@outlit/cli 3.2.1 → 3.2.3

package/dist/cli.js

@@ -104,7 +104,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@outlit/cli",
-    version: "3.2.1",
+    version: "3.2.3",
     description: "CLI for querying Outlit customer context and installing agent skills",
     license: "Apache-2.0",
     repository: {
@@ -147,7 +147,7 @@ var init_package = __esm(() => {
     },
     dependencies: {
       "@clack/prompts": "^1.0.1",
-      "@outlit/tools": "^2.2.1",
+      "@outlit/tools": "^2.2.2",
       citty: "^0.2.1"
     },
     devDependencies: {
@@ -1742,6 +1742,7 @@ var init_dist4 = __esm(() => {
     "outlit_enable_destination",
     "outlit_disable_destination",
     "outlit_archive_destination",
+    "outlit_submit_feedback",
     "outlit_get_integration_capabilities",
     "outlit_begin_integration_setup",
     "outlit_get_integration_setup_status",
@@ -1773,6 +1774,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "customers",
       title: "List Customers",
       description: "Browse and filter customers. Use this to find customers by billing status, activity recency, revenue, or name. Returns a paginated list with summary info (MRR, last activity, status).",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -2094,6 +2099,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "users",
       title: "List Users",
       description: "Browse and filter users. Use this to find users by journey stage, activity recency, customer, or email/name. Returns a paginated list with activity info.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -2374,6 +2383,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "users",
       title: "List Workspace Users",
       description: "List active workspace members who resolve to local Outlit users. Use this to discover exact user IDs for customer ownership and access commands or to browse account ownership.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -2561,6 +2574,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "customers",
       title: "Get Customer",
       description: "Get full details for a single customer. Optionally include users, revenue, recent activity, engagement metrics, or company enrichment.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -3363,6 +3380,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "customers",
       title: "Get Customer Relationship",
       description: "Get the bounded, evidence-backed relationship shown on a customer page. Returns a summary, categorized current statements with ISO observed-at timestamps when supported, source labels, and the compiled summary timestamp when available without raw facts, quotes, or internal status.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -3514,6 +3535,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "customers",
       title: "Assign Customer Owner",
       description: "Assign an active workspace member as this customer’s primary owner. The former owner keeps Editor access.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -3570,6 +3595,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "customers",
       title: "Grant Customer Access",
       description: "Share a customer with an active workspace member as a Viewer or Editor. The customer ID must be exact.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -3651,6 +3680,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "customers",
       title: "Update Customer Access",
       description: "Change an existing customer collaborator between Viewer and Editor.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -3732,6 +3765,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "customers",
       title: "Revoke Customer Access",
       description: "Remove a collaborator’s explicit access to a customer.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: true
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -3776,7 +3813,11 @@ var init_dist4 = __esm(() => {
       commandVersion: 1,
       ownerDomain: "customer-context",
       title: "Get Customer Timeline",
-      description: "Get the chronological activity timeline for a customer. Use this to see what happened and when — emails, calls, Slack messages, billing events, etc. Supports channel and date filtering.",
+      description: 'Get the chronological activity timeline for a customer — compact event entries by default, so unfiltered calls stay small. When channels is omitted the response covers the relationship chronology (communication, meetings, support, CRM, billing). Pass channels:["PRODUCT"] to add a weekly product-usage aggregate; set productDetail to "material" or "raw" to also return individual product events. Set includeMetadata:true only when a specific event metadata field is needed; pass sourceType/sourceId or sourceRef to outlit_get_source to read a full underlying record.',
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -3788,7 +3829,7 @@ var init_dist4 = __esm(() => {
             description: "Customer ID or domain"
           },
           channels: {
-            description: "Filter by event channel. Use values such as PRODUCT, COMMUNICATION, MEETING, CRM, BILLING, SUPPORT, IDENTITY, DOCUMENT, or SYSTEM.",
+            description: 'Filter by event channel. When omitted, defaults to the relationship channels COMMUNICATION, MEETING, SUPPORT, CRM, and BILLING. PRODUCT, IDENTITY, DOCUMENT, and SYSTEM are included only when listed here. Pass channels:["PRODUCT"] to read the weekly product usage aggregate, and combine with productDetail to also return individual product events.',
             type: "array",
             items: {
               type: "string",
@@ -3805,6 +3846,19 @@ var init_dist4 = __esm(() => {
               ]
             }
           },
+          productDetail: {
+            description: 'Controls whether PRODUCT-channel rows appear in `events` when channels includes PRODUCT. "none" (default): product activity is returned only as the `product` weekly usage aggregate — no product telemetry rows. "material": also include individual product events that match the organization\'s configured value-feature event names (each keeps an `id` usable for citations); when the organization has no configured value features this returns no product rows, but the `product` aggregate is still returned. "raw": include every product event, including autocapture, pageview, feature-flag, and identity telemetry — large; request only when the aggregate and material events are insufficient.',
+            type: "string",
+            enum: [
+              "none",
+              "material",
+              "raw"
+            ]
+          },
+          includeMetadata: {
+            description: "Include each event's raw metadata/properties payload. Default false: events return compact fields only, keeping the response small. Pass true only when a specific metadata field is needed.",
+            type: "boolean"
+          },
           eventTypes: {
             description: "Filter by event type",
             type: "array",
@@ -3861,7 +3915,8 @@ var init_dist4 = __esm(() => {
               type: "object",
               properties: {
                 id: {
-                  type: "string"
+                  type: "string",
+                  description: "Stable event identifier. Pass as timeline_event eventId when citing this event."
                 },
                 eventType: {
                   type: "string"
@@ -3901,7 +3956,8 @@ var init_dist4 = __esm(() => {
                     {
                       type: "null"
                     }
-                  ]
+                  ],
+                  description: "Bounded display summary, truncated past roughly 2 KB. Use outlit_get_source on sourceType/sourceId for the full underlying content."
