@rudderhq/cli 0.3.5-canary.8 → 0.3.5

package/dist/index.js

@@ -114,7 +114,7 @@ var init_home = __esm({
 });
 
 // ../packages/shared/dist/constants.js
-var ORGANIZATION_STATUSES, ORGANIZATION_INTELLIGENCE_PROFILE_PURPOSES, ORGANIZATION_INTELLIGENCE_PROFILE_STATUSES, DEPLOYMENT_MODES, DEPLOYMENT_EXPOSURES, AUTH_BASE_URL_MODES, AGENT_STATUSES, AGENT_RUNTIME_TYPES, AGENT_ROLES, AGENT_ICON_NAMES, AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX, AGENT_AVATAR_BACKGROUND_PRESET_IDS, ISSUE_STATUSES, ISSUE_PRIORITIES, CALENDAR_SOURCE_TYPES, CALENDAR_OWNER_TYPES, CALENDAR_VISIBILITIES, CALENDAR_SOURCE_STATUSES, CALENDAR_EVENT_KINDS, CALENDAR_EVENT_STATUSES, CALENDAR_SOURCE_MODES, CHAT_CONVERSATION_STATUSES, CHAT_ISSUE_CREATION_MODES, CHAT_MESSAGE_ROLES, CHAT_MESSAGE_KINDS, CHAT_MESSAGE_STATUSES, CHAT_CONTEXT_ENTITY_TYPES, GOAL_LEVELS, GOAL_STATUSES, PROJECT_STATUSES, ORGANIZATION_RESOURCE_KINDS, ORGANIZATION_RESOURCE_SOURCE_TYPES, PROJECT_RESOURCE_ATTACHMENT_ROLES, AUTOMATION_STATUSES, AUTOMATION_CONCURRENCY_POLICIES, AUTOMATION_CATCH_UP_POLICIES, AUTOMATION_OUTPUT_MODES, AUTOMATION_TRIGGER_SIGNING_MODES, PROJECT_COLORS, PROJECT_ICONS, APPROVAL_TYPES, SECRET_PROVIDERS, STORAGE_PROVIDERS, BILLING_TYPES, FINANCE_EVENT_KINDS, FINANCE_DIRECTIONS, FINANCE_UNITS, BUDGET_SCOPE_TYPES, BUDGET_METRICS, BUDGET_WINDOW_KINDS, BUDGET_INCIDENT_RESOLUTION_ACTIONS, INVITE_JOIN_TYPES, JOIN_REQUEST_TYPES, JOIN_REQUEST_STATUSES, PERMISSION_KEYS, PLUGIN_STATUSES, PLUGIN_CATEGORIES, PLUGIN_CAPABILITIES, PLUGIN_UI_SLOT_TYPES, PLUGIN_RESERVED_COMPANY_ROUTE_SEGMENTS, PLUGIN_LAUNCHER_PLACEMENT_ZONES, PLUGIN_LAUNCHER_ACTIONS, PLUGIN_LAUNCHER_BOUNDS, PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS, PLUGIN_UI_SLOT_ENTITY_TYPES, PLUGIN_STATE_SCOPE_KINDS;
+var ORGANIZATION_STATUSES, ORGANIZATION_INTELLIGENCE_PROFILE_PURPOSES, ORGANIZATION_INTELLIGENCE_PROFILE_STATUSES, DEPLOYMENT_MODES, DEPLOYMENT_EXPOSURES, AUTH_BASE_URL_MODES, AGENT_STATUSES, AGENT_RUNTIME_TYPES, AGENT_ROLES, AGENT_ICON_NAMES, AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX, AGENT_AVATAR_BACKGROUND_PRESET_IDS, ISSUE_STATUSES, ISSUE_PRIORITIES, AGENT_INTEGRATION_PROVIDERS, AGENT_INTEGRATION_STATUSES, AGENT_INTEGRATION_TRANSPORTS, AGENT_INTEGRATION_PROVIDER_REGIONS, AGENT_INTEGRATION_CHAT_TYPES, AGENT_INTEGRATION_DROP_REASONS, AGENT_INTEGRATION_OUTBOUND_STATUSES, CALENDAR_SOURCE_TYPES, CALENDAR_OWNER_TYPES, CALENDAR_VISIBILITIES, CALENDAR_SOURCE_STATUSES, CALENDAR_EVENT_KINDS, CALENDAR_EVENT_STATUSES, CALENDAR_SOURCE_MODES, CHAT_CONVERSATION_STATUSES, CHAT_ISSUE_CREATION_MODES, CHAT_MESSAGE_ROLES, CHAT_MESSAGE_KINDS, CHAT_MESSAGE_STATUSES, CHAT_CONTEXT_ENTITY_TYPES, GOAL_LEVELS, GOAL_STATUSES, PROJECT_STATUSES, ORGANIZATION_RESOURCE_KINDS, ORGANIZATION_RESOURCE_SOURCE_TYPES, PROJECT_RESOURCE_ATTACHMENT_ROLES, AUTOMATION_STATUSES, AUTOMATION_CONCURRENCY_POLICIES, AUTOMATION_CATCH_UP_POLICIES, AUTOMATION_OUTPUT_MODES, AUTOMATION_TRIGGER_SIGNING_MODES, PROJECT_COLORS, PROJECT_ICONS, APPROVAL_TYPES, SECRET_PROVIDERS, STORAGE_PROVIDERS, BILLING_TYPES, FINANCE_EVENT_KINDS, FINANCE_DIRECTIONS, FINANCE_UNITS, BUDGET_SCOPE_TYPES, BUDGET_METRICS, BUDGET_WINDOW_KINDS, BUDGET_INCIDENT_RESOLUTION_ACTIONS, INVITE_JOIN_TYPES, JOIN_REQUEST_TYPES, JOIN_REQUEST_STATUSES, PERMISSION_KEYS, PLUGIN_STATUSES, PLUGIN_CATEGORIES, PLUGIN_CAPABILITIES, PLUGIN_UI_SLOT_TYPES, PLUGIN_RESERVED_COMPANY_ROUTE_SEGMENTS, PLUGIN_LAUNCHER_PLACEMENT_ZONES, PLUGIN_LAUNCHER_ACTIONS, PLUGIN_LAUNCHER_BOUNDS, PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS, PLUGIN_UI_SLOT_ENTITY_TYPES, PLUGIN_STATE_SCOPE_KINDS;
 var init_constants = __esm({
   "../packages/shared/dist/constants.js"() {
     "use strict";
@@ -220,6 +220,22 @@ var init_constants = __esm({
       "cancelled"
     ];
     ISSUE_PRIORITIES = ["critical", "high", "medium", "low"];
+    AGENT_INTEGRATION_PROVIDERS = ["feishu"];
+    AGENT_INTEGRATION_STATUSES = ["active", "revoked", "error"];
+    AGENT_INTEGRATION_TRANSPORTS = ["long_connection", "webhook"];
+    AGENT_INTEGRATION_PROVIDER_REGIONS = ["feishu_cn", "lark_global"];
+    AGENT_INTEGRATION_CHAT_TYPES = ["p2p", "group"];
+    AGENT_INTEGRATION_DROP_REASONS = [
+      "unbound_user",
+      "non_org_member",
+      "not_addressed_in_group",
+      "duplicate",
+      "revoked_installation",
+      "invalid_event",
+      "agent_unavailable",
+      "unsupported_message_type"
+    ];
+    AGENT_INTEGRATION_OUTBOUND_STATUSES = ["pending", "streaming", "final", "error"];
     CALENDAR_SOURCE_TYPES = ["rudder_local", "google_calendar", "agent_work", "system"];
     CALENDAR_OWNER_TYPES = ["user", "agent", "system"];
     CALENDAR_VISIBILITIES = ["full", "busy_only", "private"];
@@ -768,7 +784,7 @@ var init_adapter_skills = __esm({
 
 // ../packages/shared/dist/validators/chat.js
 import { z as z4 } from "zod";
-var chatConversationStatusSchema, chatIssueCreationModeSchema, chatMessageRoleSchema, chatMessageKindSchema, chatMessageStatusSchema, chatContextEntityTypeSchema, createChatContextLinkSchema, createChatConversationSchema, setChatProjectContextSchema, updateChatConversationSchema, addChatMessageSchema, chatRichReferenceDisplaySchema, chatIssueIdentifierSchema, chatAskUserIdentifierSchema, chatAskUserOptionSchema, chatAskUserQuestionSchema, chatAskUserRequestSchema, chatIssueRichReferenceSchema, chatIssueCommentRichReferenceSchema, chatRichReferenceSchema, chatRichReferencesSchema, chatAutomationCreateSchema, createChatAttachmentMetadataSchema, chatIssueProposalSchema, convertChatToIssueSchema, chatOperationProposalSchema, resolveChatOperationProposalSchema, updateChatConversationUserStateSchema, updateMessengerThreadUserStateSchema;
+var chatConversationStatusSchema, chatIssueCreationModeSchema, chatMessageRoleSchema, chatMessageKindSchema, chatMessageStatusSchema, chatContextEntityTypeSchema, createChatContextLinkSchema, createChatConversationSchema, setChatProjectContextSchema, updateChatConversationSchema, addChatMessageSchema, chatRichReferenceDisplaySchema, chatIssueIdentifierSchema, chatAskUserIdentifierSchema, chatAskUserOptionSchema, chatAskUserQuestionSchema, chatAskUserRequestSchema, chatIssueRichReferenceSchema, chatIssueCommentRichReferenceSchema, chatRichReferenceSchema, chatRichReferencesSchema, chatAutomationCreateSchema, createChatAttachmentMetadataSchema, chatIssueProposalSchema, convertChatToIssueSchema, chatOperationProposalSchema, resolveChatOperationProposalSchema, updateChatConversationUserStateSchema, updateMessengerThreadUserStateSchema, createMessengerCustomGroupSchema, updateMessengerCustomGroupSchema, reorderMessengerCustomGroupsSchema, assignMessengerCustomGroupEntrySchema, reorderMessengerCustomGroupEntriesSchema;
 var init_chat = __esm({
   "../packages/shared/dist/validators/chat.js"() {
     "use strict";
@@ -951,6 +967,25 @@ var init_chat = __esm({
     updateMessengerThreadUserStateSchema = z4.object({
       pinned: z4.boolean().optional()
     });
+    createMessengerCustomGroupSchema = z4.object({
+      name: z4.string().trim().min(1).max(80),
+      icon: z4.string().trim().min(1).max(24).optional().nullable()
+    });
+    updateMessengerCustomGroupSchema = z4.object({
+      name: z4.string().trim().min(1).max(80).optional(),
+      icon: z4.string().trim().min(1).max(24).optional().nullable(),
+      collapsed: z4.boolean().optional(),
+      sortOrder: z4.number().int().min(0).optional()
+    });
+    reorderMessengerCustomGroupsSchema = z4.object({
+      groupIds: z4.array(z4.string().uuid()).max(200)
+    });
+    assignMessengerCustomGroupEntrySchema = z4.object({
+      threadKey: z4.string().trim().min(1).max(240)
+    });
+    reorderMessengerCustomGroupEntriesSchema = z4.object({
+      threadKeys: z4.array(z4.string().trim().min(1).max(240)).max(500)
+    });
   }
 });
 
@@ -1107,7 +1142,7 @@ var init_organization_intelligence_profile = __esm({
     upsertOrganizationIntelligenceProfileSchema = z7.object({
       agentRuntimeType: z7.enum(AGENT_RUNTIME_TYPES),
       agentRuntimeConfig: organizationIntelligenceProfileConfigSchema.default({}),
-      status: organizationIntelligenceProfileStatusSchema.optional().default("configured")
+      status: organizationIntelligenceProfileStatusSchema.optional().default("disabled")
     });
   }
 });
@@ -1731,8 +1766,37 @@ var init_agent = __esm({
   }
 });
 
-// ../packages/shared/dist/validators/project.js
+// ../packages/shared/dist/validators/agent-integration.js
 import { z as z13 } from "zod";
+var agentIntegrationProviderSchema, agentIntegrationStatusSchema, agentIntegrationTransportSchema, agentIntegrationProviderRegionSchema, agentIntegrationChatTypeSchema, agentIntegrationDropReasonSchema, agentIntegrationOutboundStatusSchema, createAgentIntegrationSchema;
+var init_agent_integration = __esm({
+  "../packages/shared/dist/validators/agent-integration.js"() {
+    "use strict";
+    init_constants();
+    agentIntegrationProviderSchema = z13.enum(AGENT_INTEGRATION_PROVIDERS);
+    agentIntegrationStatusSchema = z13.enum(AGENT_INTEGRATION_STATUSES);
+    agentIntegrationTransportSchema = z13.enum(AGENT_INTEGRATION_TRANSPORTS);
+    agentIntegrationProviderRegionSchema = z13.enum(AGENT_INTEGRATION_PROVIDER_REGIONS);
+    agentIntegrationChatTypeSchema = z13.enum(AGENT_INTEGRATION_CHAT_TYPES);
+    agentIntegrationDropReasonSchema = z13.enum(AGENT_INTEGRATION_DROP_REASONS);
+    agentIntegrationOutboundStatusSchema = z13.enum(AGENT_INTEGRATION_OUTBOUND_STATUSES);
+    createAgentIntegrationSchema = z13.object({
+      agentId: z13.string().uuid(),
+      provider: agentIntegrationProviderSchema.default("feishu"),
+      transport: agentIntegrationTransportSchema.default("long_connection"),
+      providerRegion: agentIntegrationProviderRegionSchema.default("feishu_cn"),
+      appCredentialSecretId: z13.string().uuid(),
+      externalAppId: z13.string().min(1),
+      externalBotOpenId: z13.string().min(1).optional().nullable(),
+      externalTenantKey: z13.string().min(1).optional().nullable(),
+      installerUserId: z13.string().min(1).optional().nullable(),
+      manageUrl: z13.string().url().optional().nullable()
+    });
+  }
+});
+
+// ../packages/shared/dist/validators/project.js
+import { z as z14 } from "zod";
 function validateProjectWorkspace(value, ctx) {
   const sourceType = value.sourceType ?? "local_path";
   const hasCwd = typeof value.cwd === "string" && value.cwd.trim().length > 0;
@@ -1741,7 +1805,7 @@ function validateProjectWorkspace(value, ctx) {
   if (sourceType === "remote_managed") {
     if (!hasRemoteRef && !hasRepo) {
       ctx.addIssue({
-        code: z13.ZodIssueCode.custom,
+        code: z14.ZodIssueCode.custom,
         message: "Remote-managed workspace requires remoteWorkspaceRef or repoUrl.",
         path: ["remoteWorkspaceRef"]
       });
@@ -1750,7 +1814,7 @@ function validateProjectWorkspace(value, ctx) {
   }
   if (!hasCwd && !hasRepo) {
     ctx.addIssue({
-      code: z13.ZodIssueCode.custom,
+      code: z14.ZodIssueCode.custom,
       message: "Workspace requires at least one of cwd or repoUrl.",
       path: ["cwd"]
     });
@@ -1762,120 +1826,120 @@ var init_project = __esm({
     "use strict";
     init_constants();
     init_resource();
-    executionWorkspaceStrategySchema = z13.object({
-      type: z13.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
-      baseRef: z13.string().optional().nullable(),
-      branchTemplate: z13.string().optional().nullable(),
-      worktreeParentDir: z13.string().optional().nullable(),
-      provisionCommand: z13.string().optional().nullable(),
-      teardownCommand: z13.string().optional().nullable()
+    executionWorkspaceStrategySchema = z14.object({
+      type: z14.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
+      baseRef: z14.string().optional().nullable(),
+      branchTemplate: z14.string().optional().nullable(),
+      worktreeParentDir: z14.string().optional().nullable(),
+      provisionCommand: z14.string().optional().nullable(),
+      teardownCommand: z14.string().optional().nullable()
     }).strict();
-    projectExecutionWorkspacePolicySchema = z13.object({
-      enabled: z13.boolean(),
-      defaultMode: z13.enum(["shared_workspace", "isolated_workspace", "operator_branch", "adapter_default"]).optional(),
-      allowIssueOverride: z13.boolean().optional(),
-      defaultProjectWorkspaceId: z13.string().uuid().optional().nullable(),
+    projectExecutionWorkspacePolicySchema = z14.object({
+      enabled: z14.boolean(),
+      defaultMode: z14.enum(["shared_workspace", "isolated_workspace", "operator_branch", "adapter_default"]).optional(),
+      allowIssueOverride: z14.boolean().optional(),
+      defaultProjectWorkspaceId: z14.string().uuid().optional().nullable(),
       workspaceStrategy: executionWorkspaceStrategySchema.optional().nullable(),
-      workspaceRuntime: z13.record(z13.unknown()).optional().nullable(),
-      branchPolicy: z13.record(z13.unknown()).optional().nullable(),
-      pullRequestPolicy: z13.record(z13.unknown()).optional().nullable(),
-      runtimePolicy: z13.record(z13.unknown()).optional().nullable(),
-      cleanupPolicy: z13.record(z13.unknown()).optional().nullable()
+      workspaceRuntime: z14.record(z14.unknown()).optional().nullable(),
+      branchPolicy: z14.record(z14.unknown()).optional().nullable(),
+      pullRequestPolicy: z14.record(z14.unknown()).optional().nullable(),
+      runtimePolicy: z14.record(z14.unknown()).optional().nullable(),
+      cleanupPolicy: z14.record(z14.unknown()).optional().nullable()
     }).strict();
-    projectWorkspaceSourceTypeSchema = z13.enum(["local_path", "git_repo", "remote_managed", "non_git_path"]);
-    projectWorkspaceVisibilitySchema = z13.enum(["default", "advanced"]);
+    projectWorkspaceSourceTypeSchema = z14.enum(["local_path", "git_repo", "remote_managed", "non_git_path"]);
+    projectWorkspaceVisibilitySchema = z14.enum(["default", "advanced"]);
     projectWorkspaceFields = {
-      name: z13.string().min(1).optional(),
+      name: z14.string().min(1).optional(),
       sourceType: projectWorkspaceSourceTypeSchema.optional(),
-      cwd: z13.string().min(1).optional().nullable(),
-      repoUrl: z13.string().url().optional().nullable(),
-      repoRef: z13.string().optional().nullable(),
-      defaultRef: z13.string().optional().nullable(),
+      cwd: z14.string().min(1).optional().nullable(),
+      repoUrl: z14.string().url().optional().nullable(),
+      repoRef: z14.string().optional().nullable(),
+      defaultRef: z14.string().optional().nullable(),
       visibility: projectWorkspaceVisibilitySchema.optional(),
-      setupCommand: z13.string().optional().nullable(),
-      cleanupCommand: z13.string().optional().nullable(),
-      remoteProvider: z13.string().optional().nullable(),
-      remoteWorkspaceRef: z13.string().optional().nullable(),
-      sharedWorkspaceKey: z13.string().optional().nullable(),
-      metadata: z13.record(z13.unknown()).optional().nullable()
+      setupCommand: z14.string().optional().nullable(),
+      cleanupCommand: z14.string().optional().nullable(),
+      remoteProvider: z14.string().optional().nullable(),
+      remoteWorkspaceRef: z14.string().optional().nullable(),
+      sharedWorkspaceKey: z14.string().optional().nullable(),
+      metadata: z14.record(z14.unknown()).optional().nullable()
     };
     projectColorValues = new Set(PROJECT_COLORS);
-    legacyProjectColorSchema = z13.string().regex(/^#[0-9a-fA-F]{6}$/);
-    projectColorSchema = z13.string().refine((value) => legacyProjectColorSchema.safeParse(value).success || projectColorValues.has(value), "Color must be a 6-digit hex value or a supported project gradient");
-    projectIconSchema = z13.enum(PROJECT_ICONS);
-    createProjectWorkspaceSchema = z13.object({
+    legacyProjectColorSchema = z14.string().regex(/^#[0-9a-fA-F]{6}$/);
+    projectColorSchema = z14.string().refine((value) => legacyProjectColorSchema.safeParse(value).success || projectColorValues.has(value), "Color must be a 6-digit hex value or a supported project gradient");
+    projectIconSchema = z14.enum(PROJECT_ICONS);
+    createProjectWorkspaceSchema = z14.object({
       ...projectWorkspaceFields,
-      isPrimary: z13.boolean().optional().default(false)
+      isPrimary: z14.boolean().optional().default(false)
     }).superRefine(validateProjectWorkspace);
-    updateProjectWorkspaceSchema = z13.object({
+    updateProjectWorkspaceSchema = z14.object({
       ...projectWorkspaceFields,
-      isPrimary: z13.boolean().optional()
+      isPrimary: z14.boolean().optional()
     }).partial();
     projectFields = {
       /** @deprecated Use goalIds instead */
-      goalId: z13.string().uuid().optional().nullable(),
-      goalIds: z13.array(z13.string().uuid()).optional(),
-      name: z13.string().min(1),
-      description: z13.string().optional().nullable(),
-      status: z13.enum(PROJECT_STATUSES).optional().default("backlog"),
-      leadAgentId: z13.string().uuid().optional().nullable(),
-      targetDate: z13.string().optional().nullable(),
+      goalId: z14.string().uuid().optional().nullable(),
+      goalIds: z14.array(z14.string().uuid()).optional(),
+      name: z14.string().min(1),
+      description: z14.string().optional().nullable(),
+      status: z14.enum(PROJECT_STATUSES).optional().default("backlog"),
+      leadAgentId: z14.string().uuid().optional().nullable(),
+      targetDate: z14.string().optional().nullable(),
       color: projectColorSchema.optional().nullable(),
       icon: projectIconSchema.optional().nullable(),
       executionWorkspacePolicy: projectExecutionWorkspacePolicySchema.optional().nullable(),
-      resourceAttachments: z13.array(projectResourceAttachmentInputSchema).optional(),
-      newResources: z13.array(createProjectInlineResourceSchema).optional(),
-      archivedAt: z13.string().datetime().optional().nullable()
+      resourceAttachments: z14.array(projectResourceAttachmentInputSchema).optional(),
+      newResources: z14.array(createProjectInlineResourceSchema).optional(),
+      archivedAt: z14.string().datetime().optional().nullable()
     };
-    createProjectSchema = z13.object({
+    createProjectSchema = z14.object({
       ...projectFields
     });
-    updateProjectSchema = z13.object(projectFields).partial();
+    updateProjectSchema = z14.object(projectFields).partial();
   }
 });
 
