@noresponse/mcp 0.11.0 → 0.11.2

package/bin/mcp-server.js

@@ -48136,9 +48136,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "0.11.0",
+    sdkVersion: "0.11.2",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/mcp-typescript 0.11.0 internal 1 @noresponse/mcp"
+    userAgent: "noresponse-sdk/mcp-typescript 0.11.2 internal 1 @noresponse/mcp"
   };
 });
 
@@ -51278,7 +51278,7 @@ var init_assessmentdetail = __esm(() => {
   init_signal();
   init_status();
   AssessmentDetail$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     assessment_id: string2().describe("Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the workspace; another workspace's assessment id answers 404."),
     assessment_url: string2().optional().describe("Server-relative path of the authoritative assessment, GET /v1/assessments/{assessment_id}."),
     assessment_version: int().describe("Monotonic revision of this assessment. 1 on the synchronous answer; each material change while the assessment is served (an async continuation settling a source, a change of recommendation, confidence or status) increments it. Expiry does not increment it: an expired assessment is gone, not revised, and the expiry webhook carries the last served version."),
@@ -51493,7 +51493,10 @@ var init_permissiondeniederrorcode = __esm(() => {
   init_zod();
   PermissionDeniedErrorCode$zodSchema = _enum([
     "workspace_forbidden",
-    "role_forbidden"
+    "role_forbidden",
+    "email_unverified",
+    "onboarding_in_review",
+    "onboarding_refused"
   ]).describe("Machine codes an HTTP 403 answer can carry.");
 });
 
@@ -52159,7 +52162,7 @@ var init_credentialassociation = __esm(() => {
   init_credentialassociationactor();
   init_credentialassociationretiredby();
   CredentialAssociation$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     actor: CredentialAssociationActor$zodSchema,
     created_at: string2(),
     id: string2(),
@@ -52524,12 +52527,12 @@ var init_accountbinding = __esm(() => {
   init_zod();
   init_accountbindingactor();
   AccountBinding$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     actor: AccountBindingActor$zodSchema,
     assessment_id: string2().describe("Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the workspace; another workspace's assessment id answers 404."),
     assessment_version: int().describe("Monotonic revision of this assessment. 1 on the synchronous answer; each material change while the assessment is served (an async continuation settling a source, a change of recommendation, confidence or status) increments it. Expiry does not increment it: an expired assessment is gone, not revised, and the expiry webhook carries the last served version."),
     created_at: string2(),
-    provisional_account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.")
+    provisional_account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.")
   }).describe("Binding appends an assessment revision and preserves earlier versions. Continuations use the same assessment. Erasing either the provisional or canonical name erases the canonical account, including the bound assessment.");
 });
 
@@ -52593,7 +52596,7 @@ var init_accountoutcome = __esm(() => {
   init_accountoutcomeactor();
   init_outcome();
   AccountOutcome$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     actor: AccountOutcomeActor$zodSchema,
     effective_outcome_id: string2().optional().describe("Opaque, server-assigned id of one recorded outcome: 'out_' and a 26-character Crockford base32 ULID. Unique within the workspace."),
     expires_at: string2(),
@@ -52776,7 +52779,7 @@ var init_accountexport = __esm(() => {
     "investigator_reviews_require_review_export"
   ]);
   AccountExport$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     assessment_outcomes: array(ExportAssessmentOutcome$zodSchema),
     assessments: array(AssessmentRevision$zodSchema),
     bindings: array(AccountBinding$zodSchema),
@@ -53119,7 +53122,7 @@ var init_assessmentlist = __esm(() => {
   init_zod();
   init_assessmentdetail();
   AssessmentList$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     items: array(AssessmentDetail$zodSchema),
     next_cursor: string2().optional().describe("Opaque cursor for the next page, bound to your workspace and the account_id it was issued for. Pass it back unchanged in the next query; a tampered, foreign or expired cursor answers 400 invalid_cursor."),
     retention_days: int().default(365).describe("Your current retention period, so a consumer knows how far back history reaches. Every item expires no later than its created_at plus this many days."),
@@ -53470,7 +53473,7 @@ var init_credentialpage = __esm(() => {
   init_zod();
   init_credentialassociation();
   CredentialPage$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     items: array(CredentialAssociation$zodSchema),
     next_cursor: string2().optional().describe("Opaque, expiring cursor bound to this environment, operation and every filter. Keep the filters unchanged.")
   }).describe("Retained credential associations, ordered by id. Page with the authenticated cursor. Associations are removed on account erasure.");
@@ -53646,7 +53649,7 @@ var init_accountdecisionlist = __esm(() => {
   init_zod();
   init_accountdecisionsnapshot();
   AccountDecisionList$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     items: array(AccountDecisionSnapshot$zodSchema),
     next_cursor: string2().optional().describe("Opaque, expiring cursor bound to the workspace, environment, account and history kind. Absent at the end.")
   }).describe("Page through recorded account decisions.");
@@ -53822,7 +53825,7 @@ var init_accountenforcementlist = __esm(() => {
   init_zod();
   init_enforcement();
   AccountEnforcementList$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     items: array(Enforcement$zodSchema),
     next_cursor: string2().optional().describe("Opaque, expiring cursor bound to the workspace, environment, account and history kind. Absent at the end.")
   }).describe("Page through account enforcements.");
@@ -53992,13 +53995,273 @@ List retained enforcement reports for one account with an authenticated cursor.`
   };
 });
 
+// src/models/identifiersearchkind.ts
+var IdentifierSearchKind$zodSchema;
+var init_identifiersearchkind = __esm(() => {
+  init_zod();
+  IdentifierSearchKind$zodSchema = _enum([
+    "email",
+    "phone",
+    "username"
+  ]);
+});
+
+// src/models/identifiersubmission.ts
+var IdentifierSubmission$zodSchema;
+var init_identifiersubmission = __esm(() => {
+  init_zod();
+  IdentifierSubmission$zodSchema = object({
+    assessment_id: string2().describe("Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the workspace; another workspace's assessment id answers 404."),
+    submitted_at: string2().describe("When assessment_id was created."),
+    value: string2().describe("The original value submitted in assessment_id. Under canonical or mailbox matching the two accounts' values can differ.")
+  });
+});
+
+// src/models/match.ts
+var Match$zodSchema;
+var init_match = __esm(() => {
+  init_zod();
+  Match$zodSchema = _enum([
+    "exact",
+    "canonical",
+    "mailbox"
+  ]).describe("exact compares the original submitted value; canonical uses identifier-specific normalisation; mailbox explicitly selects the email alias rules used by lists.");
+});
+
+// src/models/namespace.ts
+var Namespace$zodSchema;
+var init_namespace = __esm(() => {
+  init_zod();
+  Namespace$zodSchema = _enum([
+    "customer"
+  ]).describe("Required for username: the username submitted by this customer in this workspace/environment. It does not name or join a source platform. Omit for email and phone.");
+});
+
+// src/models/provenance.ts
+var Provenance$zodSchema;
+var init_provenance = __esm(() => {
+  init_zod();
+  Provenance$zodSchema = _enum([
+    "submitted"
+  ]).describe("Customer-submitted input. It does not mean the customer or NoResponse verified ownership.");
+});
+
+// src/models/sharedidentifier.ts
+var SharedIdentifier$zodSchema;
+var init_sharedidentifier = __esm(() => {
+  init_zod();
+  init_identifiersearchkind();
+  init_identifiersubmission();
+  init_match();
+  init_namespace();
+  init_provenance();
+  SharedIdentifier$zodSchema = object({
+    account: IdentifierSubmission$zodSchema,
+    kind: IdentifierSearchKind$zodSchema,
+    linked_account: IdentifierSubmission$zodSchema,
+    match_basis: Match$zodSchema.describe("exact compares the original submitted value; canonical uses identifier-specific normalisation; mailbox explicitly selects the email alias rules used by lists."),
+    namespace: Namespace$zodSchema.optional().describe("Required for username: the username submitted by this customer in this workspace/environment. It does not name or join a source platform. Omit for email and phone."),
+    provenance: Provenance$zodSchema.describe("Customer-submitted input. It does not mean the customer or NoResponse verified ownership.")
+  });
+});
+
+// src/models/linkedaccount.ts
+var LinkedAccount$zodSchema;
+var init_linkedaccount = __esm(() => {
+  init_zod();
+  init_sharedidentifier();
+  LinkedAccount$zodSchema = object({
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    shared_identifiers: array(SharedIdentifier$zodSchema).describe("One entry per shared kind, in the order email, phone, username. Each entry uses the strictest basis that links the two accounts: exact, then canonical, then mailbox.")
+  });
+});
+
+// src/models/linkedaccountpage.ts
+var LinkedAccountPage$zodSchema;
+var init_linkedaccountpage = __esm(() => {
+  init_zod();
+  init_linkedaccount();
+  LinkedAccountPage$zodSchema = object({
+    account_id: string2().describe("The account whose submitted identifiers were compared. It is excluded from items."),
+    items: array(LinkedAccount$zodSchema),
+    next_cursor: string2().optional().describe("Opaque, expiring cursor bound to this environment, operation and account_id. Absent on the last page."),
+    schema_version: literal("1").default("1").optional().describe("Version of the body shape."),
+    total: int().describe("Distinct linked accounts, exact below 10000 and capped at 10000."),
+    total_capped: boolean2().describe("True when at least 10000 accounts are linked.")
+  }).describe("Other accounts in this workspace and environment whose retained assessments submitted an email, phone or customer-namespace username that one of account_id's retained assessments also submitted. Matching uses the identifier search rules: exact, canonical and, for email, mailbox. Only customer-submitted identifiers link accounts; source-discovered identifiers do not. Expired, retention-shortened, deleted and erased assessments link nothing. A shared identifier is not verified ownership. Accounts use stable opaque order, the page and total share one database snapshot, and later pages are live. Cursors bind the workspace, environment, operation and account_id, and expire.");
+});
+
+// src/models/listlinkedaccountsop.ts
+var ListLinkedAccountsRequest$zodSchema, ListLinkedAccountsResponseResult$zodSchema, ListLinkedAccountsResponse$zodSchema;
+var init_listlinkedaccountsop = __esm(() => {
+  init_zod();
+  init_authenticationerror();
+  init_badrequesterror();
+  init_conflicterror();
+  init_linkedaccountpage();
+  init_notfounderror();
+  init_permissiondeniederror();
+  init_ratelimiterror();
+  ListLinkedAccountsRequest$zodSchema = object({
+    account_id: string2().describe("The account_id the workspace sends with its assessments, as one path segment (percent-encode '|' and ':' if the client requires it). A value that does not match the account_id shape answers 400 invalid_request."),
+    cursor: string2().describe("next_cursor from the previous page, unchanged.").optional(),
+    limit: int().default(25).describe("Linked accounts per page.")
+  });
+  ListLinkedAccountsResponseResult$zodSchema = union([
+    BadRequestError$zodSchema,
+    AuthenticationError$zodSchema,
+    PermissionDeniedError$zodSchema,
+    NotFoundError$zodSchema,
+    ConflictError$zodSchema,
+    RateLimitError$zodSchema,
+    LinkedAccountPage$zodSchema
+  ]);
+  ListLinkedAccountsResponse$zodSchema = object({
+    Headers: record(string2(), array(string2())).default({}),
+    Result: union([
+      BadRequestError$zodSchema,
+      AuthenticationError$zodSchema,
+      PermissionDeniedError$zodSchema,
+      NotFoundError$zodSchema,
+      ConflictError$zodSchema,
+      RateLimitError$zodSchema,
+      LinkedAccountPage$zodSchema
+    ])
+  });
+});
+
+// src/funcs/accountsListLinked.ts
+function accountsListLinked(client$, request, options) {
+  return new APIPromise($do11(client$, request, options));
+}
+async function $do11(client$, request, options) {
+  const parsed$ = safeParse2(request, (value$) => ListLinkedAccountsRequest$zodSchema.parse(value$), "Input validation failed");
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = null;
+  const pathParams$ = {
+    account_id: encodeSimple("account_id", payload$.account_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path$ = pathToFunc("/v1/accounts/{account_id}/linked_accounts")(pathParams$);
+  const query$ = encodeFormQuery({
+    cursor: payload$.cursor,
+    limit: payload$.limit
+  });
+  const headers$ = new Headers(compactMap({
+    Accept: options?.acceptHeaderOverride || "application/json;q=1, application/problem+json;q=0"
+  }));
+  const securityInput = await extractSecurity(client$._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client$._options,
+    baseURL: options?.serverURL ?? client$._baseURL ?? "",
+    operationID: "listLinkedAccounts",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client$._options.security,
+    retryConfig: options?.retries || client$._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 8000,
+        exponent: 2,
+        maxElapsedTime: 30000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || [
+      "408",
+      "429",
+      "5XX"
+    ]
+  };
+  const requestRes = client$._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path$,
+    headers: headers$,
+    query: query$,
+    body: body$,
+    userAgent: client$._options.userAgent,
+    timeoutMs: options?.timeoutMs || client$._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req$ = requestRes.value;
+  const doResult = await client$._do(req$, {
+    context,
+    errorCodes: [],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req$ }];
+  }
+  return [doResult, {
+    status: "complete",
+    request: req$,
+    response: doResult.value
+  }];
+}
+var init_accountsListLinked = __esm(() => {
+  init_encodings();
+  init_primitives();
+  init_schemas3();
+  init_security();
+  init_url();
+  init_listlinkedaccountsop();
+  init_async();
+});
+
+// src/mcp-server/tools/accountsListLinked.ts
+var args11, tool$accountsListLinked;
+var init_accountsListLinked2 = __esm(() => {
+  init_accountsListLinked();
+  init_listlinkedaccountsop();
+  init_tools();
+  args11 = {
+    request: ListLinkedAccountsRequest$zodSchema
+  };
+  tool$accountsListLinked = {
+    name: "list_linked_accounts",
+    description: `List accounts that share a submitted identifier with this account.
+
+Lists the other accounts in this environment whose retained assessments submitted an email, phone or customer-namespace username that one of this account's retained assessments also submitted. Matching uses the identifier search rules: exact, canonical and, for email, mailbox. Each linked account names one entry per shared kind, at the strictest basis that links the two accounts, with the original value, assessment_id and submitted_at of each account's newest retained submission of it. Only customer-submitted identifiers link accounts; source-discovered identifiers do not. Expired, deleted and erased assessments link nothing. The account itself is not listed, and an account with no retained submissions answers 200 with empty items. A shared identifier is not verified ownership. Totals are exact below 10000 and capped at 10000. The cursor is opaque, expiring and bound to your workspace, environment and the account; a tampered or expired cursor answers 400 invalid_cursor. Requires the history scope, or investigate with evidence. Read-only and safe to retry.`,
+    annotations: {
+      title: "List accounts that share a submitted identifier",
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false,
+      readOnlyHint: true
+    },
+    args: args11,
+    tool: async (client, args, ctx) => {
+      const [result] = await accountsListLinked(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      return formatResult(result.value);
+    }
+  };
+});
+
 // src/models/accountoutcomepage.ts
 var AccountOutcomePage$zodSchema;
 var init_accountoutcomepage = __esm(() => {
   init_zod();
   init_accountoutcome();
   AccountOutcomePage$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     effective_outcome_id: string2().optional().describe("Opaque, server-assigned id of one recorded outcome: 'out_' and a 26-character Crockford base32 ULID. Unique within the workspace."),
     items: array(AccountOutcome$zodSchema),
     next_cursor: string2().optional().describe("Opaque, expiring cursor bound to this environment, operation and every filter. Keep the filters unchanged.")
@@ -54046,9 +54309,9 @@ var init_listaccountoutcomesop = __esm(() => {
 
