
 	async function listRuns(params = {}, options = {}) {
-		await transport.require("replacement.listRuns", options);
 		return {
 			data: await transport.requestParsed(ReplacementApiRunList, "/api/ee/replacement/runs", {
 				...options,
@@ -2252,24 +2349,22 @@ function replacementResource(transport) {
 	}
 	/** Get one replacement run by id, with its status and progress. Admins only. */
 	async function getRun(id, options = {}) {
-		await transport.require("replacement.getRun", options);
 		return transport.requestParsed(ReplacementRun, `/api/ee/replacement/runs/${id}`, { ...options });
 	}
 	/** Cancel the replacement in progress. Refuses with a 409 once the run has ended. Admins only. */
 	async function cancelRun(id, options = {}) {
-		await transport.require("replacement.cancelRun", options);
 		await transport.requestParsed(CancelRunResponse, `/api/ee/replacement/runs/${id}/cancel`, {
 			...options,
 			method: "POST"
 		});
 	}
 	return {
-		checkReplaceSource,
-		replaceSource,
-		replaceModelWithTransform,
-		listRuns,
-		getRun,
-		cancelRun
+		checkReplaceSource: explain("checkReplaceSource", checkReplaceSource),
+		replaceSource: explain("replaceSource", replaceSource),
+		replaceModelWithTransform: explain("replaceModelWithTransform", replaceModelWithTransform),
+		listRuns: explain("listRuns", listRuns),
+		getRun: explain("getRun", getRun),
+		cancelRun: explain("cancelRun", cancelRun)
 	};
 }
 //#endregion
@@ -2280,7 +2375,8 @@ const RevisionEntity = z.enum([
 	"document",
 	"measure",
 	"segment",
-	"transform"
+	"transform",
+	"transform-test"
 ]);
 const RevisionUser = z.object({
 	id: z.number().int(),
@@ -2344,17 +2440,20 @@ const RevisionApiRevert = z.union([Revision.transform((revision) => ({
 }))]);
 const ENTITY_FEATURES = {
 	measure: "measures",
-	transform: "transforms"
+	transform: "transforms",
+	"transform-test": "transformTests"
 };
 function entityFeatures(entity) {
 	const feature = ENTITY_FEATURES[entity];
-	return feature === void 0 ? [] : [feature];
+	return feature === void 0 ? [] : [{
+		feature,
+		fields: ["entity"]
+	}];
 }
 function revisionResource(transport) {
+	const { explain } = explainer(transport, "revision");
 	/** List the revisions of an entity the caller may read, newest first, each with its diff. */
 	async function list(entity, id, options = {}) {
-		await transport.require("revision.list", options);
-		await transport.requireFeatures(entityFeatures(entity), options);
 		return {
 			data: await transport.requestParsed(RevisionApiList, `/api/revision/${entity}/${id}`, { ...options }),
 			total: null
@@ -2365,8 +2464,6 @@ function revisionResource(transport) {
 	* card the permission to run the query being restored.
 	*/
 	async function revert(params, options = {}) {
-		await transport.require("revision.revert", options);
-		await transport.requireFeatures(entityFeatures(params.entity), options);
 		return transport.requestParsed(RevisionApiRevert, "/api/revision/revert", {
 			...options,
 			method: "POST",
@@ -2374,8 +2471,8 @@ function revisionResource(transport) {
 		});
 	}
 	return {
-		list,
-		revert
+		list: explain("list", list, entityFeatures),
+		revert: explain("revert", revert, (params) => entityFeatures(params.entity))
 	};
 }
 //#endregion
@@ -2384,7 +2481,14 @@ const SearchApiResponse = z.object({
 	data: z.array(SearchResult),
 	total: z.number().int().nonnegative()
 }).loose();
+function verifiedFeatures(params = {}) {
+	return params.verified === true ? [{
+		feature: "contentVerification",
+		fields: ["verified"]
+	}] : [];
+}
 function searchResource(transport) {
+	const { explain } = explainer(transport, "search");
 	/**
 	* Search over the instance's content, ranked against `q`. `models` narrows which kinds of entity
 	* may match, `archived` swaps the active set for the archived one, `table_db_id` restricts to
@@ -2394,9 +2498,12 @@ function searchResource(transport) {
 	* actions, transforms), `include_metadata` attaches each card's `result_metadata`,
 	* `include_dashboard_questions` also matches questions saved into a dashboard (excluded by
 	* default), and `limit`/`offset` are the window the server applies before ranking hydration.
+	* `verified` needs the `content_verification` premium feature, and is refused before the wire
+	* without it: a server granting neither it nor `official_collections` refuses the filter, and one
+	* granting `official_collections` alone takes it without applying it.