 // ../packages/shared/dist/validators/issue.js
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 var runWorkspaceStrategySchema, issueRunWorkspaceSettingsSchema, issueAssigneeAdapterOverridesSchema, createIssueSchema, createIssueLabelSchema, updateIssueLabelSchema, updateIssueSchema, reorderIssueSchema, checkoutIssueSchema, addIssueCommentSchema, updateIssueCommentSchema, reportIssueCommitSchema, linkIssueApprovalSchema, createIssueAttachmentMetadataSchema, createIssueWorkspaceAttachmentSchema, ISSUE_DOCUMENT_FORMATS, issueDocumentFormatSchema, createLibraryDocumentSchema, updateLibraryDocumentSchema, restoreLibraryDocumentRevisionSchema;
 var init_issue = __esm({
   "../packages/shared/dist/validators/issue.js"() {
     "use strict";
     init_constants();
-    runWorkspaceStrategySchema = z14.object({
-      type: z14.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
-      baseRef: z14.string().optional().nullable(),
-      branchTemplate: z14.string().optional().nullable(),
-      worktreeParentDir: z14.string().optional().nullable(),
-      provisionCommand: z14.string().optional().nullable(),
-      teardownCommand: z14.string().optional().nullable()
+    runWorkspaceStrategySchema = z15.object({
+      type: z15.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
+      baseRef: z15.string().optional().nullable(),
+      branchTemplate: z15.string().optional().nullable(),
+      worktreeParentDir: z15.string().optional().nullable(),
+      provisionCommand: z15.string().optional().nullable(),
+      teardownCommand: z15.string().optional().nullable()
     }).strict();
-    issueRunWorkspaceSettingsSchema = z14.object({
-      mode: z14.enum(["inherit", "shared_workspace", "isolated_workspace", "operator_branch", "reuse_existing", "agent_default"]).optional(),
+    issueRunWorkspaceSettingsSchema = z15.object({
+      mode: z15.enum(["inherit", "shared_workspace", "isolated_workspace", "operator_branch", "reuse_existing", "agent_default"]).optional(),
       workspaceStrategy: runWorkspaceStrategySchema.optional().nullable(),
-      workspaceRuntime: z14.record(z14.unknown()).optional().nullable()
+      workspaceRuntime: z15.record(z15.unknown()).optional().nullable()
     }).strict();
-    issueAssigneeAdapterOverridesSchema = z14.object({
-      agentRuntimeConfig: z14.record(z14.unknown()).optional(),
-      useProjectWorkspace: z14.boolean().optional()
+    issueAssigneeAdapterOverridesSchema = z15.object({
+      agentRuntimeConfig: z15.record(z15.unknown()).optional(),
+      useProjectWorkspace: z15.boolean().optional()
     }).strict();
-    createIssueSchema = z14.object({
-      projectId: z14.string().uuid().optional().nullable(),
-      projectWorkspaceId: z14.string().uuid().optional().nullable(),
-      goalId: z14.string().uuid().optional().nullable(),
-      parentId: z14.string().uuid().optional().nullable(),
-      title: z14.string().min(1),
-      description: z14.string().optional().nullable(),
-      status: z14.enum(ISSUE_STATUSES).optional().default("backlog"),
-      priority: z14.enum(ISSUE_PRIORITIES).optional().default("medium"),
-      assigneeAgentId: z14.string().uuid().optional().nullable(),
-      assigneeUserId: z14.string().optional().nullable(),
-      reviewerAgentId: z14.string().uuid().optional().nullable(),
-      reviewerUserId: z14.string().optional().nullable(),
-      requestDepth: z14.number().int().nonnegative().optional().default(0),
-      billingCode: z14.string().optional().nullable(),
+    createIssueSchema = z15.object({
+      projectId: z15.string().uuid().optional().nullable(),
+      projectWorkspaceId: z15.string().uuid().optional().nullable(),
+      goalId: z15.string().uuid().optional().nullable(),
+      parentId: z15.string().uuid().optional().nullable(),
+      title: z15.string().min(1),
+      description: z15.string().optional().nullable(),
+      status: z15.enum(ISSUE_STATUSES).optional().default("backlog"),
+      priority: z15.enum(ISSUE_PRIORITIES).optional().default("medium"),
+      assigneeAgentId: z15.string().uuid().optional().nullable(),
+      assigneeUserId: z15.string().optional().nullable(),
+      reviewerAgentId: z15.string().uuid().optional().nullable(),
+      reviewerUserId: z15.string().optional().nullable(),
+      requestDepth: z15.number().int().nonnegative().optional().default(0),
+      billingCode: z15.string().optional().nullable(),
       assigneeAgentRuntimeOverrides: issueAssigneeAdapterOverridesSchema.optional().nullable(),
-      runWorkspaceId: z14.string().uuid().optional().nullable(),
-      runWorkspacePreference: z14.enum([
+      runWorkspaceId: z15.string().uuid().optional().nullable(),
+      runWorkspacePreference: z15.enum([
         "inherit",
         "shared_workspace",
         "isolated_workspace",
@@ -1885,9 +1949,9 @@ var init_issue = __esm({
       ]).optional().nullable(),
       runWorkspaceSettings: issueRunWorkspaceSettingsSchema.optional().nullable(),
       /** @deprecated Use runWorkspaceId. */
-      executionWorkspaceId: z14.string().uuid().optional().nullable(),
+      executionWorkspaceId: z15.string().uuid().optional().nullable(),
       /** @deprecated Use runWorkspacePreference. */
-      executionWorkspacePreference: z14.enum([
+      executionWorkspacePreference: z15.enum([
         "inherit",
         "shared_workspace",
         "isolated_workspace",
@@ -1897,88 +1961,88 @@ var init_issue = __esm({
       ]).optional().nullable(),
       /** @deprecated Use runWorkspaceSettings. */
       executionWorkspaceSettings: issueRunWorkspaceSettingsSchema.optional().nullable(),
-      labelIds: z14.array(z14.string().uuid()).optional()
+      labelIds: z15.array(z15.string().uuid()).optional()
     });
-    createIssueLabelSchema = z14.object({
-      name: z14.string().trim().min(1).max(48),
-      color: z14.string().regex(/^#(?:[0-9a-fA-F]{6})$/, "Color must be a 6-digit hex value")
+    createIssueLabelSchema = z15.object({
+      name: z15.string().trim().min(1).max(48),
+      color: z15.string().regex(/^#(?:[0-9a-fA-F]{6})$/, "Color must be a 6-digit hex value")
     });
     updateIssueLabelSchema = createIssueLabelSchema.partial().refine((value) => value.name !== void 0 || value.color !== void 0, {
       message: "At least one label field must be provided"
     });
     updateIssueSchema = createIssueSchema.partial().extend({
-      comment: z14.string().min(1).optional(),
-      reopen: z14.boolean().optional(),
-      hiddenAt: z14.string().datetime().nullable().optional(),
-      reviewDecision: z14.enum(["approve", "request_changes", "needs_followup", "blocked"]).optional()
-    });
-    reorderIssueSchema = z14.object({
-      issueId: z14.string().uuid(),
-      targetStatus: z14.enum(ISSUE_STATUSES),
-      previousIssueId: z14.string().uuid().optional().nullable(),
-      nextIssueId: z14.string().uuid().optional().nullable(),
-      position: z14.enum(["start", "end"]).optional()
+      comment: z15.string().min(1).optional(),
+      reopen: z15.boolean().optional(),
+      hiddenAt: z15.string().datetime().nullable().optional(),
+      reviewDecision: z15.enum(["approve", "request_changes", "needs_followup", "blocked"]).optional()
+    });
+    reorderIssueSchema = z15.object({
+      issueId: z15.string().uuid(),
+      targetStatus: z15.enum(ISSUE_STATUSES),
+      previousIssueId: z15.string().uuid().optional().nullable(),
+      nextIssueId: z15.string().uuid().optional().nullable(),
+      position: z15.enum(["start", "end"]).optional()
     }).refine((value) => !(value.previousIssueId && value.nextIssueId && value.previousIssueId === value.nextIssueId), {
       message: "previousIssueId and nextIssueId must be different"
     });
-    checkoutIssueSchema = z14.object({
-      agentId: z14.string().uuid(),
-      expectedStatuses: z14.array(z14.enum(ISSUE_STATUSES)).nonempty()
+    checkoutIssueSchema = z15.object({
+      agentId: z15.string().uuid(),
+      expectedStatuses: z15.array(z15.enum(ISSUE_STATUSES)).nonempty()
     });
-    addIssueCommentSchema = z14.object({
-      body: z14.string().min(1),
-      reopen: z14.boolean().optional(),
-      interrupt: z14.boolean().optional()
+    addIssueCommentSchema = z15.object({
+      body: z15.string().min(1),
+      reopen: z15.boolean().optional(),
+      interrupt: z15.boolean().optional()
     });
-    updateIssueCommentSchema = z14.object({
-      body: z14.string().trim().min(1)
+    updateIssueCommentSchema = z15.object({
+      body: z15.string().trim().min(1)
     });
-    reportIssueCommitSchema = z14.object({
-      sha: z14.string().trim().regex(/^[0-9a-f]{7,64}$/i, "Commit SHA must be 7 to 64 hexadecimal characters"),
-      message: z14.string().trim().min(1).max(500),
-      branch: z14.string().trim().min(1).max(255).optional().nullable(),
-      repoPath: z14.string().trim().min(1).max(2048).optional().nullable(),
-      workspacePath: z14.string().trim().min(1).max(2048).optional().nullable(),
-      commitCount: z14.number().int().positive().max(1e3).optional()
+    reportIssueCommitSchema = z15.object({
+      sha: z15.string().trim().regex(/^[0-9a-f]{7,64}$/i, "Commit SHA must be 7 to 64 hexadecimal characters"),
+      message: z15.string().trim().min(1).max(500),
+      branch: z15.string().trim().min(1).max(255).optional().nullable(),
+      repoPath: z15.string().trim().min(1).max(2048).optional().nullable(),
+      workspacePath: z15.string().trim().min(1).max(2048).optional().nullable(),
+      commitCount: z15.number().int().positive().max(1e3).optional()
     });
-    linkIssueApprovalSchema = z14.object({
-      approvalId: z14.string().uuid()
+    linkIssueApprovalSchema = z15.object({
+      approvalId: z15.string().uuid()
     });
-    createIssueAttachmentMetadataSchema = z14.object({
-      issueCommentId: z14.string().uuid().optional().nullable(),
-      usage: z14.enum(["issue", "description_inline", "document_inline", "comment_inline", "comment_attachment"]).optional()
+    createIssueAttachmentMetadataSchema = z15.object({
+      issueCommentId: z15.string().uuid().optional().nullable(),
+      usage: z15.enum(["issue", "description_inline", "document_inline", "comment_inline", "comment_attachment"]).optional()
     });
-    createIssueWorkspaceAttachmentSchema = z14.object({
-      path: z14.string().trim().min(1).max(2048)
+    createIssueWorkspaceAttachmentSchema = z15.object({
+      path: z15.string().trim().min(1).max(2048)
     });
     ISSUE_DOCUMENT_FORMATS = ["markdown"];
-    issueDocumentFormatSchema = z14.enum(ISSUE_DOCUMENT_FORMATS);
-    createLibraryDocumentSchema = z14.object({
-      title: z14.string().trim().max(200).nullable().optional(),
+    issueDocumentFormatSchema = z15.enum(ISSUE_DOCUMENT_FORMATS);
+    createLibraryDocumentSchema = z15.object({
+      title: z15.string().trim().max(200).nullable().optional(),
       format: issueDocumentFormatSchema.optional().default("markdown"),
-      body: z14.string().max(524288).optional().default(""),
-      changeSummary: z14.string().trim().max(500).nullable().optional()
+      body: z15.string().max(524288).optional().default(""),
+      changeSummary: z15.string().trim().max(500).nullable().optional()
     });
-    updateLibraryDocumentSchema = z14.object({
-      title: z14.string().trim().max(200).nullable().optional(),
+    updateLibraryDocumentSchema = z15.object({
+      title: z15.string().trim().max(200).nullable().optional(),
       format: issueDocumentFormatSchema.optional().default("markdown"),
-      body: z14.string().max(524288),
-      changeSummary: z14.string().trim().max(500).nullable().optional(),
-      baseRevisionId: z14.string().uuid().nullable().optional()
+      body: z15.string().max(524288),
+      changeSummary: z15.string().trim().max(500).nullable().optional(),
+      baseRevisionId: z15.string().uuid().nullable().optional()
     });
-    restoreLibraryDocumentRevisionSchema = z14.object({
-      changeSummary: z14.string().trim().max(500).nullable().optional()
+    restoreLibraryDocumentRevisionSchema = z15.object({
+      changeSummary: z15.string().trim().max(500).nullable().optional()
     });
   }
 });
 