 // src/funcs/accountsListOutcomes.ts
 function accountsListOutcomes(client$, request, options) {
-  return new APIPromise($do11(client$, request, options));
+  return new APIPromise($do12(client$, request, options));
 }
-async function $do11(client$, request, options) {
+async function $do12(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListAccountOutcomesRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -54135,12 +54398,12 @@ var init_accountsListOutcomes = __esm(() => {
 });
 
 // src/mcp-server/tools/accountsListOutcomes.ts
-var args11, tool$accountsListOutcomes;
+var args12, tool$accountsListOutcomes;
 var init_accountsListOutcomes2 = __esm(() => {
   init_accountsListOutcomes();
   init_listaccountoutcomesop();
   init_tools();
-  args11 = {
+  args12 = {
     request: ListAccountOutcomesRequest$zodSchema
   };
   tool$accountsListOutcomes = {
@@ -54155,7 +54418,7 @@ List retained account reports, newest first. The page-level effective outcome id
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args11,
+    args: args12,
     tool: async (client, args, ctx) => {
       const [result] = await accountsListOutcomes(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -54230,9 +54493,9 @@ var init_recordenforcementop = __esm(() => {
 
 // src/funcs/accountsRecordEnforcement.ts
 function accountsRecordEnforcement(client$, request, options) {
-  return new APIPromise($do12(client$, request, options));
+  return new APIPromise($do13(client$, request, options));
 }
-async function $do12(client$, request, options) {
+async function $do13(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RecordEnforcementRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -54315,12 +54578,12 @@ var init_accountsRecordEnforcement = __esm(() => {
 });
 
 // src/mcp-server/tools/accountsRecordEnforcement.ts
-var args12, tool$accountsRecordEnforcement;
+var args13, tool$accountsRecordEnforcement;
 var init_accountsRecordEnforcement2 = __esm(() => {
   init_accountsRecordEnforcement();
   init_recordenforcementop();
   init_tools();
-  args12 = {
+  args13 = {
     request: RecordEnforcementRequest$zodSchema
   };
   tool$accountsRecordEnforcement = {
@@ -54335,7 +54598,7 @@ Records what you did to the account in your identity provider for one flow's dec
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args12,
+    args: args13,
     tool: async (client, args, ctx) => {
       const [result] = await accountsRecordEnforcement(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -54404,9 +54667,9 @@ var init_recordaccountoutcomeop = __esm(() => {
 
 // src/funcs/accountsRecordOutcome.ts
 function accountsRecordOutcome(client$, request, options) {
-  return new APIPromise($do13(client$, request, options));
+  return new APIPromise($do14(client$, request, options));
 }
-async function $do13(client$, request, options) {
+async function $do14(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RecordAccountOutcomeRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -54490,12 +54753,12 @@ var init_accountsRecordOutcome = __esm(() => {
 });
 
 // src/mcp-server/tools/accountsRecordOutcome.ts
-var args13, tool$accountsRecordOutcome;
+var args14, tool$accountsRecordOutcome;
 var init_accountsRecordOutcome2 = __esm(() => {
   init_accountsRecordOutcome();
   init_recordaccountoutcomeop();
   init_tools();
-  args13 = {
+  args14 = {
     request: RecordAccountOutcomeRequest$zodSchema
   };
   tool$accountsRecordOutcome = {
@@ -54510,7 +54773,7 @@ Record a factual report, not an enforcement action. A known outcome replaces the
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args13,
+    args: args14,
     tool: async (client, args, ctx) => {
       const [result] = await accountsRecordOutcome(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -54564,9 +54827,9 @@ var init_retireaccountcredentialop = __esm(() => {
 
 // src/funcs/accountsRetireCredential.ts
 function accountsRetireCredential(client$, request, options) {
-  return new APIPromise($do14(client$, request, options));
+  return new APIPromise($do15(client$, request, options));
 }
-async function $do14(client$, request, options) {
+async function $do15(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RetireAccountCredentialRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -54652,12 +54915,12 @@ var init_accountsRetireCredential = __esm(() => {
 });
 
 // src/mcp-server/tools/accountsRetireCredential.ts
-var args14, tool$accountsRetireCredential;
+var args15, tool$accountsRetireCredential;
 var init_accountsRetireCredential2 = __esm(() => {
   init_accountsRetireCredential();
   init_retireaccountcredentialop();
   init_tools();
-  args14 = {
+  args15 = {
     request: RetireAccountCredentialRequest$zodSchema
   };
   tool$accountsRetireCredential = {
@@ -54672,7 +54935,7 @@ Mark this association retired, idempotently. This does not revoke the actual key
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args14,
+    args: args15,
     tool: async (client, args, ctx) => {
       const [result] = await accountsRetireCredential(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -54726,9 +54989,9 @@ var init_getaccountdecisionop = __esm(() => {
 
 // src/funcs/accountsRetrieveDecision.ts
 function accountsRetrieveDecision(client$, request, options) {
-  return new APIPromise($do15(client$, request, options));
+  return new APIPromise($do16(client$, request, options));
 }
-async function $do15(client$, request, options) {
+async function $do16(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetAccountDecisionRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -54814,12 +55077,12 @@ var init_accountsRetrieveDecision = __esm(() => {
 });
 
 // src/mcp-server/tools/accountsRetrieveDecision.ts
-var args15, tool$accountsRetrieveDecision;
+var args16, tool$accountsRetrieveDecision;
 var init_accountsRetrieveDecision2 = __esm(() => {
   init_accountsRetrieveDecision();
   init_getaccountdecisionop();
   init_tools();
-  args15 = {
+  args16 = {
     request: GetAccountDecisionRequest$zodSchema
   };
   tool$accountsRetrieveDecision = {
@@ -54834,7 +55097,7 @@ Retrieve the account decision at one recorded risk version. The answer uses the
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args15,
+    args: args16,
     tool: async (client, args, ctx) => {
       const [result] = await accountsRetrieveDecision(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -54848,37 +55111,6 @@ Retrieve the account decision at one recorded risk version. The answer uses the
   };
 });
 
-// src/models/identifiersearchkind.ts
-var IdentifierSearchKind$zodSchema;
-var init_identifiersearchkind = __esm(() => {
-  init_zod();
-  IdentifierSearchKind$zodSchema = _enum([
-    "email",
-    "phone",
-    "username"
-  ]);
-});
-
-// src/models/match.ts
-var Match$zodSchema;
-var init_match = __esm(() => {
-  init_zod();
-  Match$zodSchema = _enum([
-    "exact",
-    "canonical",
-    "mailbox"
-  ]).describe("exact compares the original submitted value; canonical uses identifier-specific normalisation; mailbox explicitly selects the email alias rules used by lists.");
-});
-
-// src/models/namespace.ts
-var Namespace$zodSchema;
-var init_namespace = __esm(() => {
-  init_zod();
-  Namespace$zodSchema = _enum([
-    "customer"
-  ]).describe("Required for username: the username submitted by this customer in this workspace/environment. It does not name or join a source platform. Omit for email and phone.");
-});
-
 // src/models/identifiersearch.ts
 var IdentifierSearch$zodSchema;
 var init_identifiersearch = __esm(() => {
@@ -54972,7 +55204,7 @@ var init_accountdirectorysearchrequest = __esm(() => {
   init_identifierexpression();
   init_identifiersearch();
   AccountDirectorySearchRequest$zodSchema = object({
-    account_id: string2().optional().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().optional().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     cursor: string2().optional().describe("Opaque, expiring cursor bound to workspace, environment, operation and all filters, including expression scope, ordered structure and original term values. Keep grouping, operand order, matching modes and values unchanged; an omitted match is equivalent to exact. The page limit may change."),
     email: string2().optional().describe("Assessments of every account that one of its retained admitted assessments sent this mailbox as identifiers.email, matched as lists match an email entry: case-insensitive, a +tag removed and, at gmail.com and googlemail.com, the dots of the local part ignored. Only assessments stored since email list matching began carry the mailbox. An address that is not a valid mailbox is refused with 400."),
     identifier: IdentifierSearch$zodSchema.optional().describe("One customer-submitted identifier. Defaults to exact comparison of the original submitted value. canonical uses the supported identifier normalisation without an ownership claim: email preserves local-part case, NFC-normalises it and lowercases the domain without removing dots or tags; phone uses international E.164 without extensions or an inferred region; username uses NFC and Unicode case folding within the customer namespace. mailbox is email-only and explicitly selects existing list rules: case-insensitive, remove +tag, and ignore local-part dots at gmail.com and googlemail.com; googlemail.com maps to gmail.com. Username requires namespace customer. Email and phone forbid namespace. Source-discovered identifiers and platform handles are not searched. Unsupported kinds, namespaces, modes and invalid values return 400. Search equality does not establish verified ownership or merge accounts."),
@@ -54984,9 +55216,9 @@ var init_accountdirectorysearchrequest = __esm(() => {
 
 // src/funcs/accountsSearch.ts
 function accountsSearch(client$, request, options) {
-  return new APIPromise($do16(client$, request, options));
+  return new APIPromise($do17(client$, request, options));
 }
-async function $do16(client$, request, options) {
+async function $do17(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => AccountDirectorySearchRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55063,12 +55295,12 @@ var init_accountsSearch = __esm(() => {
 });
 
 // src/mcp-server/tools/accountsSearch.ts
-var args16, tool$accountsSearch;
+var args17, tool$accountsSearch;
 var init_accountsSearch2 = __esm(() => {
   init_accountsSearch();
   init_accountdirectorysearchrequest();
   init_tools();
-  args16 = {
+  args17 = {
     request: AccountDirectorySearchRequest$zodSchema
   };
   tool$accountsSearch = {
@@ -55083,7 +55315,7 @@ Search distinct accounts observed in retained assessments in this environment. i
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args16,
+    args: args17,
     tool: async (client, args, ctx) => {
       const [result] = await accountsSearch(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55219,9 +55451,9 @@ var init_assessmentaggregaterequest = __esm(() => {
 
 // src/funcs/assessmentsAggregate.ts
 function assessmentsAggregate(client$, request, options) {
-  return new APIPromise($do17(client$, request, options));
+  return new APIPromise($do18(client$, request, options));
 }
-async function $do17(client$, request, options) {
+async function $do18(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => AssessmentAggregateRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55298,12 +55530,12 @@ var init_assessmentsAggregate = __esm(() => {
 });
 
 // src/mcp-server/tools/assessmentsAggregate.ts
-var args17, tool$assessmentsAggregate;
+var args18, tool$assessmentsAggregate;
 var init_assessmentsAggregate2 = __esm(() => {
   init_assessmentsAggregate();
   init_assessmentaggregaterequest();
   init_tools();
-  args17 = {
+  args18 = {
     request: AssessmentAggregateRequest$zodSchema
   };
   tool$assessmentsAggregate = {
@@ -55318,7 +55550,7 @@ Count this environment's assessments created in [from,to) by UTC hour, or by day
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args17,
+    args: args18,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsAggregate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55337,7 +55569,7 @@ var AccountBindingRequest$zodSchema;
 var init_accountbindingrequest = __esm(() => {
   init_zod();
   AccountBindingRequest$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.")
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.")
   }).describe("One-time association to an opaque stable customer account. The assessment is its natural idempotency key. Repeating the same binding returns its first receipt; a conflicting target is refused. No arbitrary account merging.");
 });
 
@@ -55382,9 +55614,9 @@ var init_bindprovisionalaccountop = __esm(() => {
 
 // src/funcs/assessmentsBindAccount.ts
 function assessmentsBindAccount(client$, request, options) {
-  return new APIPromise($do18(client$, request, options));
+  return new APIPromise($do19(client$, request, options));
 }
-async function $do18(client$, request, options) {
+async function $do19(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => BindProvisionalAccountRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55467,12 +55699,12 @@ var init_assessmentsBindAccount = __esm(() => {
 });
 