 	*/
 	async function query(params = {}, options = {}) {
-		await transport.require("search.query", options);
+		await transport.requireFeatures(verifiedFeatures(params).map((requirement) => requirement.feature), options);
 		const response = await transport.requestParsed(SearchApiResponse, "/api/search", {
 			...options,
 			query: {
@@ -2419,7 +2526,7 @@ function searchResource(transport) {
 			total: response.total
 		};
 	}
-	return { query };
+	return { query: explain("query", query, verifiedFeatures) };
 }
 //#endregion
 //#region ../client/src/resources/segment.ts
@@ -2427,7 +2534,6 @@ const SegmentApiList = z.array(Segment);
 function segmentResource(transport) {
 	/** List every segment the caller can see. */
 	async function list(options = {}) {
-		await transport.require("segment.list", options);
 		return {
 			data: await transport.requestParsed(SegmentApiList, "/api/segment", { ...options }),
 			total: null
@@ -2435,12 +2541,10 @@ function segmentResource(transport) {
 	}
 	/** Get one segment by id. */
 	async function get(id, options = {}) {
-		await transport.require("segment.get", options);
 		return transport.requestParsed(Segment, `/api/segment/${id}`, { ...options });
 	}
 	/** Create a segment — a reusable row filter over one table — from a full segment body. */
 	async function create(params, options = {}) {
-		await transport.require("segment.create", options);
 		return transport.requestParsed(Segment, "/api/segment", {
 			...options,
 			method: "POST",
@@ -2452,7 +2556,6 @@ function segmentResource(transport) {
 	* required: Metabase records every segment change in its revision history.
 	*/
 	async function update(id, params, options = {}) {
-		await transport.require("segment.update", options);
 		return transport.requestParsed(Segment, `/api/segment/${id}`, {
 			...options,
 			method: "PUT",
@@ -2464,7 +2567,6 @@ function segmentResource(transport) {
 	* same required `revision_message`.
 	*/
 	async function archive(id, params, options = {}) {
-		await transport.require("segment.archive", options);
 		return update(id, {
 			archived: true,
 			revision_message: params.revision_message
@@ -2489,7 +2591,6 @@ function rethrowSettingError(error, key) {
 function settingResource(transport) {
 	/** Get all settings and their values, with descriptions and environment-variable names. */
 	async function list(options = {}) {
-		await transport.require("setting.list", options);
 		return {
 			data: await transport.requestParsed(SettingApiList, "/api/setting", { ...options }),
 			total: null
@@ -2500,12 +2601,10 @@ function settingResource(transport) {
 	* reaches the caller as `null`; a string-typed setting answers bare text rather than JSON.
 	*/
 	async function get(key, options = {}) {
-		await transport.require("setting.get", options);
 		return fetchOptionalParsed(transport, `/api/setting/${encodeURIComponent(key)}`, z.unknown(), options).catch((error) => rethrowSettingError(error, key));
 	}
 	/** Set a single setting's value by key. The endpoint answers 204 with no body. */
 	async function set(key, value, options = {}) {
-		await transport.require("setting.set", options);
 		await transport.requestRaw(`/api/setting/${encodeURIComponent(key)}`, {
 			...options,
 			method: "PUT",
@@ -2527,7 +2626,6 @@ function setupResource(transport) {
 	* applying the instance preferences. The setup token is single-use.
 	*/
 	async function create(params, options = {}) {
-		await transport.require("setup.create", options);
 		return transport.requestParsed(SetupResult, "/api/setup", {
 			...options,
 			method: "POST",
@@ -2542,7 +2640,6 @@ const SnippetApiList = z.array(Snippet);
 function snippetResource(transport) {
 	/** List native query snippets. `archived` swaps the listing to archived snippets. */
 	async function list(params = {}, options = {}) {
-		await transport.require("snippet.list", options);
 		return {
 			data: await transport.requestParsed(SnippetApiList, "/api/native-query-snippet", {
 				...options,
@@ -2553,12 +2650,10 @@ function snippetResource(transport) {
 	}
 	/** Get one native query snippet by id. */
 	async function get(id, options = {}) {
-		await transport.require("snippet.get", options);
 		return transport.requestParsed(Snippet, `/api/native-query-snippet/${id}`, { ...options });
 	}
 	/** Create a native query snippet from a name, its SQL fragment, and an optional collection. */
 	async function create(params, options = {}) {
-		await transport.require("snippet.create", options);
 		return transport.requestParsed(Snippet, "/api/native-query-snippet", {
 			...options,
 			method: "POST",
@@ -2567,7 +2662,6 @@ function snippetResource(transport) {
 	}
 	/** Update a native query snippet by id, patching only the fields the body carries. */
 	async function update(id, params, options = {}) {
-		await transport.require("snippet.update", options);
 		return transport.requestParsed(Snippet, `/api/native-query-snippet/${id}`, {
 			...options,
 			method: "PUT",
@@ -2579,7 +2673,6 @@ function snippetResource(transport) {
 	* own endpoint.
 	*/
 	async function archive(id, options = {}) {
-		await transport.require("snippet.archive", options);
 		return update(id, { archived: true }, options);
 	}
 	return {
@@ -2609,13 +2702,23 @@ const LIST_PARAM_FEATURES = [
 	["published-only", "tableListPublishedFilter"]
 ];
 function listParamFeatures(params) {
-	return LIST_PARAM_FEATURES.filter(([param]) => params[param] !== void 0).map(([, feature]) => feature);
+	return LIST_PARAM_FEATURES.filter(([param]) => params[param] === true).map(([, feature]) => feature);
+}
+function dataLayerFeatures(value, field) {
+	return isTierName(value) ? [{
+		feature: "tableDataLayerTiers",
+		fields: [field]
+	}] : [];
+}
+function isTierName(value) {
+	return value !== null && value !== void 0 && TableDataLayerTier.safeParse(value).success;
 }
 const UPLOAD_UPDATE_PATHS = {
 	append: "append-csv",
 	replace: "replace-csv"
 };
 function tableResource(transport) {
+	const { explain } = explainer(transport, "table");
 	/**
 	* List every table the caller can see, across all databases. `term` matches names and display
 	* names; `can-query` and `can-write` keep only the tables the caller may query or edit the
@@ -2623,9 +2726,7 @@ function tableResource(transport) {
 	* tables nothing depends on; `published-only` keeps tables published to the library.
