@nikolasp98/minion 2026.6.16-dev.20260703022951 → 2026.7.2-dev

package/dist/{config-C4ygZaLQ.js → config-GA90_ZLO.js}

@@ -1,7 +1,7 @@
 import { n as __exportAll } from "./chunk-2rV9d50f.js";
 import { _ as resolveOAuthPath, a as resolveAgentConfigPath, b as DEFAULT_GATEWAY_PORT, c as resolveConfigPath, d as resolveGatewayLockDir, f as resolveGatewayPort, g as resolveOAuthDir, h as resolveNewStateDir, l as resolveConfigPathCandidate, m as resolveLegacyStateDirs, n as STATE_DIR, o as resolveAgentConfigPathWithFallback, p as resolveIsNixMode, r as isNixMode, s as resolveCanonicalConfigPath, t as CONFIG_PATH, u as resolveDefaultConfigCandidates, v as resolveStateDir } from "./paths-aEg9UgoF.js";
 import { c as applyLegacyMigrations, n as validateConfigObjectWithPlugins } from "./validation-DnYXVHop.js";
-import { d as getConfigOverrides, f as resetConfigOverrides, i as loadConfig, m as unsetConfigOverride, p as setConfigOverride, u as applyConfigOverrides } from "./io-D6HAGfRj.js";
+import { d as getConfigOverrides, f as resetConfigOverrides, i as loadConfig, m as unsetConfigOverride, p as setConfigOverride, u as applyConfigOverrides } from "./io-CUOJNJs6.js";
 //#region src/config/legacy-migrate.ts
 function migrateLegacyConfig(raw) {
 	const { next, changes } = applyLegacyMigrations(raw);

package/dist/{config-cli-WVl6fLmt.js → config-cli-BFBb_KPM.js}

@@ -1,7 +1,7 @@
 import { St as theme, dt as danger, ft as info, g as defaultRuntime, ot as shortenHomePath } from "./entry.js";
 import { t as formatCliCommand } from "./command-format-D86vQ65E.js";
-import { l as writeConfigFile, o as readConfigFileSnapshot } from "./io-D6HAGfRj.js";
-import "./config-C4ygZaLQ.js";
+import { l as writeConfigFile, o as readConfigFileSnapshot } from "./io-CUOJNJs6.js";
+import "./config-GA90_ZLO.js";
 import { t as formatDocsLink } from "./links-B03m-P2Z.js";
 import JSON5 from "json5";
 //#region src/cli/config-cli.ts
@@ -239,7 +239,7 @@ async function runConfigUnset(opts) {
 }
 function registerConfigCli(program) {
 	const cmd = program.command("config").description("Non-interactive config helpers (get/set/unset). Run without subcommand for the setup wizard.").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/config", "docs.minion.ai/cli/config")}\n`).option("--section <section>", "Configure wizard sections (repeatable). Use with no subcommand.", (value, previous) => [...previous, value], []).action(async (opts) => {
-		const { configureCommandFromSectionsArg } = await import("./configure-DqZ20Fm1.js");
+		const { configureCommandFromSectionsArg } = await import("./configure-BVS7Uoe1.js");
 		await configureCommandFromSectionsArg(opts.section, defaultRuntime);
 	});
 	cmd.command("get").description("Get a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").option("--json", "Output JSON", false).action(async (path, opts) => {

package/dist/{config-cli-a6kX0DWm.js → config-cli-DqrSBbB0.js}

@@ -2,8 +2,8 @@ import { C as shortenHomePath, O as danger, k as info } from "./utils-DsgtGH3c.j
 import { r as theme } from "./theme-CDbj88LB.js";
 import { t as defaultRuntime } from "./runtime-Da615Z-K.js";
 import { t as formatCliCommand } from "./command-format-slIqNG4J.js";
-import { l as writeConfigFile, o as readConfigFileSnapshot } from "./io-e4Yx5ZqN.js";
-import "./config-D0cZAiW5.js";
+import { l as writeConfigFile, o as readConfigFileSnapshot } from "./io-DsXKMvz3.js";
+import "./config-DKbC00-8.js";
 import { t as formatDocsLink } from "./links-C1xb6h4b.js";
 import JSON5 from "json5";
 //#region src/cli/config-cli.ts
@@ -241,7 +241,7 @@ async function runConfigUnset(opts) {
 }
 function registerConfigCli(program) {
 	const cmd = program.command("config").description("Non-interactive config helpers (get/set/unset). Run without subcommand for the setup wizard.").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/config", "docs.minion.ai/cli/config")}\n`).option("--section <section>", "Configure wizard sections (repeatable). Use with no subcommand.", (value, previous) => [...previous, value], []).action(async (opts) => {
-		const { configureCommandFromSectionsArg } = await import("./configure-W7doYXjc.js");
+		const { configureCommandFromSectionsArg } = await import("./configure-Y4orl1oO.js");
 		await configureCommandFromSectionsArg(opts.section, defaultRuntime);
 	});
 	cmd.command("get").description("Get a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").option("--json", "Output JSON", false).action(async (path, opts) => {