 // ../packages/shared/dist/validators/work-product.js
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 var issueWorkProductTypeSchema, issueWorkProductStatusSchema, issueWorkProductReviewStateSchema, createIssueWorkProductSchema, updateIssueWorkProductSchema;
 var init_work_product = __esm({
   "../packages/shared/dist/validators/work-product.js"() {
     "use strict";
-    issueWorkProductTypeSchema = z15.enum([
+    issueWorkProductTypeSchema = z16.enum([
       "preview_url",
       "runtime_service",
       "pull_request",
@@ -1987,7 +2051,7 @@ var init_work_product = __esm({
       "artifact",
       "document"
     ]);
-    issueWorkProductStatusSchema = z15.enum([
+    issueWorkProductStatusSchema = z16.enum([
       "active",
       "ready_for_review",
       "approved",
@@ -1998,125 +2062,125 @@ var init_work_product = __esm({
       "archived",
       "draft"
     ]);
-    issueWorkProductReviewStateSchema = z15.enum([
+    issueWorkProductReviewStateSchema = z16.enum([
       "none",
       "needs_board_review",
       "approved",
       "changes_requested"
     ]);
-    createIssueWorkProductSchema = z15.object({
-      projectId: z15.string().uuid().optional().nullable(),
-      runWorkspaceId: z15.string().uuid().optional().nullable(),
+    createIssueWorkProductSchema = z16.object({
+      projectId: z16.string().uuid().optional().nullable(),
+      runWorkspaceId: z16.string().uuid().optional().nullable(),
       /** @deprecated Use runWorkspaceId. */
-      executionWorkspaceId: z15.string().uuid().optional().nullable(),
-      runtimeServiceId: z15.string().uuid().optional().nullable(),
+      executionWorkspaceId: z16.string().uuid().optional().nullable(),
+      runtimeServiceId: z16.string().uuid().optional().nullable(),
       type: issueWorkProductTypeSchema,
-      provider: z15.string().min(1),
-      externalId: z15.string().optional().nullable(),
-      title: z15.string().min(1),
-      url: z15.string().url().optional().nullable(),
+      provider: z16.string().min(1),
+      externalId: z16.string().optional().nullable(),
+      title: z16.string().min(1),
+      url: z16.string().url().optional().nullable(),
       status: issueWorkProductStatusSchema.default("active"),
       reviewState: issueWorkProductReviewStateSchema.optional().default("none"),
-      isPrimary: z15.boolean().optional().default(false),
-      healthStatus: z15.enum(["unknown", "healthy", "unhealthy"]).optional().default("unknown"),
-      summary: z15.string().optional().nullable(),
-      metadata: z15.record(z15.unknown()).optional().nullable(),
-      createdByRunId: z15.string().uuid().optional().nullable()
+      isPrimary: z16.boolean().optional().default(false),
+      healthStatus: z16.enum(["unknown", "healthy", "unhealthy"]).optional().default("unknown"),
+      summary: z16.string().optional().nullable(),
+      metadata: z16.record(z16.unknown()).optional().nullable(),
+      createdByRunId: z16.string().uuid().optional().nullable()
     });
     updateIssueWorkProductSchema = createIssueWorkProductSchema.partial();
   }
 });
 
 // ../packages/shared/dist/validators/execution-workspace.js
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 var runWorkspaceStatusSchema, updateRunWorkspaceSchema;
 var init_execution_workspace = __esm({
   "../packages/shared/dist/validators/execution-workspace.js"() {
     "use strict";
-    runWorkspaceStatusSchema = z16.enum([
+    runWorkspaceStatusSchema = z17.enum([
       "active",
       "idle",
       "in_review",
       "archived",
       "cleanup_failed"
     ]);
-    updateRunWorkspaceSchema = z16.object({
+    updateRunWorkspaceSchema = z17.object({
       status: runWorkspaceStatusSchema.optional(),
-      cleanupEligibleAt: z16.string().datetime().optional().nullable(),
-      cleanupReason: z16.string().optional().nullable(),
-      metadata: z16.record(z16.unknown()).optional().nullable()
+      cleanupEligibleAt: z17.string().datetime().optional().nullable(),
+      cleanupReason: z17.string().optional().nullable(),
+      metadata: z17.record(z17.unknown()).optional().nullable()
     }).strict();
   }
 });
 
 // ../packages/shared/dist/validators/workspace-backup.js
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 var workspaceBackupTriggerSourceSchema, createWorkspaceBackupSchema, restoreWorkspaceBackupSchema;
 var init_workspace_backup2 = __esm({
   "../packages/shared/dist/validators/workspace-backup.js"() {
     "use strict";
-    workspaceBackupTriggerSourceSchema = z17.enum(["manual", "scheduled", "pre_restore"]);
-    createWorkspaceBackupSchema = z17.object({
+    workspaceBackupTriggerSourceSchema = z18.enum(["manual", "scheduled", "pre_restore"]);
+    createWorkspaceBackupSchema = z18.object({
       triggerSource: workspaceBackupTriggerSourceSchema.optional().default("manual")
     }).strict();
-    restoreWorkspaceBackupSchema = z17.object({
-      confirm: z17.literal(true)
+    restoreWorkspaceBackupSchema = z18.object({
+      confirm: z18.literal(true)
     }).strict();
   }
 });
 
 // ../packages/shared/dist/validators/goal.js
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 var createGoalSchema, updateGoalSchema;
 var init_goal = __esm({
   "../packages/shared/dist/validators/goal.js"() {
     "use strict";
     init_constants();
-    createGoalSchema = z18.object({
-      title: z18.string().min(1),
-      description: z18.string().optional().nullable(),
-      level: z18.enum(GOAL_LEVELS).optional().default("task"),
-      status: z18.enum(GOAL_STATUSES).optional().default("planned"),
-      parentId: z18.string().uuid().optional().nullable(),
-      ownerAgentId: z18.string().uuid().optional().nullable()
+    createGoalSchema = z19.object({
+      title: z19.string().min(1),
+      description: z19.string().optional().nullable(),
+      level: z19.enum(GOAL_LEVELS).optional().default("task"),
+      status: z19.enum(GOAL_STATUSES).optional().default("planned"),
+      parentId: z19.string().uuid().optional().nullable(),
+      ownerAgentId: z19.string().uuid().optional().nullable()
     });
     updateGoalSchema = createGoalSchema.partial();
   }
 });
 
 // ../packages/shared/dist/validators/approval.js
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 var createApprovalSchema, resolveApprovalSchema, requestApprovalRevisionSchema, resubmitApprovalSchema, addApprovalCommentSchema;
 var init_approval = __esm({
   "../packages/shared/dist/validators/approval.js"() {
     "use strict";
     init_constants();
-    createApprovalSchema = z19.object({
-      type: z19.enum(APPROVAL_TYPES),
-      requestedByAgentId: z19.string().uuid().optional().nullable(),
-      payload: z19.record(z19.unknown()),
-      issueIds: z19.array(z19.string().uuid()).optional()
+    createApprovalSchema = z20.object({
+      type: z20.enum(APPROVAL_TYPES),
+      requestedByAgentId: z20.string().uuid().optional().nullable(),
+      payload: z20.record(z20.unknown()),
+      issueIds: z20.array(z20.string().uuid()).optional()
     });
-    resolveApprovalSchema = z19.object({
-      decisionNote: z19.string().optional().nullable(),
-      decidedByUserId: z19.string().optional().default("board"),
-      payload: z19.record(z19.unknown()).optional()
+    resolveApprovalSchema = z20.object({
+      decisionNote: z20.string().optional().nullable(),
+      decidedByUserId: z20.string().optional().default("board"),
+      payload: z20.record(z20.unknown()).optional()
     });
-    requestApprovalRevisionSchema = z19.object({
-      decisionNote: z19.string().optional().nullable(),
-      decidedByUserId: z19.string().optional().default("board")
+    requestApprovalRevisionSchema = z20.object({
+      decisionNote: z20.string().optional().nullable(),
+      decidedByUserId: z20.string().optional().default("board")
     });
-    resubmitApprovalSchema = z19.object({
-      payload: z19.record(z19.unknown()).optional()
+    resubmitApprovalSchema = z20.object({
+      payload: z20.record(z20.unknown()).optional()
     });
-    addApprovalCommentSchema = z19.object({
-      body: z19.string().min(1)
+    addApprovalCommentSchema = z20.object({
+      body: z20.string().min(1)
     });
   }
 });
 
 // ../packages/shared/dist/validators/automation.js
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 function normalizeAutomationInstructions(value) {
   const { instructions, ...rest } = value;
   return {
@@ -2134,27 +2198,27 @@ var init_automation = __esm({
   "../packages/shared/dist/validators/automation.js"() {
     "use strict";
     init_constants();
-    automationTextFieldSchema = z20.string().optional().nullable();
-    automationBodyFieldsSchema = z20.object({
-      projectId: z20.string().uuid().optional().nullable().default(null),
-      goalId: z20.string().uuid().optional().nullable(),
-      parentIssueId: z20.string().uuid().optional().nullable(),
-      title: z20.string().trim().min(1).max(200),
+    automationTextFieldSchema = z21.string().optional().nullable();
+    automationBodyFieldsSchema = z21.object({
+      projectId: z21.string().uuid().optional().nullable().default(null),
+      goalId: z21.string().uuid().optional().nullable(),
+      parentIssueId: z21.string().uuid().optional().nullable(),
+      title: z21.string().trim().min(1).max(200),
       instructions: automationTextFieldSchema,
       description: automationTextFieldSchema,
-      assigneeAgentId: z20.string().uuid(),
-      priority: z20.enum(ISSUE_PRIORITIES).optional().default("medium"),
-      status: z20.enum(AUTOMATION_STATUSES).optional().default("active"),
-      concurrencyPolicy: z20.enum(AUTOMATION_CONCURRENCY_POLICIES).optional().default("coalesce_if_active"),
-      catchUpPolicy: z20.enum(AUTOMATION_CATCH_UP_POLICIES).optional().default("skip_missed"),
-      outputMode: z20.enum(AUTOMATION_OUTPUT_MODES).optional().default("track_issue"),
-      chatConversationId: z20.string().uuid().optional().nullable().default(null),
-      notifyOnIssueCreated: z20.boolean().optional().default(false)
+      assigneeAgentId: z21.string().uuid(),
+      priority: z21.enum(ISSUE_PRIORITIES).optional().default("medium"),
+      status: z21.enum(AUTOMATION_STATUSES).optional().default("active"),
+      concurrencyPolicy: z21.enum(AUTOMATION_CONCURRENCY_POLICIES).optional().default("coalesce_if_active"),
+      catchUpPolicy: z21.enum(AUTOMATION_CATCH_UP_POLICIES).optional().default("skip_missed"),
+      outputMode: z21.enum(AUTOMATION_OUTPUT_MODES).optional().default("track_issue"),
+      chatConversationId: z21.string().uuid().optional().nullable().default(null),
+      notifyOnIssueCreated: z21.boolean().optional().default(false)
     });
     createAutomationSchema = automationBodyFieldsSchema.superRefine((value, ctx) => {
       if (value.chatConversationId) {
         ctx.addIssue({
-          code: z20.ZodIssueCode.custom,
+          code: z21.ZodIssueCode.custom,
           path: ["chatConversationId"],
           message: "Chat output creates an automation-owned conversation; existing chats cannot be selected"
         });
@@ -2163,185 +2227,185 @@ var init_automation = __esm({
     updateAutomationSchema = automationBodyFieldsSchema.partial().superRefine((value, ctx) => {
       if (value.chatConversationId) {
         ctx.addIssue({
-          code: z20.ZodIssueCode.custom,
+          code: z21.ZodIssueCode.custom,
           path: ["chatConversationId"],
           message: "Chat output creates an automation-owned conversation; existing chats cannot be selected"
         });
       }
     }).transform(normalizeAutomationInstructions).transform(normalizeAutomationNotifications);
-    baseTriggerSchema = z20.object({
-      label: z20.string().trim().max(120).optional().nullable(),
-      enabled: z20.boolean().optional().default(true)
+    baseTriggerSchema = z21.object({
+      label: z21.string().trim().max(120).optional().nullable(),
+      enabled: z21.boolean().optional().default(true)
     });
-    createAutomationTriggerSchema = z20.discriminatedUnion("kind", [
+    createAutomationTriggerSchema = z21.discriminatedUnion("kind", [
       baseTriggerSchema.extend({
-        kind: z20.literal("schedule"),
-        cronExpression: z20.string().trim().min(1),
-        timezone: z20.string().trim().min(1).default("UTC")
+        kind: z21.literal("schedule"),
+        cronExpression: z21.string().trim().min(1),
+        timezone: z21.string().trim().min(1).default("UTC")
       }),
       baseTriggerSchema.extend({
-        kind: z20.literal("webhook"),
-        signingMode: z20.enum(AUTOMATION_TRIGGER_SIGNING_MODES).optional().default("bearer"),
-        replayWindowSec: z20.number().int().min(30).max(86400).optional().default(300)
+        kind: z21.literal("webhook"),
+        signingMode: z21.enum(AUTOMATION_TRIGGER_SIGNING_MODES).optional().default("bearer"),
+        replayWindowSec: z21.number().int().min(30).max(86400).optional().default(300)
       }),
       baseTriggerSchema.extend({
-        kind: z20.literal("api")
+        kind: z21.literal("api")
       })
     ]);
-    updateAutomationTriggerSchema = z20.object({
-      label: z20.string().trim().max(120).optional().nullable(),
-      enabled: z20.boolean().optional(),
-      cronExpression: z20.string().trim().min(1).optional().nullable(),
-      timezone: z20.string().trim().min(1).optional().nullable(),
-      signingMode: z20.enum(AUTOMATION_TRIGGER_SIGNING_MODES).optional().nullable(),
-      replayWindowSec: z20.number().int().min(30).max(86400).optional().nullable()
-    });
-    runAutomationSchema = z20.object({
-      triggerId: z20.string().uuid().optional().nullable(),
-      payload: z20.record(z20.unknown()).optional().nullable(),
-      idempotencyKey: z20.string().trim().max(255).optional().nullable(),
-      source: z20.enum(["manual", "api"]).optional().default("manual")
-    });
-    rotateAutomationTriggerSecretSchema = z20.object({});
+    updateAutomationTriggerSchema = z21.object({
+      label: z21.string().trim().max(120).optional().nullable(),
+      enabled: z21.boolean().optional(),
+      cronExpression: z21.string().trim().min(1).optional().nullable(),
+      timezone: z21.string().trim().min(1).optional().nullable(),
+      signingMode: z21.enum(AUTOMATION_TRIGGER_SIGNING_MODES).optional().nullable(),
+      replayWindowSec: z21.number().int().min(30).max(86400).optional().nullable()
+    });
+    runAutomationSchema = z21.object({
+      triggerId: z21.string().uuid().optional().nullable(),
+      payload: z21.record(z21.unknown()).optional().nullable(),
+      idempotencyKey: z21.string().trim().max(255).optional().nullable(),
+      source: z21.enum(["manual", "api"]).optional().default("manual")
+    });
+    rotateAutomationTriggerSecretSchema = z21.object({});
   }
 });
 
 // ../packages/shared/dist/validators/calendar.js
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 var nullableUuid, createCalendarSourceSchema, updateCalendarSourceSchema, calendarEventBaseSchema, createCalendarEventSchema, updateCalendarEventSchema, calendarEventListQuerySchema, googleCalendarSyncSchema, updateGoogleCalendarOAuthConfigSchema;
 var init_calendar = __esm({
   "../packages/shared/dist/validators/calendar.js"() {
     "use strict";
     init_constants();
-    nullableUuid = z21.string().uuid().optional().nullable();
-    createCalendarSourceSchema = z21.object({
-      type: z21.enum(CALENDAR_SOURCE_TYPES).optional().default("rudder_local"),
-      name: z21.string().trim().min(1).max(160),
-      ownerType: z21.enum(CALENDAR_OWNER_TYPES).optional().default("user"),
-      ownerUserId: z21.string().trim().min(1).optional().nullable(),
+    nullableUuid = z22.string().uuid().optional().nullable();
+    createCalendarSourceSchema = z22.object({
+      type: z22.enum(CALENDAR_SOURCE_TYPES).optional().default("rudder_local"),
+      name: z22.string().trim().min(1).max(160),
+      ownerType: z22.enum(CALENDAR_OWNER_TYPES).optional().default("user"),
+      ownerUserId: z22.string().trim().min(1).optional().nullable(),
       ownerAgentId: nullableUuid,
-      externalProvider: z21.string().trim().min(1).max(80).optional().nullable(),
-      externalCalendarId: z21.string().trim().min(1).max(512).optional().nullable(),
-      visibilityDefault: z21.enum(CALENDAR_VISIBILITIES).optional().default("full"),
-      status: z21.enum(CALENDAR_SOURCE_STATUSES).optional().default("active"),
-      syncCursorJson: z21.record(z21.unknown()).optional().nullable()
+      externalProvider: z22.string().trim().min(1).max(80).optional().nullable(),
+      externalCalendarId: z22.string().trim().min(1).max(512).optional().nullable(),
+      visibilityDefault: z22.enum(CALENDAR_VISIBILITIES).optional().default("full"),
+      status: z22.enum(CALENDAR_SOURCE_STATUSES).optional().default("active"),
+      syncCursorJson: z22.record(z22.unknown()).optional().nullable()
     });
     updateCalendarSourceSchema = createCalendarSourceSchema.partial().extend({
-      lastSyncedAt: z21.coerce.date().optional().nullable()
+      lastSyncedAt: z22.coerce.date().optional().nullable()
     });
-    calendarEventBaseSchema = z21.object({
+    calendarEventBaseSchema = z22.object({
       sourceId: nullableUuid,
-      eventKind: z21.enum(CALENDAR_EVENT_KINDS),
-      eventStatus: z21.enum(CALENDAR_EVENT_STATUSES).optional().default("planned"),
-      ownerType: z21.enum(CALENDAR_OWNER_TYPES),
-      ownerUserId: z21.string().trim().min(1).optional().nullable(),
+      eventKind: z22.enum(CALENDAR_EVENT_KINDS),
+      eventStatus: z22.enum(CALENDAR_EVENT_STATUSES).optional().default("planned"),
+      ownerType: z22.enum(CALENDAR_OWNER_TYPES),
+      ownerUserId: z22.string().trim().min(1).optional().nullable(),
       ownerAgentId: nullableUuid,
-      title: z21.string().trim().min(1).max(240),
-      description: z21.string().optional().nullable(),
-      startAt: z21.coerce.date(),
-      endAt: z21.coerce.date(),
-      timezone: z21.string().trim().min(1).max(80).optional().default("UTC"),
-      allDay: z21.boolean().optional().default(false),
-      visibility: z21.enum(CALENDAR_VISIBILITIES).optional().default("full"),
+      title: z22.string().trim().min(1).max(240),
+      description: z22.string().optional().nullable(),
+      startAt: z22.coerce.date(),
+      endAt: z22.coerce.date(),
+      timezone: z22.string().trim().min(1).max(80).optional().default("UTC"),
+      allDay: z22.boolean().optional().default(false),
+      visibility: z22.enum(CALENDAR_VISIBILITIES).optional().default("full"),
       issueId: nullableUuid,
       projectId: nullableUuid,
       goalId: nullableUuid,
       approvalId: nullableUuid,
       heartbeatRunId: nullableUuid,
       activityId: nullableUuid,
-      sourceMode: z21.enum(CALENDAR_SOURCE_MODES).optional().default("manual"),
-      externalProvider: z21.string().trim().min(1).max(80).optional().nullable(),
-      externalCalendarId: z21.string().trim().min(1).max(512).optional().nullable(),
-      externalEventId: z21.string().trim().min(1).max(512).optional().nullable(),
-      externalEtag: z21.string().trim().min(1).max(512).optional().nullable(),
-      externalUpdatedAt: z21.coerce.date().optional().nullable()
+      sourceMode: z22.enum(CALENDAR_SOURCE_MODES).optional().default("manual"),
+      externalProvider: z22.string().trim().min(1).max(80).optional().nullable(),
+      externalCalendarId: z22.string().trim().min(1).max(512).optional().nullable(),
+      externalEventId: z22.string().trim().min(1).max(512).optional().nullable(),
+      externalEtag: z22.string().trim().min(1).max(512).optional().nullable(),
+      externalUpdatedAt: z22.coerce.date().optional().nullable()
     });
     createCalendarEventSchema = calendarEventBaseSchema.refine((value) => value.endAt.getTime() > value.startAt.getTime(), { path: ["endAt"], message: "End time must be after start time" });
     updateCalendarEventSchema = calendarEventBaseSchema.partial().refine((value) => value.startAt === void 0 || value.endAt === void 0 || value.endAt.getTime() > value.startAt.getTime(), { path: ["endAt"], message: "End time must be after start time" });
-    calendarEventListQuerySchema = z21.object({
-      start: z21.coerce.date(),
-      end: z21.coerce.date(),
-      agentIds: z21.string().optional(),
-      sourceIds: z21.string().optional(),
-      eventKinds: z21.string().optional(),
-      statuses: z21.string().optional()
+    calendarEventListQuerySchema = z22.object({
+      start: z22.coerce.date(),
+      end: z22.coerce.date(),
+      agentIds: z22.string().optional(),
+      sourceIds: z22.string().optional(),
+      eventKinds: z22.string().optional(),
+      statuses: z22.string().optional()
     }).refine((value) => value.end.getTime() > value.start.getTime(), { path: ["end"], message: "End time must be after start time" });
-    googleCalendarSyncSchema = z21.object({
-      sourceId: z21.string().uuid().optional().nullable()
+    googleCalendarSyncSchema = z22.object({
+      sourceId: z22.string().uuid().optional().nullable()
     });
-    updateGoogleCalendarOAuthConfigSchema = z21.object({
-      clientId: z21.string().trim().min(1).max(512).optional(),
-      clientSecret: z21.string().trim().min(1).max(2048).optional(),
-      clear: z21.boolean().optional().default(false)
+    updateGoogleCalendarOAuthConfigSchema = z22.object({
+      clientId: z22.string().trim().min(1).max(512).optional(),
+      clientSecret: z22.string().trim().min(1).max(2048).optional(),
+      clear: z22.boolean().optional().default(false)
     }).refine((value) => value.clear || value.clientId !== void 0 || value.clientSecret !== void 0, { message: "Provide credentials or clear the stored Google Calendar OAuth configuration" });
   }
 });
 