 	*/
 	async function list(params = {}, options = {}) {
-		await transport.require("table.list", options);
 		await transport.requireFeatures(listParamFeatures(params), options);
-		await requireDataLayer(params["data-layer"], options);
 		return {
 			data: await transport.requestParsed(TableApiList, "/api/table", {
 				...options,
@@ -2649,31 +2750,30 @@ function tableResource(transport) {
 	}
 	/** Get one table by id, without its fields. */
 	async function get(id, options = {}) {
-		await transport.require("table.get", options);
 		return transport.requestParsed(Table, `/api/table/${id}`, { ...options });
 	}
 	/** Update a table by id, patching only the fields the body carries. */
 	async function update(id, params, options = {}) {
-		await transport.require("table.update", options);
-		await requireDataLayer(params.data_layer, options);
-		return transport.requestParsed(Table, `/api/table/${id}`, {
+		await refuseRewrittenDataLayer(params.data_layer, options);
+		await requireDataAuthorityNull(params.data_authority, options);
+		const path = `/api/table/${id}`;
+		const updated = await transport.requestParsed(Table, path, {
 			...options,
 			method: "PUT",
 			body: params
 		});
+		assertCollectionWritten(path, params.collection_id, updated);
+		return updated;
 	}
-	async function requireDataLayer(value, options) {
-		if (value === null || value === void 0) return;
-		if (TableDataLayerTier.safeParse(value).success) {
-			await transport.requireFeatures(["tableDataLayerTiers"], options);
-			return;
-		}
-		const { features } = await transport.server(options);
-		if (features.tableDataLayerTiers) throw new ConfigError(`data_layer "${value}" is a medallion name; this server names a table's layer ${TableDataLayerTier.options.join(", ")}`);
+	async function refuseRewrittenDataLayer(value, options) {
+		if (value === null || value === void 0 || isTierName(value)) return;
+		const profile = await transport.preflightServer(options);
+		if (profile === null) return;
+		const failure = supersedingFeature("tableDataLayerTiers", profile, `data_layer "${value}" is a medallion name; this server names a table's layer ${TableDataLayerTier.options.join(", ")} and would map it onto one of those without a word`);
+		if (failure !== null) transport.refuseBeforeSending(new CapabilityError(failure));
 	}
 	/** Get a table by id with its fields hydrated — the metadata the query builder runs on. */
 	async function queryMetadata(id, options = {}) {
-		await transport.require("table.queryMetadata", options);
 		return transport.requestParsed(TableQueryMetadata, `/api/table/${id}/query_metadata`, { ...options });
 	}
 	/**
@@ -2681,7 +2781,6 @@ function tableResource(transport) {
 	* fields answers no content, which is the same empty list.
 	*/
 	async function fks(id, options = {}) {
-		await transport.require("table.fks", options);
 		return {
 			data: await fetchOptionalParsed(transport, `/api/table/${id}/fks`, TableApiFks, { ...options }) ?? [],
 			total: null
@@ -2693,7 +2792,6 @@ function tableResource(transport) {
 	* connect to is a 422.
 	*/
 	async function syncSchema(id, options = {}) {
-		await transport.require("table.syncSchema", options);
 		return {
 			id,
 			status: (await transport.requestParsed(SyncSchemaResponse, `/api/table/${id}/sync_schema`, {
@@ -2707,7 +2805,6 @@ function tableResource(transport) {
 	* cached set. The scan runs after the call returns.
 	*/
 	async function rescanValues(id, options = {}) {
-		await transport.require("table.rescanValues", options);
 		return {
 			id,
 			status: (await transport.requestParsed(FieldValuesResponse, `/api/table/${id}/rescan_values`, {
@@ -2722,7 +2819,6 @@ function tableResource(transport) {
 	* time the field's values are read.
 	*/
 	async function discardValues(id, options = {}) {
-		await transport.require("table.discardValues", options);
 		return {
 			id,
 			status: (await transport.requestParsed(FieldValuesResponse, `/api/table/${id}/discard_values`, {
@@ -2737,7 +2833,6 @@ function tableResource(transport) {
 	* selectors matched a table.
 	*/
 	async function bulkEdit(params, options = {}) {
-		await transport.require("table.bulkEdit", options);
 		await requireDataAuthorityNull(params.data_authority, options);
 		await transport.requestParsed(BulkEditResponse, BULK_EDIT_PATH, {
 			...options,
@@ -2771,7 +2866,6 @@ function tableResource(transport) {
 	* call is a 422; the syncs run after it returns.
 	*/
 	async function bulkSyncSchema(selectors, options = {}) {
-		await transport.require("table.bulkSyncSchema", options);
 		return postSelection(BULK_SYNC_SCHEMA_PATH, selectors, options);
 	}
 	/**
@@ -2779,7 +2873,6 @@ function tableResource(transport) {
 	* are already cached. The scans run after the call returns.
 	*/
 	async function bulkRescanValues(selectors, options = {}) {
-		await transport.require("table.bulkRescanValues", options);
 		return postSelection(BULK_RESCAN_VALUES_PATH, selectors, options);
 	}
 	/**
@@ -2787,7 +2880,6 @@ function tableResource(transport) {
 	* included. No scan recreates a discarded set.