package/dist/{config-guard-CLHcu3Wq.js → config-guard-CUaqhHD3.js}

@@ -1,10 +1,10 @@
 import { C as shortenHomePath } from "./utils-DsgtGH3c.js";
 import { n as isRich, r as theme, t as colorize } from "./theme-CDbj88LB.js";
 import { t as formatCliCommand } from "./command-format-slIqNG4J.js";
-import { o as readConfigFileSnapshot } from "./io-e4Yx5ZqN.js";
-import "./config-D0cZAiW5.js";
+import { o as readConfigFileSnapshot } from "./io-DsXKMvz3.js";
+import "./config-DKbC00-8.js";
 import { o as shouldMigrateStateFromPath } from "./argv-jr5Bsqfh.js";
-import { t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-CR7fJOuO.js";
+import { t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-3lyK6GXd.js";
 //#region src/cli/program/config-guard.ts
 const ALLOWED_INVALID_COMMANDS = new Set([
 	"doctor",

package/dist/config-guard-CljBFSot.js

@@ -0,0 +1,2 @@
+import { t as ensureConfigReady } from "./run-main-De6Qk8Ng.js";
+export { ensureConfigReady };

package/dist/{config-validation-uXqheWDj.js → config-validation-B7WbrARG.js}

@@ -1,6 +1,6 @@
 import { t as formatCliCommand } from "./command-format-slIqNG4J.js";
-import { o as readConfigFileSnapshot } from "./io-e4Yx5ZqN.js";
-import "./config-D0cZAiW5.js";
+import { o as readConfigFileSnapshot } from "./io-DsXKMvz3.js";
+import "./config-DKbC00-8.js";
 //#region src/cli/commands/config-validation.ts
 async function requireValidConfigSnapshot(runtime) {
 	const snapshot = await readConfigFileSnapshot();

package/dist/{config-validation-BUM-4lnJ.js → config-validation-BLe1mTWt.js}

@@ -1,6 +1,6 @@
 import { t as formatCliCommand } from "./command-format-D86vQ65E.js";
-import { o as readConfigFileSnapshot } from "./io-D6HAGfRj.js";
-import "./config-C4ygZaLQ.js";
+import { o as readConfigFileSnapshot } from "./io-CUOJNJs6.js";
+import "./config-GA90_ZLO.js";
 //#region src/cli/commands/config-validation.ts
 async function requireValidConfigSnapshot(runtime) {
 	const snapshot = await readConfigFileSnapshot();

package/dist/{config-UjWeYUCv.js → config-yRiIX18Z.js}

@@ -130,7 +130,7 @@ const SCOPE_PRESETS = {
 };
 //#endregion
 //#region src/version.ts
-const VERSION = "2026.6.16-dev.20260703022951";
+const VERSION = "2026.7.2-dev";
 //#endregion
 //#region src/cli/parse-duration.ts
 function parseDurationMs(raw, opts) {

package/dist/{configure-DqZ20Fm1.js → configure-BVS7Uoe1.js}

@@ -2,34 +2,34 @@ import { f as resolveGatewayPort, t as CONFIG_PATH } from "./paths-aEg9UgoF.js";
 import { g as defaultRuntime, ot as shortenHomePath, rt as resolveUserPath } from "./entry.js";
 import { S as ensureAuthProfileStore } from "./auth-profiles-tlxr0i8q.js";
 import { t as formatCliCommand } from "./command-format-D86vQ65E.js";
-import { i as loadConfig, l as writeConfigFile, o as readConfigFileSnapshot } from "./io-D6HAGfRj.js";
-import "./config-C4ygZaLQ.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-BL_DwVqV.js";
+import { i as loadConfig, l as writeConfigFile, o as readConfigFileSnapshot } from "./io-CUOJNJs6.js";
+import "./config-GA90_ZLO.js";
+import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-Dt-7Y5wv.js";
 import { o as findTailscaleBinary } from "./tailscale-DztQ748s.js";
 import { n as withProgress } from "./progress-aPiVORh8.js";
 import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-QvcG7mG7.js";
 import { t as note$1 } from "./note-CeI8uYt5.js";
 import { t as createClackPrompter } from "./clack-prompter-Bv8LAi9a.js";
 import { t as WizardCancelledError } from "./prompts-E0FayNjJ.js";
-import { n as setupChannels, t as noteChannelStatus } from "./onboard-channels-DaLKz8R4.js";
-import "./onboard-channels-Vjny7vl1.js";
+import { n as setupChannels, t as noteChannelStatus } from "./onboard-channels-PE0DJeP3.js";
+import "./onboard-channels-B4YkPT_I.js";
 import { n as logConfigUpdated } from "./logging-8jC6TK0o.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-s6JRXhrY.js";
-import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-DXK-xwEZ.js";
-import { _ as summarizeExistingConfig, a as ensureWorkspaceAndSessions, f as printWizardHeader, h as resolveControlUiLinks, m as randomToken, n as applyWizardMetadata, p as probeGatewayReachable, s as guardCancel, t as DEFAULT_WORKSPACE, u as normalizeGatewayTokenInput, v as validateGatewayPasswordInput, y as waitForGatewayReachable } from "./onboard-helpers-BrndIk2N.js";
-import "./onboard-helpers-BAGJ5Lo1.js";
+import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-wAcjEzAw.js";
+import { _ as summarizeExistingConfig, a as ensureWorkspaceAndSessions, f as printWizardHeader, h as resolveControlUiLinks, m as randomToken, n as applyWizardMetadata, p as probeGatewayReachable, s as guardCancel, t as DEFAULT_WORKSPACE, u as normalizeGatewayTokenInput, v as validateGatewayPasswordInput, y as waitForGatewayReachable } from "./onboard-helpers-0Ck3IoqE.js";
+import "./onboard-helpers-CGpNOsa3.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Cx6dCwYR.js";
 import { t as formatHealthCheckFailure } from "./health-format-D0QYLVIC.js";
-import { i as healthCommand } from "./health-B68NlCPU.js";
-import { n as promptRemoteGatewayConfig } from "./onboard-remote-DRzZ9kQN.js";
-import { n as setupSkills } from "./onboard-skills-Ce5HO8VV.js";
+import { i as healthCommand } from "./health-CmEEKiew.js";
+import { n as promptRemoteGatewayConfig } from "./onboard-remote-CGoat8Ht.js";
+import { n as setupSkills } from "./onboard-skills-CLrW7_vF.js";
 import { t as resolveGatewayService } from "./service-DeVh6Gqe.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-CYbnHdnj.js";
-import "./daemon-install-helpers-CMbh4Lp7.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-DDr_cMqE.js";
+import "./daemon-install-helpers-DrlG4q0g.js";
 import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-DOXQp9Im.js";
-import { a as promptDefaultModel, i as applyPrimaryModel, n as applyModelAllowlist, o as promptModelAllowlist, r as applyModelFallbacksFromSelection } from "./model-picker-B-XiL2OH.js";
-import { i as promptCustomApiConfig } from "./onboard-custom-BDGt1kja.js";
-import "./onboard-custom-BysGgJiB.js";
+import { a as promptDefaultModel, i as applyPrimaryModel, n as applyModelAllowlist, o as promptModelAllowlist, r as applyModelFallbacksFromSelection } from "./model-picker-BlVeWarh.js";
+import { i as promptCustomApiConfig } from "./onboard-custom-DiGxyF1W.js";
+import "./onboard-custom-sOaQBqZH.js";
 import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-mo255YuU.js";
 import { confirm, intro, outro, select, text } from "@clack/prompts";
 //#region src/cli/commands/configure/configure.shared.ts