                 },
                 occurredAt: {
                   type: "string",
@@ -3939,6 +3995,7 @@ var init_dist4 = __esm(() => {
                   ]
                 },
                 sourceRef: {
+                  description: "Canonical source handle for this event, emitted only when outlit_get_source can retrieve the underlying record; omitted when the event is marked unreadable.",
                   type: "object",
                   properties: {
                     sourceType: {
@@ -3954,7 +4011,17 @@ var init_dist4 = __esm(() => {
                   ],
                   additionalProperties: false
                 },
+                unreadable: {
+                  description: "Present only when the event's underlying source record cannot be retrieved via outlit_get_source. Do not retry source lookups for this event.",
+                  type: "boolean",
+                  const: true
+                },
+                unreadableReason: {
+                  description: "Why the event's source is unreadable, e.g. unresolved_source or ambiguous_source.",
+                  type: "string"
+                },
                 metadata: {
+                  description: "Raw event properties. Present only when the request set includeMetadata:true.",
                   type: "object",
                   propertyNames: {
                     type: "string"
@@ -3972,8 +4039,7 @@ var init_dist4 = __esm(() => {
                 "occurredAt",
                 "contact",
                 "sourceType",
-                "sourceId",
-                "metadata"
+                "sourceId"
               ],
               additionalProperties: false
             }
@@ -3993,11 +4059,112 @@ var init_dist4 = __esm(() => {
                     type: "null"
                   }
                 ]
+              },
+              effectiveLimit: {
+                type: "integer",
+                minimum: 1,
+                maximum: 9007199254740991,
+                description: "The maximum number of events a page of this response can contain. Responses can hold fewer events than requested when hosted response-size limits apply; callers should rely on pagination.hasMore/nextCursor rather than event count to detect truncation."
               }
             },
             required: [
               "hasMore",
-              "nextCursor"
+              "nextCursor",
+              "effectiveLimit"
+            ],
+            additionalProperties: false
+          },
+          product: {
+            description: 'Present when the request\'s channels include PRODUCT. Weekly product usage aggregate for the requested window: value-feature event counts and distinct active users per UTC week, plus the window\'s top value-feature event names. Individual product events appear in `events` only when productDetail is "material" or "raw".',
+            type: "object",
+            properties: {
+              windowStartAt: {
+                type: "string",
+                format: "date-time",
+                pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$",
+                description: "Start of the aggregate coverage window: the UTC week containing the requested start (or the earliest retained week)."
+              },
+              windowEndAt: {
+                type: "string",
+                format: "date-time",
+                pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$",
+                description: "End of the aggregate coverage window (the request end bound)"
+              },
+              weeklyBuckets: {
+                type: "array",
+                items: {
+                  type: "object",
+                  properties: {
+                    weekStartAt: {
+                      type: "string",
+                      format: "date-time",
+                      pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$",
+                      description: "Start of the bucket's UTC week (Monday 00:00:00Z)"
+                    },
+                    events: {
+                      type: "integer",
+                      minimum: 0,
+                      maximum: 9007199254740991,
+                      description: "Events in this week matching the organization's configured value features"
+                    },
+                    activeUsers: {
+                      type: "integer",
+                      minimum: 0,
+                      maximum: 9007199254740991,
+                      description: "Distinct users with product activity this week"
+                    }
+                  },
+                  required: [
+                    "weekStartAt",
+                    "events",
+                    "activeUsers"
+                  ],
+                  additionalProperties: false
+                },
+                description: "UTC week buckets covering the requested window, oldest first"
+              },
+              topEventNames: {
+                type: "array",
+                items: {
+                  type: "object",
+                  properties: {
+                    eventName: {
+                      type: "string"
+                    },
+                    events: {
+                      type: "integer",
+                      minimum: 0,
+                      maximum: 9007199254740991
+                    }
+                  },
+                  required: [
+                    "eventName",
+                    "events"
+                  ],
+                  additionalProperties: false
+                },
+                description: "Most frequent configured value-feature event names across the window"
+              }
+            },
+            required: [
+              "windowStartAt",
+              "windowEndAt",
+              "weeklyBuckets",
+              "topEventNames"
+            ],
+            additionalProperties: false
+          },
+          productUnavailable: {
+            description: "Present only when channels included PRODUCT but the weekly usage aggregate could not be computed. Report product usage as unavailable — never as zero or absent usage. When configured value-feature names are still known, material product events are returned in `events` instead of the aggregate.",
+            type: "object",
+            properties: {
+              reason: {
+                type: "string",
+                description: "Machine-readable reason the usage aggregate could not be computed"
+              }
+            },
+            required: [
+              "reason"
             ],
             additionalProperties: false
           }
@@ -4016,6 +4183,10 @@ var init_dist4 = __esm(() => {
       ownerDomain: "customer-context",
       title: "List Customer Facts",
       description: "List structured facts known about a customer. Use filters like status, sourceTypes, factTypes, factCategories, and date bounds to narrow the result set. For topic-specific retrieval, use outlit_search_customer_context instead.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -4702,6 +4873,10 @@ CHAMPION_RISK: Historical broad relationship-risk fact retained for existing row
       ownerDomain: "customer-context",
       title: "Get Customer Fact",
       description: "Get one exact fact by ID. Returns the canonical fact shape and optionally expands requested related data such as evidence.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -5204,6 +5379,10 @@ CHAMPION_RISK: Historical broad relationship-risk fact retained for existing row
       ownerDomain: "customer-context",
       title: "Get Source",
       description: "Get one exact source record by generic sourceType and sourceId. Use this when you already know the concrete underlying source you want to inspect.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -5584,6 +5763,10 @@ CHAMPION_RISK: Historical broad relationship-risk fact retained for existing row
       ownerDomain: "customer-context",
       title: "List Sources",
       description: "List concrete source records deterministically. Use this instead of semantic search when you need enumerated calls, emails, calendar events, support tickets, Slack conversations, or opportunities.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -6027,6 +6210,10 @@ CHAMPION_RISK: Historical broad relationship-risk fact retained for existing row
       ownerDomain: "customer-context",
       title: "Search Customer Context",
       description: "Search across all known customer context using a natural-language query. Returns ranked artifact-level discovery previews with at most two matching excerpts per source or fact. Use outlit_get_source with a returned sourceType and sourceId when you need the canonical source contents. Omit customer to search across all customers in the organization.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -6816,6 +7003,10 @@ Example queries:
 - SELECT event_name, count(*) FROM activity GROUP BY 1 ORDER BY 2 DESC LIMIT 10
 - SELECT billing_status, sum(mrr_cents)/100 as mrr FROM customers GROUP BY 1
 - SELECT * FROM activity WHERE customer_id = 'cust_123' ORDER BY occurred_at DESC LIMIT 50`,
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -6898,6 +7089,10 @@ Example queries:
 
 Use this to discover column names, types, and descriptions before writing SQL queries.