 	*/
 	async function bulkDiscardValues(selectors, options = {}) {
-		await transport.require("table.bulkDiscardValues", options);
 		return postSelection(BULK_DISCARD_VALUES_PATH, selectors, options);
 	}
 	async function updateFromCsv(id, action, file, options) {
@@ -2809,7 +2901,6 @@ function tableResource(transport) {
 	* The file may be at most 50 MB; larger uploads are rejected with a 413 response.
 	*/
 	async function appendCsv(id, file, options = {}) {
-		await transport.require("table.appendCsv", options);
 		return updateFromCsv(id, "append", file, options);
 	}
 	/**
@@ -2819,37 +2910,53 @@ function tableResource(transport) {
 	* The file may be at most 50 MB; larger uploads are rejected with a 413 response.
 	*/
 	async function replaceCsv(id, file, options = {}) {
-		await transport.require("table.replaceCsv", options);
 		return updateFromCsv(id, "replace", file, options);
 	}
 	return {
-		list,
+		list: explain("list", list, (params) => dataLayerFeatures(params?.["data-layer"], "data-layer")),
 		get,
-		update,
+		update: explain("update", update, (_id, params) => dataLayerFeatures(params.data_layer, "data_layer")),
 		queryMetadata,
 		fks,
 		syncSchema,
 		rescanValues,
 		discardValues,
-		bulkEdit,
-		bulkSyncSchema,
-		bulkRescanValues,
-		bulkDiscardValues,
+		bulkEdit: explain("bulkEdit", bulkEdit),
+		bulkSyncSchema: explain("bulkSyncSchema", bulkSyncSchema),
+		bulkRescanValues: explain("bulkRescanValues", bulkRescanValues),
+		bulkDiscardValues: explain("bulkDiscardValues", bulkDiscardValues),
 		appendCsv,
 		replaceCsv
 	};
 }
+function assertCollectionWritten(path, requested, table) {
+	if (requested === void 0 || table.collection_id === requested) return;
+	const answered = table.collection_id === void 0 ? { kind: "unreported" } : {
+		kind: "reported",
+		value: table.collection_id
+	};
+	throw new PartialWriteError(`the server applied the rest of the update to table ${table.id} but not collection_id: ${describeCollectionAnswer(answered)}, because this server does not move a table to a collection through an update`, {
+		method: "PUT",
+		path,
+		field: "collection_id",
+		requested,
+		answered
+	});
+}
+function describeCollectionAnswer(answered) {
+	if (answered.kind === "unreported") return "it answered the table without reporting a collection";
+	if (answered.value === null) return "the table stays in no collection";
+	return `the table stays in collection ${answered.value}`;
+}
 //#endregion
 //#region ../client/src/resources/timeline-event.ts
 function timelineEventResource(transport) {
 	/** Get one timeline event by id. */
 	async function get(id, options = {}) {
-		await transport.require("timelineEvent.get", options);
 		return transport.requestParsed(TimelineEvent, `/api/timeline-event/${id}`, { ...options });
 	}
 	/** Create a timeline event on an existing timeline. */
 	async function create(params, options = {}) {
-		await transport.require("timelineEvent.create", options);
 		return transport.requestParsed(TimelineEvent, "/api/timeline-event", {
 			...options,
 			method: "POST",
@@ -2861,7 +2968,6 @@ function timelineEventResource(transport) {
 	* the event to another timeline.
 	*/
 	async function update(id, params, options = {}) {
-		await transport.require("timelineEvent.update", options);
 		return transport.requestParsed(TimelineEvent, `/api/timeline-event/${id}`, {
 			...options,
 			method: "PUT",
@@ -2873,12 +2979,10 @@ function timelineEventResource(transport) {
 	* endpoint.
 	*/
 	async function archive(id, options = {}) {
-		await transport.require("timelineEvent.archive", options);
 		return update(id, { archived: true }, options);
 	}
 	/** Permanently delete a timeline event by id. The server answers with no body. */
 	async function remove(id, options = {}) {
-		await transport.require("timelineEvent.delete", options);
 		await transport.requestRaw(`/api/timeline-event/${id}`, {
 			...options,
 			method: "DELETE",
@@ -2900,7 +3004,6 @@ const TimelineWithEvents = Timeline.required({ events: true });
 function timelineResource(transport) {
 	/** List timelines. `archived` swaps the active listing for the archived one. */
 	async function list(params = {}, options = {}) {
-		await transport.require("timeline.list", options);
 		return {
 			data: await transport.requestParsed(TimelineApiList, "/api/timeline", {
 				...options,
@@ -2911,7 +3014,6 @@ function timelineResource(transport) {
 	}
 	/** Get one timeline by id, without its events. */
 	async function get(id, options = {}) {
-		await transport.require("timeline.get", options);
 		return transport.requestParsed(Timeline, `/api/timeline/${id}`, { ...options });
 	}
 	/**
@@ -2919,7 +3021,6 @@ function timelineResource(transport) {
 	* timeline read hydrates them on request, and `archived` chooses which of them come back.
 	*/
 	async function events(id, params = {}, options = {}) {
-		await transport.require("timeline.events", options);
 		return {
 			data: (await transport.requestParsed(TimelineWithEvents, `/api/timeline/${id}`, {
 				...options,
@@ -2933,7 +3034,6 @@ function timelineResource(transport) {
 	}
 	/** Create a timeline from a full timeline body. */
 	async function create(params, options = {}) {
-		await transport.require("timeline.create", options);
 		return transport.requestParsed(Timeline, "/api/timeline", {
 			...options,
 			method: "POST",
@@ -2945,7 +3045,6 @@ function timelineResource(transport) {
 	* cascades to every event on the timeline.