 // src/mcp-server/tools/assessmentsBindAccount.ts
-var args18, tool$assessmentsBindAccount;
+var args19, tool$assessmentsBindAccount;
 var init_assessmentsBindAccount2 = __esm(() => {
   init_assessmentsBindAccount();
   init_bindprovisionalaccountop();
   init_tools();
-  args18 = {
+  args19 = {
     request: BindProvisionalAccountRequest$zodSchema
   };
   tool$assessmentsBindAccount = {
@@ -55487,7 +55719,7 @@ One-time association to an opaque stable customer account. The assessment is its
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args18,
+    args: args19,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsBindAccount(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55634,7 +55866,7 @@ var init_assessmentrequest = __esm(() => {
   init_flow();
   init_responsemode();
   AssessmentRequest$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     auth_context: AuthContext$zodSchema.optional().describe("Normalised claims from a session your backend has already verified with WorkOS, Clerk, Auth0 or any OIDC provider. Pass the output of the SDK's auth adapters, not a raw token."),
     client_context: AssessmentRequestClientContext$zodSchema.optional().describe("Optional context observed by the client of the user. The server parses these hints into coarse features, leaves raw user_agent and opaque ids out of every answer, and weighs a mismatch with the other evidence."),
     deadline_ms: int().optional().describe("Optional tighter budget, 50 to 3000 ms, measured from the moment the request reaches NoResponse. Absent means the 3000 ms ceiling; a value above it is refused with 400 rather than clamped."),
@@ -55689,9 +55921,9 @@ var init_createassessmentop = __esm(() => {
 
 // src/funcs/assessmentsCreate.ts
 function assessmentsCreate(client$, request, options) {
-  return new APIPromise($do19(client$, request, options));
+  return new APIPromise($do20(client$, request, options));
 }
-async function $do19(client$, request, options) {
+async function $do20(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CreateAssessmentRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55769,12 +56001,12 @@ var init_assessmentsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/assessmentsCreate.ts
-var args19, tool$assessmentsCreate;
+var args20, tool$assessmentsCreate;
 var init_assessmentsCreate2 = __esm(() => {
   init_assessmentsCreate();
   init_createassessmentop();
   init_tools();
-  args19 = {
+  args20 = {
     request: CreateAssessmentRequest$zodSchema
   };
   tool$assessmentsCreate = {
@@ -55789,7 +56021,7 @@ Assesses one account creation, login or purchase (flow) and answers with the acc
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args19,
+    args: args20,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55867,9 +56099,9 @@ var init_deleteassessmentop = __esm(() => {
 
 // src/funcs/assessmentsDelete.ts
 function assessmentsDelete(client$, request, options) {
-  return new APIPromise($do20(client$, request, options));
+  return new APIPromise($do21(client$, request, options));
 }
-async function $do20(client$, request, options) {
+async function $do21(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DeleteAssessmentRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55951,12 +56183,12 @@ var init_assessmentsDelete = __esm(() => {
 });
 
 // src/mcp-server/tools/assessmentsDelete.ts
-var args20, tool$assessmentsDelete;
+var args21, tool$assessmentsDelete;
 var init_assessmentsDelete2 = __esm(() => {
   init_assessmentsDelete();
   init_deleteassessmentop();
   init_tools();
-  args20 = {
+  args21 = {
     request: DeleteAssessmentRequest$zodSchema
   };
   tool$assessmentsDelete = {
@@ -55971,7 +56203,7 @@ Deletes one assessment in the environment of your key, with its versions, eviden
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args20,
+    args: args21,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsDelete(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55986,12 +56218,12 @@ Deletes one assessment in the environment of your key, with its versions, eviden
 });
 
 // src/mcp-server/tools/assessmentsGet.ts
-var args21, tool$assessmentsGet;
+var args22, tool$assessmentsGet;
 var init_assessmentsGet2 = __esm(() => {
   init_assessmentsGet();
   init_getassessmentop();
   init_tools();
-  args21 = {
+  args22 = {
     request: GetAssessmentRequest$zodSchema
   };
   tool$assessmentsGet = {
@@ -56006,7 +56238,7 @@ Returns the highest assessment_version, with the account's current risk. Require
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args21,
+    args: args22,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56026,7 +56258,7 @@ var init_assessmentquery = __esm(() => {
   init_zod();
   init_responsemode();
   AssessmentQuery$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     cursor: string2().optional().describe("next_cursor from the previous page, unchanged. Opaque, MAC'd and bound to the workspace and account_id."),
     limit: int().default(20),
     response_mode: ResponseMode$zodSchema.optional().describe("standard returns the consolidated risk response; detailed adds merged provider-neutral facts when the key has detailed scope. There is no raw mode.")
@@ -56035,9 +56267,9 @@ var init_assessmentquery = __esm(() => {
 
 // src/funcs/assessmentsQuery.ts
 function assessmentsQuery(client$, request, options) {
-  return new APIPromise($do21(client$, request, options));
+  return new APIPromise($do22(client$, request, options));
 }
-async function $do21(client$, request, options) {
+async function $do22(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => AssessmentQuery$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -56114,12 +56346,12 @@ var init_assessmentsQuery = __esm(() => {
 });
 
 // src/mcp-server/tools/assessmentsQuery.ts
-var args22, tool$assessmentsQuery;
+var args23, tool$assessmentsQuery;
 var init_assessmentsQuery2 = __esm(() => {
   init_assessmentsQuery();
   init_assessmentquery();
   init_tools();
-  args22 = {
+  args23 = {
     request: AssessmentQuery$zodSchema
   };
   tool$assessmentsQuery = {
@@ -56134,7 +56366,7 @@ History is a POST with account_id in the body so an account identifier stays out
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args22,
+    args: args23,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsQuery(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56216,9 +56448,9 @@ var init_recordassessmentoutcomeop = __esm(() => {
 
 // src/funcs/assessmentsRecordOutcome.ts
 function assessmentsRecordOutcome(client$, request, options) {
-  return new APIPromise($do22(client$, request, options));
+  return new APIPromise($do23(client$, request, options));
 }
-async function $do22(client$, request, options) {
+async function $do23(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RecordAssessmentOutcomeRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -56302,12 +56534,12 @@ var init_assessmentsRecordOutcome = __esm(() => {
 });
 
 // src/mcp-server/tools/assessmentsRecordOutcome.ts
-var args23, tool$assessmentsRecordOutcome;
+var args24, tool$assessmentsRecordOutcome;
 var init_assessmentsRecordOutcome2 = __esm(() => {
   init_assessmentsRecordOutcome();
   init_recordassessmentoutcomeop();
   init_tools();
-  args23 = {
+  args24 = {
     request: RecordAssessmentOutcomeRequest$zodSchema
   };
   tool$assessmentsRecordOutcome = {
@@ -56322,7 +56554,7 @@ Records what you later learned about an assessed account: confirmed_abuse, accou
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args23,
+    args: args24,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsRecordOutcome(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56378,9 +56610,9 @@ var init_getassessmentversionop = __esm(() => {
 
 // src/funcs/assessmentsRetrieveVersion.ts
 function assessmentsRetrieveVersion(client$, request, options) {
-  return new APIPromise($do23(client$, request, options));
+  return new APIPromise($do24(client$, request, options));
 }
-async function $do23(client$, request, options) {
+async function $do24(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetAssessmentVersionRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -56470,12 +56702,12 @@ var init_assessmentsRetrieveVersion = __esm(() => {
 });
 
 // src/mcp-server/tools/assessmentsRetrieveVersion.ts
-var args24, tool$assessmentsRetrieveVersion;
+var args25, tool$assessmentsRetrieveVersion;
 var init_assessmentsRetrieveVersion2 = __esm(() => {
   init_assessmentsRetrieveVersion();
   init_getassessmentversionop();
   init_tools();
-  args24 = {
+  args25 = {
     request: GetAssessmentVersionRequest$zodSchema
   };
   tool$assessmentsRetrieveVersion = {
@@ -56490,7 +56722,7 @@ Retrieve a retained assessment version with its original decision, policy, flow
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args24,
+    args: args25,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsRetrieveVersion(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56522,7 +56754,7 @@ var init_assessmentsearchrequest = __esm(() => {
   init_responsemode();
   init_status();
   AssessmentSearchRequest$zodSchema = object({
-    account_id: string2().optional().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().optional().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     asn: int().optional(),
     band: Band$zodSchema.optional(),
     changed: boolean2().optional().describe("true returns only assessments whose latest stored revision's decision differs from their first answer's decision (see decision); false only the others. An assessment whose first answer or latest revision has no decision yet is not changed. Cannot be combined with revision first."),
@@ -56551,9 +56783,9 @@ var init_assessmentsearchrequest = __esm(() => {
 
 // src/funcs/assessmentsSearch.ts
 function assessmentsSearch(client$, request, options) {
-  return new APIPromise($do24(client$, request, options));
+  return new APIPromise($do25(client$, request, options));
 }
-async function $do24(client$, request, options) {
+async function $do25(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => AssessmentSearchRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -56630,12 +56862,12 @@ var init_assessmentsSearch = __esm(() => {
 });
 
 // src/mcp-server/tools/assessmentsSearch.ts
-var args25, tool$assessmentsSearch;
+var args26, tool$assessmentsSearch;
 var init_assessmentsSearch2 = __esm(() => {
   init_assessmentsSearch();
   init_assessmentsearchrequest();
   init_tools();
-  args25 = {
+  args26 = {
     request: AssessmentSearchRequest$zodSchema
   };
   tool$assessmentsSearch = {
@@ -56650,7 +56882,7 @@ Search retained assessments created in [from,to), at most 366 days. identifier d
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args25,
+    args: args26,
     tool: async (client, args, ctx) => {
       const [result] = await assessmentsSearch(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56766,9 +56998,9 @@ var init_configureauditstreamop = __esm(() => {
 
 // src/funcs/auditConfigureStream.ts
 function auditConfigureStream(client$, request, options) {
-  return new APIPromise($do25(client$, request, options));
+  return new APIPromise($do26(client$, request, options));
 }
-async function $do25(client$, request, options) {
+async function $do26(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ConfigureAuditStreamRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -56855,12 +57087,12 @@ var init_auditConfigureStream = __esm(() => {
 });
 
 // src/mcp-server/tools/auditConfigureStream.ts
-var args26, tool$auditConfigureStream;
+var args27, tool$auditConfigureStream;
 var init_auditConfigureStream2 = __esm(() => {
   init_auditConfigureStream();
   init_configureauditstreamop();
   init_tools();
-  args26 = {
+  args27 = {
     request: ConfigureAuditStreamRequest$zodSchema
   };
   tool$auditConfigureStream = {
@@ -56875,7 +57107,7 @@ Configure the action filter for one verified webhook endpoint. Requires audit_ma
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args26,
+    args: args27,
     tool: async (client, args, ctx) => {
       const [result] = await auditConfigureStream(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56953,9 +57185,9 @@ var init_getauditretentionop = __esm(() => {
 
 // src/funcs/auditGetRetention.ts
 function auditGetRetention(client$, request, options) {
-  return new APIPromise($do26(client$, request, options));
+  return new APIPromise($do27(client$, request, options));
 }
-async function $do26(client$, request, options) {
+async function $do27(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetAuditRetentionRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -57041,12 +57273,12 @@ var init_auditGetRetention = __esm(() => {
 });
 
 // src/mcp-server/tools/auditGetRetention.ts
-var args27, tool$auditGetRetention;
+var args28, tool$auditGetRetention;
 var init_auditGetRetention2 = __esm(() => {
   init_auditGetRetention();
   init_getauditretentionop();
   init_tools();
-  args27 = {
+  args28 = {
     request: GetAuditRetentionRequest$zodSchema
   };
   tool$auditGetRetention = {
@@ -57061,7 +57293,7 @@ Read audit retention for the environment. The default is 365 days. Oldest availa
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args27,
+    args: args28,
     tool: async (client, args, ctx) => {
       const [result] = await auditGetRetention(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -57238,9 +57470,9 @@ var init_listauditeventsop = __esm(() => {
 
 // src/funcs/auditList.ts
 function auditList(client$, request, options) {
-  return new APIPromise($do27(client$, request, options));
+  return new APIPromise($do28(client$, request, options));
 }
-async function $do27(client$, request, options) {
+async function $do28(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListAuditEventsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -57335,12 +57567,12 @@ var init_auditList = __esm(() => {
 });
 
 // src/mcp-server/tools/auditList.ts
-var args28, tool$auditList;
+var args29, tool$auditList;
 var init_auditList2 = __esm(() => {
   init_auditList();
   init_listauditeventsop();
   init_tools();
-  args28 = {
+  args29 = {
     request: ListAuditEventsRequest$zodSchema
   };
   tool$auditList = {
@@ -57355,7 +57587,7 @@ Read audit events within your current environment permissions. Filters apply bef
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args28,
+    args: args29,
     tool: async (client, args, ctx) => {
       const [result] = await auditList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -57410,9 +57642,9 @@ var init_listauditstreamsop = __esm(() => {
 
 // src/funcs/auditListStreams.ts
 function auditListStreams(client$, request, options) {
-  return new APIPromise($do28(client$, request, options));
+  return new APIPromise($do29(client$, request, options));
 }
-async function $do28(client$, request, options) {
+async function $do29(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListAuditStreamsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -57498,12 +57730,12 @@ var init_auditListStreams = __esm(() => {
 });
 
 // src/mcp-server/tools/auditListStreams.ts
-var args29, tool$auditListStreams;
+var args30, tool$auditListStreams;
 var init_auditListStreams2 = __esm(() => {
   init_auditListStreams();
   init_listauditstreamsop();
   init_tools();
-  args29 = {
+  args30 = {
     request: ListAuditStreamsRequest$zodSchema
   };
   tool$auditListStreams = {
@@ -57518,7 +57750,7 @@ List audit subscriptions and their endpoint state and latest delivery attempt. S
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args29,
+    args: args30,
     tool: async (client, args, ctx) => {
       const [result] = await auditListStreams(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -57574,9 +57806,9 @@ var init_removeauditstreamop = __esm(() => {
 
 // src/funcs/auditRemoveStream.ts
 function auditRemoveStream(client$, request, options) {
-  return new APIPromise($do29(client$, request, options));
+  return new APIPromise($do30(client$, request, options));
 }
-async function $do29(client$, request, options) {
+async function $do30(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RemoveAuditStreamRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -57666,12 +57898,12 @@ var init_auditRemoveStream = __esm(() => {
 });
 
 // src/mcp-server/tools/auditRemoveStream.ts
-var args30, tool$auditRemoveStream;
+var args31, tool$auditRemoveStream;
 var init_auditRemoveStream2 = __esm(() => {
   init_auditRemoveStream();
   init_removeauditstreamop();
   init_tools();
-  args30 = {
+  args31 = {
     request: RemoveAuditStreamRequest$zodSchema
   };
   tool$auditRemoveStream = {
@@ -57686,7 +57918,7 @@ Remove an audit subscription and cancel queued deliveries. Requires audit_manage
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args30,
+    args: args31,
     tool: async (client, args, ctx) => {
       const [result] = await auditRemoveStream(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -57753,9 +57985,9 @@ var init_replayauditstreamop = __esm(() => {
 