 // ../packages/shared/dist/validators/cost.js
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 var createCostEventSchema, updateBudgetSchema;
 var init_cost = __esm({
   "../packages/shared/dist/validators/cost.js"() {
     "use strict";
     init_constants();
-    createCostEventSchema = z22.object({
-      agentId: z22.string().uuid(),
-      issueId: z22.string().uuid().optional().nullable(),
-      projectId: z22.string().uuid().optional().nullable(),
-      goalId: z22.string().uuid().optional().nullable(),
-      heartbeatRunId: z22.string().uuid().optional().nullable(),
-      billingCode: z22.string().optional().nullable(),
-      provider: z22.string().min(1),
-      biller: z22.string().min(1).optional(),
-      billingType: z22.enum(BILLING_TYPES).optional().default("unknown"),
-      model: z22.string().min(1),
-      inputTokens: z22.number().int().nonnegative().optional().default(0),
-      cachedInputTokens: z22.number().int().nonnegative().optional().default(0),
-      outputTokens: z22.number().int().nonnegative().optional().default(0),
-      costCents: z22.number().int().nonnegative(),
-      occurredAt: z22.string().datetime()
+    createCostEventSchema = z23.object({
+      agentId: z23.string().uuid(),
+      issueId: z23.string().uuid().optional().nullable(),
+      projectId: z23.string().uuid().optional().nullable(),
+      goalId: z23.string().uuid().optional().nullable(),
+      heartbeatRunId: z23.string().uuid().optional().nullable(),
+      billingCode: z23.string().optional().nullable(),
+      provider: z23.string().min(1),
+      biller: z23.string().min(1).optional(),
+      billingType: z23.enum(BILLING_TYPES).optional().default("unknown"),
+      model: z23.string().min(1),
+      inputTokens: z23.number().int().nonnegative().optional().default(0),
+      cachedInputTokens: z23.number().int().nonnegative().optional().default(0),
+      outputTokens: z23.number().int().nonnegative().optional().default(0),
+      costCents: z23.number().int().nonnegative(),
+      occurredAt: z23.string().datetime()
     }).transform((value) => ({
       ...value,
       biller: value.biller ?? value.provider
     }));
-    updateBudgetSchema = z22.object({
-      budgetMonthlyCents: z22.number().int().nonnegative()
+    updateBudgetSchema = z23.object({
+      budgetMonthlyCents: z23.number().int().nonnegative()
     });
   }
 });
 
 // ../packages/shared/dist/validators/finance.js
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 var createFinanceEventSchema;
 var init_finance = __esm({
   "../packages/shared/dist/validators/finance.js"() {
     "use strict";
     init_constants();
-    createFinanceEventSchema = z23.object({
-      agentId: z23.string().uuid().optional().nullable(),
-      issueId: z23.string().uuid().optional().nullable(),
-      projectId: z23.string().uuid().optional().nullable(),
-      goalId: z23.string().uuid().optional().nullable(),
-      heartbeatRunId: z23.string().uuid().optional().nullable(),
-      costEventId: z23.string().uuid().optional().nullable(),
-      billingCode: z23.string().optional().nullable(),
-      description: z23.string().max(500).optional().nullable(),
-      eventKind: z23.enum(FINANCE_EVENT_KINDS),
-      direction: z23.enum(FINANCE_DIRECTIONS).optional().default("debit"),
-      biller: z23.string().min(1),
-      provider: z23.string().min(1).optional().nullable(),
-      executionAgentRuntimeType: z23.enum(AGENT_RUNTIME_TYPES).optional().nullable(),
-      pricingTier: z23.string().min(1).optional().nullable(),
-      region: z23.string().min(1).optional().nullable(),
-      model: z23.string().min(1).optional().nullable(),
-      quantity: z23.number().int().nonnegative().optional().nullable(),
-      unit: z23.enum(FINANCE_UNITS).optional().nullable(),
-      amountCents: z23.number().int().nonnegative(),
-      currency: z23.string().length(3).optional().default("USD"),
-      estimated: z23.boolean().optional().default(false),
-      externalInvoiceId: z23.string().optional().nullable(),
-      metadataJson: z23.record(z23.string(), z23.unknown()).optional().nullable(),
-      occurredAt: z23.string().datetime()
+    createFinanceEventSchema = z24.object({
+      agentId: z24.string().uuid().optional().nullable(),
+      issueId: z24.string().uuid().optional().nullable(),
+      projectId: z24.string().uuid().optional().nullable(),
+      goalId: z24.string().uuid().optional().nullable(),
+      heartbeatRunId: z24.string().uuid().optional().nullable(),
+      costEventId: z24.string().uuid().optional().nullable(),
+      billingCode: z24.string().optional().nullable(),
+      description: z24.string().max(500).optional().nullable(),
+      eventKind: z24.enum(FINANCE_EVENT_KINDS),
+      direction: z24.enum(FINANCE_DIRECTIONS).optional().default("debit"),
+      biller: z24.string().min(1),
+      provider: z24.string().min(1).optional().nullable(),
+      executionAgentRuntimeType: z24.enum(AGENT_RUNTIME_TYPES).optional().nullable(),
+      pricingTier: z24.string().min(1).optional().nullable(),
+      region: z24.string().min(1).optional().nullable(),
+      model: z24.string().min(1).optional().nullable(),
+      quantity: z24.number().int().nonnegative().optional().nullable(),
+      unit: z24.enum(FINANCE_UNITS).optional().nullable(),
+      amountCents: z24.number().int().nonnegative(),
+      currency: z24.string().length(3).optional().default("USD"),
+      estimated: z24.boolean().optional().default(false),
+      externalInvoiceId: z24.string().optional().nullable(),
+      metadataJson: z24.record(z24.string(), z24.unknown()).optional().nullable(),
+      occurredAt: z24.string().datetime()
     }).transform((value) => ({
       ...value,
       currency: value.currency.toUpperCase()
@@ -2350,79 +2414,79 @@ var init_finance = __esm({
 });
 
 // ../packages/shared/dist/validators/asset.js
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 var createAssetImageMetadataSchema;
 var init_asset = __esm({
   "../packages/shared/dist/validators/asset.js"() {
     "use strict";
-    createAssetImageMetadataSchema = z24.object({
-      namespace: z24.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9/_-]+$/).optional()
+    createAssetImageMetadataSchema = z25.object({
+      namespace: z25.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9/_-]+$/).optional()
     });
   }
 });
 
 // ../packages/shared/dist/validators/access.js
-import { z as z25 } from "zod";
+import { z as z26 } from "zod";
 var createCompanyInviteSchema, createOpenClawInvitePromptSchema, acceptInviteSchema, listJoinRequestsQuerySchema, claimJoinRequestApiKeySchema, boardCliAuthAccessLevelSchema, createCliAuthChallengeSchema, resolveCliAuthChallengeSchema, updateMemberPermissionsSchema, updateUserCompanyAccessSchema;
 var init_access = __esm({
   "../packages/shared/dist/validators/access.js"() {
     "use strict";
     init_constants();
-    createCompanyInviteSchema = z25.object({
-      allowedJoinTypes: z25.enum(INVITE_JOIN_TYPES).default("both"),
-      defaultsPayload: z25.record(z25.string(), z25.unknown()).optional().nullable(),
-      agentMessage: z25.string().max(4e3).optional().nullable()
-    });
-    createOpenClawInvitePromptSchema = z25.object({
-      agentMessage: z25.string().max(4e3).optional().nullable()
-    });
-    acceptInviteSchema = z25.object({
-      requestType: z25.enum(JOIN_REQUEST_TYPES),
-      agentName: z25.string().min(1).max(120).optional(),
-      agentRuntimeType: z25.enum(AGENT_RUNTIME_TYPES).optional(),
-      capabilities: z25.string().max(4e3).optional().nullable(),
-      agentDefaultsPayload: z25.record(z25.string(), z25.unknown()).optional().nullable(),
+    createCompanyInviteSchema = z26.object({
+      allowedJoinTypes: z26.enum(INVITE_JOIN_TYPES).default("both"),
+      defaultsPayload: z26.record(z26.string(), z26.unknown()).optional().nullable(),
+      agentMessage: z26.string().max(4e3).optional().nullable()
+    });
+    createOpenClawInvitePromptSchema = z26.object({
+      agentMessage: z26.string().max(4e3).optional().nullable()
+    });
+    acceptInviteSchema = z26.object({
+      requestType: z26.enum(JOIN_REQUEST_TYPES),
+      agentName: z26.string().min(1).max(120).optional(),
+      agentRuntimeType: z26.enum(AGENT_RUNTIME_TYPES).optional(),
+      capabilities: z26.string().max(4e3).optional().nullable(),
+      agentDefaultsPayload: z26.record(z26.string(), z26.unknown()).optional().nullable(),
       // OpenClaw join compatibility fields accepted at top level.
-      responsesWebhookUrl: z25.string().max(4e3).optional().nullable(),
-      responsesWebhookMethod: z25.string().max(32).optional().nullable(),
-      responsesWebhookHeaders: z25.record(z25.string(), z25.unknown()).optional().nullable(),
-      rudderApiUrl: z25.string().max(4e3).optional().nullable(),
-      webhookAuthHeader: z25.string().max(4e3).optional().nullable()
+      responsesWebhookUrl: z26.string().max(4e3).optional().nullable(),
+      responsesWebhookMethod: z26.string().max(32).optional().nullable(),
+      responsesWebhookHeaders: z26.record(z26.string(), z26.unknown()).optional().nullable(),
+      rudderApiUrl: z26.string().max(4e3).optional().nullable(),
+      webhookAuthHeader: z26.string().max(4e3).optional().nullable()
     });
-    listJoinRequestsQuerySchema = z25.object({
-      status: z25.enum(JOIN_REQUEST_STATUSES).optional(),
-      requestType: z25.enum(JOIN_REQUEST_TYPES).optional()
+    listJoinRequestsQuerySchema = z26.object({
+      status: z26.enum(JOIN_REQUEST_STATUSES).optional(),
+      requestType: z26.enum(JOIN_REQUEST_TYPES).optional()
     });
-    claimJoinRequestApiKeySchema = z25.object({
-      claimSecret: z25.string().min(16).max(256)
+    claimJoinRequestApiKeySchema = z26.object({
+      claimSecret: z26.string().min(16).max(256)
     });
-    boardCliAuthAccessLevelSchema = z25.enum([
+    boardCliAuthAccessLevelSchema = z26.enum([
       "board",
       "instance_admin_required"
     ]);
-    createCliAuthChallengeSchema = z25.object({
-      command: z25.string().min(1).max(240),
-      clientName: z25.string().max(120).optional().nullable(),
+    createCliAuthChallengeSchema = z26.object({
+      command: z26.string().min(1).max(240),
+      clientName: z26.string().max(120).optional().nullable(),
       requestedAccess: boardCliAuthAccessLevelSchema.default("board"),
-      requestedCompanyId: z25.string().uuid().optional().nullable()
+      requestedCompanyId: z26.string().uuid().optional().nullable()
     });
-    resolveCliAuthChallengeSchema = z25.object({
-      token: z25.string().min(16).max(256)
+    resolveCliAuthChallengeSchema = z26.object({
+      token: z26.string().min(16).max(256)
     });
-    updateMemberPermissionsSchema = z25.object({
-      grants: z25.array(z25.object({
-        permissionKey: z25.enum(PERMISSION_KEYS),
-        scope: z25.record(z25.string(), z25.unknown()).optional().nullable()
+    updateMemberPermissionsSchema = z26.object({
+      grants: z26.array(z26.object({
+        permissionKey: z26.enum(PERMISSION_KEYS),
+        scope: z26.record(z26.string(), z26.unknown()).optional().nullable()
       }))
     });
-    updateUserCompanyAccessSchema = z25.object({
-      orgIds: z25.array(z25.string().uuid()).default([])
+    updateUserCompanyAccessSchema = z26.object({
+      orgIds: z26.array(z26.string().uuid()).default([])
     });
   }
 });
 