 	*/
 	async function update(id, params, options = {}) {
-		await transport.require("timeline.update", options);
 		return transport.requestParsed(Timeline, `/api/timeline/${id}`, {
 			...options,
 			method: "PUT",
@@ -2957,12 +3056,10 @@ function timelineResource(transport) {
 	* not its own endpoint.
 	*/
 	async function archive(id, options = {}) {
-		await transport.require("timeline.archive", options);
 		return update(id, { archived: true }, options);
 	}
 	/** Permanently delete a timeline and all its events by id. The server answers with no body. */
 	async function remove(id, options = {}) {
-		await transport.require("timeline.delete", options);
 		await transport.requestRaw(`/api/timeline/${id}`, {
 			...options,
 			method: "DELETE",
@@ -2999,12 +3096,12 @@ TransformMemberRun.pick({
 //#region ../client/src/resources/transform-dag-run.ts
 const TransformMemberRunList = z.array(TransformMemberRun);
 function transformDagRunResource(transport) {
+	const { explain } = explainer(transport, "transformDagRun");
 	/**
 	* List the transform runs a DAG run coordinated so far. A member run is inserted when its
 	* transform starts, so the list grows while the DAG run is in progress.
 	*/
 	async function transformRuns(runId, options = {}) {
-		await transport.require("transformDagRun.transformRuns", options);
 		return {
 			data: await transport.requestParsed(TransformMemberRunList, `/api/transform-dag-run/${runId}/transform-runs`, { ...options }),
 			total: null
@@ -3012,7 +3109,6 @@ function transformDagRunResource(transport) {
 	}
 	/** Cancel an in-progress DAG run and request cancellation of its still-running transforms. */
 	async function cancel(runId, options = {}) {
-		await transport.require("transformDagRun.cancel", options);
 		await transport.requestRaw(`/api/transform-dag-run/${runId}/cancel`, {
 			...options,
 			method: "POST",
@@ -3020,8 +3116,8 @@ function transformDagRunResource(transport) {
 		});
 	}
 	return {
-		transformRuns,
-		cancel
+		transformRuns: explain("transformRuns", transformRuns),
+		cancel: explain("cancel", cancel)
 	};
 }
 //#endregion
@@ -3169,12 +3265,12 @@ function lensPath(id, lensId) {
 	return `/api/ee/transforms/${id}/inspect/${encodeURIComponent(lensId)}`;
 }
 function transformInspectorResource(transport) {
+	const { explain } = explainer(transport, "transformInspector");
 	/**
 	* Discover what the inspector can show for a transform: its source and target tables with field
 	* statistics, the fields its query touches, and the lenses available on it.
 	*/
 	async function discover(id, options = {}) {
-		await transport.require("transformInspector.discover", options);
 		return transport.requestParsed(TransformInspection, `/api/ee/transforms/${id}/inspect`, { ...options });
 	}
 	/**
@@ -3183,7 +3279,6 @@ function transformInspectorResource(transport) {
 	* the `params` its trigger emitted.
 	*/
 	async function lens(id, lensId, params = {}, options = {}) {
-		await transport.require("transformInspector.lens", options);
 		return transport.requestParsed(TransformLens, lensPath(id, lensId), {
 			...options,
 			query: { join_step: params.join_step }
@@ -3195,7 +3290,6 @@ function transformInspectorResource(transport) {
 	* opened with.
 	*/
 	async function query(id, lensId, params, options = {}) {
-		await transport.require("transformInspector.query", options);
 		return transport.requestParsed(CardQueryResult, `${lensPath(id, lensId)}/query`, {
 			...options,
 			method: "POST",
@@ -3203,17 +3297,17 @@ function transformInspectorResource(transport) {
 		});
 	}
 	return {
-		discover,
-		lens,
-		query
+		discover: explain("discover", discover),
+		lens: explain("lens", lens),
+		query: explain("query", query)
 	};
 }
 //#endregion
 //#region ../client/src/resources/transform-job.ts
 function transformJobResource(transport) {
+	const { explain } = explainer(transport, "transformJob");
 	/** List every transform job the caller can see. */
 	async function list(options = {}) {
-		await transport.require("transformJob.list", options);
 		const { features } = await transport.server(options);
 		return {
 			data: await transport.requestParsed(z.array(transformJobSchema(features)), "/api/transform-job", { ...options }),
@@ -3222,13 +3316,11 @@ function transformJobResource(transport) {
 	}
 	/** Get one transform job by id. */
 	async function get(id, options = {}) {
-		await transport.require("transformJob.get", options);
 		const { features } = await transport.server(options);
 		return transport.requestParsed(transformJobSchema(features), `/api/transform-job/${id}`, { ...options });
 	}
 	/** Create a transform job — a schedule plus the tags it runs — from a full body. */
 	async function create(params, options = {}) {
-		await transport.require("transformJob.create", options);
 		const { features } = await transport.server(options);
 		return transport.requestParsed(transformJobSchema(features), "/api/transform-job", {
 			...options,
@@ -3238,7 +3330,6 @@ function transformJobResource(transport) {
 	}
 	/** Update a transform job by id, patching only the fields the body carries. */
 	async function update(id, params, options = {}) {
-		await transport.require("transformJob.update", options);
 		const { features } = await transport.server(options);
 		return transport.requestParsed(transformJobSchema(features), `/api/transform-job/${id}`, {
 			...options,
@@ -3248,7 +3339,6 @@ function transformJobResource(transport) {
 	}
 	/** Delete a transform job by id, leaving the transforms it ran untouched. */
 	async function remove(id, options = {}) {
-		await transport.require("transformJob.delete", options);
 		await transport.requestRaw(`/api/transform-job/${id}`, {
 			...options,
 			method: "DELETE",
@@ -3260,7 +3350,6 @@ function transformJobResource(transport) {
 	* plus those transforms' dependencies; `run_all` re-runs dependencies that are already fresh.