 Returns column definitions and example queries for each view.`,
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -7102,6 +7297,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "destinations",
       title: "List Destinations",
       description: "List configured destinations using safe status fields and masked configuration only.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -7481,6 +7680,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "destinations",
       title: "Get Destination",
       description: "Get one destination using safe status fields and masked configuration only.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -7866,6 +8069,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "destinations",
       title: "Create Destination",
       description: "Create a Slack channel destination from an available channel.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -8270,6 +8477,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "destinations",
       title: "Update Destination",
       description: "Update ordinary destination metadata. Use the dedicated enable or disable tool for lifecycle state.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -8669,6 +8880,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "destinations",
       title: "Enable Destination",
       description: "Enable an ordinary destination that is ready for delivery.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -9054,6 +9269,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "destinations",
       title: "Disable Destination",
       description: "Disable an ordinary non-default destination.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -9439,6 +9658,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "destinations",
       title: "Archive Destination",
       description: "Archive an ordinary destination.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: true
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -9485,6 +9708,64 @@ Returns column definitions and example queries for each view.`,
         additionalProperties: false
       }
     },
+    outlit_submit_feedback: {
+      toolName: "outlit_submit_feedback",
+      commandId: "feedback.submit",
+      commandVersion: 1,
+      ownerDomain: "feedback",
+      title: "Submit Product Feedback",
+      description: "Submit product feedback to Outlit. This does not open a support ticket or promise a reply.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
+      inputSchema: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          body: {
+            type: "string",
+            minLength: 1,
+            maxLength: 20000
+          },
+          area: {
+            type: "string",
+            minLength: 1,
+            maxLength: 100
+          },
+          context: {
+            type: "object",
+            propertyNames: {
+              type: "string"
+            },
+            additionalProperties: {}
+          }
+        },
+        required: [
+          "body"
+        ],
+        additionalProperties: false
+      },
+      outputSchema: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          id: {
+            type: "string"
+          },
+          createdAt: {
+            type: "string",
+            format: "date-time",
+            pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+          }
+        },
+        required: [
+          "id",
+          "createdAt"
+        ],
+        additionalProperties: false
+      }
+    },
     outlit_get_integration_capabilities: {
       toolName: "outlit_get_integration_capabilities",
       commandId: "integration.capabilities.get",
@@ -9492,6 +9773,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "integrations",
       title: "Get Integration Capabilities",
       description: "Describe safe integration setup modes without exposing credential fields or provider configuration.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -9584,6 +9869,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "integrations",
       title: "Begin Integration Setup",
       description: "Begin a short-lived browser handoff for an integration that supports browser authentication.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -9668,6 +9957,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "integrations",
       title: "Get Integration Setup Status",
       description: "Check a browser setup handoff owned by the current actor.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -9723,6 +10016,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "integrations",
       title: "Get Integration Status",
       description: "Get the configuration-readiness status for one integration or the public integration catalog.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -9818,6 +10115,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "integrations",
       title: "Set Up Integration",
       description: "Continue integration setup through validated credentials, safe configuration, or a trusted browser handoff.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         anyOf: [
@@ -10693,6 +10994,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "customer_activation",
       title: "Get Customer Activation",
       description: "Get the product event currently configured to activate customers and users.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -10738,6 +11043,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "customer_activation",
       title: "Preview Customer Activation",
       description: "Preview the bounded recent impact of choosing a product event for customer activation without changing configuration.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -10930,6 +11239,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "customer_activation",
       title: "Update Customer Activation",
       description: "Set the product event used for future customer activation, or disable event-based activation with null. This does not backfill history.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -10994,7 +11307,11 @@ Returns column definitions and example queries for each view.`,
       commandVersion: 1,
       ownerDomain: "settings",
       title: "Get Workspace Settings",
-      description: "Get the workspace default timezone used by time-based product behavior.",
+      description: "Get the workspace default timezone and the default customer owner used as the lowest-ranked ownership source.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -11011,10 +11328,32 @@ Returns column definitions and example queries for each view.`,
               defaultTimezone: {
                 type: "string",
                 minLength: 1
+              },
+              customerOwnership: {
+                type: "object",
+                properties: {
+                  defaultOwnerUserId: {
+                    anyOf: [
+                      {
+                        type: "string",
+                        minLength: 1,
+                        maxLength: 191
+                      },
+                      {
+                        type: "null"
+                      }
+                    ]
+                  }
+                },
+                required: [
+                  "defaultOwnerUserId"
+                ],
+                additionalProperties: false
               }
             },
             required: [
-              "defaultTimezone"
+              "defaultTimezone",
+              "customerOwnership"
             ],
             additionalProperties: false
           }
@@ -11031,7 +11370,11 @@ Returns column definitions and example queries for each view.`,
       commandVersion: 1,
       ownerDomain: "settings",
       title: "Update Workspace Settings",
-      description: "Update the workspace default timezone using a valid IANA timezone.",
+      description: "Update the workspace default timezone (a valid IANA timezone) and/or the default customer owner (an active workspace member, or null to clear).",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -11039,11 +11382,29 @@ Returns column definitions and example queries for each view.`,
           defaultTimezone: {
             type: "string",
             minLength: 1
+          },
+          customerOwnership: {
+            type: "object",
+            properties: {
+              defaultOwnerUserId: {
+                anyOf: [
+                  {
+                    type: "string",
+                    minLength: 1,
+                    maxLength: 191
+                  },
+                  {
+                    type: "null"
+                  }
+                ]
+              }
+            },
+            required: [
+              "defaultOwnerUserId"
+            ],
+            additionalProperties: false
           }
         },
-        required: [
-          "defaultTimezone"
-        ],
         additionalProperties: false
       },
       outputSchema: {
@@ -11056,10 +11417,32 @@ Returns column definitions and example queries for each view.`,
               defaultTimezone: {
                 type: "string",
                 minLength: 1
+              },
+              customerOwnership: {
+                type: "object",
+                properties: {
+                  defaultOwnerUserId: {
+                    anyOf: [
+                      {
+                        type: "string",
+                        minLength: 1,
+                        maxLength: 191
+                      },
+                      {
+                        type: "null"
+                      }
+                    ]
+                  }
+                },
+                required: [
+                  "defaultOwnerUserId"
+                ],
+                additionalProperties: false
               }
             },
             required: [
-              "defaultTimezone"
+              "defaultTimezone",
+              "customerOwnership"
             ],
             additionalProperties: false
           }
@@ -11077,6 +11460,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "value_features",
       title: "List Features",
       description: "List configured features, exact historical usage, eligible sources, and observed event candidates.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -11627,6 +12014,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "value_features",
       title: "Create Feature",
       description: "Create or idempotently return one customer-value Feature observed by one event rule.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -11943,6 +12334,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "value_features",
       title: "Archive Feature",
       description: "Archive a Feature when at least one other active Feature remains.",
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: true
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -12003,6 +12398,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "value_features",
       title: "Get Customer Features",
       description: "Read Outlit event evidence and stored non-credit Autumn feature quantities, frequency, recency, weekly coverage, and explicit links for one authorized customer. Provider totals and linked event counts remain separate.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -13191,6 +13590,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "customers",
       title: "Get Customer Credits",
       description: "Read a customer's credit pools, remaining credits, provider reset dates, and deterministic daily burn rate, rate change, runway, and trend from stored data. Missing or stale evidence is explicit; no live provider calls. For individual product feature usage use outlit_get_customer_features.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -13353,7 +13756,7 @@ Returns column definitions and example queries for each view.`,
                           type: "null"
                         }
                       ],
-                      description: "Average daily usage over the last seven complete UTC days. See scope before interpreting this as pool deductions."