package/dist/{configure-W7doYXjc.js → configure-Y4orl1oO.js}

@@ -3,34 +3,34 @@ import { C as shortenHomePath, b as resolveUserPath } from "./utils-DsgtGH3c.js"
 import { t as defaultRuntime } from "./runtime-Da615Z-K.js";
 import { jt as ensureAuthProfileStore } from "./model-selection-CyA2hvMy.js";
 import { t as formatCliCommand } from "./command-format-slIqNG4J.js";
-import { i as loadConfig, l as writeConfigFile, o as readConfigFileSnapshot } from "./io-e4Yx5ZqN.js";
-import "./config-D0cZAiW5.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-C3wcf7MF.js";
+import { i as loadConfig, l as writeConfigFile, o as readConfigFileSnapshot } from "./io-DsXKMvz3.js";
+import "./config-DKbC00-8.js";
+import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-C_QBgBKj.js";
 import { o as findTailscaleBinary } from "./tailscale-CTwxLN7C.js";
 import { n as withProgress } from "./progress-8_pqhNaq.js";
 import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-DRUklDCU.js";
 import { t as note$1 } from "./note-BZTbOvRC.js";
 import { t as createClackPrompter } from "./clack-prompter-BhwvSSDO.js";
 import { t as WizardCancelledError } from "./prompts-E0FayNjJ.js";
-import { n as setupChannels, t as noteChannelStatus } from "./onboard-channels-Bt9VQkRB.js";
-import "./onboard-channels-0yScPK4U.js";
+import { n as setupChannels, t as noteChannelStatus } from "./onboard-channels-2zt_gaYa.js";
+import "./onboard-channels-BfdH44jV.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-s6JRXhrY.js";
-import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-_HdhC1Ax.js";
-import { _ as summarizeExistingConfig, a as ensureWorkspaceAndSessions, f as printWizardHeader, h as resolveControlUiLinks, m as randomToken, n as applyWizardMetadata, p as probeGatewayReachable, s as guardCancel, t as DEFAULT_WORKSPACE, u as normalizeGatewayTokenInput, v as validateGatewayPasswordInput, y as waitForGatewayReachable } from "./onboard-helpers-Dd4P1QbH.js";
-import "./onboard-helpers-DV9yuQ1d.js";
+import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-B3sdr0yr.js";
+import { _ as summarizeExistingConfig, a as ensureWorkspaceAndSessions, f as printWizardHeader, h as resolveControlUiLinks, m as randomToken, n as applyWizardMetadata, p as probeGatewayReachable, s as guardCancel, t as DEFAULT_WORKSPACE, u as normalizeGatewayTokenInput, v as validateGatewayPasswordInput, y as waitForGatewayReachable } from "./onboard-helpers-Bt6lH884.js";
+import "./onboard-helpers-Bat8F04f.js";
 import { n as logConfigUpdated } from "./logging-FiuVPYk7.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-C0ucbd84.js";
 import { t as formatHealthCheckFailure } from "./health-format-DJDAkR0W.js";
-import { r as healthCommand } from "./health-BH4SZIqw.js";
-import { n as promptRemoteGatewayConfig } from "./onboard-remote-JIG7iYFa.js";
-import { n as setupSkills } from "./onboard-skills-DMVLngVN.js";
+import { r as healthCommand } from "./health-DPusbWbK.js";
+import { n as promptRemoteGatewayConfig } from "./onboard-remote-fxQZypsD.js";
+import { n as setupSkills } from "./onboard-skills-GK6OUUuS.js";
 import { t as resolveGatewayService } from "./service-Djfo4ZAJ.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-CWwiPJlC.js";
-import "./daemon-install-helpers-CHeRULJH.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Bc1wF1kV.js";
+import "./daemon-install-helpers-BTrwyLn2.js";
 import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-CPHxEotD.js";
-import { a as promptDefaultModel, i as applyPrimaryModel, n as applyModelAllowlist, o as promptModelAllowlist, r as applyModelFallbacksFromSelection } from "./model-picker-Jl9cR9lZ.js";
-import { i as promptCustomApiConfig } from "./onboard-custom-rWmaWITc.js";
-import "./onboard-custom-C3f0dVEB.js";
+import { a as promptDefaultModel, i as applyPrimaryModel, n as applyModelAllowlist, o as promptModelAllowlist, r as applyModelFallbacksFromSelection } from "./model-picker-BXHv9gwd.js";
+import { i as promptCustomApiConfig } from "./onboard-custom-AFW2y9Fw.js";
+import "./onboard-custom-zDWUbUye.js";
 import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-mo255YuU.js";
 import { confirm, intro, outro, select, text } from "@clack/prompts";
 //#region src/cli/commands/configure/configure.shared.ts