 // src/funcs/auditReplayStream.ts
 function auditReplayStream(client$, request, options) {
-  return new APIPromise($do30(client$, request, options));
+  return new APIPromise($do31(client$, request, options));
 }
-async function $do30(client$, request, options) {
+async function $do31(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ReplayAuditStreamRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -57833,12 +58065,12 @@ var init_auditReplayStream = __esm(() => {
 });
 
 // src/mcp-server/tools/auditReplayStream.ts
-var args31, tool$auditReplayStream;
+var args32, tool$auditReplayStream;
 var init_auditReplayStream2 = __esm(() => {
   init_auditReplayStream();
   init_replayauditstreamop();
   init_tools();
-  args31 = {
+  args32 = {
     request: ReplayAuditStreamRequest$zodSchema
   };
   tool$auditReplayStream = {
@@ -57853,7 +58085,7 @@ Replay a recorded delivery for the current audit subscription. Requires audit_ma
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args31,
+    args: args32,
     tool: async (client, args, ctx) => {
       const [result] = await auditReplayStream(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -57921,9 +58153,9 @@ var init_updateauditretentionop = __esm(() => {
 
 // src/funcs/auditUpdateRetention.ts
 function auditUpdateRetention(client$, request, options) {
-  return new APIPromise($do31(client$, request, options));
+  return new APIPromise($do32(client$, request, options));
 }
-async function $do31(client$, request, options) {
+async function $do32(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateAuditRetentionRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -58010,12 +58242,12 @@ var init_auditUpdateRetention = __esm(() => {
 });
 
 // src/mcp-server/tools/auditUpdateRetention.ts
-var args32, tool$auditUpdateRetention;
+var args33, tool$auditUpdateRetention;
 var init_auditUpdateRetention2 = __esm(() => {
   init_auditUpdateRetention();
   init_updateauditretentionop();
   init_tools();
-  args32 = {
+  args33 = {
     request: UpdateAuditRetentionRequest$zodSchema
   };
   tool$auditUpdateRetention = {
@@ -58030,7 +58262,7 @@ Set test-environment audit retention from 1 to 365 days with audit_manage scope.
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args32,
+    args: args33,
     tool: async (client, args, ctx) => {
       const [result] = await auditUpdateRetention(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -58158,9 +58390,9 @@ var init_geterasurereceiptop = __esm(() => {
 
 // src/funcs/erasuresGet.ts
 function erasuresGet(client$, request, options) {
-  return new APIPromise($do32(client$, request, options));
+  return new APIPromise($do33(client$, request, options));
 }
-async function $do32(client$, request, options) {
+async function $do33(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetErasureReceiptRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -58242,12 +58474,12 @@ var init_erasuresGet = __esm(() => {
 });
 
 // src/mcp-server/tools/erasuresGet.ts
-var args33, tool$erasuresGet;
+var args34, tool$erasuresGet;
 var init_erasuresGet2 = __esm(() => {
   init_erasuresGet();
   init_geterasurereceiptop();
   init_tools();
-  args33 = {
+  args34 = {
     request: GetErasureReceiptRequest$zodSchema
   };
   tool$erasuresGet = {
@@ -58262,7 +58494,7 @@ Read retained erasure progress and downstream acknowledgements. Completion does
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args33,
+    args: args34,
     tool: async (client, args, ctx) => {
       const [result] = await erasuresGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -58392,9 +58624,9 @@ var init_cancelpolicyevaluationop = __esm(() => {
 
 // src/funcs/evaluationsCancel.ts
 function evaluationsCancel(client$, request, options) {
-  return new APIPromise($do33(client$, request, options));
+  return new APIPromise($do34(client$, request, options));
 }
-async function $do33(client$, request, options) {
+async function $do34(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CancelPolicyEvaluationRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -58485,12 +58717,12 @@ var init_evaluationsCancel = __esm(() => {
 });
 
 // src/mcp-server/tools/evaluationsCancel.ts
-var args34, tool$evaluationsCancel;
+var args35, tool$evaluationsCancel;
 var init_evaluationsCancel2 = __esm(() => {
   init_evaluationsCancel();
   init_cancelpolicyevaluationop();
   init_tools();
-  args34 = {
+  args35 = {
     request: CancelPolicyEvaluationRequest$zodSchema
   };
   tool$evaluationsCancel = {
@@ -58505,7 +58737,7 @@ Cancel a queued or running evaluation and invalidate its stored evidence. The op
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args34,
+    args: args35,
     tool: async (client, args, ctx) => {
       const [result] = await evaluationsCancel(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -58628,9 +58860,9 @@ var init_createpolicyevaluationop = __esm(() => {
 
 // src/funcs/evaluationsCreate.ts
 function evaluationsCreate(client$, request, options) {
-  return new APIPromise($do34(client$, request, options));
+  return new APIPromise($do35(client$, request, options));
 }
-async function $do34(client$, request, options) {
+async function $do35(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CreatePolicyEvaluationRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -58718,12 +58950,12 @@ var init_evaluationsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/evaluationsCreate.ts
-var args35, tool$evaluationsCreate;
+var args36, tool$evaluationsCreate;
 var init_evaluationsCreate2 = __esm(() => {
   init_evaluationsCreate();
   init_createpolicyevaluationop();
   init_tools();
-  args35 = {
+  args36 = {
     request: CreatePolicyEvaluationRequest$zodSchema
   };
   tool$evaluationsCreate = {
@@ -58738,7 +58970,7 @@ Create a bounded evaluation with an Idempotency-Key, expected policy version, fi
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args35,
+    args: args36,
     tool: async (client, args, ctx) => {
       const [result] = await evaluationsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -58794,9 +59026,9 @@ var init_getpolicyevaluationop = __esm(() => {
 
 // src/funcs/evaluationsGet.ts
 function evaluationsGet(client$, request, options) {
-  return new APIPromise($do35(client$, request, options));
+  return new APIPromise($do36(client$, request, options));
 }
-async function $do35(client$, request, options) {
+async function $do36(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetPolicyEvaluationRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -58886,12 +59118,12 @@ var init_evaluationsGet = __esm(() => {
 });
 
 // src/mcp-server/tools/evaluationsGet.ts
-var args36, tool$evaluationsGet;
+var args37, tool$evaluationsGet;
 var init_evaluationsGet2 = __esm(() => {
   init_evaluationsGet();
   init_getpolicyevaluationop();
   init_tools();
-  args36 = {
+  args37 = {
     request: GetPolicyEvaluationRequest$zodSchema
   };
   tool$evaluationsGet = {
@@ -58906,7 +59138,7 @@ Read a retained evaluation job and its capture and provenance metadata. Cancella
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args36,
+    args: args37,
     tool: async (client, args, ctx) => {
       const [result] = await evaluationsGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -58991,9 +59223,9 @@ var init_getpolicyevaluationresultop = __esm(() => {
 
 // src/funcs/evaluationsGetResult.ts
 function evaluationsGetResult(client$, request, options) {
-  return new APIPromise($do36(client$, request, options));
+  return new APIPromise($do37(client$, request, options));
 }
-async function $do36(client$, request, options) {
+async function $do37(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetPolicyEvaluationResultRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -59083,12 +59315,12 @@ var init_evaluationsGetResult = __esm(() => {
 });
 
 // src/mcp-server/tools/evaluationsGetResult.ts
-var args37, tool$evaluationsGetResult;
+var args38, tool$evaluationsGetResult;
 var init_evaluationsGetResult2 = __esm(() => {
   init_evaluationsGetResult();
   init_getpolicyevaluationresultop();
   init_tools();
-  args37 = {
+  args38 = {
     request: GetPolicyEvaluationResultRequest$zodSchema
   };
   tool$evaluationsGetResult = {
@@ -59103,7 +59335,7 @@ Read the completed evaluation report, including coverage, uncertainty and candid
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args37,
+    args: args38,
     tool: async (client, args, ctx) => {
       const [result] = await evaluationsGetResult(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -59171,9 +59403,9 @@ var init_listpolicyevaluationsop = __esm(() => {
 
 // src/funcs/evaluationsList.ts
 function evaluationsList(client$, request, options) {
-  return new APIPromise($do37(client$, request, options));
+  return new APIPromise($do38(client$, request, options));
 }
-async function $do37(client$, request, options) {
+async function $do38(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListPolicyEvaluationsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -59264,12 +59496,12 @@ var init_evaluationsList = __esm(() => {
 });
 
 // src/mcp-server/tools/evaluationsList.ts
-var args38, tool$evaluationsList;
+var args39, tool$evaluationsList;
 var init_evaluationsList2 = __esm(() => {
   init_evaluationsList();
   init_listpolicyevaluationsop();
   init_tools();
-  args38 = {
+  args39 = {
     request: ListPolicyEvaluationsRequest$zodSchema
   };
   tool$evaluationsList = {
@@ -59284,7 +59516,7 @@ List retained policy evaluation jobs for this environment, newest first. At most
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args38,
+    args: args39,
     tool: async (client, args, ctx) => {
       const [result] = await evaluationsList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -59452,9 +59684,9 @@ var init_publishpolicyevaluationop = __esm(() => {
 
 // src/funcs/evaluationsPublish.ts
 function evaluationsPublish(client$, request, options) {
-  return new APIPromise($do38(client$, request, options));
+  return new APIPromise($do39(client$, request, options));
 }
-async function $do38(client$, request, options) {
+async function $do39(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => PublishPolicyEvaluationRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -59532,12 +59764,12 @@ var init_evaluationsPublish = __esm(() => {
 });
 
 // src/mcp-server/tools/evaluationsPublish.ts
-var args39, tool$evaluationsPublish;
+var args40, tool$evaluationsPublish;
 var init_evaluationsPublish2 = __esm(() => {
   init_evaluationsPublish();
   init_publishpolicyevaluationop();
   init_tools();
-  args39 = {
+  args40 = {
     request: PublishPolicyEvaluationRequest$zodSchema
   };
   tool$evaluationsPublish = {
@@ -59552,7 +59784,7 @@ Publish an explicitly reviewed candidate with its exact manifest, input and resu
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args39,
+    args: args40,
     tool: async (client, args, ctx) => {
       const [result] = await evaluationsPublish(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -59667,9 +59899,9 @@ var init_cancelcustomerexportop = __esm(() => {
 
 // src/funcs/exportsCancel.ts
 function exportsCancel(client$, request, options) {
-  return new APIPromise($do39(client$, request, options));
+  return new APIPromise($do40(client$, request, options));
 }
-async function $do39(client$, request, options) {
+async function $do40(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CancelCustomerExportRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -59756,12 +59988,12 @@ var init_exportsCancel = __esm(() => {
 });
 
 // src/mcp-server/tools/exportsCancel.ts
-var args40, tool$exportsCancel;
+var args41, tool$exportsCancel;
 var init_exportsCancel2 = __esm(() => {
   init_exportsCancel();
   init_cancelcustomerexportop();
   init_tools();
-  args40 = {
+  args41 = {
     request: CancelCustomerExportRequest$zodSchema
   };
   tool$exportsCancel = {
@@ -59776,7 +60008,7 @@ Cancel an export and remove its stored chunks. Repeating cancellation is safe. A
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args40,
+    args: args41,
     tool: async (client, args, ctx) => {
       const [result] = await exportsCancel(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -59817,7 +60049,7 @@ var init_customerexportrequest = __esm(() => {
   init_environment();
   init_responsemode();
   CustomerExportRequest$zodSchema = object({
-    account_id: string2().optional().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().optional().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     environment: Environment$zodSchema,
     filter: CustomerExportRequestFilter$zodSchema.optional(),
     kind: CustomerExportRequestKind$zodSchema,
@@ -59867,9 +60099,9 @@ var init_createcustomerexportop = __esm(() => {
 
 // src/funcs/exportsCreate.ts
 function exportsCreate(client$, request, options) {
-  return new APIPromise($do40(client$, request, options));
+  return new APIPromise($do41(client$, request, options));
 }
-async function $do40(client$, request, options) {
+async function $do41(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CreateCustomerExportRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -59940,12 +60172,12 @@ var init_exportsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/exportsCreate.ts
-var args41, tool$exportsCreate;
+var args42, tool$exportsCreate;
 var init_exportsCreate2 = __esm(() => {
   init_exportsCreate();
   init_createcustomerexportop();
   init_tools();
-  args41 = {
+  args42 = {
     request: CreateCustomerExportRequest$zodSchema
   };
   tool$exportsCreate = {
@@ -59960,7 +60192,7 @@ Request an encrypted JSON Lines snapshot of retained account or audit records. R
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args41,
+    args: args42,
     tool: async (client, args, ctx) => {
       const [result] = await exportsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -60029,9 +60261,9 @@ var init_downloadcustomerexportchunkop = __esm(() => {
 
 // src/funcs/exportsDownloadChunk.ts
 function exportsDownloadChunk(client$, request, options) {
-  return new APIPromise($do41(client$, request, options));
+  return new APIPromise($do42(client$, request, options));
 }
-async function $do41(client$, request, options) {
+async function $do42(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DownloadCustomerExportChunkRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -60121,12 +60353,12 @@ var init_exportsDownloadChunk = __esm(() => {
 });
 
 // src/mcp-server/tools/exportsDownloadChunk.ts
-var args42, tool$exportsDownloadChunk;
+var args43, tool$exportsDownloadChunk;
 var init_exportsDownloadChunk2 = __esm(() => {
   init_exportsDownloadChunk();
   init_downloadcustomerexportchunkop();
   init_tools();
-  args42 = {
+  args43 = {
     request: DownloadCustomerExportChunkRequest$zodSchema
   };
   tool$exportsDownloadChunk = {
@@ -60141,7 +60373,7 @@ Download one chunk of a completed, unexpired export after a fresh permission and
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args42,
+    args: args43,
     tool: async (client, args, ctx) => {
       const [result] = await exportsDownloadChunk(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -60195,9 +60427,9 @@ var init_getcustomerexportop = __esm(() => {
 