 // ../packages/shared/dist/validators/plugin.js
-import { z as z26 } from "zod";
+import { z as z27 } from "zod";
 function isValidCronExpression(expression) {
   const trimmed = expression.trim();
   if (!trimmed)
@@ -2437,79 +2501,79 @@ var init_plugin = __esm({
   "../packages/shared/dist/validators/plugin.js"() {
     "use strict";
     init_constants();
-    jsonSchemaSchema = z26.record(z26.unknown()).refine((val) => {
+    jsonSchemaSchema = z27.record(z27.unknown()).refine((val) => {
       if (Object.keys(val).length === 0)
         return true;
       return typeof val.type === "string" || val.$ref !== void 0 || val.oneOf !== void 0 || val.anyOf !== void 0 || val.allOf !== void 0;
     }, { message: "Must be a valid JSON Schema object (requires at least a 'type', '$ref', or composition keyword)" });
     CRON_FIELD_PATTERN = /^(\*(?:\/[0-9]+)?|[0-9]+(?:-[0-9]+)?(?:\/[0-9]+)?)(?:,(\*(?:\/[0-9]+)?|[0-9]+(?:-[0-9]+)?(?:\/[0-9]+)?))*$/;
-    pluginJobDeclarationSchema = z26.object({
-      jobKey: z26.string().min(1),
-      displayName: z26.string().min(1),
-      description: z26.string().optional(),
-      schedule: z26.string().refine((val) => isValidCronExpression(val), { message: "schedule must be a valid 5-field cron expression (e.g. '*/15 * * * *')" }).optional()
-    });
-    pluginWebhookDeclarationSchema = z26.object({
-      endpointKey: z26.string().min(1),
-      displayName: z26.string().min(1),
-      description: z26.string().optional()
-    });
-    pluginToolDeclarationSchema = z26.object({
-      name: z26.string().min(1),
-      displayName: z26.string().min(1),
-      description: z26.string().min(1),
+    pluginJobDeclarationSchema = z27.object({
+      jobKey: z27.string().min(1),
+      displayName: z27.string().min(1),
+      description: z27.string().optional(),
+      schedule: z27.string().refine((val) => isValidCronExpression(val), { message: "schedule must be a valid 5-field cron expression (e.g. '*/15 * * * *')" }).optional()
+    });
+    pluginWebhookDeclarationSchema = z27.object({
+      endpointKey: z27.string().min(1),
+      displayName: z27.string().min(1),
+      description: z27.string().optional()
+    });
+    pluginToolDeclarationSchema = z27.object({
+      name: z27.string().min(1),
+      displayName: z27.string().min(1),
+      description: z27.string().min(1),
       parametersSchema: jsonSchemaSchema
     });
-    pluginUiSlotDeclarationSchema = z26.object({
-      type: z26.enum(PLUGIN_UI_SLOT_TYPES),
-      id: z26.string().min(1),
-      displayName: z26.string().min(1),
-      exportName: z26.string().min(1),
-      entityTypes: z26.array(z26.enum(PLUGIN_UI_SLOT_ENTITY_TYPES)).optional(),
-      routePath: z26.string().regex(/^[a-z0-9][a-z0-9-]*$/, {
+    pluginUiSlotDeclarationSchema = z27.object({
+      type: z27.enum(PLUGIN_UI_SLOT_TYPES),
+      id: z27.string().min(1),
+      displayName: z27.string().min(1),
+      exportName: z27.string().min(1),
+      entityTypes: z27.array(z27.enum(PLUGIN_UI_SLOT_ENTITY_TYPES)).optional(),
+      routePath: z27.string().regex(/^[a-z0-9][a-z0-9-]*$/, {
         message: "routePath must be a lowercase single-segment slug (letters, numbers, hyphens)"
       }).optional(),
-      order: z26.number().int().optional()
+      order: z27.number().int().optional()
     }).superRefine((value, ctx) => {
       const entityScopedTypes = ["detailTab", "taskDetailView", "contextMenuItem", "commentAnnotation", "commentContextMenuItem", "projectSidebarItem"];
       if (entityScopedTypes.includes(value.type) && (!value.entityTypes || value.entityTypes.length === 0)) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: `${value.type} slots require at least one entityType`,
           path: ["entityTypes"]
         });
       }
       if (value.type === "projectSidebarItem" && value.entityTypes && !value.entityTypes.includes("project")) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: 'projectSidebarItem slots require entityTypes to include "project"',
           path: ["entityTypes"]
         });
       }
       if (value.type === "commentAnnotation" && value.entityTypes && !value.entityTypes.includes("comment")) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: 'commentAnnotation slots require entityTypes to include "comment"',
           path: ["entityTypes"]
         });
       }
       if (value.type === "commentContextMenuItem" && value.entityTypes && !value.entityTypes.includes("comment")) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: 'commentContextMenuItem slots require entityTypes to include "comment"',
           path: ["entityTypes"]
         });
       }
       if (value.routePath && value.type !== "page") {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "routePath is only supported for page slots",
           path: ["routePath"]
         });
       }
       if (value.routePath && PLUGIN_RESERVED_COMPANY_ROUTE_SEGMENTS.includes(value.routePath)) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: `routePath "${value.routePath}" is reserved by the host`,
           path: ["routePath"]
         });
@@ -2530,29 +2594,29 @@ var init_plugin = __esm({
       external: [],
       iframe: ["compact", "default", "wide", "full"]
     };
-    pluginLauncherActionDeclarationSchema = z26.object({
-      type: z26.enum(PLUGIN_LAUNCHER_ACTIONS),
-      target: z26.string().min(1),
-      params: z26.record(z26.unknown()).optional()
+    pluginLauncherActionDeclarationSchema = z27.object({
+      type: z27.enum(PLUGIN_LAUNCHER_ACTIONS),
+      target: z27.string().min(1),
+      params: z27.record(z27.unknown()).optional()
     }).superRefine((value, ctx) => {
       if (value.type === "performAction" && value.target.includes("/")) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "performAction launchers must target an action key, not a route or URL",
           path: ["target"]
         });
       }
       if (value.type === "navigate" && /^https?:\/\//.test(value.target)) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "navigate launchers must target a host route, not an absolute URL",
           path: ["target"]
         });
       }
     });
-    pluginLauncherRenderDeclarationSchema = z26.object({
-      environment: z26.enum(PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS),
-      bounds: z26.enum(PLUGIN_LAUNCHER_BOUNDS).optional()
+    pluginLauncherRenderDeclarationSchema = z27.object({
+      environment: z27.enum(PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS),
+      bounds: z27.enum(PLUGIN_LAUNCHER_BOUNDS).optional()
     }).superRefine((value, ctx) => {
       if (!value.bounds) {
         return;
@@ -2560,110 +2624,110 @@ var init_plugin = __esm({
       const supportedBounds = launcherBoundsByEnvironment[value.environment];
       if (!supportedBounds.includes(value.bounds)) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: `bounds "${value.bounds}" is not supported for render environment "${value.environment}"`,
           path: ["bounds"]
         });
       }
     });
-    pluginLauncherDeclarationSchema = z26.object({
-      id: z26.string().min(1),
-      displayName: z26.string().min(1),
-      description: z26.string().optional(),
-      placementZone: z26.enum(PLUGIN_LAUNCHER_PLACEMENT_ZONES),
-      exportName: z26.string().min(1).optional(),
-      entityTypes: z26.array(z26.enum(PLUGIN_UI_SLOT_ENTITY_TYPES)).optional(),
-      order: z26.number().int().optional(),
+    pluginLauncherDeclarationSchema = z27.object({
+      id: z27.string().min(1),
+      displayName: z27.string().min(1),
+      description: z27.string().optional(),
+      placementZone: z27.enum(PLUGIN_LAUNCHER_PLACEMENT_ZONES),
+      exportName: z27.string().min(1).optional(),
+      entityTypes: z27.array(z27.enum(PLUGIN_UI_SLOT_ENTITY_TYPES)).optional(),
+      order: z27.number().int().optional(),
       action: pluginLauncherActionDeclarationSchema,
       render: pluginLauncherRenderDeclarationSchema.optional()
     }).superRefine((value, ctx) => {
       if (entityScopedLauncherPlacementZones.some((zone) => zone === value.placementZone) && (!value.entityTypes || value.entityTypes.length === 0)) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: `${value.placementZone} launchers require at least one entityType`,
           path: ["entityTypes"]
         });
       }
       if (value.placementZone === "projectSidebarItem" && value.entityTypes && !value.entityTypes.includes("project")) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: 'projectSidebarItem launchers require entityTypes to include "project"',
           path: ["entityTypes"]
         });
       }
       if (value.action.type === "performAction" && value.render) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "performAction launchers cannot declare render hints",
           path: ["render"]
         });
       }
       if (["openModal", "openDrawer", "openPopover"].includes(value.action.type) && !value.render) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: `${value.action.type} launchers require render metadata`,
           path: ["render"]
         });
       }
       if (value.action.type === "openModal" && value.render?.environment === "hostInline") {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "openModal launchers cannot use the hostInline render environment",
           path: ["render", "environment"]
         });
       }
       if (value.action.type === "openDrawer" && value.render && !["hostOverlay", "iframe"].includes(value.render.environment)) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "openDrawer launchers must use hostOverlay or iframe render environments",
           path: ["render", "environment"]
         });
       }
       if (value.action.type === "openPopover" && value.render?.environment === "hostRoute") {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "openPopover launchers cannot use the hostRoute render environment",
           path: ["render", "environment"]
         });
       }
     });
-    pluginManifestV1Schema = z26.object({
-      id: z26.string().min(1).regex(/^[a-z0-9][a-z0-9._-]*$/, "Plugin id must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, hyphens, or underscores"),
-      apiVersion: z26.literal(1),
-      version: z26.string().min(1).regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "Version must follow semver (e.g. 1.0.0 or 1.0.0-beta.1)"),
-      displayName: z26.string().min(1).max(100),
-      description: z26.string().min(1).max(500),
-      author: z26.string().min(1).max(200),
-      categories: z26.array(z26.enum(PLUGIN_CATEGORIES)).min(1),
-      minimumHostVersion: z26.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumHostVersion must follow semver (e.g. 1.0.0)").optional(),
-      minimumPaperclipVersion: z26.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumPaperclipVersion must follow semver (e.g. 1.0.0)").optional(),
-      capabilities: z26.array(z26.enum(PLUGIN_CAPABILITIES)).min(1),
-      entrypoints: z26.object({
-        worker: z26.string().min(1),
-        ui: z26.string().min(1).optional()
+    pluginManifestV1Schema = z27.object({
+      id: z27.string().min(1).regex(/^[a-z0-9][a-z0-9._-]*$/, "Plugin id must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, hyphens, or underscores"),
+      apiVersion: z27.literal(1),
+      version: z27.string().min(1).regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "Version must follow semver (e.g. 1.0.0 or 1.0.0-beta.1)"),
+      displayName: z27.string().min(1).max(100),
+      description: z27.string().min(1).max(500),
+      author: z27.string().min(1).max(200),
+      categories: z27.array(z27.enum(PLUGIN_CATEGORIES)).min(1),
+      minimumHostVersion: z27.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumHostVersion must follow semver (e.g. 1.0.0)").optional(),
+      minimumPaperclipVersion: z27.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumPaperclipVersion must follow semver (e.g. 1.0.0)").optional(),
+      capabilities: z27.array(z27.enum(PLUGIN_CAPABILITIES)).min(1),
+      entrypoints: z27.object({
+        worker: z27.string().min(1),
+        ui: z27.string().min(1).optional()
       }),
       instanceConfigSchema: jsonSchemaSchema.optional(),
-      jobs: z26.array(pluginJobDeclarationSchema).optional(),
-      webhooks: z26.array(pluginWebhookDeclarationSchema).optional(),
-      tools: z26.array(pluginToolDeclarationSchema).optional(),
-      launchers: z26.array(pluginLauncherDeclarationSchema).optional(),
-      ui: z26.object({
-        slots: z26.array(pluginUiSlotDeclarationSchema).min(1).optional(),
-        launchers: z26.array(pluginLauncherDeclarationSchema).optional()
+      jobs: z27.array(pluginJobDeclarationSchema).optional(),
+      webhooks: z27.array(pluginWebhookDeclarationSchema).optional(),
+      tools: z27.array(pluginToolDeclarationSchema).optional(),
+      launchers: z27.array(pluginLauncherDeclarationSchema).optional(),
+      ui: z27.object({
+        slots: z27.array(pluginUiSlotDeclarationSchema).min(1).optional(),
+        launchers: z27.array(pluginLauncherDeclarationSchema).optional()
       }).optional()
     }).superRefine((manifest, ctx) => {
       const hasUiSlots = (manifest.ui?.slots?.length ?? 0) > 0;
       const hasUiLaunchers = (manifest.ui?.launchers?.length ?? 0) > 0;
       if ((hasUiSlots || hasUiLaunchers) && !manifest.entrypoints.ui) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "entrypoints.ui is required when ui.slots or ui.launchers are declared",
           path: ["entrypoints", "ui"]
         });
       }
       if (manifest.minimumHostVersion && manifest.minimumPaperclipVersion && manifest.minimumHostVersion !== manifest.minimumPaperclipVersion) {
         ctx.addIssue({
-          code: z26.ZodIssueCode.custom,
+          code: z27.ZodIssueCode.custom,
           message: "minimumHostVersion and minimumPaperclipVersion must match when both are declared",
           path: ["minimumHostVersion"]
         });
@@ -2671,7 +2735,7 @@ var init_plugin = __esm({
       if (manifest.tools && manifest.tools.length > 0) {
         if (!manifest.capabilities.includes("agent.tools.register")) {
           ctx.addIssue({
-            code: z26.ZodIssueCode.custom,
+            code: z27.ZodIssueCode.custom,
             message: "Capability 'agent.tools.register' is required when tools are declared",
             path: ["capabilities"]
           });
@@ -2680,7 +2744,7 @@ var init_plugin = __esm({
       if (manifest.jobs && manifest.jobs.length > 0) {
         if (!manifest.capabilities.includes("jobs.schedule")) {
           ctx.addIssue({
-            code: z26.ZodIssueCode.custom,
+            code: z27.ZodIssueCode.custom,
             message: "Capability 'jobs.schedule' is required when jobs are declared",
             path: ["capabilities"]
           });
@@ -2689,7 +2753,7 @@ var init_plugin = __esm({
       if (manifest.webhooks && manifest.webhooks.length > 0) {
         if (!manifest.capabilities.includes("webhooks.receive")) {
           ctx.addIssue({
-            code: z26.ZodIssueCode.custom,
+            code: z27.ZodIssueCode.custom,
             message: "Capability 'webhooks.receive' is required when webhooks are declared",
             path: ["capabilities"]
           });
@@ -2700,7 +2764,7 @@ var init_plugin = __esm({
         const duplicates = jobKeys.filter((key, i) => jobKeys.indexOf(key) !== i);
         if (duplicates.length > 0) {
           ctx.addIssue({
-            code: z26.ZodIssueCode.custom,
+            code: z27.ZodIssueCode.custom,
             message: `Duplicate job keys: ${[...new Set(duplicates)].join(", ")}`,
             path: ["jobs"]
           });
@@ -2711,7 +2775,7 @@ var init_plugin = __esm({
         const duplicates = endpointKeys.filter((key, i) => endpointKeys.indexOf(key) !== i);
         if (duplicates.length > 0) {
           ctx.addIssue({
-            code: z26.ZodIssueCode.custom,
+            code: z27.ZodIssueCode.custom,
             message: `Duplicate webhook endpoint keys: ${[...new Set(duplicates)].join(", ")}`,
             path: ["webhooks"]
           });
@@ -2722,7 +2786,7 @@ var init_plugin = __esm({
         const duplicates = toolNames.filter((name, i) => toolNames.indexOf(name) !== i);
         if (duplicates.length > 0) {
           ctx.addIssue({
-            code: z26.ZodIssueCode.custom,
+            code: z27.ZodIssueCode.custom,
             message: `Duplicate tool names: ${[...new Set(duplicates)].join(", ")}`,
             path: ["tools"]
           });
@@ -2734,7 +2798,7 @@ var init_plugin = __esm({
           const duplicates = slotIds.filter((id, i) => slotIds.indexOf(id) !== i);
           if (duplicates.length > 0) {
             ctx.addIssue({
-              code: z26.ZodIssueCode.custom,
+              code: z27.ZodIssueCode.custom,
               message: `Duplicate UI slot ids: ${[...new Set(duplicates)].join(", ")}`,
               path: ["ui", "slots"]
             });
@@ -2750,50 +2814,50 @@ var init_plugin = __esm({
         const duplicates = launcherIds.filter((id, i) => launcherIds.indexOf(id) !== i);
         if (duplicates.length > 0) {
           ctx.addIssue({
-            code: z26.ZodIssueCode.custom,
+            code: z27.ZodIssueCode.custom,
             message: `Duplicate launcher ids: ${[...new Set(duplicates)].join(", ")}`,
             path: manifest.ui?.launchers ? ["ui", "launchers"] : ["launchers"]
           });
         }
       }
     });
-    installPluginSchema = z26.object({
-      packageName: z26.string().min(1),
-      version: z26.string().min(1).optional(),
+    installPluginSchema = z27.object({
+      packageName: z27.string().min(1),
+      version: z27.string().min(1).optional(),
       /** Set by loader for local-path installs so the worker can be resolved. */
-      packagePath: z26.string().min(1).optional()
+      packagePath: z27.string().min(1).optional()
     });
-    upsertPluginConfigSchema = z26.object({
-      configJson: z26.record(z26.unknown())
+    upsertPluginConfigSchema = z27.object({
+      configJson: z27.record(z27.unknown())
     });
-    patchPluginConfigSchema = z26.object({
-      configJson: z26.record(z26.unknown())
+    patchPluginConfigSchema = z27.object({
+      configJson: z27.record(z27.unknown())
     });
-    updatePluginStatusSchema = z26.object({
-      status: z26.enum(PLUGIN_STATUSES),
-      lastError: z26.string().nullable().optional()
+    updatePluginStatusSchema = z27.object({
+      status: z27.enum(PLUGIN_STATUSES),
+      lastError: z27.string().nullable().optional()
     });
-    uninstallPluginSchema = z26.object({
-      removeData: z26.boolean().optional().default(false)
+    uninstallPluginSchema = z27.object({
+      removeData: z27.boolean().optional().default(false)
     });
-    pluginStateScopeKeySchema = z26.object({
-      scopeKind: z26.enum(PLUGIN_STATE_SCOPE_KINDS),
-      scopeId: z26.string().min(1).optional(),
-      namespace: z26.string().min(1).optional(),
-      stateKey: z26.string().min(1)
+    pluginStateScopeKeySchema = z27.object({
+      scopeKind: z27.enum(PLUGIN_STATE_SCOPE_KINDS),
+      scopeId: z27.string().min(1).optional(),
+      namespace: z27.string().min(1).optional(),
+      stateKey: z27.string().min(1)
     });
-    setPluginStateSchema = z26.object({
-      scopeKind: z26.enum(PLUGIN_STATE_SCOPE_KINDS),
-      scopeId: z26.string().min(1).optional(),
-      namespace: z26.string().min(1).optional(),
-      stateKey: z26.string().min(1),
+    setPluginStateSchema = z27.object({
+      scopeKind: z27.enum(PLUGIN_STATE_SCOPE_KINDS),
+      scopeId: z27.string().min(1).optional(),
+      namespace: z27.string().min(1).optional(),
+      stateKey: z27.string().min(1),
       /** JSON-serializable value to store. */
-      value: z26.unknown()
+      value: z27.unknown()
     });
-    listPluginStateSchema = z26.object({
-      scopeKind: z26.enum(PLUGIN_STATE_SCOPE_KINDS).optional(),
-      scopeId: z26.string().min(1).optional(),
-      namespace: z26.string().min(1).optional()
+    listPluginStateSchema = z27.object({
+      scopeKind: z27.enum(PLUGIN_STATE_SCOPE_KINDS).optional(),
+      scopeId: z27.string().min(1).optional(),
+      namespace: z27.string().min(1).optional()
     });
   }
 });
@@ -2812,6 +2876,7 @@ var init_validators = __esm({
     init_organization();
     init_resource();
     init_agent();
+    init_agent_integration();
     init_project();
     init_issue();
     init_work_product();
@@ -2831,9 +2896,16 @@ var init_validators = __esm({
 });
 
 // ../packages/shared/dist/agent-url-key.js
+function isUuidLike(value) {
+  if (typeof value !== "string")
+    return false;
+  return UUID_RE.test(value.trim());
+}
+var UUID_RE;
 var init_agent_url_key = __esm({
   "../packages/shared/dist/agent-url-key.js"() {
     "use strict";
+    UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
   }
 });
 
@@ -2956,34 +3028,34 @@ var init_issue_activity = __esm({
 });
 