package/dist/contact-tag-tool-B2IwH12w.js

@@ -0,0 +1,43 @@
+import { t as wrapToolWithTracking } from "./tool-tracking-Crsmwdkj.js";
+import { i as jsonResult, s as readStringParam } from "./common-CRD8HhuP.js";
+import { a as hubToolsAvailable, i as hubPost, n as ORG_ID_FIELD, t as CONFIRM_FIELD } from "./hub-common-D7t3vbq1.js";
+import { Type } from "typebox";
+//#region src/agents/tools/hub/contact-tag-tool.ts
+const ContactTagSchema = Type.Object({
+	contactId: Type.String({ description: "The CRM contact to tag." }),
+	tag: Type.Optional(Type.String({ description: "Tag NAME (case-insensitive). The hub resolves it to an existing tag, or creates a manual tag on 'add'. Preferred over tagId." })),
+	tagId: Type.Optional(Type.String({ description: "Exact tag id — only when you already have it (e.g. from a prior result)." })),
+	op: Type.Optional(Type.Union([Type.Literal("add"), Type.Literal("remove")], { description: "'add' (default) or 'remove'." })),
+	confirm: CONFIRM_FIELD,
+	orgId: ORG_ID_FIELD
+});
+/**
+* Add or remove a CRM contact tag. WRITE — confirm contract: confirm=false
+* returns a preview, confirm=true only after the user explicitly agrees.
+*/
+function createContactTagTool(options) {
+	const agentId = options.agentId;
+	if (!hubToolsAvailable(agentId)) return null;
+	return wrapToolWithTracking({
+		label: "Contact Tag",
+		name: "contact_tag",
+		description: "Add or remove a tag on a CRM contact by tag NAME (preferred; the hub resolves or creates it) or exact tagId. First present the exact action (contact, tag, add or remove) and ask for confirmation. Call with confirm=false for a validated preview (no write; preview.willCreateTag tells you if a new tag would be created); only call with confirm=true after the user explicitly agrees. Present the result with a deep link like [contact](/crm/{contactId}).",
+		parameters: ContactTagSchema,
+		execute: async (_toolCallId, args) => {
+			const params = args;
+			const orgId = readStringParam(params, "orgId");
+			const tag = readStringParam(params, "tag");
+			const tagId = readStringParam(params, "tagId");
+			if (!tag && !tagId) return jsonResult({ error: "tag (name) or tagId is required" });
+			return jsonResult(await hubPost("actions/contact-tag", agentId, {
+				contactId: readStringParam(params, "contactId", { required: true }),
+				...tag ? { tag } : {},
+				...tagId ? { tagId } : {},
+				op: readStringParam(params, "op") ?? "add",
+				confirm: params.confirm === true
+			}, orgId));
+		}
+	}, "builtin:contact_tag");
+}
+//#endregion
+export { createContactTagTool };