 	*/
 	async function run(id, params = {}, options = {}) {
-		await transport.require("transformJob.run", options);
 		const { features } = await transport.server(options);
 		return transport.requestParsed(transformJobRunResultSchema(features), `/api/transform-job/${id}/run`, {
 			...options,
@@ -3270,7 +3359,6 @@ function transformJobResource(transport) {
 	}
 	/** List the transforms a job would execute, resolved from the job's tags. */
 	async function transforms(id, options = {}) {
-		await transport.require("transformJob.transforms", options);
 		const { features } = await transport.server(options);
 		return {
 			data: await transport.requestParsed(z.array(transformRowSchema(features)), `/api/transform-job/${id}/transforms`, { ...options }),
@@ -3282,7 +3370,6 @@ function transformJobResource(transport) {
 	* manual runs ignore the flag. The path carries no id and is a different endpoint from `update`.
 	*/
 	async function setActive(active, options = {}) {
-		await transport.require("transformJob.setActive", options);
 		return transport.requestParsed(TransformJobActiveResult, "/api/transform-job/active", {
 			...options,
 			method: "PUT",
@@ -3290,14 +3377,14 @@ function transformJobResource(transport) {
 		});
 	}
 	return {
-		list,
-		get,
-		create,
-		update,
-		delete: remove,
-		run,
-		transforms,
-		setActive
+		list: explain("list", list),
+		get: explain("get", get),
+		create: explain("create", create),
+		update: explain("update", update),
+		delete: explain("delete", remove),
+		run: explain("run", run),
+		transforms: explain("transforms", transforms),
+		setActive: explain("setActive", setActive)
 	};
 }
 //#endregion
@@ -3357,14 +3444,13 @@ function libraryPath(path) {
 	return `/api/ee/transforms-python/library/${encodeURIComponent(path)}`;
 }
 function transformPythonResource(transport) {
+	const { explain } = explainer(transport, "transformPython");
 	/** Get the Python library at a path, the user module every Python transform can import. */
 	async function getLibrary(path, options = {}) {
-		await transport.require("transformPython.getLibrary", options);
 		return transport.requestParsed(PythonLibrary, libraryPath(path), { ...options });
 	}
 	/** Replace the source of the Python library at a path, creating the library when none exists. */
 	async function updateLibrary(path, params, options = {}) {
-		await transport.require("transformPython.updateLibrary", options);
 		return transport.requestParsed(PythonLibrary, libraryPath(path), {
 			...options,
 			method: "PUT",
@@ -3377,7 +3463,6 @@ function transformPythonResource(transport) {
 	* sizes are capped at 100 rows.
 	*/
 	async function testRun(params, options = {}) {
-		await transport.require("transformPython.testRun", options);
 		return transport.requestParsed(PythonApiTestRun, "/api/ee/transforms-python/test-run", {
 			...options,
 			method: "POST",
@@ -3385,9 +3470,9 @@ function transformPythonResource(transport) {
 		});
 	}
 	return {
-		getLibrary,
-		updateLibrary,
-		testRun
+		getLibrary: explain("getLibrary", getLibrary),
+		updateLibrary: explain("updateLibrary", updateLibrary),
+		testRun: explain("testRun", testRun)
 	};
 }
 //#endregion
@@ -3401,6 +3486,7 @@ const TransformRunKickoff = z.object({
 });
 const TransformDagTransformList = z.array(TransformDagTransform);
 function transformResource(transport) {
+	const { explain, explainWalk } = explainer(transport, "transform");
 	async function requestTransformList(path, opts) {
 		const { features } = await transport.server(opts);
 		return {
@@ -3414,18 +3500,15 @@ function transformResource(transport) {
 	}
 	/** List every transform the caller can see. */
 	async function list(options = {}) {
-		await transport.require("transform.list", options);
 		return requestTransformList("/api/transform", { ...options });
 	}
 	/** Get one transform by id. */
 	async function get(id, options = {}) {
-		await transport.require("transform.get", options);
 		const { features } = await transport.server(options);
 		return transport.requestParsed(transformDetailSchema(features), `/api/transform/${id}`, { ...options });
 	}
 	/** Create a transform — a query plus the warehouse table it writes — from a full body. */
 	async function create(params, options = {}) {