+                      description: "Average daily usage over the trailing rate window (28 days, shrinking to the covered history with a seven-day floor). See scope before interpreting this as pool deductions."
                     },
                     scope: {
                       type: "string",
@@ -13362,6 +13765,58 @@ Returns column definitions and example queries for each view.`,
                         "account"
                       ]
                     },
+                    rateBasis: {
+                      description: "Length of the trailing window the forecast rate averages over.",
+                      anyOf: [
+                        {
+                          type: "object",
+                          properties: {
+                            kind: {
+                              type: "string",
+                              const: "trailing"
+                            },
+                            days: {
+                              type: "integer",
+                              exclusiveMinimum: 0,
+                              maximum: 9007199254740991
+                            }
+                          },
+                          required: [
+                            "kind",
+                            "days"
+                          ],
+                          additionalProperties: false
+                        },
+                        {
+                          type: "null"
+                        }
+                      ]
+                    },
+                    paceSinceReset: {
+                      description: "Context-only average daily usage since the current grant period started; never the forecast rate.",
+                      anyOf: [
+                        {
+                          type: "number",
+                          minimum: 0
+                        },
+                        {
+                          type: "null"
+                        }
+                      ]
+                    },
+                    periodStart: {
+                      description: "UTC day the current grant period started, when derivable from the reset interval.",
+                      anyOf: [
+                        {
+                          type: "string",
+                          format: "date",
+                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$"
+                        },
+                        {
+                          type: "null"
+                        }
+                      ]
+                    },
                     change: {
                       anyOf: [
                         {
@@ -13371,7 +13826,20 @@ Returns column definitions and example queries for each view.`,
                           type: "null"
                         }
                       ],
-                      description: "Percentage change in customer-balance burn rate versus the preceding seven complete days. Null when either window is incomplete or the prior rate is zero."
+                      description: "Percentage change in customer-balance burn rate versus the preceding equal-length window. Null when either window is incomplete or the prior rate is zero."
+                    },
+                    changeDays: {
+                      description: "Days in each side of the percentage comparison: 28 when covered, else 7.",
+                      anyOf: [
+                        {
+                          type: "integer",
+                          exclusiveMinimum: 0,
+                          maximum: 9007199254740991
+                        },
+                        {
+                          type: "null"
+                        }
+                      ]
                     },
                     days: {
                       anyOf: [
@@ -13445,7 +13913,7 @@ Returns column definitions and example queries for each view.`,
                         "end"
                       ],
                       additionalProperties: false,
-                      description: "UTC dates for the seven-day rate window; end is exclusive."
+                      description: "UTC dates for the rate window; end is exclusive."
                     },
                     trend: {
                       maxItems: 14,
@@ -13560,6 +14028,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "attention",
       title: "List Attention Items",
       description: "List authorized open or resolved Attention items. Returns bounded customer identity, current priority, ARR importance, lifecycle timestamps, and a prepared-action URL without evidence bodies or internal agent state.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -13881,6 +14353,10 @@ Returns column definitions and example queries for each view.`,
       ownerDomain: "attention",
       title: "Get Attention Item",
       description: "Get one authorized Attention item with its bounded current assessment, timeline, evidence summaries, and prepared-action URL. Does not return evidence IDs, quotes, email drafts, or internal agent state.",
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false
+      },
       inputSchema: {
         $schema: "https://json-schema.org/draft/2020-12/schema",
         type: "object",
@@ -14954,6 +15430,225 @@ Returns column definitions and example queries for each view.`,
                     }
                   ]
                 },
+                jevEvidence: {
+                  description: "Jev advisory model evidence scoped to this suggestion's customers. Uncalibrated and never part of eligibility, confidence, or recommended action.",
+                  anyOf: [
+                    {
+                      type: "object",
+                      properties: {
+                        computedAt: {
+                          type: "string",
+                          format: "date-time",
+                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+                        },
+                        expiresAt: {
+                          type: "string",
+                          format: "date-time",
+                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+                        },
+                        expired: {
+                          type: "boolean"
+                        },
+                        pairs: {
+                          minItems: 1,
+                          type: "array",
+                          items: {
+                            type: "object",
+                            properties: {
+                              incoming: {
+                                type: "object",
+                                properties: {
+                                  id: {
+                                    type: "string",
+                                    minLength: 1,
+                                    maxLength: 191
+                                  },
+                                  name: {
+                                    type: "string",
+                                    minLength: 1,
+                                    maxLength: 500
+                                  },
+                                  domain: {
+                                    anyOf: [
+                                      {
+                                        type: "string",
+                                        minLength: 1,
+                                        maxLength: 500
+                                      },
+                                      {
+                                        type: "null"
+                                      }
+                                    ]
+                                  },
+                                  type: {
+                                    type: "string",
+                                    enum: [
+                                      "COMPANY",
+                                      "INDIVIDUAL"
+                                    ]
+                                  },