package/dist/contact-tag-tool-BCTLI9AF.js

@@ -0,0 +1,43 @@
+import { t as wrapToolWithTracking } from "./tool-tracking-4XjaoCwP.js";
+import { i as jsonResult, s as readStringParam } from "./common-BHzo6lXS.js";
+import { a as hubToolsAvailable, i as hubPost, n as ORG_ID_FIELD, t as CONFIRM_FIELD } from "./hub-common-D7t3vbq1.js";
+import { Type } from "typebox";
+//#region src/agents/tools/hub/contact-tag-tool.ts
+const ContactTagSchema = Type.Object({
+	contactId: Type.String({ description: "The CRM contact to tag." }),
+	tag: Type.Optional(Type.String({ description: "Tag NAME (case-insensitive). The hub resolves it to an existing tag, or creates a manual tag on 'add'. Preferred over tagId." })),
+	tagId: Type.Optional(Type.String({ description: "Exact tag id — only when you already have it (e.g. from a prior result)." })),
+	op: Type.Optional(Type.Union([Type.Literal("add"), Type.Literal("remove")], { description: "'add' (default) or 'remove'." })),
+	confirm: CONFIRM_FIELD,
+	orgId: ORG_ID_FIELD
+});
+/**
+* Add or remove a CRM contact tag. WRITE — confirm contract: confirm=false
+* returns a preview, confirm=true only after the user explicitly agrees.
+*/
+function createContactTagTool(options) {
+	const agentId = options.agentId;
+	if (!hubToolsAvailable(agentId)) return null;
+	return wrapToolWithTracking({
+		label: "Contact Tag",
+		name: "contact_tag",
+		description: "Add or remove a tag on a CRM contact by tag NAME (preferred; the hub resolves or creates it) or exact tagId. First present the exact action (contact, tag, add or remove) and ask for confirmation. Call with confirm=false for a validated preview (no write; preview.willCreateTag tells you if a new tag would be created); only call with confirm=true after the user explicitly agrees. Present the result with a deep link like [contact](/crm/{contactId}).",
+		parameters: ContactTagSchema,
+		execute: async (_toolCallId, args) => {
+			const params = args;
+			const orgId = readStringParam(params, "orgId");
+			const tag = readStringParam(params, "tag");
+			const tagId = readStringParam(params, "tagId");
+			if (!tag && !tagId) return jsonResult({ error: "tag (name) or tagId is required" });
+			return jsonResult(await hubPost("actions/contact-tag", agentId, {
+				contactId: readStringParam(params, "contactId", { required: true }),
+				...tag ? { tag } : {},
+				...tagId ? { tagId } : {},
+				op: readStringParam(params, "op") ?? "add",
+				confirm: params.confirm === true
+			}, orgId));
+		}
+	}, "builtin:contact_tag");
+}
+//#endregion
+export { createContactTagTool };

package/dist/contact-tag-tool-D-ow4Isv.js

@@ -0,0 +1,43 @@
+import { t as wrapToolWithTracking } from "./tool-tracking-CtkaABAd.js";
+import { i as jsonResult, s as readStringParam } from "./common-mPQVYX41.js";
+import { a as hubToolsAvailable, i as hubPost, n as ORG_ID_FIELD, t as CONFIRM_FIELD } from "./hub-common-BXMO3y1A.js";
+import { Type } from "typebox";
+//#region src/agents/tools/hub/contact-tag-tool.ts
+const ContactTagSchema = Type.Object({
+	contactId: Type.String({ description: "The CRM contact to tag." }),
+	tag: Type.Optional(Type.String({ description: "Tag NAME (case-insensitive). The hub resolves it to an existing tag, or creates a manual tag on 'add'. Preferred over tagId." })),
+	tagId: Type.Optional(Type.String({ description: "Exact tag id — only when you already have it (e.g. from a prior result)." })),
+	op: Type.Optional(Type.Union([Type.Literal("add"), Type.Literal("remove")], { description: "'add' (default) or 'remove'." })),
+	confirm: CONFIRM_FIELD,
+	orgId: ORG_ID_FIELD
+});
+/**
+* Add or remove a CRM contact tag. WRITE — confirm contract: confirm=false
+* returns a preview, confirm=true only after the user explicitly agrees.
+*/
+function createContactTagTool(options) {
+	const agentId = options.agentId;
+	if (!hubToolsAvailable(agentId)) return null;
+	return wrapToolWithTracking({
+		label: "Contact Tag",
+		name: "contact_tag",
+		description: "Add or remove a tag on a CRM contact by tag NAME (preferred; the hub resolves or creates it) or exact tagId. First present the exact action (contact, tag, add or remove) and ask for confirmation. Call with confirm=false for a validated preview (no write; preview.willCreateTag tells you if a new tag would be created); only call with confirm=true after the user explicitly agrees. Present the result with a deep link like [contact](/crm/{contactId}).",
+		parameters: ContactTagSchema,
+		execute: async (_toolCallId, args) => {
+			const params = args;
+			const orgId = readStringParam(params, "orgId");
+			const tag = readStringParam(params, "tag");
+			const tagId = readStringParam(params, "tagId");
+			if (!tag && !tagId) return jsonResult({ error: "tag (name) or tagId is required" });
+			return jsonResult(await hubPost("actions/contact-tag", agentId, {
+				contactId: readStringParam(params, "contactId", { required: true }),
+				...tag ? { tag } : {},
+				...tagId ? { tagId } : {},
+				op: readStringParam(params, "op") ?? "add",
+				confirm: params.confirm === true
+			}, orgId));
+		}
+	}, "builtin:contact_tag");
+}
+//#endregion
+export { createContactTagTool };