 // ../packages/shared/dist/config-schema.js
-import { z as z27 } from "zod";
+import { z as z28 } from "zod";
 var DEFAULT_DATABASE_BACKUP_MAX_ESTIMATED_BYTES, configMetaSchema, llmConfigSchema, databaseBackupConfigSchema, databaseConfigSchema, loggingConfigSchema, serverConfigSchema, authConfigSchema, storageLocalDiskConfigSchema, storageS3ConfigSchema, storageConfigSchema, secretsLocalEncryptedConfigSchema, secretsConfigSchema, langfuseConfigSchema, rudderConfigSchema;
 var init_config_schema = __esm({
   "../packages/shared/dist/config-schema.js"() {
     "use strict";
     init_constants();
     DEFAULT_DATABASE_BACKUP_MAX_ESTIMATED_BYTES = 256 * 1024 * 1024;
-    configMetaSchema = z27.object({
-      version: z27.literal(1),
-      updatedAt: z27.string(),
-      source: z27.enum(["onboard", "configure", "doctor"])
-    });
-    llmConfigSchema = z27.object({
-      provider: z27.enum(["claude", "openai"]),
-      apiKey: z27.string().optional()
-    });
-    databaseBackupConfigSchema = z27.object({
-      enabled: z27.boolean().default(true),
-      intervalMinutes: z27.number().int().min(1).max(7 * 24 * 60).default(60),
-      retentionDays: z27.number().int().min(1).max(3650).default(30),
-      maxEstimatedBytes: z27.number().int().min(1).default(DEFAULT_DATABASE_BACKUP_MAX_ESTIMATED_BYTES),
-      dir: z27.string().default("~/.rudder/instances/default/data/backups")
-    });
-    databaseConfigSchema = z27.object({
-      mode: z27.enum(["embedded-postgres", "postgres"]).default("embedded-postgres"),
-      connectionString: z27.string().optional(),
-      embeddedPostgresDataDir: z27.string().default("~/.rudder/instances/default/db"),
-      embeddedPostgresPort: z27.number().int().min(1).max(65535).default(54329),
+    configMetaSchema = z28.object({
+      version: z28.literal(1),
+      updatedAt: z28.string(),
+      source: z28.enum(["onboard", "configure", "doctor"])
+    });
+    llmConfigSchema = z28.object({
+      provider: z28.enum(["claude", "openai"]),
+      apiKey: z28.string().optional()
+    });
+    databaseBackupConfigSchema = z28.object({
+      enabled: z28.boolean().default(true),
+      intervalMinutes: z28.number().int().min(1).max(7 * 24 * 60).default(60),
+      retentionDays: z28.number().int().min(1).max(3650).default(30),
+      maxEstimatedBytes: z28.number().int().min(1).default(DEFAULT_DATABASE_BACKUP_MAX_ESTIMATED_BYTES),
+      dir: z28.string().default("~/.rudder/instances/default/data/backups")
+    });
+    databaseConfigSchema = z28.object({
+      mode: z28.enum(["embedded-postgres", "postgres"]).default("embedded-postgres"),
+      connectionString: z28.string().optional(),
+      embeddedPostgresDataDir: z28.string().default("~/.rudder/instances/default/db"),
+      embeddedPostgresPort: z28.number().int().min(1).max(65535).default(54329),
       backup: databaseBackupConfigSchema.default({
         enabled: true,
         intervalMinutes: 60,
@@ -2992,35 +3064,35 @@ var init_config_schema = __esm({
         dir: "~/.rudder/instances/default/data/backups"
       })
     });
-    loggingConfigSchema = z27.object({
-      mode: z27.enum(["file", "cloud"]),
-      logDir: z27.string().default("~/.rudder/instances/default/logs")
-    });
-    serverConfigSchema = z27.object({
-      deploymentMode: z27.enum(DEPLOYMENT_MODES).default("local_trusted"),
-      exposure: z27.enum(DEPLOYMENT_EXPOSURES).default("private"),
-      host: z27.string().default("127.0.0.1"),
-      port: z27.number().int().min(1).max(65535).default(3100),
-      allowedHostnames: z27.array(z27.string().min(1)).default([]),
-      serveUi: z27.boolean().default(true)
-    });
-    authConfigSchema = z27.object({
-      baseUrlMode: z27.enum(AUTH_BASE_URL_MODES).default("auto"),
-      publicBaseUrl: z27.string().url().optional(),
-      disableSignUp: z27.boolean().default(false)
-    });
-    storageLocalDiskConfigSchema = z27.object({
-      baseDir: z27.string().default("~/.rudder/instances/default/data/storage")
-    });
-    storageS3ConfigSchema = z27.object({
-      bucket: z27.string().min(1).default("rudder"),
-      region: z27.string().min(1).default("us-east-1"),
-      endpoint: z27.string().optional(),
-      prefix: z27.string().default(""),
-      forcePathStyle: z27.boolean().default(false)
-    });
-    storageConfigSchema = z27.object({
-      provider: z27.enum(STORAGE_PROVIDERS).default("local_disk"),
+    loggingConfigSchema = z28.object({
+      mode: z28.enum(["file", "cloud"]),
+      logDir: z28.string().default("~/.rudder/instances/default/logs")
+    });
+    serverConfigSchema = z28.object({
+      deploymentMode: z28.enum(DEPLOYMENT_MODES).default("local_trusted"),
+      exposure: z28.enum(DEPLOYMENT_EXPOSURES).default("private"),
+      host: z28.string().default("127.0.0.1"),
+      port: z28.number().int().min(1).max(65535).default(3100),
+      allowedHostnames: z28.array(z28.string().min(1)).default([]),
+      serveUi: z28.boolean().default(true)
+    });
+    authConfigSchema = z28.object({
+      baseUrlMode: z28.enum(AUTH_BASE_URL_MODES).default("auto"),
+      publicBaseUrl: z28.string().url().optional(),
+      disableSignUp: z28.boolean().default(false)
+    });
+    storageLocalDiskConfigSchema = z28.object({
+      baseDir: z28.string().default("~/.rudder/instances/default/data/storage")
+    });
+    storageS3ConfigSchema = z28.object({
+      bucket: z28.string().min(1).default("rudder"),
+      region: z28.string().min(1).default("us-east-1"),
+      endpoint: z28.string().optional(),
+      prefix: z28.string().default(""),
+      forcePathStyle: z28.boolean().default(false)
+    });
+    storageConfigSchema = z28.object({
+      provider: z28.enum(STORAGE_PROVIDERS).default("local_disk"),
       localDisk: storageLocalDiskConfigSchema.default({
         baseDir: "~/.rudder/instances/default/data/storage"
       }),
@@ -3031,24 +3103,24 @@ var init_config_schema = __esm({
         forcePathStyle: false
       })
     });
-    secretsLocalEncryptedConfigSchema = z27.object({
-      keyFilePath: z27.string().default("~/.rudder/instances/default/secrets/master.key")
+    secretsLocalEncryptedConfigSchema = z28.object({
+      keyFilePath: z28.string().default("~/.rudder/instances/default/secrets/master.key")
     });
-    secretsConfigSchema = z27.object({
-      provider: z27.enum(SECRET_PROVIDERS).default("local_encrypted"),
-      strictMode: z27.boolean().default(false),
+    secretsConfigSchema = z28.object({
+      provider: z28.enum(SECRET_PROVIDERS).default("local_encrypted"),
+      strictMode: z28.boolean().default(false),
       localEncrypted: secretsLocalEncryptedConfigSchema.default({
         keyFilePath: "~/.rudder/instances/default/secrets/master.key"
       })
     });
-    langfuseConfigSchema = z27.object({
-      enabled: z27.boolean().default(false),
-      baseUrl: z27.string().url().default("http://localhost:3000"),
-      publicKey: z27.string().optional(),
-      secretKey: z27.string().optional(),
-      environment: z27.string().optional()
+    langfuseConfigSchema = z28.object({
+      enabled: z28.boolean().default(false),
+      baseUrl: z28.string().url().default("http://localhost:3000"),
+      publicKey: z28.string().optional(),
+      secretKey: z28.string().optional(),
+      environment: z28.string().optional()
     });
-    rudderConfigSchema = z27.object({
+    rudderConfigSchema = z28.object({
       $meta: configMetaSchema,
       llm: llmConfigSchema.optional(),
       database: databaseConfigSchema,
@@ -3082,7 +3154,7 @@ var init_config_schema = __esm({
       if (value.server.deploymentMode === "local_trusted") {
         if (value.server.exposure !== "private") {
           ctx.addIssue({
-            code: z27.ZodIssueCode.custom,
+            code: z28.ZodIssueCode.custom,
             message: "server.exposure must be private when deploymentMode is local_trusted",
             path: ["server", "exposure"]
           });
@@ -3091,21 +3163,21 @@ var init_config_schema = __esm({
       }
       if (value.auth.baseUrlMode === "explicit" && !value.auth.publicBaseUrl) {
         ctx.addIssue({
-          code: z27.ZodIssueCode.custom,
+          code: z28.ZodIssueCode.custom,
           message: "auth.publicBaseUrl is required when auth.baseUrlMode is explicit",
           path: ["auth", "publicBaseUrl"]
         });
       }
       if (value.server.exposure === "public" && value.auth.baseUrlMode !== "explicit") {
         ctx.addIssue({
-          code: z27.ZodIssueCode.custom,
+          code: z28.ZodIssueCode.custom,
           message: "auth.baseUrlMode must be explicit when deploymentMode=authenticated and exposure=public",
           path: ["auth", "baseUrlMode"]
         });
       }
       if (value.server.exposure === "public" && !value.auth.publicBaseUrl) {
         ctx.addIssue({
-          code: z27.ZodIssueCode.custom,
+          code: z28.ZodIssueCode.custom,
           message: "auth.publicBaseUrl is required when deploymentMode=authenticated and exposure=public",
           path: ["auth", "publicBaseUrl"]
         });
@@ -6289,6 +6361,7 @@ async function addAllowedHostname(host, opts) {
 init_auth_bootstrap_ceo();
 
 // src/commands/client/common.ts
+init_dist();
 import pc4 from "picocolors";
 
 // src/client/board-auth.ts
@@ -6792,8 +6865,11 @@ function toStringRecord(headers) {
 