+                                  status: {
+                                    anyOf: [
+                                      {
+                                        type: "string",
+                                        enum: [
+                                          "PROVISIONAL",
+                                          "ACTIVE",
+                                          "CHURNED",
+                                          "MERGED"
+                                        ]
+                                      },
+                                      {
+                                        type: "null"
+                                      }
+                                    ]
+                                  },
+                                  identifierCount: {
+                                    type: "integer",
+                                    minimum: 0,
+                                    maximum: 9007199254740991
+                                  },
+                                  contactCount: {
+                                    type: "integer",
+                                    minimum: 0,
+                                    maximum: 9007199254740991
+                                  }
+                                },
+                                required: [
+                                  "id",
+                                  "name",
+                                  "domain",
+                                  "type",
+                                  "status",
+                                  "identifierCount",
+                                  "contactCount"
+                                ],
+                                additionalProperties: false
+                              },
+                              candidate: {
+                                type: "object",
+                                properties: {
+                                  id: {
+                                    type: "string",
+                                    minLength: 1,
+                                    maxLength: 191
+                                  },
+                                  name: {
+                                    type: "string",
+                                    minLength: 1,
+                                    maxLength: 500
+                                  },
+                                  domain: {
+                                    anyOf: [
+                                      {
+                                        type: "string",
+                                        minLength: 1,
+                                        maxLength: 500
+                                      },
+                                      {
+                                        type: "null"
+                                      }
+                                    ]
+                                  },
+                                  type: {
+                                    type: "string",
+                                    enum: [
+                                      "COMPANY",
+                                      "INDIVIDUAL"
+                                    ]
+                                  },
+                                  status: {
+                                    anyOf: [
+                                      {
+                                        type: "string",
+                                        enum: [
+                                          "PROVISIONAL",
+                                          "ACTIVE",
+                                          "CHURNED",
+                                          "MERGED"
+                                        ]
+                                      },
+                                      {
+                                        type: "null"
+                                      }
+                                    ]
+                                  },
+                                  identifierCount: {
+                                    type: "integer",
+                                    minimum: 0,
+                                    maximum: 9007199254740991
+                                  },
+                                  contactCount: {
+                                    type: "integer",
+                                    minimum: 0,
+                                    maximum: 9007199254740991
+                                  }
+                                },
+                                required: [
+                                  "id",
+                                  "name",
+                                  "domain",
+                                  "type",
+                                  "status",
+                                  "identifierCount",
+                                  "contactCount"
+                                ],
+                                additionalProperties: false
+                              },
+                              pSameEntity: {
+                                type: "number",
+                                minimum: 0,
+                                maximum: 1
+                              },
+                              relation: {
+                                anyOf: [
+                                  {
+                                    type: "string",
+                                    minLength: 1,
+                                    maxLength: 100
+                                  },
+                                  {
+                                    type: "null"
+                                  }
+                                ]
+                              },
+                              relationProbability: {
+                                anyOf: [
+                                  {
+                                    type: "number",
+                                    minimum: 0,
+                                    maximum: 1
+                                  },
+                                  {
+                                    type: "null"
+                                  }
+                                ]
+                              }
+                            },
+                            required: [
+                              "incoming",
+                              "candidate",
+                              "pSameEntity",
+                              "relation",
+                              "relationProbability"
+                            ],
+                            additionalProperties: false
+                          }
+                        }
+                      },
+                      required: [
+                        "computedAt",
+                        "expiresAt",
+                        "expired",
+                        "pairs"
+                      ],
+                      additionalProperties: false
+                    },
+                    {
+                      type: "null"
+                    }
+                  ]
+                },
                 canMerge: {
                   type: "boolean"
                 },
@@ -15432,6 +16127,7 @@ Returns column definitions and example queries for each view.`,
       "outlit_enable_destination",
       "outlit_disable_destination",
       "outlit_archive_destination",
+      "outlit_submit_feedback",
       "outlit_get_integration_capabilities",
       "outlit_begin_integration_setup",
       "outlit_get_integration_setup_status",
@@ -15480,6 +16176,7 @@ Returns column definitions and example queries for each view.`,
       "outlit_enable_destination",
       "outlit_disable_destination",
       "outlit_archive_destination",
+      "outlit_submit_feedback",
       "outlit_get_integration_capabilities",
       "outlit_begin_integration_setup",
       "outlit_get_integration_setup_status",
@@ -19252,10 +19949,12 @@ function readCommandOutput2(command, args) {