 // src/funcs/exportsGet.ts
 function exportsGet(client$, request, options) {
-  return new APIPromise($do42(client$, request, options));
+  return new APIPromise($do43(client$, request, options));
 }
-async function $do42(client$, request, options) {
+async function $do43(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetCustomerExportRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -60283,12 +60515,12 @@ var init_exportsGet = __esm(() => {
 });
 
 // src/mcp-server/tools/exportsGet.ts
-var args43, tool$exportsGet;
+var args44, tool$exportsGet;
 var init_exportsGet2 = __esm(() => {
   init_exportsGet();
   init_getcustomerexportop();
   init_tools();
-  args43 = {
+  args44 = {
     request: GetCustomerExportRequest$zodSchema
   };
   tool$exportsGet = {
@@ -60303,7 +60535,7 @@ Read the status of an authorised export. Records and bytes describe committed pr
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args43,
+    args: args44,
     tool: async (client, args, ctx) => {
       const [result] = await exportsGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -60373,9 +60605,9 @@ var init_listcustomerexportsop = __esm(() => {
 
 // src/funcs/exportsList.ts
 function exportsList(client$, request, options) {
-  return new APIPromise($do43(client$, request, options));
+  return new APIPromise($do44(client$, request, options));
 }
-async function $do43(client$, request, options) {
+async function $do44(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListCustomerExportsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -60464,12 +60696,12 @@ var init_exportsList = __esm(() => {
 });
 
 // src/mcp-server/tools/exportsList.ts
-var args44, tool$exportsList;
+var args45, tool$exportsList;
 var init_exportsList2 = __esm(() => {
   init_exportsList();
   init_listcustomerexportsop();
   init_tools();
-  args44 = {
+  args45 = {
     request: ListCustomerExportsRequest$zodSchema
   };
   tool$exportsList = {
@@ -60484,7 +60716,7 @@ List authorised jobs for one kind and environment. Detailed jobs require current
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args44,
+    args: args45,
     tool: async (client, args, ctx) => {
       const [result] = await exportsList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -60540,9 +60772,9 @@ var init_retrycustomerexportop = __esm(() => {
 
 // src/funcs/exportsRetry.ts
 function exportsRetry(client$, request, options) {
-  return new APIPromise($do44(client$, request, options));
+  return new APIPromise($do45(client$, request, options));
 }
-async function $do44(client$, request, options) {
+async function $do45(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RetryCustomerExportRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -60616,12 +60848,12 @@ var init_exportsRetry = __esm(() => {
 });
 
 // src/mcp-server/tools/exportsRetry.ts
-var args45, tool$exportsRetry;
+var args46, tool$exportsRetry;
 var init_exportsRetry2 = __esm(() => {
   init_exportsRetry();
   init_retrycustomerexportop();
   init_tools();
-  args45 = {
+  args46 = {
     request: RetryCustomerExportRequest$zodSchema
   };
   tool$exportsRetry = {
@@ -60636,7 +60868,7 @@ Start a new generation of a failed export before its original expiry, up to ten
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args45,
+    args: args46,
     tool: async (client, args, ctx) => {
       const [result] = await exportsRetry(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -60686,9 +60918,9 @@ var init_integrationrequest = __esm(() => {
 
 // src/funcs/integrationsCreate.ts
 function integrationsCreate(client$, request, options) {
-  return new APIPromise($do45(client$, request, options));
+  return new APIPromise($do46(client$, request, options));
 }
-async function $do45(client$, request, options) {
+async function $do46(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => IntegrationRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -60752,12 +60984,12 @@ var init_integrationsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/integrationsCreate.ts
-var args46, tool$integrationsCreate;
+var args47, tool$integrationsCreate;
 var init_integrationsCreate2 = __esm(() => {
   init_integrationsCreate();
   init_integrationrequest();
   init_tools();
-  args46 = {
+  args47 = {
     request: IntegrationRequest$zodSchema
   };
   tool$integrationsCreate = {
@@ -60772,7 +61004,7 @@ Registers a WorkOS, Auth0 or Supabase integration and returns its hosted endpoin
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args46,
+    args: args47,
     tool: async (client, args, ctx) => {
       const [result] = await integrationsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -60822,9 +61054,9 @@ var init_deleteintegrationop = __esm(() => {
 
 // src/funcs/integrationsDelete.ts
 function integrationsDelete(client$, request, options) {
-  return new APIPromise($do46(client$, request, options));
+  return new APIPromise($do47(client$, request, options));
 }
-async function $do46(client$, request, options) {
+async function $do47(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DeleteIntegrationRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -60906,12 +61138,12 @@ var init_integrationsDelete = __esm(() => {
 });
 
 // src/mcp-server/tools/integrationsDelete.ts
-var args47, tool$integrationsDelete;
+var args48, tool$integrationsDelete;
 var init_integrationsDelete2 = __esm(() => {
   init_integrationsDelete();
   init_deleteintegrationop();
   init_tools();
-  args47 = {
+  args48 = {
     request: DeleteIntegrationRequest$zodSchema
   };
   tool$integrationsDelete = {
@@ -60926,7 +61158,7 @@ Removes the integration and its secrets; its endpoint answers 404 from then on,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args47,
+    args: args48,
     tool: async (client, args, ctx) => {
       const [result] = await integrationsDelete(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -60942,9 +61174,9 @@ Removes the integration and its secrets; its endpoint answers 404 from then on,
 
 // src/funcs/integrationsList.ts
 function integrationsList(client$, options) {
-  return new APIPromise($do47(client$, options));
+  return new APIPromise($do48(client$, options));
 }
-async function $do47(client$, options) {
+async function $do48(client$, options) {
   const path$ = pathToFunc("/v1/integrations")();
   const headers$ = new Headers(compactMap({
     Accept: options?.acceptHeaderOverride || "application/json;q=1, application/problem+json;q=0"
@@ -61107,9 +61339,9 @@ var init_rotateintegrationsecretop = __esm(() => {
 
 // src/funcs/integrationsRotate.ts
 function integrationsRotate(client$, request, options) {
-  return new APIPromise($do48(client$, request, options));
+  return new APIPromise($do49(client$, request, options));
 }
-async function $do48(client$, request, options) {
+async function $do49(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RotateIntegrationSecretRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -61179,12 +61411,12 @@ var init_integrationsRotate = __esm(() => {
 });
 
 // src/mcp-server/tools/integrationsRotate.ts
-var args48, tool$integrationsRotate;
+var args49, tool$integrationsRotate;
 var init_integrationsRotate2 = __esm(() => {
   init_integrationsRotate();
   init_rotateintegrationsecretop();
   init_tools();
-  args48 = {
+  args49 = {
     request: RotateIntegrationSecretRequest$zodSchema
   };
   tool$integrationsRotate = {
@@ -61199,7 +61431,7 @@ For Auth0, send {} and the answer's secret is the new shared secret, shown once.
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args48,
+    args: args49,
     tool: async (client, args, ctx) => {
       const [result] = await integrationsRotate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -61307,9 +61539,9 @@ var init_listinvitesop = __esm(() => {
 
 // src/funcs/invitesList.ts
 function invitesList(client$, request, options) {
-  return new APIPromise($do49(client$, request, options));
+  return new APIPromise($do50(client$, request, options));
 }
-async function $do49(client$, request, options) {
+async function $do50(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListInvitesRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -61391,12 +61623,12 @@ var init_invitesList = __esm(() => {
 });
 
 // src/mcp-server/tools/invitesList.ts
-var args49, tool$invitesList;
+var args50, tool$invitesList;
 var init_invitesList2 = __esm(() => {
   init_invitesList();
   init_listinvitesop();
   init_tools();
-  args49 = {
+  args50 = {
     request: ListInvitesRequest$zodSchema
   };
   tool$invitesList = {
@@ -61411,7 +61643,7 @@ Read pending workspace invitations with a live members_manage key. Tokens are ex
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args49,
+    args: args50,
     tool: async (client, args, ctx) => {
       const [result] = await invitesList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -61462,9 +61694,9 @@ var init_revokeinviteop = __esm(() => {
 
 // src/funcs/invitesRevoke.ts
 function invitesRevoke(client$, request, options) {
-  return new APIPromise($do50(client$, request, options));
+  return new APIPromise($do51(client$, request, options));
 }
-async function $do50(client$, request, options) {
+async function $do51(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RevokeInviteRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -61550,12 +61782,12 @@ var init_invitesRevoke = __esm(() => {
 });
 
 // src/mcp-server/tools/invitesRevoke.ts
-var args50, tool$invitesRevoke;
+var args51, tool$invitesRevoke;
 var init_invitesRevoke2 = __esm(() => {
   init_invitesRevoke();
   init_revokeinviteop();
   init_tools();
-  args50 = {
+  args51 = {
     request: RevokeInviteRequest$zodSchema
   };
   tool$invitesRevoke = {
@@ -61570,7 +61802,7 @@ Revoke a pending invitation with a live members_manage key. A revoked token cann
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args50,
+    args: args51,
     tool: async (client, args, ctx) => {
       const [result] = await invitesRevoke(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -61702,9 +61934,9 @@ var init_listkeysop = __esm(() => {
 
 // src/funcs/keysList.ts
 function keysList(client$, request, options) {
-  return new APIPromise($do51(client$, request, options));
+  return new APIPromise($do52(client$, request, options));
 }
-async function $do51(client$, request, options) {
+async function $do52(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListKeysRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -61786,12 +62018,12 @@ var init_keysList = __esm(() => {
 });
 
 // src/mcp-server/tools/keysList.ts
-var args51, tool$keysList;
+var args52, tool$keysList;
 var init_keysList2 = __esm(() => {
   init_keysList();
   init_listkeysop();
   init_tools();
-  args51 = {
+  args52 = {
     request: ListKeysRequest$zodSchema
   };
   tool$keysList = {
@@ -61806,7 +62038,7 @@ Lists the keys of the signing key's environment, newest first, at most 200, revo
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args51,
+    args: args52,
     tool: async (client, args, ctx) => {
       const [result] = await keysList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -61860,9 +62092,9 @@ var init_revokekeyop = __esm(() => {
 
 // src/funcs/keysRevoke.ts
 function keysRevoke(client$, request, options) {
-  return new APIPromise($do52(client$, request, options));
+  return new APIPromise($do53(client$, request, options));
 }
-async function $do52(client$, request, options) {
+async function $do53(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RevokeKeyRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -61948,12 +62180,12 @@ var init_keysRevoke = __esm(() => {
 });
 
 // src/mcp-server/tools/keysRevoke.ts
-var args52, tool$keysRevoke;
+var args53, tool$keysRevoke;
 var init_keysRevoke2 = __esm(() => {
   init_keysRevoke();
   init_revokekeyop();
   init_tools();
-  args52 = {
+  args53 = {
     request: RevokeKeyRequest$zodSchema
   };
   tool$keysRevoke = {
@@ -61968,7 +62200,7 @@ Revokes a key of the signing key's environment at once: its next request answers
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args52,
+    args: args53,
     tool: async (client, args, ctx) => {
       const [result] = await keysRevoke(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -62110,9 +62342,9 @@ var init_changelistsop = __esm(() => {
 
 // src/funcs/listsChange.ts
 function listsChange(client$, request, options) {
-  return new APIPromise($do53(client$, request, options));
+  return new APIPromise($do54(client$, request, options));
 }
-async function $do53(client$, request, options) {
+async function $do54(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ChangeListsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -62200,12 +62432,12 @@ var init_listsChange = __esm(() => {
 });
 
 // src/mcp-server/tools/listsChange.ts
-var args53, tool$listsChange;
+var args54, tool$listsChange;
 var init_listsChange2 = __esm(() => {
   init_listsChange();
   init_changelistsop();
   init_tools();
-  args53 = {
+  args54 = {
     request: ChangeListsRequest$zodSchema
   };
   tool$listsChange = {
@@ -62220,7 +62452,7 @@ Atomically add and remove a bounded batch of entries with an idempotency key. Re
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args53,
+    args: args54,
     tool: async (client, args, ctx) => {
       const [result] = await listsChange(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -62277,9 +62509,9 @@ var init_createlistentryop = __esm(() => {
 
 // src/funcs/listsCreate.ts
 function listsCreate(client$, request, options) {
-  return new APIPromise($do54(client$, request, options));
+  return new APIPromise($do55(client$, request, options));
 }
-async function $do54(client$, request, options) {
+async function $do55(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CreateListEntryRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -62366,12 +62598,12 @@ var init_listsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/listsCreate.ts
-var args54, tool$listsCreate;
+var args55, tool$listsCreate;
 var init_listsCreate2 = __esm(() => {
   init_listsCreate();
   init_createlistentryop();
   init_tools();
-  args54 = {
+  args55 = {
     request: CreateListEntryRequest$zodSchema
   };
   tool$listsCreate = {
@@ -62386,7 +62618,7 @@ Add a canonical email or email-domain override with a reason and optional expiry
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args54,
+    args: args55,
     tool: async (client, args, ctx) => {
       const [result] = await listsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -62439,9 +62671,9 @@ var init_deletelistentryop = __esm(() => {
 
 // src/funcs/listsDelete.ts
 function listsDelete(client$, request, options) {
-  return new APIPromise($do55(client$, request, options));
+  return new APIPromise($do56(client$, request, options));
 }
-async function $do55(client$, request, options) {
+async function $do56(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DeleteListEntryRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -62531,12 +62763,12 @@ var init_listsDelete = __esm(() => {
 });
 
 // src/mcp-server/tools/listsDelete.ts
-var args55, tool$listsDelete;
+var args56, tool$listsDelete;
 var init_listsDelete2 = __esm(() => {
   init_listsDelete();
   init_deletelistentryop();
   init_tools();
-  args55 = {
+  args56 = {
     request: DeleteListEntryRequest$zodSchema
   };
   tool$listsDelete = {
@@ -62551,7 +62783,7 @@ Remove an override with settings plus policy_publish, or legacy management. The
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args55,
+    args: args56,
     tool: async (client, args, ctx) => {
       const [result] = await listsDelete(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -62607,9 +62839,9 @@ var init_getlistchangeop = __esm(() => {
 