package/dist/contact-update-tool-BUqDMu6g.js

@@ -0,0 +1,48 @@
+import { t as wrapToolWithTracking } from "./tool-tracking-CtkaABAd.js";
+import { i as jsonResult, s as readStringParam } from "./common-mPQVYX41.js";
+import { a as hubToolsAvailable, i as hubPost, n as ORG_ID_FIELD, t as CONFIRM_FIELD } from "./hub-common-BXMO3y1A.js";
+import { Type } from "typebox";
+//#region src/agents/tools/hub/contact-update-tool.ts
+const ContactUpdateSchema = Type.Object({
+	contactId: Type.String({ description: "The CRM contact to update." }),
+	name: Type.Optional(Type.String({ description: "New display name." })),
+	phone: Type.Optional(Type.String({ description: "New phone number." })),
+	email: Type.Optional(Type.String({ description: "New email address." })),
+	funnelStage: Type.Optional(Type.String({ description: "New CRM funnel/lifecycle stage." })),
+	notes: Type.Optional(Type.String({ description: "New/appended free-text notes." })),
+	expectedUpdatedAt: Type.Optional(Type.String({ description: "The contact's updatedAt you last read. Used for optimistic concurrency — the hub rejects the write (409) if the contact changed since." })),
+	confirm: CONFIRM_FIELD,
+	orgId: ORG_ID_FIELD
+});
+/**
+* Update a CRM contact's name/phone/email/funnel stage/notes. WRITE —
+* confirm contract: confirm=false returns a preview, confirm=true only
+* after the user explicitly agrees. Only whitelisted fields are accepted;
+* use contact_tag for tags, not this tool.
+*/
+function createContactUpdateTool(options) {
+	const agentId = options.agentId;
+	if (!hubToolsAvailable(agentId)) return null;
+	return wrapToolWithTracking({
+		label: "Contact Update",
+		name: "contact_update",
+		description: "Update a CRM contact's name, phone, email, funnel stage, or notes (at least one required). First present the exact change (which field, old → new value) and ask for confirmation. Call with confirm=false for a validated preview (no write); only call with confirm=true after the user explicitly agrees. Pass expectedUpdatedAt from the last read to avoid clobbering a concurrent edit (returns {error:'stale',current} on conflict). Use contact_tag to add/remove tags instead. Present the result with a deep link like [contact](/crm/{contactId}).",
+		parameters: ContactUpdateSchema,
+		execute: async (_toolCallId, args) => {
+			const params = args;
+			const orgId = readStringParam(params, "orgId");
+			return jsonResult(await hubPost("actions/contact-update", agentId, {
+				contactId: readStringParam(params, "contactId", { required: true }),
+				name: readStringParam(params, "name"),
+				phone: readStringParam(params, "phone"),
+				email: readStringParam(params, "email"),
+				funnelStage: readStringParam(params, "funnelStage"),
+				notes: readStringParam(params, "notes"),
+				expectedUpdatedAt: readStringParam(params, "expectedUpdatedAt"),
+				confirm: params.confirm === true
+			}, orgId));
+		}
+	}, "builtin:contact_update");
+}
+//#endregion
+export { createContactUpdateTool };

package/dist/contact-update-tool-BtNz3sPT.js

@@ -0,0 +1,48 @@
+import { t as wrapToolWithTracking } from "./tool-tracking-Crsmwdkj.js";
+import { i as jsonResult, s as readStringParam } from "./common-CRD8HhuP.js";
+import { a as hubToolsAvailable, i as hubPost, n as ORG_ID_FIELD, t as CONFIRM_FIELD } from "./hub-common-D7t3vbq1.js";
+import { Type } from "typebox";
+//#region src/agents/tools/hub/contact-update-tool.ts
+const ContactUpdateSchema = Type.Object({
+	contactId: Type.String({ description: "The CRM contact to update." }),
+	name: Type.Optional(Type.String({ description: "New display name." })),
+	phone: Type.Optional(Type.String({ description: "New phone number." })),
+	email: Type.Optional(Type.String({ description: "New email address." })),
+	funnelStage: Type.Optional(Type.String({ description: "New CRM funnel/lifecycle stage." })),
+	notes: Type.Optional(Type.String({ description: "New/appended free-text notes." })),
+	expectedUpdatedAt: Type.Optional(Type.String({ description: "The contact's updatedAt you last read. Used for optimistic concurrency — the hub rejects the write (409) if the contact changed since." })),
+	confirm: CONFIRM_FIELD,
+	orgId: ORG_ID_FIELD
+});
+/**
+* Update a CRM contact's name/phone/email/funnel stage/notes. WRITE —
+* confirm contract: confirm=false returns a preview, confirm=true only
+* after the user explicitly agrees. Only whitelisted fields are accepted;
+* use contact_tag for tags, not this tool.
+*/
+function createContactUpdateTool(options) {
+	const agentId = options.agentId;
+	if (!hubToolsAvailable(agentId)) return null;
+	return wrapToolWithTracking({
+		label: "Contact Update",
+		name: "contact_update",
+		description: "Update a CRM contact's name, phone, email, funnel stage, or notes (at least one required). First present the exact change (which field, old → new value) and ask for confirmation. Call with confirm=false for a validated preview (no write); only call with confirm=true after the user explicitly agrees. Pass expectedUpdatedAt from the last read to avoid clobbering a concurrent edit (returns {error:'stale',current} on conflict). Use contact_tag to add/remove tags instead. Present the result with a deep link like [contact](/crm/{contactId}).",
+		parameters: ContactUpdateSchema,
+		execute: async (_toolCallId, args) => {
+			const params = args;
+			const orgId = readStringParam(params, "orgId");
+			return jsonResult(await hubPost("actions/contact-update", agentId, {
+				contactId: readStringParam(params, "contactId", { required: true }),
+				name: readStringParam(params, "name"),
+				phone: readStringParam(params, "phone"),
+				email: readStringParam(params, "email"),
+				funnelStage: readStringParam(params, "funnelStage"),
+				notes: readStringParam(params, "notes"),
+				expectedUpdatedAt: readStringParam(params, "expectedUpdatedAt"),
+				confirm: params.confirm === true
+			}, orgId));
+		}
+	}, "builtin:contact_update");
+}
+//#endregion
+export { createContactUpdateTool };