     return null;
   }
 }
-function isStandaloneInstall(argv = process.argv) {
+function isStandaloneInstall2(argv = process.argv) {
   const scriptPath = argv[1];
   if (!scriptPath)
     return true;
+  if (scriptPath.startsWith("/$bunfs/") || scriptPath.startsWith("~bunfs"))
+    return true;
   const resolved = safeRealPath2(scriptPath) ?? scriptPath;
   return !/\.(?:cjs|mjs|jsx?|tsx?)$/.test(resolved);
 }
@@ -19281,8 +19980,11 @@ function safeRealPath2(filePath) {
     return null;
   }
 }
-function formatUpdateCommand2(installer = inferInstaller2()) {
-  switch (installer) {
+function formatUpdateCommand2(installer, argv = process.argv) {
+  if (isStandaloneInstall2(argv))
+    return STANDALONE_UPDATE_HINT2;
+  const resolved = installer === undefined ? inferInstaller2() : installer;
+  switch (resolved) {
     case "bun":
       return "bun add -g @outlit/cli";
     case "npm":
@@ -19343,7 +20045,7 @@ function runUpgradeCommand(command, opts) {
     throw new Error(`Upgrade command failed: ${command.displayCommand}`);
   }
 }
-var UPDATE_CHECK_INTERVAL_MS2, PACKAGE_NAME2 = "@outlit/cli", LATEST_VERSION_URL2 = "https://registry.npmjs.org/@outlit%2Fcli/latest";
+var UPDATE_CHECK_INTERVAL_MS2, PACKAGE_NAME2 = "@outlit/cli", LATEST_VERSION_URL2 = "https://registry.npmjs.org/@outlit%2Fcli/latest", STANDALONE_UPDATE_HINT2 = "re-run your original install method (for example `curl -fsSL https://outlit.ai/install.sh | bash` or `brew upgrade outlitai/tap/outlit`), or download the latest release from https://github.com/OutlitAI/outlit-sdk/releases";
 var init_update2 = __esm(() => {
   init_config();
   init_tty();
@@ -19704,26 +20406,77 @@ function checkApiKeyPresence(credential) {
 }
 async function validateApiKey(apiKey) {
   try {
-    await pingApiKey(apiKey);
-    return { name: "API validation", status: "pass", message: "Key is valid" };
+    const validation = await pingApiKey(apiKey);
+    const org = validation.organization?.name ?? validation.organization?.slug ?? validation.organizationId;
+    const keyDetail = validation.apiKey ? ` · key "${validation.apiKey.name}" (${validation.apiKey.keyType})` : "";
+    return {
+      check: {
+        name: "API validation",
+        status: "pass",
+        message: "Key is valid",
+        detail: `Org: ${org}${keyDetail}`
+      },
+      validation
+    };
   } catch (err) {
     if (isApiKeyValidationUnavailableError(err)) {
       return {
-        name: "API validation",
-        status: "warn",
-        message: "API validation is temporarily unavailable",
-        detail: "Try again shortly"
+        check: {
+          name: "API validation",
+          status: "warn",
+          message: "API validation is temporarily unavailable",
+          detail: "Try again shortly"
+        },
+        validation: null
       };
     }
     return {
-      name: "API validation",
-      status: "fail",
-      message: `API rejected key: ${errorMessage(err, "unknown error")}`,
-      detail: `Check your key at ${OUTLIT_DASHBOARD_URL}`
+      check: {
+        name: "API validation",
+        status: "fail",
+        message: `API rejected key: ${errorMessage(err, "unknown error")}`,
+        detail: `Check your key at ${OUTLIT_DASHBOARD_URL}`
+      },
+      validation: null
     };
   }
 }
-async function checkIntegrations(apiKey) {
+function grantUsable(grant, grants, createdById) {
+  if (!grants.includes(grant))
+    return false;
+  if (grant === "integrations:connect_own" && !createdById)
+    return false;
+  return true;
+}
+function checkPermissions(validation) {
+  const grants = validation.authorization.grants;
+  const createdById = validation.createdById?.trim() || null;
+  const unavailable = COMMAND_GRANTS.filter((family) => !family.anyOf.some((grant) => grantUsable(grant, grants, createdById)));
+  const detail = [
+    grants.length > 0 ? `grants: ${grants.join(", ")}` : null,
+    unavailable.length > 0 ? `unavailable to this key: ${unavailable.map((family) => family.commands).join("; ")}` : null
+  ].filter((part) => part !== null).join(" · ");
+  return {
+    name: "Permissions",
+    status: unavailable.length > 0 ? "warn" : "pass",
+    message: `${grants.length} key grant${grants.length === 1 ? "" : "s"}`,
+    detail: detail || undefined
+  };
+}
+async function checkIntegrations(apiKey, validation) {
+  const grants = validation?.authorization.grants;
+  if (grants) {
+    const createdById = validation?.createdById?.trim() || null;
+    const canRead = grantUsable("integrations:manage", grants, createdById) || grantUsable("integrations:connect_own", grants, createdById);
+    if (!canRead) {
+      return {
+        name: "Integrations",
+        status: "warn",
+        message: "API key does not grant integrations access",
+        detail: "Requires the integrations:manage grant, or integrations:connect_own on a user-created key"
+      };
+    }
+  }
   try {
     const client = await createClient(apiKey);
     const timeout = new Promise((_2, reject) => setTimeout(() => reject(new Error("Integrations check timed out")), 1e4));
@@ -19755,7 +20508,15 @@ async function checkIntegrations(apiKey) {
       status: "pass",
       message: `${ready} integration(s) ready`
     };
-  } catch {
+  } catch (err) {
+    if (isOutlitToolsApiError(err) && err.envelope?.code === "TOOL_CALL_FORBIDDEN") {
+      return {
+        name: "Integrations",
+        status: "warn",
+        message: "API key was denied integrations access",
+        detail: "Requires the integrations:manage grant, or integrations:connect_own on a user-created key"
+      };
+    }
     return {
       name: "Integrations",
       status: "warn",
@@ -19843,8 +20604,9 @@ function printChecks(checks) {
   }
   console.log("");
 }
-var FAIL_SYMBOL2, STATUS_ICONS, doctor_default, agentChecks;
+var FAIL_SYMBOL2, STATUS_ICONS, doctor_default, COMMAND_GRANTS, agentChecks;
 var init_doctor = __esm(() => {
+  init_dist4();
   init_dist();
   init_auth();
   init_output2();
@@ -19867,11 +20629,13 @@ var init_doctor = __esm(() => {
       description: [
         "Check CLI version, API key, connectivity, and agent detection.",
         "",
-        "Runs four checks in sequence:",
+        "Runs six checks in sequence:",
         "  1. CLI version -- compares against npm registry",
         "  2. API key -- checks presence and format (ok_ prefix)",
         "  3. API validation -- makes a live test call to verify the key works",
-        "  4. Agent detection -- detects supported coding agents and whether the Outlit skill is installed",
+        "  4. Permissions -- shows key grants and unavailable commands",
+        "  5. Integrations -- checks integration readiness or explains missing access",
+        "  6. Agent detection -- detects supported coding agents and whether the Outlit skill is installed",
         "",
         "Exit code: 0 if all checks pass or warn, 1 if any check fails.",
         "",
@@ -19896,9 +20660,12 @@ var init_doctor = __esm(() => {
       checks.push(checkApiKeyPresence(credential));
       if (credential) {
         const apiCheck = await validateApiKey(credential.key);
-        checks.push(apiCheck);
-        if (apiCheck.status !== "fail") {
-          checks.push(await checkIntegrations(credential.key));
+        checks.push(apiCheck.check);
+        if (apiCheck.validation) {
+          checks.push(checkPermissions(apiCheck.validation));
+        }
+        if (apiCheck.check.status !== "fail") {
+          checks.push(await checkIntegrations(credential.key, apiCheck.validation));
         }
       } else {
         checks.push({
@@ -19918,6 +20685,38 @@ var init_doctor = __esm(() => {
         process.exit(1);
     }
   });
+  COMMAND_GRANTS = [
+    {
+      commands: "customers (read), users, facts, sources, search, attention",
+      anyOf: ["customer_intelligence:read"]
+    },
+    { commands: "ws-users", anyOf: ["workspace_members:read"] },
+    { commands: "sql, schema", anyOf: ["analytics:read"] },
+    { commands: "destinations", anyOf: ["destinations:manage"] },