 // src/funcs/listsGetChange.ts
 function listsGetChange(client$, request, options) {
-  return new APIPromise($do56(client$, request, options));
+  return new APIPromise($do57(client$, request, options));
 }
-async function $do56(client$, request, options) {
+async function $do57(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetListChangeRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -62699,12 +62931,12 @@ var init_listsGetChange = __esm(() => {
 });
 
 // src/mcp-server/tools/listsGetChange.ts
-var args56, tool$listsGetChange;
+var args57, tool$listsGetChange;
 var init_listsGetChange2 = __esm(() => {
   init_listsGetChange();
   init_getlistchangeop();
   init_tools();
-  args56 = {
+  args57 = {
     request: GetListChangeRequest$zodSchema
   };
   tool$listsGetChange = {
@@ -62719,7 +62951,7 @@ Read retained propagation progress for a list change with settings or management
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args56,
+    args: args57,
     tool: async (client, args, ctx) => {
       const [result] = await listsGetChange(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -62787,9 +63019,9 @@ var init_listlistentriesop = __esm(() => {
 
 // src/funcs/listsList.ts
 function listsList(client$, request, options) {
-  return new APIPromise($do57(client$, request, options));
+  return new APIPromise($do58(client$, request, options));
 }
-async function $do57(client$, request, options) {
+async function $do58(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListListEntriesRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -62880,12 +63112,12 @@ var init_listsList = __esm(() => {
 });
 
 // src/mcp-server/tools/listsList.ts
-var args57, tool$listsList;
+var args58, tool$listsList;
 var init_listsList2 = __esm(() => {
   init_listsList();
   init_listlistentriesop();
   init_tools();
-  args57 = {
+  args58 = {
     request: ListListEntriesRequest$zodSchema
   };
   tool$listsList = {
@@ -62900,7 +63132,7 @@ Page through this environment allow and block entries, with canonical values, re
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args57,
+    args: args58,
     tool: async (client, args, ctx) => {
       const [result] = await listsList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -63032,9 +63264,9 @@ var init_previewlistop = __esm(() => {
 
 // src/funcs/listsPreview.ts
 function listsPreview(client$, request, options) {
-  return new APIPromise($do58(client$, request, options));
+  return new APIPromise($do59(client$, request, options));
 }
-async function $do58(client$, request, options) {
+async function $do59(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => PreviewListRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -63121,12 +63353,12 @@ var init_listsPreview = __esm(() => {
 });
 
 // src/mcp-server/tools/listsPreview.ts
-var args58, tool$listsPreview;
+var args59, tool$listsPreview;
 var init_listsPreview2 = __esm(() => {
   init_listsPreview();
   init_previewlistop();
   init_tools();
-  args58 = {
+  args59 = {
     request: PreviewListRequest$zodSchema
   };
   tool$listsPreview = {
@@ -63141,7 +63373,7 @@ Preview canonical list matches and current override effects with settings or man
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args58,
+    args: args59,
     tool: async (client, args, ctx) => {
       const [result] = await listsPreview(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -63244,9 +63476,9 @@ var init_listmembersop = __esm(() => {
 
 // src/funcs/membersList.ts
 function membersList(client$, request, options) {
-  return new APIPromise($do59(client$, request, options));
+  return new APIPromise($do60(client$, request, options));
 }
-async function $do59(client$, request, options) {
+async function $do60(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListMembersRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -63328,12 +63560,12 @@ var init_membersList = __esm(() => {
 });
 
 // src/mcp-server/tools/membersList.ts
-var args59, tool$membersList;
+var args60, tool$membersList;
 var init_membersList2 = __esm(() => {
   init_membersList();
   init_listmembersop();
   init_tools();
-  args59 = {
+  args60 = {
     request: ListMembersRequest$zodSchema
   };
   tool$membersList = {
@@ -63348,7 +63580,7 @@ Read the workspace directory with a live key carrying members or members_manage.
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args59,
+    args: args60,
     tool: async (client, args, ctx) => {
       const [result] = await membersList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -63399,9 +63631,9 @@ var init_removememberop = __esm(() => {
 
 // src/funcs/membersRemove.ts
 function membersRemove(client$, request, options) {
-  return new APIPromise($do60(client$, request, options));
+  return new APIPromise($do61(client$, request, options));
 }
-async function $do60(client$, request, options) {
+async function $do61(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RemoveMemberRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -63487,12 +63719,12 @@ var init_membersRemove = __esm(() => {
 });
 
 // src/mcp-server/tools/membersRemove.ts
-var args60, tool$membersRemove;
+var args61, tool$membersRemove;
 var init_membersRemove2 = __esm(() => {
   init_membersRemove();
   init_removememberop();
   init_tools();
-  args60 = {
+  args61 = {
     request: RemoveMemberRequest$zodSchema
   };
   tool$membersRemove = {
@@ -63507,7 +63739,7 @@ Remove a non-owner member with a live members_manage key. Subsequent access is r
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args60,
+    args: args61,
     tool: async (client, args, ctx) => {
       const [result] = await membersRemove(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -63584,9 +63816,9 @@ var init_updatememberop = __esm(() => {
 
 // src/funcs/membersUpdate.ts
 function membersUpdate(client$, request, options) {
-  return new APIPromise($do61(client$, request, options));
+  return new APIPromise($do62(client$, request, options));
 }
-async function $do61(client$, request, options) {
+async function $do62(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateMemberRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -63673,12 +63905,12 @@ var init_membersUpdate = __esm(() => {
 });
 
 // src/mcp-server/tools/membersUpdate.ts
-var args61, tool$membersUpdate;
+var args62, tool$membersUpdate;
 var init_membersUpdate2 = __esm(() => {
   init_membersUpdate();
   init_updatememberop();
   init_tools();
-  args61 = {
+  args62 = {
     request: UpdateMemberRequest$zodSchema
   };
   tool$membersUpdate = {
@@ -63693,7 +63925,7 @@ Update a non-owner member role, environment access or sensitive permission exclu
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args61,
+    args: args62,
     tool: async (client, args, ctx) => {
       const [result] = await membersUpdate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -63870,9 +64102,9 @@ var init_summarizeworkspaceoperationsop = __esm(() => {
 
 // src/funcs/operationsSummarize.ts
 function operationsSummarize(client$, request, options) {
-  return new APIPromise($do62(client$, request, options));
+  return new APIPromise($do63(client$, request, options));
 }
-async function $do62(client$, request, options) {
+async function $do63(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => SummarizeWorkspaceOperationsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -63955,12 +64187,12 @@ var init_operationsSummarize = __esm(() => {
 });
 
 // src/mcp-server/tools/operationsSummarize.ts
-var args62, tool$operationsSummarize;
+var args63, tool$operationsSummarize;
 var init_operationsSummarize2 = __esm(() => {
   init_operationsSummarize();
   init_summarizeworkspaceoperationsop();
   init_tools();
-  args62 = {
+  args63 = {
     request: SummarizeWorkspaceOperationsRequest$zodSchema
   };
   tool$operationsSummarize = {
@@ -63975,7 +64207,7 @@ Read one retained snapshot of account outcomes, enforcement reports and review s
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args62,
+    args: args63,
     tool: async (client, args, ctx) => {
       const [result] = await operationsSummarize(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -64016,9 +64248,9 @@ var init_requestaggregaterequest = __esm(() => {
 
 // src/funcs/requestsAggregate.ts
 function requestsAggregate(client$, request, options) {
-  return new APIPromise($do63(client$, request, options));
+  return new APIPromise($do64(client$, request, options));
 }
-async function $do63(client$, request, options) {
+async function $do64(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RequestAggregateRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -64095,12 +64327,12 @@ var init_requestsAggregate = __esm(() => {
 });
 
 // src/mcp-server/tools/requestsAggregate.ts
-var args63, tool$requestsAggregate;
+var args64, tool$requestsAggregate;
 var init_requestsAggregate2 = __esm(() => {
   init_requestsAggregate();
   init_requestaggregaterequest();
   init_tools();
-  args63 = {
+  args64 = {
     request: RequestAggregateRequest$zodSchema
   };
   tool$requestsAggregate = {
@@ -64115,7 +64347,7 @@ Count all retained matching request attempts and latency samples within seven da
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args63,
+    args: args64,
     tool: async (client, args, ctx) => {
       const [result] = await requestsAggregate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -64186,9 +64418,9 @@ var init_listrequestdiagnosticsop = __esm(() => {
 
 // src/funcs/requestsList.ts
 function requestsList(client$, request, options) {
-  return new APIPromise($do64(client$, request, options));
+  return new APIPromise($do65(client$, request, options));
 }
-async function $do64(client$, request, options) {
+async function $do65(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListRequestDiagnosticsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -64275,12 +64507,12 @@ var init_requestsList = __esm(() => {
 });
 
 // src/mcp-server/tools/requestsList.ts
-var args64, tool$requestsList;
+var args65, tool$requestsList;
 var init_requestsList2 = __esm(() => {
   init_requestsList();
   init_listrequestdiagnosticsop();
   init_tools();
-  args64 = {
+  args65 = {
     request: ListRequestDiagnosticsRequest$zodSchema
   };
   tool$requestsList = {
@@ -64295,7 +64527,7 @@ Search authenticated request attempts by time, route, status or request correlat
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args64,
+    args: args65,
     tool: async (client, args, ctx) => {
       const [result] = await requestsList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -64410,9 +64642,9 @@ var init_addreviewsubjectop = __esm(() => {
 
 // src/funcs/reviewsAddSubject.ts
 function reviewsAddSubject(client$, request, options) {
-  return new APIPromise($do65(client$, request, options));
+  return new APIPromise($do66(client$, request, options));
 }
-async function $do65(client$, request, options) {
+async function $do66(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => AddReviewSubjectRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -64490,12 +64722,12 @@ var init_reviewsAddSubject = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsAddSubject.ts
-var args65, tool$reviewsAddSubject;
+var args66, tool$reviewsAddSubject;
 var init_reviewsAddSubject2 = __esm(() => {
   init_reviewsAddSubject();
   init_addreviewsubjectop();
   init_tools();
-  args65 = {
+  args66 = {
     request: AddReviewSubjectRequest$zodSchema
   };
   tool$reviewsAddSubject = {
@@ -64510,7 +64742,7 @@ Link an account, exact assessment revision or issued-key association within this
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args65,
+    args: args66,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsAddSubject(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -64591,9 +64823,9 @@ var init_commentreviewop = __esm(() => {
 
 // src/funcs/reviewsComment.ts
 function reviewsComment(client$, request, options) {
-  return new APIPromise($do66(client$, request, options));
+  return new APIPromise($do67(client$, request, options));
 }
-async function $do66(client$, request, options) {
+async function $do67(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CommentReviewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -64671,12 +64903,12 @@ var init_reviewsComment = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsComment.ts
-var args66, tool$reviewsComment;
+var args67, tool$reviewsComment;
 var init_reviewsComment2 = __esm(() => {
   init_reviewsComment();
   init_commentreviewop();
   init_tools();
-  args66 = {
+  args67 = {
     request: CommentReviewRequest$zodSchema
   };
   tool$reviewsComment = {
@@ -64691,7 +64923,7 @@ Append a comment after checking the expected review version.`,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args66,
+    args: args67,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsComment(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -64764,7 +64996,7 @@ var init_review = __esm(() => {
   init_resolution();
   init_reviewstatus();
   Review$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     assignee: string2().optional(),
     assignee_principal_id: string2().optional().describe("Immutable workspace member ID. assignee is the historical display identity captured at assignment."),
     created_at: string2(),
@@ -64788,7 +65020,7 @@ var init_reviewcreaterequest = __esm(() => {
   init_zod();
   init_priority();
   ReviewCreateRequest$zodSchema = object({
-    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
+    account_id: string2().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     assignee: string2().optional(),
     priority: Priority$zodSchema.optional()
   });
@@ -64837,9 +65069,9 @@ var init_createreviewop = __esm(() => {
 
 // src/funcs/reviewsCreate.ts
 function reviewsCreate(client$, request, options) {
-  return new APIPromise($do67(client$, request, options));
+  return new APIPromise($do68(client$, request, options));
 }
-async function $do67(client$, request, options) {
+async function $do68(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CreateReviewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -64913,12 +65145,12 @@ var init_reviewsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsCreate.ts
-var args67, tool$reviewsCreate;
+var args68, tool$reviewsCreate;
 var init_reviewsCreate2 = __esm(() => {
   init_reviewsCreate();
   init_createreviewop();
   init_tools();
-  args67 = {
+  args68 = {
     request: CreateReviewRequest$zodSchema
   };
   tool$reviewsCreate = {
@@ -64933,7 +65165,7 @@ Open a review for one account. An account can have one active review in its envi
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args67,
+    args: args68,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -65049,9 +65281,9 @@ var init_createreviewviewop = __esm(() => {
 
 // src/funcs/reviewsCreateView.ts
 function reviewsCreateView(client$, request, options) {
-  return new APIPromise($do68(client$, request, options));
+  return new APIPromise($do69(client$, request, options));
 }
-async function $do68(client$, request, options) {
+async function $do69(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => CreateReviewViewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -65125,12 +65357,12 @@ var init_reviewsCreateView = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsCreateView.ts
-var args68, tool$reviewsCreateView;
+var args69, tool$reviewsCreateView;
 var init_reviewsCreateView2 = __esm(() => {
   init_reviewsCreateView();
   init_createreviewviewop();
   init_tools();
-  args68 = {
+  args69 = {
     request: CreateReviewViewRequest$zodSchema
   };
   tool$reviewsCreateView = {
@@ -65145,7 +65377,7 @@ Save a private or shared review filter.`,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args68,
+    args: args69,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsCreateView(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -65213,9 +65445,9 @@ var init_deletereviewsubjectop = __esm(() => {
 