 // src/commands/client/common.ts
 init_store();
+var currentCommandFullIds = false;
+var CLI_SHORT_UUID_LENGTH = 12;
+var UUID_SUBSTRING_RE = /\b[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\b/giu;
 function addCommonClientOptions(command, opts) {
-  command.option("-c, --config <path>", "Path to Rudder config file").option("-d, --data-dir <path>", "Rudder data directory root (isolates state from ~/.rudder)").option("--context <path>", "Path to CLI context file").option("--profile <name>", "CLI context profile name").option("--api-base <url>", "Base URL for the Rudder API").option("--api-key <token>", "Bearer token for agent-authenticated calls").option("--run-id <id>", "Run ID to attach on mutating agent requests").option("--json", "Output raw JSON");
+  command.option("-c, --config <path>", "Path to Rudder config file").option("-d, --data-dir <path>", "Rudder data directory root (isolates state from ~/.rudder)").option("--context <path>", "Path to CLI context file").option("--profile <name>", "CLI context profile name").option("--api-base <url>", "Base URL for the Rudder API").option("--api-key <token>", "Bearer token for agent-authenticated calls").option("--run-id <id>", "Run ID to attach on mutating agent requests").option("--json", "Output JSON").option("--full-ids", "Show full UUIDs in output instead of CLI short IDs");
   if (opts?.includeCompany) {
     command.option("-O, --org-id <id>", "Organization ID (overrides context default)");
   }
@@ -6814,6 +6890,8 @@ function resolveCommandContext(options, opts) {
       "Organization ID is required. Pass --org-id, set RUDDER_ORG_ID, or set context profile orgId via `rudder context set`."
     );
   }
+  const fullIds = Boolean(options.fullIds);
+  currentCommandFullIds = fullIds;
   const api = new RudderApiClient({
     apiBase,
     apiKey,
@@ -6840,7 +6918,8 @@ function resolveCommandContext(options, opts) {
     runId,
     profileName,
     profile,
-    json: Boolean(options.json)
+    json: Boolean(options.json),
+    fullIds
   };
 }
 function shouldRecoverBoardAuth(error) {
@@ -6852,54 +6931,149 @@ function canAttemptInteractiveBoardAuth() {
   return Boolean(process.stdin.isTTY && process.stdout.isTTY);
 }
 function printOutput(data, opts = {}) {
+  const outputData = shouldShowFullIds(opts.fullIds) ? data : toCliShortIdOutput(data);
   if (opts.json) {
-    const output = JSON.stringify(data, null, 2);
+    const output = JSON.stringify(outputData, null, 2);
     process.stdout.write(output + "\n");
     return;
   }
   if (opts.label) {
     console.log(pc4.bold(opts.label));
   }
-  if (Array.isArray(data)) {
-    if (data.length === 0) {
+  if (Array.isArray(outputData)) {
+    if (outputData.length === 0) {
       console.log(pc4.dim("(empty)"));
       return;
     }
-    for (const item of data) {
+    for (const item of outputData) {
       if (typeof item === "object" && item !== null) {
-        console.log(formatInlineRecord(item));
+        console.log(formatInlineRecord(item, { fullIds: true }));
       } else {
         console.log(String(item));
       }
     }
     return;
   }
-  if (typeof data === "object" && data !== null) {
-    console.log(JSON.stringify(data, null, 2));
+  if (typeof outputData === "object" && outputData !== null) {
+    console.log(JSON.stringify(outputData, null, 2));
     return;
   }
-  if (data === void 0 || data === null) {
+  if (outputData === void 0 || outputData === null) {
     console.log(pc4.dim("(null)"));
     return;
   }
-  console.log(String(data));
+  console.log(String(outputData));
 }
-function formatInlineRecord(record) {
+function formatInlineRecord(record, opts = {}) {
+  const displayRecord = shouldShowFullIds(opts.fullIds) ? record : toCliShortIdOutput(record);
   const keyOrder = ["identifier", "id", "name", "status", "priority", "title", "action"];
   const seen = /* @__PURE__ */ new Set();
   const parts = [];
   for (const key of keyOrder) {
-    if (!(key in record)) continue;
-    parts.push(`${key}=${renderValue(record[key])}`);
+    if (!(key in displayRecord)) continue;
+    parts.push(`${key}=${renderValue(displayRecord[key])}`);
     seen.add(key);
   }
-  for (const [key, value] of Object.entries(record)) {
+  for (const [key, value] of Object.entries(displayRecord)) {
     if (seen.has(key)) continue;
     if (typeof value === "object") continue;
     parts.push(`${key}=${renderValue(value)}`);
   }
   return parts.join(" ");
 }
+function toCliShortIdOutput(value) {
+  if (Array.isArray(value)) {
+    return value.map((item) => toCliShortIdOutput(item));
+  }
+  if (typeof value !== "object" || value === null) {
+    return value;
+  }
+  const source = value;
+  const output = {};
+  for (const [key, childValue] of Object.entries(source)) {
+    output[key] = shortenCliValueForKey(key, childValue, source);
+  }
+  return output;
+}
+function formatCliRunId(runId) {
+  return isUuidLike(runId) ? shortUuid(runId) : runId;
+}
+function shortenCliValueForKey(key, value, parent) {
+  if (typeof value === "string" && isCliIdKey(key) && isUuidLike(value)) {
+    return displayIdForCli(key, value, parent);
+  }
+  if (typeof value === "string" && isCliReferenceStringKey(key)) {
+    return value.replace(UUID_SUBSTRING_RE, (uuid) => shortUuid(uuid));
+  }
+  if (Array.isArray(value) && isCliIdListKey(key)) {
+    return value.map(
+      (item) => typeof item === "string" && isUuidLike(item) ? displayIdForCli(singularizeIdListKey(key), item, parent) : toCliShortIdOutput(item)
+    );
+  }
+  return toCliShortIdOutput(value);
+}
+function displayIdForCli(key, uuid, parent) {
+  if (key === "id") {
+    const directShortRef = readString(parent.shortRef);
+    if (directShortRef) return directShortRef;
+    const issueIdentifier = readDirectIssueIdentifier(parent);
+    if (issueIdentifier) return issueIdentifier;
+  }
+  if (isAgentIdKey(key, parent)) {
+    return formatTypedShortRef("agent", uuid);
+  }
+  if (isIssueCommentIdKey(key)) {
+    return formatTypedShortRef("issue_comment", uuid);
+  }
+  if (key === "entityId" && parent.entityType === "issue") {
+    return readIssueIdentifier(parent) ?? shortUuid(uuid);
+  }
+  return shortUuid(uuid);
+}
+function shouldShowFullIds(explicit) {
+  return Boolean((explicit ?? currentCommandFullIds) || process.argv.includes("--full-ids"));
+}
+function isCliIdKey(key) {
+  return key === "id" || key.endsWith("Id");
+}
+function isCliIdListKey(key) {
+  return key.endsWith("Ids");
+}
+function isCliReferenceStringKey(key) {
+  const lowerKey = key.toLowerCase();
+  return lowerKey.endsWith("ref") || lowerKey.endsWith("path");
+}
+function singularizeIdListKey(key) {
+  return `${key.slice(0, -3)}Id`;
+}
+function isAgentIdKey(key, parent) {
+  const lowerKey = key.toLowerCase();
+  return lowerKey.includes("agentid") || key === "actorId" && parent.actorType === "agent";
+}
+function isIssueCommentIdKey(key) {
+  return key.toLowerCase().includes("commentid");
+}
+function formatTypedShortRef(kind, uuid) {
+  const prefix = kind === "agent" ? "agt" : "cmt";
+  return `${prefix}_${shortUuid(uuid)}`;
+}
+function shortUuid(uuid) {
+  return uuid.replace(/-/g, "").slice(0, CLI_SHORT_UUID_LENGTH).toLowerCase();
+}
+function readIssueIdentifier(parent) {
+  const direct = readDirectIssueIdentifier(parent);
+  if (direct) return direct;
+  const details = parent.details;
+  if (typeof details !== "object" || details === null) return null;
+  const detailsRecord = details;
+  return readString(detailsRecord.identifier) ?? readString(detailsRecord.issueIdentifier);
+}
+function readDirectIssueIdentifier(parent) {
+  return readString(parent.identifier) ?? readString(parent.issueIdentifier);
+}
+function readString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value : null;
+}
 function renderValue(value) {
   if (value === null || value === void 0) return "-";
   if (typeof value === "string") {
@@ -7061,16 +7235,16 @@ var RUDDER_AGENT_OPERATING_CONTRACT = [
   "",
   "When you mention Rudder entities in any user-visible Markdown output, prefer Rudder's renderable Markdown link syntax over plain IDs, bare URLs, or backticked references so the UI can render chips and navigate correctly.",
   "",
-  "- Issues: use `[<identifier-or-title>](issue://<issue-id>)`; include `?c=<comment-id>` when linking to a specific comment.",
-  "- Agents: use `[<agent-name>](agent://<agent-id>)` for reference-only links. In issue comments, use `[<agent-name>](agent://<agent-id>?intent=wake)` only when you intentionally want to wake that agent for attention or collaboration.",
-  "- Projects: use `[<project-name>](project://<project-id>)` when citing a Rudder project.",
-  "- Chat threads: use `[<chat-title>](chat://<conversation-id>)` when citing a Rudder chat conversation.",
-  "- Skills: use `[$<skill-ref>](<path-or-url-ending-in-SKILL.md>)` when citing a Rudder skill reference; the label may use `org/<org-url-key>/<skill-slug>`, `org/<org-url-key>/<agent-url-key>/<skill-slug>`, or `rudder/<skill-slug>`.",
+  "- Issues: use `[](issue://<issue-id>)`; include `?c=<comment-id>` when linking to a specific comment.",
+  "- Agents: use `[](agent://<agent-id>)` for reference-only links. In issue comments, use `[](agent://<agent-id>?intent=wake)` only when you intentionally want to wake that agent for attention or collaboration.",
+  "- Projects: use `[](project://<project-id>)` when citing a Rudder project.",
+  "- Chat threads: use `[](chat://<conversation-id>)` when citing a Rudder chat conversation.",
+  "- Skills: use `[](skill://<skill-ref>)` when citing a Rudder skill reference. The skill ref may be an org skill, agent skill, bundled Rudder skill, or local-machine skill ref; the UI resolves the display label when metadata is available.",
   '- Library files: use the `markdownLink` returned by `rudder library file ref "$RUDDER_PROJECT_LIBRARY_PATH/<relative-file>" --json`; do not hand-write `library-entry://...` links, and treat `library-file://...` as legacy path syntax only.',
   "",
   "Write these as normal Markdown links, not inside code spans or code blocks, unless you are literally documenting the syntax.",
   "",
-  "Mention-triggered comment wakes arrive with `RUDDER_WAKE_COMMENT_ID`; read that wake comment before acting. Issue comments can wake an agent only with an explicit wake-intent agent link serialized as `agent://agent-id?intent=wake`. Plain structured links such as `agent://agent-id` are reference-only links for rendering and navigation, and plain text agent names are not wake requests. Use wake-intent links only when you intentionally want to wake another agent for attention or collaboration; omit the wake intent for ordinary references. Mentioning an agent requests attention or collaboration; it does not transfer issue ownership unless the comment also makes an explicit handoff and normal checkout rules allow it.",
+  "Mention-triggered comment wakes arrive with `RUDDER_WAKE_COMMENT_ID`; read that wake comment before acting. Issue comments can wake an agent only with an explicit wake-intent agent link serialized as `agent://agent-id?intent=wake`. Plain structured links such as `agent://agent-id` are reference-only links for rendering and navigation, and plain text agent names are not wake requests. Use wake-intent links only when you intentionally want to wake another agent for attention or collaboration; omit the wake intent for ordinary references. Mentioning an agent requests attention or collaboration; it does not transfer issue ownership unless the comment also makes an explicit handoff and normal checkout rules allow it. If a comment wakes you on an issue not assigned to you, including user-owned or unassigned issues, and the comment does not explicitly ask you to implement, modify files, close the issue, or take ownership, strictly respond to the comment's content instead of turning the wake into issue execution; answer questions, acknowledge corrections, explain status, or handle only the narrow action the comment explicitly requests.",
   "",
   "When an issue comment, done comment, or blocker comment cites visual evidence from a local screenshot/image path, attach the image with the Rudder CLI `--image <path>` option instead of leaving only the filesystem path in the text.",
   "",
@@ -7102,7 +7276,7 @@ var RUDDER_AGENT_HEARTBEAT_INSTRUCTION = [
   "1. Identify yourself and inspect wake context, including `RUDDER_TASK_ID`, `RUDDER_WAKE_REASON`, `RUDDER_WAKE_COMMENT_ID`, and `RUDDER_APPROVAL_ID` when present.",
   "2. Handle approval follow-up first: read the approval and linked issues, then close resolved work or comment on what remains.",
   "3. Inspect your Rudder inbox. Prioritize reviewer rows in `in_review` or `blocked`, then assignee `in_progress`, then assignee `todo`. Do not look for unassigned work.",
-  "4. For mention wakes, read the wake comment before acting. Mentions request attention; they do not transfer ownership unless the comment explicitly says so.",
+  "4. For mention wakes, read the wake comment before acting. Mentions request attention; they do not transfer ownership unless the comment explicitly says so. If the issue is not assigned to you, including user-owned or unassigned issues, and the comment does not explicitly ask you to implement, modify files, close the issue, or take ownership, respond to the comment itself instead of executing the whole issue.",
   "5. Checkout before doing assignee task work. A `409` means another agent owns the task; do not retry it.",
   "6. Load compact issue context, do one bounded useful chunk, and preserve evidence.",
   "7. Before exiting active work, leave exactly one durable signal: progress, done, blocked, explicit handoff, or structured review decision.",
@@ -7538,6 +7712,18 @@ var AGENT_CLI_CAPABILITIES = [
     requiresRunId: false,
     attachesRunIdWhenAvailable: true
   },
+  {
+    id: "user.activity",
+    command: "rudder user activity --user me --since today --json",
+    category: "user",
+    description: "Read a user-centered activity ledger with safe excerpts and provenance across chats, issue comments, approval comments, and user actor activity.",
+    mutating: false,
+    contract: "agent-v1",
+    requiresOrgId: true,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: false
+  },
   {
     id: "library.file.list",
     command: "rudder library file list [directory]",
@@ -8136,6 +8322,7 @@ var CATEGORY_TITLES = {
   runs: "Runs",
   approval: "Approval",
   skill: "Skill",
+  user: "User",
   library: "Library"
 };
 function getAgentCliCapabilities() {
@@ -9475,11 +9662,17 @@ function formatChatSearchResult(row, maxChars) {
   };
 }
 function formatChatMessage(row, maxOutputChars = 1200) {
+  const runId = row.runId ? formatCliRunId(row.runId) : null;
   return {
     id: row.id,
     role: row.role,
     kind: row.kind,
     status: row.status,
+    ...runId ? {
+      runId,
+      runCommand: `rudder runs get ${runId}`,
+      transcriptCommand: `rudder runs transcript ${runId}`
+    } : {},
     createdAt: row.createdAt,
     body: clip(row.body, 220),
     transcriptEntries: row.transcriptSummary?.entryCount ?? row.transcript?.length ?? 0,
@@ -9487,11 +9680,17 @@ function formatChatMessage(row, maxOutputChars = 1200) {
   };
 }
 function formatChatTranscriptMessage(row, maxChars) {
+  const runId = row.runId ? formatCliRunId(row.runId) : null;
   const header = {
     id: row.id,
     role: row.role,
     kind: row.kind,
     status: row.status,
+    ...runId ? {
+      runId,
+      runCommand: `rudder runs get ${runId}`,
+      transcriptCommand: `rudder runs transcript ${runId}`
+    } : {},
     createdAt: row.createdAt,
     body: clip(row.body, 220)
   };
@@ -11815,7 +12014,7 @@ function registerRunsCommands(program) {
     { includeCompany: false }
   );
   addCommonClientOptions(
-    runs.command("get").description(getAgentCliCapabilityById("runs.get").description).argument("<runId>", "Run ID").action(async (runId, opts) => {
+    runs.command("get").description(getAgentCliCapabilityById("runs.get").description).argument("<runId>", "Run ID or short run ID").action(async (runId, opts) => {
       try {
         const ctx = resolveCommandContext(opts);
         const row = await ctx.api.get(`/api/run-intelligence/runs/${encodeURIComponent(runId)}`);
@@ -11826,7 +12025,7 @@ function registerRunsCommands(program) {
     })
   );
   addCommonClientOptions(
-    runs.command("events").description(getAgentCliCapabilityById("runs.events").description).argument("<runId>", "Run ID").action(async (runId, opts) => {
+    runs.command("events").description(getAgentCliCapabilityById("runs.events").description).argument("<runId>", "Run ID or short run ID").action(async (runId, opts) => {
       try {
         const ctx = resolveCommandContext(opts);
         const rows = await ctx.api.get(`/api/run-intelligence/runs/${encodeURIComponent(runId)}/events`) ?? [];
@@ -11837,7 +12036,7 @@ function registerRunsCommands(program) {
     })
   );
   addCommonClientOptions(
-    runs.command("log").description(getAgentCliCapabilityById("runs.log").description).argument("<runId>", "Run ID").option("--max-chars <n>", "Maximum log characters for human output", "12000").action(async (runId, opts) => {
+    runs.command("log").description(getAgentCliCapabilityById("runs.log").description).argument("<runId>", "Run ID or short run ID").option("--max-chars <n>", "Maximum log characters for human output", "12000").action(async (runId, opts) => {
       try {
         const ctx = resolveCommandContext(opts);
         const row = await ctx.api.get(`/api/run-intelligence/runs/${encodeURIComponent(runId)}/log`);
@@ -11852,7 +12051,7 @@ function registerRunsCommands(program) {
     })
   );
   addCommonClientOptions(
-    runs.command("transcript").description(getAgentCliCapabilityById("runs.transcript").description).argument("<runId>", "Run ID").option("--errors-only", "Show only error transcript rows").option("--around-error <id>", "Show context around a run error id such as step-12").option("--context-turns <n>", "Turns around --around-error", "1").option("--cursor <cursor>", "Stable transcript cursor returned in page.nextCursor").option("--turn-limit <n>", "Maximum turns to return", "20").option("--chronological", "Show oldest-first instead of default newest-first").option("--narrative", "Use a narrative human layout").option("--max-chars <n>", "Maximum output characters per row", "1200").option("--max-output-chars <n>", "Alias for --max-chars").option("--include-output", "Include row output in compact human transcript rows").option("--include-outputs", "Alias for --include-output").action(async (runId, opts) => {
+    runs.command("transcript").description(getAgentCliCapabilityById("runs.transcript").description).argument("<runId>", "Run ID or short run ID").option("--errors-only", "Show only error transcript rows").option("--around-error <id>", "Show context around a run error id such as step-12").option("--context-turns <n>", "Turns around --around-error", "1").option("--cursor <cursor>", "Stable transcript cursor returned in page.nextCursor").option("--turn-limit <n>", "Maximum turns to return", "20").option("--chronological", "Show oldest-first instead of default newest-first").option("--narrative", "Use a narrative human layout").option("--max-chars <n>", "Maximum output characters per row", "1200").option("--max-output-chars <n>", "Alias for --max-chars").option("--include-output", "Include row output in compact human transcript rows").option("--include-outputs", "Alias for --include-output").action(async (runId, opts) => {
       try {
         const ctx = resolveCommandContext(opts);
         const payload = await ctx.api.get(
@@ -11871,7 +12070,7 @@ function registerRunsCommands(program) {
     })
   );
   addCommonClientOptions(
-    runs.command("errors").description(getAgentCliCapabilityById("runs.errors").description).argument("<runId>", "Run ID").option("--max-chars <n>", "Maximum output characters per error", "1200").action(async (runId, opts) => {
+    runs.command("errors").description(getAgentCliCapabilityById("runs.errors").description).argument("<runId>", "Run ID or short run ID").option("--max-chars <n>", "Maximum output characters per error", "1200").action(async (runId, opts) => {
       try {
         const ctx = resolveCommandContext(opts);
         const params = new URLSearchParams();
@@ -11886,7 +12085,7 @@ function registerRunsCommands(program) {
     })
   );
   addCommonClientOptions(
-    runs.command("cancel").description(getAgentCliCapabilityById("runs.cancel").description).argument("<runId>", "Run ID").action(async (runId, opts) => {
+    runs.command("cancel").description(getAgentCliCapabilityById("runs.cancel").description).argument("<runId>", "Run ID or short run ID").action(async (runId, opts) => {
       try {
         const ctx = resolveCommandContext(opts);
         const row = await ctx.api.post(`/api/heartbeat-runs/${encodeURIComponent(runId)}/cancel`, {});
@@ -11897,7 +12096,7 @@ function registerRunsCommands(program) {
     })
   );
   addCommonClientOptions(
-    runs.command("retry").description(getAgentCliCapabilityById("runs.retry").description).argument("<runId>", "Run ID").action(async (runId, opts) => {
+    runs.command("retry").description(getAgentCliCapabilityById("runs.retry").description).argument("<runId>", "Run ID or short run ID").action(async (runId, opts) => {
       try {
         const ctx = resolveCommandContext(opts);
         const row = await ctx.api.post(`/api/heartbeat-runs/${encodeURIComponent(runId)}/retry`, {});
@@ -11958,8 +12157,9 @@ function buildTranscriptQuery(opts, output) {
   return params.toString();
 }
 function formatRunListRow(row) {
+  const runId = formatCliRunId(row.run.id);
   return {
-    id: row.run.id,
+    id: runId,
     status: row.run.status,
     agent: row.agentName ?? row.run.agentId,
     runtime: row.bundle.agentRuntimeType,
@@ -11970,7 +12170,7 @@ function formatRunListRow(row) {
     skill: row.skillEvidence?.matchedSkillKey ?? "-",
     langfuse: readLangfuseTraceUrl(row.langfuse) ?? "-",
     error: row.errorSummary ?? "-",
-    next: row.run.status === "failed" ? `rudder runs errors ${row.run.id}` : `rudder runs transcript ${row.run.id}`
+    next: row.run.status === "failed" ? `rudder runs errors ${runId}` : `rudder runs transcript ${runId}`
   };
 }
 function buildSkillRunReport(skill, evidenceType, rows) {
@@ -12016,7 +12216,10 @@ function buildSkillRunReport(skill, evidenceType, rows) {
       commonErrors: [...errors.entries()].map(([summary, count]) => ({ summary, count })).sort((a, b) => b.count - a.count).slice(0, 5)
     },
     rows,
-    nextCommands: rows.slice(0, 5).map((row) => row.run.status === "failed" ? `rudder runs errors ${row.run.id}` : `rudder runs transcript ${row.run.id}`)
+    nextCommands: rows.slice(0, 5).map((row) => {
+      const runId = formatCliRunId(row.run.id);
+      return row.run.status === "failed" ? `rudder runs errors ${runId}` : `rudder runs transcript ${runId}`;
+    })
   };
 }
 function formatSkillRunReport(report) {
@@ -12040,11 +12243,12 @@ function formatSkillRunReport(report) {
   return lines;
 }
 function formatInlineSkillRun(row) {
+  const runId = formatCliRunId(row.run.id);
   const issue = formatIssueRef(row.issue);
   const label = row.skillEvidence?.matchedSkillLabel && row.skillEvidence.matchedSkillLabel !== row.skillEvidence.matchedSkillKey ? ` label=${row.skillEvidence.matchedSkillLabel}` : "";
   const langfuse = readLangfuseTraceUrl(row.langfuse);
   return [
-    `id=${row.run.id}`,
+    `id=${runId}`,
     `status=${row.run.status}`,
     `agent=${row.agentName ?? row.run.agentId}`,
     `issue=${issue}`,
@@ -12055,7 +12259,7 @@ function formatInlineSkillRun(row) {
     `skill=${row.skillEvidence?.matchedSkillKey ?? "-"}${label}`,
     `langfuse=${langfuse ?? "-"}`,
     `error=${row.errorSummary ?? "-"}`,
-    `next=${row.run.status === "failed" ? `rudder runs errors ${row.run.id}` : `rudder runs transcript ${row.run.id}`}`
+    `next=${row.run.status === "failed" ? `rudder runs errors ${runId}` : `rudder runs transcript ${runId}`}`
   ].join(" ");
 }
 function formatIssueRef(issue) {
@@ -12232,6 +12436,59 @@ function parseCsv5(value) {
   return rows.length > 0 ? rows : void 0;
 }
 