package/dist/contact-update-tool-CuE27eki.js

@@ -0,0 +1,48 @@
+import { t as wrapToolWithTracking } from "./tool-tracking-4XjaoCwP.js";
+import { i as jsonResult, s as readStringParam } from "./common-BHzo6lXS.js";
+import { a as hubToolsAvailable, i as hubPost, n as ORG_ID_FIELD, t as CONFIRM_FIELD } from "./hub-common-D7t3vbq1.js";
+import { Type } from "typebox";
+//#region src/agents/tools/hub/contact-update-tool.ts
+const ContactUpdateSchema = Type.Object({
+	contactId: Type.String({ description: "The CRM contact to update." }),
+	name: Type.Optional(Type.String({ description: "New display name." })),
+	phone: Type.Optional(Type.String({ description: "New phone number." })),
+	email: Type.Optional(Type.String({ description: "New email address." })),
+	funnelStage: Type.Optional(Type.String({ description: "New CRM funnel/lifecycle stage." })),
+	notes: Type.Optional(Type.String({ description: "New/appended free-text notes." })),
+	expectedUpdatedAt: Type.Optional(Type.String({ description: "The contact's updatedAt you last read. Used for optimistic concurrency — the hub rejects the write (409) if the contact changed since." })),
+	confirm: CONFIRM_FIELD,
+	orgId: ORG_ID_FIELD
+});
+/**
+* Update a CRM contact's name/phone/email/funnel stage/notes. WRITE —
+* confirm contract: confirm=false returns a preview, confirm=true only
+* after the user explicitly agrees. Only whitelisted fields are accepted;
+* use contact_tag for tags, not this tool.
+*/
+function createContactUpdateTool(options) {
+	const agentId = options.agentId;
+	if (!hubToolsAvailable(agentId)) return null;
+	return wrapToolWithTracking({
+		label: "Contact Update",
+		name: "contact_update",
+		description: "Update a CRM contact's name, phone, email, funnel stage, or notes (at least one required). First present the exact change (which field, old → new value) and ask for confirmation. Call with confirm=false for a validated preview (no write); only call with confirm=true after the user explicitly agrees. Pass expectedUpdatedAt from the last read to avoid clobbering a concurrent edit (returns {error:'stale',current} on conflict). Use contact_tag to add/remove tags instead. Present the result with a deep link like [contact](/crm/{contactId}).",
+		parameters: ContactUpdateSchema,
+		execute: async (_toolCallId, args) => {
+			const params = args;
+			const orgId = readStringParam(params, "orgId");
+			return jsonResult(await hubPost("actions/contact-update", agentId, {
+				contactId: readStringParam(params, "contactId", { required: true }),
+				name: readStringParam(params, "name"),
+				phone: readStringParam(params, "phone"),
+				email: readStringParam(params, "email"),
+				funnelStage: readStringParam(params, "funnelStage"),
+				notes: readStringParam(params, "notes"),
+				expectedUpdatedAt: readStringParam(params, "expectedUpdatedAt"),
+				confirm: params.confirm === true
+			}, orgId));
+		}
+	}, "builtin:contact_update");
+}
+//#endregion
+export { createContactUpdateTool };

package/dist/{cron-cli-D8dfzuy8.js → cron-cli-CMq19JHd.js}

@@ -1,11 +1,11 @@
 import { St as theme, bt as colorize, dt as danger, g as defaultRuntime, xt as isRich } from "./entry.js";
 import { f as sanitizeAgentId } from "./session-key-DK3D9dkE.js";
-import { n as listChannelPlugins } from "./plugins-BL_DwVqV.js";
+import { n as listChannelPlugins } from "./plugins-Dt-7Y5wv.js";
 import { n as formatDurationHuman } from "./format-duration-DxxnRZtB.js";
 import { t as formatDocsLink } from "./links-B03m-P2Z.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs } from "./stagger-BlvVswOf.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-BbkbWt3G.js";
-import { c as parsePositiveIntOrUndefined } from "./register.subclis-BV7bN9SK.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-14Q1TtPH.js";
+import { c as parsePositiveIntOrUndefined } from "./register.subclis-BFXE6TvY.js";
 //#region src/cli/cron-cli/shared.ts
 const getCronChannelOptions = () => ["last", ...listChannelPlugins().map((plugin) => plugin.id)].join("|");
 async function warnIfCronSchedulerDisabled(opts) {

package/dist/{cron-cli-abqQP_b7.js → cron-cli-DnZ4sbsM.js}

@@ -2,12 +2,12 @@ import { O as danger } from "./utils-DsgtGH3c.js";
 import { n as isRich, r as theme, t as colorize } from "./theme-CDbj88LB.js";
 import { t as defaultRuntime } from "./runtime-Da615Z-K.js";
 import { p as sanitizeAgentId } from "./session-key-BcXqsG0l.js";
-import { n as listChannelPlugins } from "./plugins-C3wcf7MF.js";
+import { n as listChannelPlugins } from "./plugins-C_QBgBKj.js";
 import { t as formatDocsLink } from "./links-C1xb6h4b.js";
 import { n as formatDurationHuman } from "./format-duration-DxxnRZtB.js";
 import { n as parsePositiveIntOrUndefined } from "./helpers-CNw_T-er.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs } from "./stagger-BlvVswOf.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-D4kSkkPS.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-l0Ix-6Kp.js";
 //#region src/cli/cron-cli/shared.ts
 const getCronChannelOptions = () => ["last", ...listChannelPlugins().map((plugin) => plugin.id)].join("|");
 async function warnIfCronSchedulerDisabled(opts) {