-		await transport.require("transform.create", options);
 		return requestTransform("/api/transform", {
 			...options,
 			method: "POST",
@@ -3434,7 +3517,6 @@ function transformResource(transport) {
 	}
 	/** Update a transform by id, patching only the fields the body carries. */
 	async function update(id, params, options = {}) {
-		await transport.require("transform.update", options);
 		return requestTransform(`/api/transform/${id}`, {
 			...options,
 			method: "PUT",
@@ -3443,7 +3525,6 @@ function transformResource(transport) {
 	}
 	/** Delete a transform by id, leaving any table it already materialized in place. */
 	async function remove(id, options = {}) {
-		await transport.require("transform.delete", options);
 		await transport.requestRaw(`/api/transform/${id}`, {
 			...options,
 			method: "DELETE",
@@ -3452,7 +3533,6 @@ function transformResource(transport) {
 	}
 	/** Drop a transform's materialized output table, keeping the transform definition. */
 	async function deleteTable(id, options = {}) {
-		await transport.require("transform.deleteTable", options);
 		await transport.requestRaw(`/api/transform/${id}/table`, {
 			...options,
 			method: "DELETE",
@@ -3461,12 +3541,10 @@ function transformResource(transport) {
 	}
 	/** List the upstream transforms a transform depends on. */
 	async function dependencies(id, options = {}) {
-		await transport.require("transform.dependencies", options);
 		return requestTransformList(`/api/transform/${id}/dependencies`, { ...options });
 	}
 	/** Request cancellation of a transform's current run. */
 	async function cancel(id, options = {}) {
-		await transport.require("transform.cancel", options);
 		await transport.requestRaw(`/api/transform/${id}/cancel`, {
 			...options,
 			method: "POST",
@@ -3475,12 +3553,10 @@ function transformResource(transport) {
 	}
 	/** Get one transform run by run id — not by the id of the transform that produced it. */
 	async function getRun(runId, options = {}) {
-		await transport.require("transform.getRun", options);
 		return transport.requestParsed(TransformRun, `/api/transform/run/${runId}`, { ...options });
 	}
 	/** Walk the run history, newest first, optionally narrowed to a single transform. */
 	async function* runPages(params = {}, options = {}) {
-		await transport.require("transform.runPages", options);
 		yield* paginatePages(transport, "/api/transform/run", TransformRun, {
 			query: { "transform-ids": params["transform-ids"] },
 			...options.offset !== void 0 && { offset: options.offset },
@@ -3494,7 +3570,6 @@ function transformResource(transport) {
 	* DAG reprocess run, or a standalone transform run — and never a member run of a job or DAG.
 	*/
 	async function* runSummaryPages(params = {}, options = {}) {
-		await transport.require("transform.runSummaryPages", options);
 		yield* paginatePages(transport, "/api/transform/runs", TransformRunSummary, {
 			query: {
 				types: params.types,
@@ -3517,7 +3592,6 @@ function transformResource(transport) {
 	* source rather than the rows past the last checkpoint.
 	*/
 	async function resetCheckpoint(id, options = {}) {
-		await transport.require("transform.resetCheckpoint", options);
 		await transport.requestRaw(`/api/transform/${id}/reset-checkpoint`, {
 			...options,
 			method: "POST",
@@ -3532,7 +3606,6 @@ function transformResource(transport) {
 	* `runSummaryPages` with `types: ["dag"]`, and the member runs off `transformDagRun.transformRuns`.
 	*/
 	async function runDag(id, params, options = {}) {
-		await transport.require("transform.runDag", options);
 		return transport.requestParsed(TransformDagRunResult, `/api/transform/${id}/run-dag`, {
 			...options,
 			method: "POST",
@@ -3541,7 +3614,6 @@ function transformResource(transport) {
 	}
 	/** Preview the transforms a DAG reprocess seeded at a transform would run, in execution order. */
 	async function dagTransforms(id, params, options = {}) {
-		await transport.require("transform.dagTransforms", options);
 		return {
 			data: await transport.requestParsed(TransformDagTransformList, `/api/transform/${id}/dag-transforms`, {
 				...options,
@@ -3556,7 +3628,6 @@ function transformResource(transport) {
 	* A server that answers no run id started nothing, and there is then nothing to poll.