 // src/funcs/reviewsDeleteSubject.ts
 function reviewsDeleteSubject(client$, request, options) {
-  return new APIPromise($do69(client$, request, options));
+  return new APIPromise($do70(client$, request, options));
 }
-async function $do69(client$, request, options) {
+async function $do70(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DeleteReviewSubjectRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -65310,12 +65542,12 @@ var init_reviewsDeleteSubject = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsDeleteSubject.ts
-var args69, tool$reviewsDeleteSubject;
+var args70, tool$reviewsDeleteSubject;
 var init_reviewsDeleteSubject2 = __esm(() => {
   init_reviewsDeleteSubject();
   init_deletereviewsubjectop();
   init_tools();
-  args69 = {
+  args70 = {
     request: DeleteReviewSubjectRequest$zodSchema
   };
   tool$reviewsDeleteSubject = {
@@ -65330,7 +65562,7 @@ Remove a subject link with the expected review version. The linked account, asse
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args69,
+    args: args70,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsDeleteSubject(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -65385,9 +65617,9 @@ var init_deletereviewviewop = __esm(() => {
 
 // src/funcs/reviewsDeleteView.ts
 function reviewsDeleteView(client$, request, options) {
-  return new APIPromise($do70(client$, request, options));
+  return new APIPromise($do71(client$, request, options));
 }
-async function $do70(client$, request, options) {
+async function $do71(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DeleteReviewViewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -65478,12 +65710,12 @@ var init_reviewsDeleteView = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsDeleteView.ts
-var args70, tool$reviewsDeleteView;
+var args71, tool$reviewsDeleteView;
 var init_reviewsDeleteView2 = __esm(() => {
   init_reviewsDeleteView();
   init_deletereviewviewop();
   init_tools();
-  args70 = {
+  args71 = {
     request: DeleteReviewViewRequest$zodSchema
   };
   tool$reviewsDeleteView = {
@@ -65498,7 +65730,7 @@ Delete your saved review filter after checking its expected version.`,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args70,
+    args: args71,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsDeleteView(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -65571,9 +65803,9 @@ var init_exportreviewop = __esm(() => {
 
 // src/funcs/reviewsExport.ts
 function reviewsExport(client$, request, options) {
-  return new APIPromise($do71(client$, request, options));
+  return new APIPromise($do72(client$, request, options));
 }
-async function $do71(client$, request, options) {
+async function $do72(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ExportReviewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -65663,12 +65895,12 @@ var init_reviewsExport = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsExport.ts
-var args71, tool$reviewsExport;
+var args72, tool$reviewsExport;
 var init_reviewsExport2 = __esm(() => {
   init_reviewsExport();
   init_exportreviewop();
   init_tools();
-  args71 = {
+  args72 = {
     request: ExportReviewRequest$zodSchema
   };
   tool$reviewsExport = {
@@ -65683,7 +65915,7 @@ Export retained review details, comments, resolutions and linked subjects. Requi
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args71,
+    args: args72,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsExport(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -65739,9 +65971,9 @@ var init_getreviewop = __esm(() => {
 
 // src/funcs/reviewsGet.ts
 function reviewsGet(client$, request, options) {
-  return new APIPromise($do72(client$, request, options));
+  return new APIPromise($do73(client$, request, options));
 }
-async function $do72(client$, request, options) {
+async function $do73(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetReviewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -65831,12 +66063,12 @@ var init_reviewsGet = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsGet.ts
-var args72, tool$reviewsGet;
+var args73, tool$reviewsGet;
 var init_reviewsGet2 = __esm(() => {
   init_reviewsGet();
   init_getreviewop();
   init_tools();
-  args72 = {
+  args73 = {
     request: GetReviewRequest$zodSchema
   };
   tool$reviewsGet = {
@@ -65851,7 +66083,7 @@ Read a retained review and its current version.`,
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args72,
+    args: args73,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -65927,9 +66159,9 @@ var init_listreviewsop = __esm(() => {
 
 // src/funcs/reviewsList.ts
 function reviewsList(client$, request, options) {
-  return new APIPromise($do73(client$, request, options));
+  return new APIPromise($do74(client$, request, options));
 }
-async function $do73(client$, request, options) {
+async function $do74(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListReviewsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -66026,12 +66258,12 @@ var init_reviewsList = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsList.ts
-var args73, tool$reviewsList;
+var args74, tool$reviewsList;
 var init_reviewsList2 = __esm(() => {
   init_reviewsList();
   init_listreviewsop();
   init_tools();
-  args73 = {
+  args74 = {
     request: ListReviewsRequest$zodSchema
   };
   tool$reviewsList = {
@@ -66046,7 +66278,7 @@ List retained investigation reviews using filters and an authenticated cursor. O
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args73,
+    args: args74,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -66115,9 +66347,9 @@ var init_listreviewcommentsop = __esm(() => {
 
 // src/funcs/reviewsListComments.ts
 function reviewsListComments(client$, request, options) {
-  return new APIPromise($do74(client$, request, options));
+  return new APIPromise($do75(client$, request, options));
 }
-async function $do74(client$, request, options) {
+async function $do75(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListReviewCommentsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -66212,12 +66444,12 @@ var init_reviewsListComments = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsListComments.ts
-var args74, tool$reviewsListComments;
+var args75, tool$reviewsListComments;
 var init_reviewsListComments2 = __esm(() => {
   init_reviewsListComments();
   init_listreviewcommentsop();
   init_tools();
-  args74 = {
+  args75 = {
     request: ListReviewCommentsRequest$zodSchema
   };
   tool$reviewsListComments = {
@@ -66232,7 +66464,7 @@ Page through retained review comments.`,
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args74,
+    args: args75,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsListComments(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -66301,9 +66533,9 @@ var init_listreviewresolutionsop = __esm(() => {
 
 // src/funcs/reviewsListResolutions.ts
 function reviewsListResolutions(client$, request, options) {
-  return new APIPromise($do75(client$, request, options));
+  return new APIPromise($do76(client$, request, options));
 }
-async function $do75(client$, request, options) {
+async function $do76(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListReviewResolutionsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -66398,12 +66630,12 @@ var init_reviewsListResolutions = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsListResolutions.ts
-var args75, tool$reviewsListResolutions;
+var args76, tool$reviewsListResolutions;
 var init_reviewsListResolutions2 = __esm(() => {
   init_reviewsListResolutions();
   init_listreviewresolutionsop();
   init_tools();
-  args75 = {
+  args76 = {
     request: ListReviewResolutionsRequest$zodSchema
   };
   tool$reviewsListResolutions = {
@@ -66418,7 +66650,7 @@ Page through immutable review resolutions.`,
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args75,
+    args: args76,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsListResolutions(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -66485,9 +66717,9 @@ var init_listreviewsubjectsop = __esm(() => {
 
 // src/funcs/reviewsListSubjects.ts
 function reviewsListSubjects(client$, request, options) {
-  return new APIPromise($do76(client$, request, options));
+  return new APIPromise($do77(client$, request, options));
 }
-async function $do76(client$, request, options) {
+async function $do77(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListReviewSubjectsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -66577,12 +66809,12 @@ var init_reviewsListSubjects = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsListSubjects.ts
-var args76, tool$reviewsListSubjects;
+var args77, tool$reviewsListSubjects;
 var init_reviewsListSubjects2 = __esm(() => {
   init_reviewsListSubjects();
   init_listreviewsubjectsop();
   init_tools();
-  args76 = {
+  args77 = {
     request: ListReviewSubjectsRequest$zodSchema
   };
   tool$reviewsListSubjects = {
@@ -66597,7 +66829,7 @@ List retained subjects linked to this review. A link supplies investigation cont
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args76,
+    args: args77,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsListSubjects(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -66662,9 +66894,9 @@ var init_listreviewviewsop = __esm(() => {
 
 // src/funcs/reviewsListViews.ts
 function reviewsListViews(client$, request, options) {
-  return new APIPromise($do77(client$, request, options));
+  return new APIPromise($do78(client$, request, options));
 }
-async function $do77(client$, request, options) {
+async function $do78(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListReviewViewsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -66750,12 +66982,12 @@ var init_reviewsListViews = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsListViews.ts
-var args77, tool$reviewsListViews;
+var args78, tool$reviewsListViews;
 var init_reviewsListViews2 = __esm(() => {
   init_reviewsListViews();
   init_listreviewviewsop();
   init_tools();
-  args77 = {
+  args78 = {
     request: ListReviewViewsRequest$zodSchema
   };
   tool$reviewsListViews = {
@@ -66770,7 +67002,7 @@ List private and shared saved review filters visible to you.`,
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args77,
+    args: args78,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsListViews(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -66841,9 +67073,9 @@ var init_resolvereviewop = __esm(() => {
 
 // src/funcs/reviewsResolve.ts
 function reviewsResolve(client$, request, options) {
-  return new APIPromise($do78(client$, request, options));
+  return new APIPromise($do79(client$, request, options));
 }
-async function $do78(client$, request, options) {
+async function $do79(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ResolveReviewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -66921,12 +67153,12 @@ var init_reviewsResolve = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsResolve.ts
-var args78, tool$reviewsResolve;
+var args79, tool$reviewsResolve;
 var init_reviewsResolve2 = __esm(() => {
   init_reviewsResolve();
   init_resolvereviewop();
   init_tools();
-  args78 = {
+  args79 = {
     request: ResolveReviewRequest$zodSchema
   };
   tool$reviewsResolve = {
@@ -66941,7 +67173,7 @@ Resolve a review against the exact current review and account decision versions.
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args78,
+    args: args79,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsResolve(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67023,9 +67255,9 @@ var init_updatereviewop = __esm(() => {
 
 // src/funcs/reviewsUpdate.ts
 function reviewsUpdate(client$, request, options) {
-  return new APIPromise($do79(client$, request, options));
+  return new APIPromise($do80(client$, request, options));
 }
-async function $do79(client$, request, options) {
+async function $do80(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateReviewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67103,12 +67335,12 @@ var init_reviewsUpdate = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsUpdate.ts
-var args79, tool$reviewsUpdate;
+var args80, tool$reviewsUpdate;
 var init_reviewsUpdate2 = __esm(() => {
   init_reviewsUpdate();
   init_updatereviewop();
   init_tools();
-  args79 = {
+  args80 = {
     request: UpdateReviewRequest$zodSchema
   };
   tool$reviewsUpdate = {
@@ -67123,7 +67355,7 @@ Change review status, priority or assignment after checking the expected version
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args79,
+    args: args80,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsUpdate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67181,9 +67413,9 @@ var init_updatereviewviewop = __esm(() => {
 
 // src/funcs/reviewsUpdateView.ts
 function reviewsUpdateView(client$, request, options) {
-  return new APIPromise($do80(client$, request, options));
+  return new APIPromise($do81(client$, request, options));
 }
-async function $do80(client$, request, options) {
+async function $do81(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateReviewViewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67261,12 +67493,12 @@ var init_reviewsUpdateView = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsUpdateView.ts
-var args80, tool$reviewsUpdateView;
+var args81, tool$reviewsUpdateView;
 var init_reviewsUpdateView2 = __esm(() => {
   init_reviewsUpdateView();
   init_updatereviewviewop();
   init_tools();
-  args80 = {
+  args81 = {
     request: UpdateReviewViewRequest$zodSchema
   };
   tool$reviewsUpdateView = {
@@ -67281,7 +67513,7 @@ Update your saved review filter after checking its expected version.`,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args80,
+    args: args81,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsUpdateView(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67336,9 +67568,9 @@ var init_getsettingsop = __esm(() => {
 
 // src/funcs/settingsGet.ts
 function settingsGet(client$, request, options) {
-  return new APIPromise($do81(client$, request, options));
+  return new APIPromise($do82(client$, request, options));
 }
-async function $do81(client$, request, options) {
+async function $do82(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetSettingsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67424,12 +67656,12 @@ var init_settingsGet = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsGet.ts
-var args81, tool$settingsGet;
+var args82, tool$settingsGet;
 var init_settingsGet2 = __esm(() => {
   init_settingsGet();
   init_getsettingsop();
   init_tools();
-  args81 = {
+  args82 = {
     request: GetSettingsRequest$zodSchema
   };
   tool$settingsGet = {
@@ -67444,7 +67676,7 @@ Read this environment retention, source selection and effective flow policies. A
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args81,
+    args: args82,
     tool: async (client, args, ctx) => {
       const [result] = await settingsGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67547,9 +67779,9 @@ var init_listpolicyhistoryop = __esm(() => {
 
 // src/funcs/settingsListHistory.ts
 function settingsListHistory(client$, request, options) {
-  return new APIPromise($do82(client$, request, options));
+  return new APIPromise($do83(client$, request, options));
 }
-async function $do82(client$, request, options) {
+async function $do83(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListPolicyHistoryRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67640,12 +67872,12 @@ var init_settingsListHistory = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsListHistory.ts
-var args82, tool$settingsListHistory;
+var args83, tool$settingsListHistory;
 var init_settingsListHistory2 = __esm(() => {
   init_settingsListHistory();
   init_listpolicyhistoryop();
   init_tools();
-  args82 = {
+  args83 = {
     request: ListPolicyHistoryRequest$zodSchema
   };
   tool$settingsListHistory = {
@@ -67660,7 +67892,7 @@ Read immutable configuration versions in one environment with settings or manage
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args82,
+    args: args83,
     tool: async (client, args, ctx) => {
       const [result] = await settingsListHistory(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67839,9 +68071,9 @@ var init_previewpolicyop = __esm(() => {
 
 // src/funcs/settingsPreview.ts
 function settingsPreview(client$, request, options) {
-  return new APIPromise($do83(client$, request, options));
+  return new APIPromise($do84(client$, request, options));
 }
-async function $do83(client$, request, options) {
+async function $do84(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => PreviewPolicyRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67928,12 +68160,12 @@ var init_settingsPreview = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsPreview.ts
-var args83, tool$settingsPreview;
+var args84, tool$settingsPreview;
 var init_settingsPreview2 = __esm(() => {
   init_settingsPreview();
   init_previewpolicyop();
   init_tools();
-  args83 = {
+  args84 = {
     request: PreviewPolicyRequest$zodSchema
   };
   tool$settingsPreview = {
@@ -67948,7 +68180,7 @@ Compare proposed policy with bounded retained first answers, including baseline,
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args83,
+    args: args84,
     tool: async (client, args, ctx) => {
       const [result] = await settingsPreview(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68016,9 +68248,9 @@ var init_restorepolicyop = __esm(() => {
 