package/dist/{cron-tool-DT-Juzd0.js → cron-tool-BwIsBYaw.js}

@@ -1,12 +1,12 @@
 import { D as truncateUtf16Safe, f as isRecord } from "./utils-DsgtGH3c.js";
 import { x as parseAgentSessionKey } from "./session-key-BcXqsG0l.js";
 import { f as resolveSessionAgentId } from "./agent-scope-D_1ZJVsc.js";
-import { i as loadConfig } from "./io-e4Yx5ZqN.js";
-import "./config-D0cZAiW5.js";
-import { f as extractTextFromChatContent } from "./pi-embedded-utils-ByF51tTS.js";
+import { i as loadConfig } from "./io-DsXKMvz3.js";
+import "./config-DKbC00-8.js";
+import { f as extractTextFromChatContent } from "./pi-embedded-utils-Cb_StxCN.js";
 import { i as jsonResult, s as readStringParam } from "./common-CRD8HhuP.js";
-import { f as resolveInternalSessionKey, p as resolveMainSessionAlias } from "./sessions-helpers-C08Phzso.js";
-import { t as callGatewayTool } from "./gateway-BZ_rGbzx.js";
+import { f as resolveInternalSessionKey, p as resolveMainSessionAlias } from "./sessions-helpers-DcPYyi87.js";
+import { t as callGatewayTool } from "./gateway-Dt8tSFHA.js";
 import { n as normalizeCronJobCreate, r as normalizeCronJobPatch, t as normalizeHttpWebhookUrl } from "./webhook-url-_cSEQkJk.js";
 import { i as stringEnum, r as optionalStringEnum } from "./typebox-BbVstVJp.js";
 import { Type } from "typebox";

package/dist/{cron-tool-CfZIJWk_.js → cron-tool-CsOKL3c2.js}

@@ -1,10 +1,10 @@
-import { f as extractTextFromChatContent } from "./pi-embedded-utils-CbID52rD.js";
+import { f as extractTextFromChatContent } from "./pi-embedded-utils-MWdH9ypO.js";
 import { k as isRecord, z as truncateUtf16Safe } from "./subsystem-Bz8lTz2g.js";
 import { B as sanitizeAgentId, G as parseAgentSessionKey, u as resolveSessionAgentId } from "./agent-scope-G3FqXqqy.js";
-import { n as loadConfig } from "./config-UjWeYUCv.js";
+import { n as loadConfig } from "./config-yRiIX18Z.js";
 import { i as jsonResult, s as readStringParam } from "./common-mPQVYX41.js";
-import { t as callGatewayTool } from "./gateway-CDqi7AYG.js";
-import { f as resolveInternalSessionKey, p as resolveMainSessionAlias } from "./sessions-helpers-BscA64r4.js";
+import { t as callGatewayTool } from "./gateway-CrExAmqV.js";
+import { f as resolveInternalSessionKey, p as resolveMainSessionAlias } from "./sessions-helpers-CmL5of8k.js";
 import { i as stringEnum, r as optionalStringEnum } from "./typebox-AaaT2Z0h.js";
 import { Type } from "typebox";
 //#region src/platform/cron/legacy-delivery.ts

package/dist/{cron-tool-CvjJ7eWq.js → cron-tool-DyEs4iFg.js}

@@ -1,12 +1,12 @@
 import { Q as isRecord, ut as truncateUtf16Safe } from "./entry.js";
 import { b as parseAgentSessionKey } from "./session-key-DK3D9dkE.js";
 import { f as resolveSessionAgentId } from "./agent-scope-BP7xXcTE.js";
-import { i as loadConfig } from "./io-D6HAGfRj.js";
-import "./config-C4ygZaLQ.js";
+import { i as loadConfig } from "./io-CUOJNJs6.js";
+import "./config-GA90_ZLO.js";
 import { i as jsonResult, s as readStringParam } from "./common-BHzo6lXS.js";
-import { f as resolveInternalSessionKey, p as resolveMainSessionAlias } from "./sessions-helpers-B5BjpGie.js";
-import { f as extractTextFromChatContent } from "./pi-embedded-utils-kgdOppBK.js";
-import { t as callGatewayTool } from "./gateway-DnQbLapC.js";
+import { f as resolveInternalSessionKey, p as resolveMainSessionAlias } from "./sessions-helpers-BpXiixPk.js";
+import { f as extractTextFromChatContent } from "./pi-embedded-utils-BNN3Mb-q.js";
+import { t as callGatewayTool } from "./gateway-DE7-sAMu.js";
 import { n as normalizeCronJobCreate, r as normalizeCronJobPatch, t as normalizeHttpWebhookUrl } from "./webhook-url-DQ4SDf3R.js";
 import { i as stringEnum, r as optionalStringEnum } from "./typebox-BbVstVJp.js";
 import { Type } from "typebox";