+    { commands: "features", anyOf: ["behavior_metrics:manage"] },
+    {
+      commands: "integrations",
+      anyOf: ["integrations:manage", "integrations:connect_own"]
+    },
+    { commands: "activation get, preview", anyOf: ["activation:read"] },
+    { commands: "activation update, disable", anyOf: ["activation:manage"] },
+    { commands: "settings get", anyOf: ["workspace_settings:read"] },
+    { commands: "settings update", anyOf: ["workspace_settings:manage"] },
+    { commands: "customers grant, revoke, owner", anyOf: ["customer_access:manage"] },
+    {
+      commands: "identity suggestions list",
+      anyOf: ["customer_intelligence:read"]
+    },
+    {
+      commands: "identity suggestions reject",
+      anyOf: ["customer_identity:review"]
+    },
+    {
+      commands: "customers merge (preview), customers merge-status",
+      anyOf: ["customer_intelligence:read"]
+    },
+    { commands: "customers merge --execute", anyOf: ["customer_identity:merge"] }
+  ];
   agentChecks = {
     "claude-code": {
       name: "Claude Code",
@@ -19955,7 +20754,7 @@ var exports_upgrade = {};
 __export(exports_upgrade, {
   default: () => upgrade_default
 });
-var STANDALONE_UPDATE_HINT = "re-run your original install method (for example `curl -fsSL https://outlit.ai/install.sh | bash` or `brew upgrade outlitai/tap/outlit`), or download the latest release from https://github.com/OutlitAI/outlit-sdk/releases", upgrade_default;
+var upgrade_default;
 var init_upgrade = __esm(() => {
   init_dist();
   init_output2();
@@ -19996,10 +20795,10 @@ var init_upgrade = __esm(() => {
         console.log(`Outlit CLI is already up to date (v${CLI_VERSION2})`);
         return;
       }
-      const standalone = isStandaloneInstall();
+      const standalone = isStandaloneInstall2();
       const upgradeCommand = standalone ? null : getUpgradeCommand();
       if (!upgradeCommand) {
-        const message = standalone ? `Outlit CLI v${latestVersion} is available. This standalone binary cannot update itself — ${STANDALONE_UPDATE_HINT}.` : `Outlit CLI v${latestVersion} is available. Could not determine how Outlit CLI was installed. Update it manually with your package manager, for example \`bun add -g @outlit/cli\` or \`npm install -g @outlit/cli\`.`;
+        const message = standalone ? `Outlit CLI v${latestVersion} is available. This standalone binary cannot update itself — ${STANDALONE_UPDATE_HINT2}.` : `Outlit CLI v${latestVersion} is available. Could not determine how Outlit CLI was installed. Update it manually with your package manager, for example \`bun add -g @outlit/cli\` or \`npm install -g @outlit/cli\`.`;
         return outputError({ message, code: standalone ? "manual_update_required" : "unknown_installer" }, json);
       }
       try {
@@ -20696,12 +21495,147 @@ var init_search = __esm(() => {
   });
 });
 
+// src/commands/feedback.ts
+var exports_feedback = {};
+__export(exports_feedback, {
+  default: () => feedback_default
+});
+import { readFileSync as readFileSync4 } from "node:fs";
+function readTextFile(path, flag, json) {
+  try {
+    return readFileSync4(path, "utf-8");
+  } catch (error) {
+    return outputError({
+      message: `Cannot read ${flag} file: ${errorMessage(error, "unknown error")}`,
+      code: "file_error"
+    }, json);
+  }
+}
+function resolveBody(args, json) {
+  if (args.body !== undefined && args.bodyFile !== undefined) {
+    return outputError({ message: "Use either --body or --body-file, not both", code: "invalid_input" }, json);
+  }
+  const raw = args.bodyFile !== undefined ? readTextFile(args.bodyFile, "--body-file", json) : args.body;
+  const trimmed = raw?.trim();
+  if (!trimmed) {
+    return outputError({ message: "Provide --body or --body-file", code: "missing_input" }, json);
+  }
+  if (trimmed.length > BODY_MAX_LENGTH) {
+    return outputError({ message: `--body must be at most ${BODY_MAX_LENGTH} characters`, code: "invalid_input" }, json);
+  }
+  return trimmed;
+}
+function resolveArea(area, json) {
+  if (area === undefined)
+    return;
+  const trimmed = area.trim();
+  if (!trimmed) {
+    return outputError({ message: "--area must be a non-empty string", code: "invalid_input" }, json);
+  }
+  if (trimmed.length > AREA_MAX_LENGTH) {
+    return outputError({ message: `--area must be at most ${AREA_MAX_LENGTH} characters`, code: "invalid_input" }, json);
+  }
+  return trimmed;
+}
+function resolveContext(args, json) {
+  if (args.context !== undefined && args.contextFile !== undefined) {
+    return outputError({ message: "Use either --context or --context-file, not both", code: "invalid_input" }, json);
+  }
+  const raw = args.contextFile !== undefined ? readTextFile(args.contextFile, "--context-file", json) : args.context;
+  if (raw === undefined)
+    return;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (error) {
+    return outputError({
+      message: `Invalid --context JSON: ${errorMessage(error, "parse failed")}`,
+      code: "invalid_input"
+    }, json);
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    return outputError({ message: "--context must be a JSON object", code: "invalid_input" }, json);
+  }
+  if (Buffer.byteLength(JSON.stringify(parsed), "utf-8") > CONTEXT_MAX_BYTES) {
+    return outputError({ message: "--context must serialize to at most 16 KiB", code: "invalid_input" }, json);
+  }
+  return parsed;
+}
+var BODY_MAX_LENGTH = 20000, AREA_MAX_LENGTH = 100, CONTEXT_MAX_BYTES, feedback_default;
+var init_feedback = __esm(() => {
+  init_dist4();
+  init_dist();
+  init_auth();
+  init_output2();
+  init_api();
+  init_output();
+  CONTEXT_MAX_BYTES = 16 * 1024;
+  feedback_default = defineCommand2({
+    meta: {
+      name: "feedback",
+      description: [
+        "Submit product feedback to the Outlit team: bugs, feature ideas, or agent friction.",
+        "Feedback is product intake, not a support ticket, and does not guarantee a reply.",
+        "Do not include secrets or unnecessary customer data.",
+        "",
+        "Examples:",
+        "  outlit feedback --body 'The customers merge preview did not list the losing record traits' --json",
+        "  outlit feedback --body 'Add a way to export attention items' --area attention --json",
+        `  outlit feedback --body 'SQL tool rejected a valid LIMIT clause' --context '{"surface":"cli","command":"sql"}' --json`,
+        "  outlit feedback --body-file report.md --context-file diagnostics.json --json",
+        "",
+        AGENT_JSON_HINT
+      ].join(`
+`)
+    },
+    args: {
+      ...authArgs,
+      ...outputArgs,
+      body: {
+        type: "string",
+        description: "Feedback text: trimmed, non-empty, at most 20000 characters"
+      },
+      "body-file": {
+        type: "string",
+        description: "Path to a UTF-8 text file containing the feedback body"
+      },
+      area: {
+        type: "string",
+        description: "Optional product area label, at most 100 characters"
+      },
+      context: {
+        type: "string",
+        description: "Optional JSON object with diagnostic context, at most 16 KiB serialized. Never include secrets."
+      },
+      "context-file": {
+        type: "string",
+        description: "Path to a JSON file with diagnostic context (mutually exclusive with --context)"
+      }
+    },
+    async run({ args }) {
+      const json = !!args.json;
+      const client = await getClientOrExit(args["api-key"], json);
+      const body = resolveBody({ body: args.body, bodyFile: args["body-file"] }, json);
+      const area = resolveArea(args.area, json);
+      const context = resolveContext({ context: args.context, contextFile: args["context-file"] }, json);
+      const input = { body };
+      if (area !== undefined)
+        input.area = area;
+      if (context !== undefined)
+        input.context = context;
+      return runTool(client, publicToolContracts.outlit_submit_feedback.toolName, input, json, {
+        spinnerMessage: "Submitting feedback..."