 	*/
 	async function run(id, params = {}, options = {}) {
-		await transport.require("transform.run", options);
 		const kickoff = await transport.requestParsed(TransformRunKickoff, `/api/transform/${id}/run`, {
 			...options,
 			method: "POST"
@@ -3597,30 +3668,30 @@ function transformResource(transport) {
 		}
 	}
 	return {
-		list,
-		get,
-		create,
-		update,
-		delete: remove,
-		deleteTable,
-		dependencies,
-		cancel,
-		getRun,
-		runPages,
-		runSummaryPages,
-		resetCheckpoint,
-		runDag,
-		dagTransforms,
-		run
+		list: explain("list", list),
+		get: explain("get", get),
+		create: explain("create", create),
+		update: explain("update", update),
+		delete: explain("delete", remove),
+		deleteTable: explain("deleteTable", deleteTable),
+		dependencies: explain("dependencies", dependencies),
+		cancel: explain("cancel", cancel),
+		getRun: explain("getRun", getRun),
+		runPages: explainWalk("runPages", runPages),
+		runSummaryPages: explainWalk("runSummaryPages", runSummaryPages),
+		resetCheckpoint: explain("resetCheckpoint", resetCheckpoint),
+		runDag: explain("runDag", runDag),
+		dagTransforms: explain("dagTransforms", dagTransforms),
+		run: explain("run", run)
 	};
 }
 //#endregion
 //#region ../client/src/resources/transform-tag.ts
 const TransformTagApiList = z.array(TransformTag);
 function transformTagResource(transport) {
+	const { explain } = explainer(transport, "transformTag");
 	/** List every transform tag the caller can see, built-in tags included. */
 	async function list(options = {}) {
-		await transport.require("transformTag.list", options);
 		return {
 			data: await transport.requestParsed(TransformTagApiList, "/api/transform-tag", { ...options }),
 			total: null
@@ -3628,7 +3699,6 @@ function transformTagResource(transport) {
 	}
 	/** Create a transform tag, the label a transform job matches transforms on. */
 	async function create(params, options = {}) {
-		await transport.require("transformTag.create", options);
 		return transport.requestParsed(TransformTag, "/api/transform-tag", {
 			...options,
 			method: "POST",
@@ -3637,7 +3707,6 @@ function transformTagResource(transport) {
 	}
 	/** Rename a transform tag by id. */
 	async function update(id, params, options = {}) {
-		await transport.require("transformTag.update", options);
 		return transport.requestParsed(TransformTag, `/api/transform-tag/${id}`, {
 			...options,
 			method: "PUT",
@@ -3646,7 +3715,6 @@ function transformTagResource(transport) {
 	}
 	/** Delete a transform tag by id, detaching it from every transform and job carrying it. */
 	async function remove(id, options = {}) {
-		await transport.require("transformTag.delete", options);
 		await transport.requestRaw(`/api/transform-tag/${id}`, {
 			...options,
 			method: "DELETE",
@@ -3654,19 +3722,19 @@ function transformTagResource(transport) {
 		});
 	}
 	return {
-		list,
-		create,
-		update,
-		delete: remove
+		list: explain("list", list),
+		create: explain("create", create),
+		update: explain("update", update),
+		delete: explain("delete", remove)
 	};
 }
 //#endregion
 //#region ../client/src/resources/transform-test.ts
 const TransformTestApiList = z.array(TransformTest);
 function transformTestResource(transport) {
+	const { explain } = explainer(transport, "transformTest");
 	/** List the transform tests, optionally only those of one transform. */
 	async function list(params = {}, options = {}) {
-		await transport.require("transformTest.list", options);
 		return {
 			data: await transport.requestParsed(TransformTestApiList, "/api/ee/transform-test", {
 				...options,
@@ -3677,7 +3745,6 @@ function transformTestResource(transport) {
 	}
 	/** Get a transform test by id. */
 	async function get(id, options = {}) {
-		await transport.require("transformTest.get", options);
 		return transport.requestParsed(TransformTest, `/api/ee/transform-test/${id}`, { ...options });
 	}
 	/**
@@ -3686,7 +3753,6 @@ function transformTestResource(transport) {
 	* `TransformTestRefusalCode` when they cannot run.
 	*/
 	async function create(params, options = {}) {
-		await transport.require("transformTest.create", options);
 		return transport.requestParsed(TransformTest, "/api/ee/transform-test", {
 			...options,
 			method: "POST",
@@ -3698,7 +3764,6 @@ function transformTestResource(transport) {
 	* transform, inputs or expectations is validated as on create, with the same refusal.
 	*/
 	async function update(id, params, options = {}) {
-		await transport.require("transformTest.update", options);
 		return transport.requestParsed(TransformTest, `/api/ee/transform-test/${id}`, {
 			...options,
 			method: "PUT",
@@ -3707,7 +3772,6 @@ function transformTestResource(transport) {
 	}
 	/** Delete a transform test by id. */
 	async function remove(id, options = {}) {
-		await transport.require("transformTest.delete", options);
 		await transport.requestRaw(`/api/ee/transform-test/${id}`, {
 			...options,
 			method: "DELETE",
@@ -3721,19 +3785,18 @@ function transformTestResource(transport) {
 	* refused and nothing meaningful ran.
 	*/
 	async function run(id, options = {}) {
-		await transport.require("transformTest.run", options);
 		return transport.requestParsed(TransformTestRunResult, `/api/ee/transform-test/${id}/run`, {
 			...options,
 			method: "POST"
 		});
 	}
 	return {
-		list,
-		get,
-		create,
-		update,
-		delete: remove,
-		run
+		list: explain("list", list),
+		get: explain("get", get),
+		create: explain("create", create),
+		update: explain("update", update),
+		delete: explain("delete", remove),
+		run: explain("run", run)
 	};
 }
 //#endregion
@@ -3747,7 +3810,6 @@ function uploadResource(transport) {
 	* The file may be at most 50 MB; larger uploads are rejected with a 413 response.
 	*/
 	async function createFromCsv(file, params, options = {}) {
-		await transport.require("upload.createFromCsv", options);
 		const form = buildCsvFormData(file);
 		form.append("collection_id", params.collection_id);
 		const response = await transport.requestRaw("/api/upload/csv", {
@@ -3800,7 +3862,6 @@ CurrentUser.pick({
 function userResource(transport) {
 	/** Get the user the request's credentials authenticate as. */
 	async function current(options = {}) {
-		await transport.require("user.current", options);
 		return transport.requestParsed(CurrentUser, "/api/user/current", { ...options });
 	}
 	return { current };
@@ -3852,6 +3913,8 @@ function createClient(config, options) {
 		upload: uploadResource(transport),
 		user: userResource(transport),
 		server: transport.server,
+		verifiedServer: transport.verifiedServer,
+		probesSettled: transport.probesSettled,
 		requestParsed: transport.requestParsed,
 		requestRaw: transport.requestRaw,
 		requestStream: transport.requestStream