 // src/funcs/settingsRestore.ts
 function settingsRestore(client$, request, options) {
-  return new APIPromise($do84(client$, request, options));
+  return new APIPromise($do85(client$, request, options));
 }
-async function $do84(client$, request, options) {
+async function $do85(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RestorePolicyRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68092,12 +68324,12 @@ var init_settingsRestore = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsRestore.ts
-var args84, tool$settingsRestore;
+var args85, tool$settingsRestore;
 var init_settingsRestore2 = __esm(() => {
   init_settingsRestore();
   init_restorepolicyop();
   init_tools();
-  args84 = {
+  args85 = {
     request: RestorePolicyRequest$zodSchema
   };
   tool$settingsRestore = {
@@ -68112,7 +68344,7 @@ Restore a retained configuration as a fresh version with the expected current ve
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args84,
+    args: args85,
     tool: async (client, args, ctx) => {
       const [result] = await settingsRestore(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68217,9 +68449,9 @@ var init_updatesettingsop = __esm(() => {
 
 // src/funcs/settingsUpdate.ts
 function settingsUpdate(client$, request, options) {
-  return new APIPromise($do85(client$, request, options));
+  return new APIPromise($do86(client$, request, options));
 }
-async function $do85(client$, request, options) {
+async function $do86(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateSettingsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68306,12 +68538,12 @@ var init_settingsUpdate = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsUpdate.ts
-var args85, tool$settingsUpdate;
+var args86, tool$settingsUpdate;
 var init_settingsUpdate2 = __esm(() => {
   init_settingsUpdate();
   init_updatesettingsop();
   init_tools();
-  args85 = {
+  args86 = {
     request: UpdateSettingsRequest$zodSchema
   };
   tool$settingsUpdate = {
@@ -68326,7 +68558,7 @@ Change named retention, source or flow settings in one transaction. Requires set
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args85,
+    args: args86,
     tool: async (client, args, ctx) => {
       const [result] = await settingsUpdate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68447,9 +68679,9 @@ var init_getusageop = __esm(() => {
 
 // src/funcs/usageGet.ts
 function usageGet(client$, request, options) {
-  return new APIPromise($do86(client$, request, options));
+  return new APIPromise($do87(client$, request, options));
 }
-async function $do86(client$, request, options) {
+async function $do87(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetUsageRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68536,12 +68768,12 @@ var init_usageGet = __esm(() => {
 });
 
 // src/mcp-server/tools/usageGet.ts
-var args86, tool$usageGet;
+var args87, tool$usageGet;
 var init_usageGet2 = __esm(() => {
   init_usageGet();
   init_getusageop();
   init_tools();
-  args86 = {
+  args87 = {
     request: GetUsageRequest$zodSchema
   };
   tool$usageGet = {
@@ -68556,7 +68788,7 @@ Read daily usage units for the environments you can access. These counts are unp
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args86,
+    args: args87,
     tool: async (client, args, ctx) => {
       const [result] = await usageGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68586,9 +68818,9 @@ var init_webhookaggregaterequest = __esm(() => {
 
 // src/funcs/webhookEndpointsAggregate.ts
 function webhookEndpointsAggregate(client$, request, options) {
-  return new APIPromise($do87(client$, request, options));
+  return new APIPromise($do88(client$, request, options));
 }
-async function $do87(client$, request, options) {
+async function $do88(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => WebhookAggregateRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68665,12 +68897,12 @@ var init_webhookEndpointsAggregate = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsAggregate.ts
-var args87, tool$webhookEndpointsAggregate;
+var args88, tool$webhookEndpointsAggregate;
 var init_webhookEndpointsAggregate2 = __esm(() => {
   init_webhookEndpointsAggregate();
   init_webhookaggregaterequest();
   init_tools();
-  args87 = {
+  args88 = {
     request: WebhookAggregateRequest$zodSchema
   };
   tool$webhookEndpointsAggregate = {
@@ -68685,7 +68917,7 @@ Count retained webhook delivery attempts within thirty days and report current r
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args87,
+    args: args88,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsAggregate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68712,9 +68944,9 @@ var init_webhookendpointrequest = __esm(() => {
 
 // src/funcs/webhookEndpointsCreate.ts
 function webhookEndpointsCreate(client$, request, options) {
-  return new APIPromise($do88(client$, request, options));
+  return new APIPromise($do89(client$, request, options));
 }
-async function $do88(client$, request, options) {
+async function $do89(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => WebhookEndpointRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68778,12 +69010,12 @@ var init_webhookEndpointsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsCreate.ts
-var args88, tool$webhookEndpointsCreate;
+var args89, tool$webhookEndpointsCreate;
 var init_webhookEndpointsCreate2 = __esm(() => {
   init_webhookEndpointsCreate();
   init_webhookendpointrequest();
   init_tools();
-  args88 = {
+  args89 = {
     request: WebhookEndpointRequest$zodSchema
   };
   tool$webhookEndpointsCreate = {
@@ -68798,7 +69030,7 @@ Registers a webhook endpoint and returns it with its first signing secret, shown
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args88,
+    args: args89,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68848,9 +69080,9 @@ var init_deletewebhookendpointop = __esm(() => {
 
 // src/funcs/webhookEndpointsDelete.ts
 function webhookEndpointsDelete(client$, request, options) {
-  return new APIPromise($do89(client$, request, options));
+  return new APIPromise($do90(client$, request, options));
 }
-async function $do89(client$, request, options) {
+async function $do90(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DeleteWebhookEndpointRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68932,12 +69164,12 @@ var init_webhookEndpointsDelete = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsDelete.ts
-var args89, tool$webhookEndpointsDelete;
+var args90, tool$webhookEndpointsDelete;
 var init_webhookEndpointsDelete2 = __esm(() => {
   init_webhookEndpointsDelete();
   init_deletewebhookendpointop();
   init_tools();
-  args89 = {
+  args90 = {
     request: DeleteWebhookEndpointRequest$zodSchema
   };
   tool$webhookEndpointsDelete = {
@@ -68952,7 +69184,7 @@ Deletes the endpoint and its signing keys. Deliveries still queued for it are dr
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args89,
+    args: args90,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsDelete(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68968,9 +69200,9 @@ Deletes the endpoint and its signing keys. Deliveries still queued for it are dr
 
 // src/funcs/webhookEndpointsList.ts
 function webhookEndpointsList(client$, options) {
-  return new APIPromise($do90(client$, options));
+  return new APIPromise($do91(client$, options));
 }
-async function $do90(client$, options) {
+async function $do91(client$, options) {
   const path$ = pathToFunc("/v1/webhooks")();
   const headers$ = new Headers(compactMap({
     Accept: options?.acceptHeaderOverride || "application/json;q=1, application/problem+json;q=0"
@@ -69162,9 +69394,9 @@ var init_listwebhookdeliveriesop = __esm(() => {
 
 // src/funcs/webhookEndpointsListDeliveries.ts
 function webhookEndpointsListDeliveries(client$, request, options) {
-  return new APIPromise($do91(client$, request, options));
+  return new APIPromise($do92(client$, request, options));
 }
-async function $do91(client$, request, options) {
+async function $do92(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListWebhookDeliveriesRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69251,12 +69483,12 @@ var init_webhookEndpointsListDeliveries = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsListDeliveries.ts
-var args90, tool$webhookEndpointsListDeliveries;
+var args91, tool$webhookEndpointsListDeliveries;
 var init_webhookEndpointsListDeliveries2 = __esm(() => {
   init_webhookEndpointsListDeliveries();
   init_listwebhookdeliveriesop();
   init_tools();
-  args90 = {
+  args91 = {
     request: ListWebhookDeliveriesRequest$zodSchema
   };
   tool$webhookEndpointsListDeliveries = {
@@ -69271,7 +69503,7 @@ Every POST the endpoint received, newest first: the event id and type, which att
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args90,
+    args: args91,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsListDeliveries(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69345,9 +69577,9 @@ var init_replaywebhookdeliveryop = __esm(() => {
 
 // src/funcs/webhookEndpointsReplayDelivery.ts
 function webhookEndpointsReplayDelivery(client$, request, options) {
-  return new APIPromise($do92(client$, request, options));
+  return new APIPromise($do93(client$, request, options));
 }
-async function $do92(client$, request, options) {
+async function $do93(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ReplayWebhookDeliveryRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69421,12 +69653,12 @@ var init_webhookEndpointsReplayDelivery = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsReplayDelivery.ts
-var args91, tool$webhookEndpointsReplayDelivery;
+var args92, tool$webhookEndpointsReplayDelivery;
 var init_webhookEndpointsReplayDelivery2 = __esm(() => {
   init_webhookEndpointsReplayDelivery();
   init_replaywebhookdeliveryop();
   init_tools();
-  args91 = {
+  args92 = {
     request: ReplayWebhookDeliveryRequest$zodSchema
   };
   tool$webhookEndpointsReplayDelivery = {
@@ -69441,7 +69673,7 @@ Queues the event for the endpoint again: the same event id and body it received,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args91,
+    args: args92,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsReplayDelivery(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69527,9 +69759,9 @@ var init_rotatewebhooksigningkeyop = __esm(() => {
 
 // src/funcs/webhookEndpointsRotateSigningKey.ts
 function webhookEndpointsRotateSigningKey(client$, request, options) {
-  return new APIPromise($do93(client$, request, options));
+  return new APIPromise($do94(client$, request, options));
 }
-async function $do93(client$, request, options) {
+async function $do94(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RotateWebhookSigningKeyRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69599,12 +69831,12 @@ var init_webhookEndpointsRotateSigningKey = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsRotateSigningKey.ts
-var args92, tool$webhookEndpointsRotateSigningKey;
+var args93, tool$webhookEndpointsRotateSigningKey;
 var init_webhookEndpointsRotateSigningKey2 = __esm(() => {
   init_webhookEndpointsRotateSigningKey();
   init_rotatewebhooksigningkeyop();
   init_tools();
-  args92 = {
+  args93 = {
     request: RotateWebhookSigningKeyRequest$zodSchema
   };
   tool$webhookEndpointsRotateSigningKey = {
@@ -69619,7 +69851,7 @@ Issues a new signing key for the endpoint and returns its secret once. Every del
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args92,
+    args: args93,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsRotateSigningKey(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69709,9 +69941,9 @@ var init_sendwebhooktesteventop = __esm(() => {
 
 // src/funcs/webhookEndpointsSendTestEvent.ts
 function webhookEndpointsSendTestEvent(client$, request, options) {
-  return new APIPromise($do94(client$, request, options));
+  return new APIPromise($do95(client$, request, options));
 }
-async function $do94(client$, request, options) {
+async function $do95(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => SendWebhookTestEventRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69781,12 +70013,12 @@ var init_webhookEndpointsSendTestEvent = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsSendTestEvent.ts
-var args93, tool$webhookEndpointsSendTestEvent;
+var args94, tool$webhookEndpointsSendTestEvent;
 var init_webhookEndpointsSendTestEvent2 = __esm(() => {
   init_webhookEndpointsSendTestEvent();
   init_sendwebhooktesteventop();
   init_tools();
-  args93 = {
+  args94 = {
     request: SendWebhookTestEventRequest$zodSchema
   };
   tool$webhookEndpointsSendTestEvent = {
@@ -69801,7 +70033,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args93,
+    args: args94,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsSendTestEvent(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69819,7 +70051,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "NoResponse",
-    version: "0.11.0"
+    version: "0.11.2"
   });
   const getClient = deps.getSDK || (() => new NoResponseCore({
     security: deps.security,
@@ -69851,6 +70083,7 @@ function createMCPServer(deps) {
   tool(tool$accountsGet);
   tool(tool$accountsDelete);
   tool(tool$accountsListAssessments);
+  tool(tool$accountsListLinked);
   tool(tool$accountsRecordEnforcement);
   tool(tool$accountsListEnforcements);
   tool(tool$accountsRecordOutcome);
@@ -69954,6 +70187,7 @@ var init_server = __esm(() => {
   init_accountsListCredentials2();
   init_accountsListDecisions2();
   init_accountsListEnforcements2();
+  init_accountsListLinked2();
   init_accountsListOutcomes2();
   init_accountsRecordEnforcement2();
   init_accountsRecordOutcome2();
@@ -70122,6 +70356,12 @@ Erases the account in the environment of your key, for an erasure request from y
       description: `Page through one account's unexpired assessments.
 
 The account's history: the same page as POST /v1/assessments/query for this account_id, newest first, each at its latest assessment_version. Requires the history scope. Read-only and safe to retry. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your workspace and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope. Each item's identifiers holds the identifiers its assessment was sent, exactly as received. The account_id travels in the URL; use POST /v1/assessments/query to keep it out of access logs.`
+    },
+    {
+      name: "list_linked_accounts",
+      description: `List accounts that share a submitted identifier with this account.
+
+Lists the other accounts in this environment whose retained assessments submitted an email, phone or customer-namespace username that one of this account's retained assessments also submitted. Matching uses the identifier search rules: exact, canonical and, for email, mailbox. Each linked account names one entry per shared kind, at the strictest basis that links the two accounts, with the original value, assessment_id and submitted_at of each account's newest retained submission of it. Only customer-submitted identifiers link accounts; source-discovered identifiers do not. Expired, deleted and erased assessments link nothing. The account itself is not listed, and an account with no retained submissions answers 200 with empty items. A shared identifier is not verified ownership. Totals are exact below 10000 and capped at 10000. The cursor is opaque, expiring and bound to your workspace, environment and the account; a tampered or expired cursor answers 400 invalid_cursor. Requires the history scope, or investigate with evidence. Read-only and safe to retry.`
     },
     {
       name: "record_enforcement",
@@ -79108,7 +79348,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.11.0"
+    currentVersion: "0.11.2"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -79116,5 +79356,5 @@ export {
   app
 };
 
-//# debugId=4776654EE2410C3964756E2164756E21
+//# debugId=7F586B117ABE262564756E2164756E21
 //# sourceMappingURL=mcp-server.js.map