+// src/commands/client/user.ts
+function appendParam(params, key, value) {
+  if (value && value.trim()) params.set(key, value.trim());
+}
+function formatUserActivityItem(item) {
+  const time = new Date(item.occurredAt);
+  const hhmm = Number.isNaN(time.getTime()) ? item.occurredAt : time.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" });
+  const related = item.related.find((entry) => entry.type === "issue" || entry.type === "chat" || entry.type === "approval");
+  const label = related?.label || related?.id || item.source.id;
+  const excerpt = item.excerpt ? ` - ${item.excerpt}` : "";
+  return `${hhmm} ${item.kind} ${label}: ${item.summary}${excerpt}`;
+}
+function registerUserCommands(program) {
+  const user = program.command("user").description("User-oriented Rudder context commands");
+  addCommonClientOptions(
+    user.command("activity").description("List a user's recent Rudder activity ledger").option("-O, --org-id <id>", "Organization ID").option("--user <id>", "User ID or 'me'", "me").option("--since <value>", "Start time: today, 24h, 7d, or ISO timestamp", "today").option("--until <value>", "End time: ISO timestamp").option("--include <items>", "Comma-separated sources: chat,comments,issues,approvals,activity").option("--agent-id <id>", "Filter by related agent ID").option("--project-id <id>", "Filter by related project ID").option("--issue-id <id>", "Filter by related issue ID").option("--limit <n>", "Maximum items to return").option("--cursor <cursor>", "Pagination cursor from a prior response").action(async (opts) => {
+      try {
+        const ctx = resolveCommandContext(opts, { requireCompany: true });
+        const userId = opts.user?.trim() || "me";
+        const params = new URLSearchParams();
+        appendParam(params, "since", opts.since);
+        appendParam(params, "until", opts.until);
+        appendParam(params, "include", opts.include);
+        appendParam(params, "agentId", opts.agentId);
+        appendParam(params, "projectId", opts.projectId);
+        appendParam(params, "issueId", opts.issueId);
+        appendParam(params, "limit", opts.limit);
+        appendParam(params, "cursor", opts.cursor);
+        const query = params.toString();
+        const path23 = `/api/orgs/${ctx.orgId}/users/${encodeURIComponent(userId)}/activity-ledger${query ? `?${query}` : ""}`;
+        const result = await ctx.api.get(path23);
+        if (ctx.json) {
+          printOutput(result, { json: true });
+          return;
+        }
+        if (!result?.items?.length) {
+          printOutput([], { json: false });
+          return;
+        }
+        for (const item of result.items) {
+          console.log(formatUserActivityItem(item));
+        }
+        if (result.nextCursor) {
+          console.log(`nextCursor=${result.nextCursor}`);
+        }
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: false }
+  );
+}
+
 // src/commands/configure.ts
 init_home();
 init_schema();
@@ -12814,7 +13071,7 @@ async function heartbeatRun(opts) {
     return;
   }
   const run = invokeRes;
-  console.log(pc12.cyan(`Invoked heartbeat run ${run.id} for agent ${agent.name} (${agent.id})`));
+  console.log(pc12.cyan(`Invoked heartbeat run ${formatCliRunId(run.id)} for agent ${agent.name} (${formatCliRunId(agent.id)})`));
   const runId = run.id;
   let activeRunId = null;
   let lastEventSeq = 0;
@@ -13026,7 +13283,7 @@ init_install2();
 init_install();
 import * as p15 from "@clack/prompts";
 import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process";
-import { createHash } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { createWriteStream, constants as fsConstants, mkdirSync, readFileSync as readFileSync2 } from "node:fs";
 import { access, chmod, copyFile, cp, mkdir as mkdir3, mkdtemp, readdir as readdir3, readFile as readFile6, rm as rm2, stat as stat4, utimes, writeFile as writeFile3 } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
@@ -13162,6 +13419,8 @@ var DEFAULT_DESKTOP_ASSET_CACHE_MAX_ENTRIES = 2;
 var DEFAULT_DESKTOP_ASSET_CACHE_MAX_AGE_MS = 14 * 24 * 60 * 60 * 1e3;
 var DEFAULT_DESKTOP_ASSET_CACHE_MAX_BYTES = 768 * 1024 * 1024;
 var DEFAULT_DESKTOP_ASSET_CACHE_KEEP_PREVIOUS = 1;
+var DESKTOP_INSTALL_LOCK_TIMEOUT_MS = 60 * 60 * 1e3;
+var DESKTOP_INSTALL_LOCK_POLL_MS = 250;
 function normalizeProgressTotal(totalBytes) {
   return typeof totalBytes === "number" && Number.isFinite(totalBytes) && totalBytes > 0 ? totalBytes : null;
 }
@@ -13805,6 +14064,70 @@ async function pathExists2(targetPath) {
     return false;
   }
 }
+function resolveDesktopInstallLockPath(paths) {
+  const installRootHash = createHash("sha256").update(path21.resolve(paths.installRoot)).digest("hex").slice(0, 16);
+  return path21.join(path21.dirname(paths.appPath), `.rudder-desktop-install-${installRootHash}.lock`);
+}
+async function readDesktopInstallLock(lockPath) {
+  try {
+    const parsed = JSON.parse(await readFile6(lockPath, "utf8"));
+    if (typeof parsed.pid !== "number" || !Number.isInteger(parsed.pid) || parsed.pid <= 0 || typeof parsed.lockId !== "string" || typeof parsed.installRoot !== "string" || typeof parsed.createdAt !== "string") {
+      return null;
+    }
+    return {
+      lockId: parsed.lockId,
+      pid: parsed.pid,
+      installRoot: parsed.installRoot,
+      createdAt: parsed.createdAt
+    };
+  } catch {
+    return null;
+  }
+}
+async function withDesktopInstallLock(paths, fn, options = {}) {
+  const lockPath = resolveDesktopInstallLockPath(paths);
+  const lockDir = path21.dirname(lockPath);
+  const timeoutMs = options.timeoutMs ?? DESKTOP_INSTALL_LOCK_TIMEOUT_MS;
+  const pollMs = options.pollMs ?? DESKTOP_INSTALL_LOCK_POLL_MS;
+  const startedAt = Date.now();
+  const payload = {
+    lockId: randomUUID(),
+    pid: process.pid,
+    installRoot: path21.resolve(paths.installRoot),
+    createdAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  await mkdir3(lockDir, { recursive: true });
+  while (true) {
+    try {
+      await writeFile3(lockPath, `${JSON.stringify(payload, null, 2)}
+`, { encoding: "utf8", flag: "wx" });
+      break;
+    } catch (error) {
+      const err = error;
+      if (err.code !== "EEXIST") throw error;
+      const existing = await readDesktopInstallLock(lockPath);
+      const stale = !existing || !processExists(existing.pid);
+      if (stale) {
+        await rm2(lockPath, { force: true });
+        continue;
+      }
+      if (Date.now() - startedAt >= timeoutMs) {
+        throw new Error(
+          `Timed out waiting for Rudder Desktop install lock for ${paths.appPath}. Held by pid ${existing.pid} for ${existing.installRoot}.`
+        );
+      }
+      await delay2(pollMs);
+    }
+  }
+  try {
+    return await fn();
+  } finally {
+    const existing = await readDesktopInstallLock(lockPath);
+    if (existing?.lockId === payload.lockId) {
+      await rm2(lockPath, { force: true });
+    }
+  }
+}
 function runChecked(command, args, options = {}) {
   const result = spawnSync3(command, args, {
     encoding: "utf8",
@@ -14257,152 +14580,154 @@ async function startCommand(opts) {
       p15.outro(pc15.green("Dry run complete."));
       return;
     }
-    const directReleaseVersion = resolveDesktopReleaseVersion(tag);
-    const progressFactory = desktopProgressJson ? createDesktopProgressFactory() : createByteProgress;
-    let release = null;
-    try {
-      release = await runStartPhase(
-        "Resolving Desktop release...",
-        "Desktop release resolved.",
-        () => fetchGithubRelease(repo, tag),
-        desktopProgressJson ? "resolving_release" : null
-      );
-    } catch (error) {
-      if (!directReleaseVersion) throw error;
-      p15.log.warn(
-        `Desktop release metadata could not be resolved; falling back to deterministic download URLs. ${formatFetchError(error)}`
-      );
-    }
-    const releaseTag = release?.tag_name ?? (directReleaseVersion ? tag : null);
-    if (!releaseTag) {
-      throw new Error(`Unable to resolve Rudder Desktop release tag for ${repo}@${tag}.`);
-    }
-    const assetCandidates = resolveDesktopAssetCandidates({
-      releaseAssets: release?.assets ?? [],
-      target,
-      repo,
-      tag,
-      directReleaseVersion,
-      allowShellAssets: runtimeSupportsShellAssets
-    });
-    if (assetCandidates.length === 0) {
-      throw new Error(`No Rudder Desktop portable asset found for ${target.platform}/${target.arch} in ${repo}@${releaseTag}.`);
-    }
-    const checksumAsset = selectChecksumAsset(release?.assets ?? []) ?? (directReleaseVersion ? buildGithubReleaseAsset(repo, tag, DESKTOP_CHECKSUM_ASSET_NAME) : null);
-    const checksums = await downloadChecksums(checksumAsset, outputDir, progressFactory);
-    let selectedCandidate;
-    try {
-      selectedCandidate = selectChecksummedDesktopAssetCandidate(assetCandidates, checksums);
-    } catch (error) {
-      throw new Error(`No checksummed Rudder Desktop asset found for ${target.platform}/${target.arch} in ${repo}@${releaseTag}.`);
-    }
-    for (const warning of selectedCandidate.warnings) p15.log.warn(warning);
-    let selectedAsset = selectedCandidate.asset;
-    let selectedAssetKind = selectedCandidate.kind;
-    let expectedChecksum = selectedCandidate.expectedChecksum;
-    const metadata = await readInstallMetadata(installPaths.metadataPath);
-    if (isInstalledDesktopCurrent(metadata, releaseTag, selectedAsset.name, expectedChecksum) && await pathExists2(installPaths.executablePath)) {
-      p15.log.success(`Rudder Desktop is already installed at ${pc15.cyan(installPaths.appPath)}.`);
-      await runStartPhase(
-        "Refreshing Desktop launchers...",
-        "Desktop launchers ready.",
-        async () => {
-          await removeMacQuarantine(installPaths, target);
-          await createPlatformLaunchers(installPaths, target);
-        },
-        desktopProgressJson ? "preparing_restart" : null
-      );
-    } else {
-      let cachedAsset;
+    await withDesktopInstallLock(installPaths, async () => {
+      const directReleaseVersion = resolveDesktopReleaseVersion(tag);
+      const progressFactory = desktopProgressJson ? createDesktopProgressFactory() : createByteProgress;
+      let release = null;
       try {
-        cachedAsset = await downloadDesktopAssetWithCache(selectedAsset, expectedChecksum, {
-          outputDir,
-          progressFactory
-        });
+        release = await runStartPhase(
+          "Resolving Desktop release...",
+          "Desktop release resolved.",
+          () => fetchGithubRelease(repo, tag),
+          desktopProgressJson ? "resolving_release" : null
+        );
       } catch (error) {
-        const fullCandidate = assetCandidates.find((candidate) => candidate.kind === "full");
-        if (selectedAssetKind !== "shell" || !fullCandidate) throw error;
+        if (!directReleaseVersion) throw error;
         p15.log.warn(
-          `Layered Desktop shell asset download failed; falling back to the full portable asset. ${formatFetchError(error)}`
+          `Desktop release metadata could not be resolved; falling back to deterministic download URLs. ${formatFetchError(error)}`
         );
-        selectedAsset = fullCandidate.asset;
-        selectedAssetKind = fullCandidate.kind;
-        expectedChecksum = resolveAssetChecksum(checksums, selectedAsset.name);
-        cachedAsset = await downloadDesktopAssetWithCache(selectedAsset, expectedChecksum, {
-          outputDir,
-          progressFactory
-        });
       }
-      if (cachedAsset.cacheStatus === "hit") {
-        p15.log.success(`Desktop asset cache hit at ${pc15.cyan(cachedAsset.path)}.`);
-        if (desktopProgressJson) {
+      const releaseTag = release?.tag_name ?? (directReleaseVersion ? tag : null);
+      if (!releaseTag) {
+        throw new Error(`Unable to resolve Rudder Desktop release tag for ${repo}@${tag}.`);
+      }
+      const assetCandidates = resolveDesktopAssetCandidates({
+        releaseAssets: release?.assets ?? [],
+        target,
+        repo,
+        tag,
+        directReleaseVersion,
+        allowShellAssets: runtimeSupportsShellAssets
+      });
+      if (assetCandidates.length === 0) {
+        throw new Error(`No Rudder Desktop portable asset found for ${target.platform}/${target.arch} in ${repo}@${releaseTag}.`);
+      }
+      const checksumAsset = selectChecksumAsset(release?.assets ?? []) ?? (directReleaseVersion ? buildGithubReleaseAsset(repo, tag, DESKTOP_CHECKSUM_ASSET_NAME) : null);
+      const checksums = await downloadChecksums(checksumAsset, outputDir, progressFactory);
+      let selectedCandidate;
+      try {
+        selectedCandidate = selectChecksummedDesktopAssetCandidate(assetCandidates, checksums);
+      } catch (error) {
+        throw new Error(`No checksummed Rudder Desktop asset found for ${target.platform}/${target.arch} in ${repo}@${releaseTag}.`);
+      }
+      for (const warning of selectedCandidate.warnings) p15.log.warn(warning);
+      let selectedAsset = selectedCandidate.asset;
+      let selectedAssetKind = selectedCandidate.kind;
+      let expectedChecksum = selectedCandidate.expectedChecksum;
+      const metadata = await readInstallMetadata(installPaths.metadataPath);
+      if (isInstalledDesktopCurrent(metadata, releaseTag, selectedAsset.name, expectedChecksum) && await pathExists2(installPaths.executablePath)) {
+        p15.log.success(`Rudder Desktop is already installed at ${pc15.cyan(installPaths.appPath)}.`);
+        await runStartPhase(
+          "Refreshing Desktop launchers...",
+          "Desktop launchers ready.",
+          async () => {
+            await removeMacQuarantine(installPaths, target);
+            await createPlatformLaunchers(installPaths, target);
+          },
+          desktopProgressJson ? "preparing_restart" : null
+        );
+      } else {
+        let cachedAsset;
+        try {
+          cachedAsset = await downloadDesktopAssetWithCache(selectedAsset, expectedChecksum, {
+            outputDir,
+            progressFactory
+          });
+        } catch (error) {
+          const fullCandidate = assetCandidates.find((candidate) => candidate.kind === "full");
+          if (selectedAssetKind !== "shell" || !fullCandidate) throw error;
+          p15.log.warn(
+            `Layered Desktop shell asset download failed; falling back to the full portable asset. ${formatFetchError(error)}`
+          );
+          selectedAsset = fullCandidate.asset;
+          selectedAssetKind = fullCandidate.kind;
+          expectedChecksum = resolveAssetChecksum(checksums, selectedAsset.name);
+          cachedAsset = await downloadDesktopAssetWithCache(selectedAsset, expectedChecksum, {
+            outputDir,
+            progressFactory
+          });
+        }
+        if (cachedAsset.cacheStatus === "hit") {
+          p15.log.success(`Desktop asset cache hit at ${pc15.cyan(cachedAsset.path)}.`);
+          if (desktopProgressJson) {
+            writeDesktopProgress({
+              phase: "downloading_asset",
+              message: `Desktop asset cache hit for ${selectedAsset.name}.`,
+              percent: 100
+            });
+          }
+        }
+        const checksum = await runStartPhase(
+          "Verifying Desktop checksum...",
+          `Verified ${pc15.cyan(path21.basename(cachedAsset.path))}.`,
+          () => assertChecksumMatch(cachedAsset.path, expectedChecksum),
+          desktopProgressJson ? "verifying_checksum" : null
+        );
+        if (desktopProgressJson && opts.desktopWaitForApply === true) {
           writeDesktopProgress({
-            phase: "downloading_asset",
-            message: `Desktop asset cache hit for ${selectedAsset.name}.`,
+            phase: "ready_to_install",
+            message: "Desktop update is downloaded and verified.",
             percent: 100
           });
+          await waitForDesktopApplySignal();
+          writeDesktopProgress({
+            phase: "preparing_restart",
+            message: "Applying Desktop update..."
+          });
         }
+        await runStartPhase(
+          "Replacing existing Rudder Desktop if needed...",
+          "Existing Desktop install is ready for replacement.",
+          () => prepareForDesktopReplace(installPaths, target, { waitForActiveRuns: opts.waitForActiveRuns === true }),
+          desktopProgressJson ? opts.waitForActiveRuns === true ? "waiting_for_active_runs" : "preparing_restart" : null
+        );
+        await runStartPhase(
+          "Installing portable Desktop app...",
+          `Installed Rudder Desktop to ${pc15.cyan(installPaths.appPath)}.`,
+          () => installPortableDesktop(cachedAsset.path, installPaths, target),
+          desktopProgressJson ? "preparing_restart" : null
+        );
+        await runStartPhase(
+          "Preparing Desktop launchers...",
+          "Desktop launchers ready.",
+          async () => {
+            await removeMacQuarantine(installPaths, target);
+            await createPlatformLaunchers(installPaths, target);
+          },
+          desktopProgressJson ? "preparing_restart" : null
+        );
+        await writeInstallMetadata(installPaths, releaseTag, selectedAsset.name, checksum, selectedAssetKind);
       }
-      const checksum = await runStartPhase(
-        "Verifying Desktop checksum...",
-        `Verified ${pc15.cyan(path21.basename(cachedAsset.path))}.`,
-        () => assertChecksumMatch(cachedAsset.path, expectedChecksum),
-        desktopProgressJson ? "verifying_checksum" : null
-      );
-      if (desktopProgressJson && opts.desktopWaitForApply === true) {
-        writeDesktopProgress({
-          phase: "ready_to_install",
-          message: "Desktop update is downloaded and verified.",
-          percent: 100
-        });
-        await waitForDesktopApplySignal();
-        writeDesktopProgress({
-          phase: "preparing_restart",
-          message: "Applying Desktop update..."
-        });
-      }
-      await runStartPhase(
-        "Replacing existing Rudder Desktop if needed...",
-        "Existing Desktop install is ready for replacement.",
-        () => prepareForDesktopReplace(installPaths, target, { waitForActiveRuns: opts.waitForActiveRuns === true }),
-        desktopProgressJson ? opts.waitForActiveRuns === true ? "waiting_for_active_runs" : "preparing_restart" : null
-      );
-      await runStartPhase(
-        "Installing portable Desktop app...",
-        `Installed Rudder Desktop to ${pc15.cyan(installPaths.appPath)}.`,
-        () => installPortableDesktop(cachedAsset.path, installPaths, target),
-        desktopProgressJson ? "preparing_restart" : null
-      );
-      await runStartPhase(
-        "Preparing Desktop launchers...",
-        "Desktop launchers ready.",
-        async () => {
-          await removeMacQuarantine(installPaths, target);
-          await createPlatformLaunchers(installPaths, target);
-        },
-        desktopProgressJson ? "preparing_restart" : null
-      );
-      await writeInstallMetadata(installPaths, releaseTag, selectedAsset.name, checksum, selectedAssetKind);
-    }
-    const desktopAssetPrune = await maybePruneDesktopAssetCache({
-      protectedChecksums: [expectedChecksum]
-    });
-    if (desktopAssetPrune) {
-      if (desktopAssetPrune.deleted.length > 0) {
-        p15.log.success(
-          `Pruned ${desktopAssetPrune.deleted.length} old Desktop asset cache(s), freed ${formatBytes(desktopAssetPrune.freedBytes)}.`
+      const desktopAssetPrune = await maybePruneDesktopAssetCache({
+        protectedChecksums: [expectedChecksum]
+      });
+      if (desktopAssetPrune) {
+        if (desktopAssetPrune.deleted.length > 0) {
+          p15.log.success(
+            `Pruned ${desktopAssetPrune.deleted.length} old Desktop asset cache(s), freed ${formatBytes(desktopAssetPrune.freedBytes)}.`
+          );
+        }
+        for (const warning of desktopAssetPrune.warnings) p15.log.warn(warning);
+      }
+      if (opts.open !== false) {
+        await runStartPhase(
+          "Launching Rudder Desktop...",
+          "Rudder Desktop launched.",
+          () => launchDesktop(installPaths, target),
+          desktopProgressJson ? "closing" : null
         );
       }
-      for (const warning of desktopAssetPrune.warnings) p15.log.warn(warning);
-    }
-    if (opts.open !== false) {
-      await runStartPhase(
-        "Launching Rudder Desktop...",
-        "Rudder Desktop launched.",
-        () => launchDesktop(installPaths, target),
-        desktopProgressJson ? "closing" : null
-      );
-    }
+    });
   }
   p15.outro(pc15.green("Rudder start complete."));
 }
@@ -14502,6 +14827,7 @@ function createProgram() {
   registerAgentCommands(program);
   registerApprovalCommands(program);
   registerActivityCommands(program);
+  registerUserCommands(program);
   registerDashboardCommands(program);
   registerSkillCommands(program);
   registerLibraryCommands(program);