+      });
+    }
+  });
+});
+
 // src/commands/sql.ts
 var exports_sql = {};
 __export(exports_sql, {
   default: () => sql_default
 });
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 var publicSqlViews, sql_default;
 var init_sql = __esm(() => {
   init_dist4();
@@ -20755,7 +21689,7 @@ var init_sql = __esm(() => {
       let sql;
       if (args["query-file"]) {
         try {
-          sql = readFileSync4(args["query-file"], "utf-8");
+          sql = readFileSync5(args["query-file"], "utf-8");
         } catch (err) {
           return outputError({
             message: `Cannot read file: ${errorMessage(err, "unknown error")}`,
@@ -22770,6 +23704,18 @@ var init_completions = __esm(() => {
         }
       ]
     },
+    {
+      name: "feedback",
+      desc: "Submit product feedback",
+      flags: [
+        ...COMMON,
+        { name: "--body", desc: "Feedback text (max 20000 chars)" },
+        { name: "--body-file", desc: "Read feedback text from a file" },
+        { name: "--area", desc: "Optional product area label" },
+        { name: "--context", desc: "Optional JSON context object (max 16 KiB)" },
+        { name: "--context-file", desc: "Read JSON context object from a file" }
+      ]
+    },
     {
       name: "search",
       desc: "Search customer context",
@@ -23476,6 +24422,7 @@ var UPDATE_CHECK_INTERVAL_MS = 12 * 60 * 60 * 1000;
 var PACKAGE_NAME = "@outlit/cli";
 var LATEST_VERSION_URL = "https://registry.npmjs.org/@outlit%2Fcli/latest";
 var INTERNAL_UPDATE_FLAG = "--internal-update-check";
+var STANDALONE_UPDATE_HINT = "re-run your original install method (for example `curl -fsSL https://outlit.ai/install.sh | bash` or `brew upgrade outlitai/tap/outlit`), or download the latest release from https://github.com/OutlitAI/outlit-sdk/releases";
 function getUpdateCachePath() {
   return join2(getConfigDir(), "update-check.json");
 }
@@ -23562,6 +24509,15 @@ function readCommandOutput(command, args) {
     return null;
   }
 }
+function isStandaloneInstall(argv = process.argv) {
+  const scriptPath = argv[1];
+  if (!scriptPath)
+    return true;
+  if (scriptPath.startsWith("/$bunfs/") || scriptPath.startsWith("~bunfs"))
+    return true;
+  const resolved = safeRealPath(scriptPath) ?? scriptPath;
+  return !/\.(?:cjs|mjs|jsx?|tsx?)$/.test(resolved);
+}
 function inferInstaller() {
   const fromAgent = inferInstallerFromUserAgent(process.env.npm_config_user_agent ?? "");
   if (fromAgent)
@@ -23584,8 +24540,11 @@ function safeRealPath(filePath) {
     return null;
   }
 }
-function formatUpdateCommand(installer = inferInstaller()) {
-  switch (installer) {
+function formatUpdateCommand(installer, argv = process.argv) {
+  if (isStandaloneInstall(argv))
+    return STANDALONE_UPDATE_HINT;
+  const resolved = installer === undefined ? inferInstaller() : installer;
+  switch (resolved) {
     case "bun":
       return "bun add -g @outlit/cli";
     case "npm":
@@ -23627,26 +24586,29 @@ function printCachedUpdateNotice(argv = process.argv, notify = console.error) {
 Update with: ${notice.command}`);
   return true;
 }
-function scheduleBackgroundUpdateCheck(argv = process.argv, spawnProcess = spawn) {
+function scheduleBackgroundUpdateCheck(argv = process.argv, spawnProcess = spawn, execPath = process.execPath) {
   if (!shouldShowUpdateNotice(argv))
     return false;
   if (!isUpdateCheckDue(readCachedUpdateState()))
     return false;
-  const runtimePath = argv[0];
-  const scriptPath = argv[1];
-  if (!runtimePath || !scriptPath)
+  const standalone = isStandaloneInstall(argv);
+  const command = standalone ? execPath : argv[0];
+  const scriptPath = standalone ? null : argv[1];
+  if (!command || !standalone && !scriptPath)
     return false;
-  const child = spawnProcess(runtimePath, [scriptPath, INTERNAL_UPDATE_FLAG], {
-    detached: true,
-    stdio: "ignore"
-  });
-  child.unref?.();
-  return true;
+  try {
+    const child = spawnProcess(command, [...scriptPath ? [scriptPath] : [], INTERNAL_UPDATE_FLAG], { detached: true, stdio: "ignore" });
+    child.on?.("error", () => {});
+    child.unref?.();
+    return true;
+  } catch {
+    return false;
+  }
 }
 function initializeUpdateNotifier(opts) {
   const argv = opts?.argv ?? process.argv;
   printCachedUpdateNotice(argv, opts?.notify);
-  scheduleBackgroundUpdateCheck(argv, opts?.spawn);
+  scheduleBackgroundUpdateCheck(argv, opts?.spawn, opts?.execPath);
 }
 async function fetchLatestCliVersion() {
   const response = await fetch(LATEST_VERSION_URL, { signal: AbortSignal.timeout(5000) });
@@ -23659,7 +24621,7 @@ async function fetchLatestCliVersion() {
 }
 async function runInternalUpdateCheck(opts) {
   const fetchLatestVersion = opts?.fetchLatestVersion ?? fetchLatestCliVersion;
-  const installer = opts?.installer ?? inferInstaller();
+  const installer = isStandaloneInstall() ? null : opts?.installer ?? inferInstaller();
   try {
     const latestVersion = await fetchLatestVersion();
     writeCachedUpdateState({
@@ -23714,6 +24676,7 @@ async function startCli() {
         "  outlit features create --source metric_source_v1_0123456789abcdef0123456789abcdef --event report_exported --key reports_exported --name 'Reports exported' --json",
         "  outlit customers features acme.com --weekly --json",
         "  outlit customers credits acme.com --json",
+        "  outlit feedback --body 'The merge preview dropped trait history' --area customers --json",
         "  outlit doctor --json",
         "",
         "For AI agents: commands auto-output JSON when stdout is piped. No --json flag needed."
@@ -23734,6 +24697,7 @@ async function startCli() {
       facts: () => Promise.resolve().then(() => (init_facts(), exports_facts)).then((m) => m.default),
       sources: () => Promise.resolve().then(() => (init_sources(), exports_sources)).then((m) => m.default),
       search: () => Promise.resolve().then(() => (init_search(), exports_search)).then((m) => m.default),
+      feedback: () => Promise.resolve().then(() => (init_feedback(), exports_feedback)).then((m) => m.default),
       sql: () => Promise.resolve().then(() => (init_sql(), exports_sql)).then((m) => m.default),
       schema: () => Promise.resolve().then(() => (init_schema(), exports_schema)).then((m) => m.default),
       destinations: () => Promise.resolve().then(() => (init_destinations(), exports_destinations)).then((m) => m.default),