@terrantula/sdk 0.13.0 → 0.14.0

package/dist/{chunk-E3CKS754.mjs → chunk-46T35MSS.mjs}

@@ -716,6 +716,18 @@ function createDeploymentTargetSetsClient(proj) {
           param: { name: params.name }
         })
       )
+    ),
+    listMembers: withSchema(
+      z5.object({
+        orgId: z5.string().describe("Organization slug"),
+        projectId: z5.string().describe("Project ID"),
+        name: z5.string().describe("Deployment target set name")
+      }),
+      (params) => call(
+        proj(params.orgId, params.projectId)["deployment-target-sets"][":name"]["members"].$get({
+          param: { name: params.name }
+        })
+      )
     )
   };
 }
@@ -1163,13 +1175,73 @@ function createApplyClient(projEnv) {
   );
 }
 
-// src/github.ts
+// src/observations.ts
 import { z as z10 } from "zod";
+import { ObservationImportPayloadSchema } from "@terrantula/types";
+async function rawRequest(baseUrl, hcOpts, path, init = {}) {
+  const fetchImpl = hcOpts?.fetch ?? fetch;
+  const rawHeaders = hcOpts?.headers;
+  const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
+  return fetchImpl(`${baseUrl}${path}`, {
+    ...init,
+    headers: {
+      ...resolvedHeaders,
+      ...init.headers
+    }
+  });
+}
+async function callRaw(res) {
+  if (!res.ok) {
+    let message = fallbackMessage(res.status);
+    try {
+      const body = await res.json();
+      if (body.error) message = body.error;
+    } catch {
+    }
+    throw new TerrantulaError(res.status, { error: message });
+  }
+  return res.json();
+}
+function createObservationsClient(baseUrl, hcOpts) {
+  return {
+    /**
+     * POST /{orgId}/{projectId}/envs/{envName}/import
+     *
+     * Persists a full observation snapshot (resources + dependency edges)
+     * for a given environment. Requires `data:write` permission.
+     */
+    importPayload: withSchema(
+      ObservationImportPayloadSchema.extend({
+        orgId: z10.string().describe("Organization slug"),
+        projectId: z10.string().describe("Project ID"),
+        envName: z10.string().describe("Environment name")
+      }),
+      async (params) => {
+        const { orgId, projectId, envName, ...body } = params;
+        return callRaw(
+          await rawRequest(
+            baseUrl,
+            hcOpts,
+            `/${orgId}/${projectId}/envs/${envName}/import`,
+            {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify(body)
+            }
+          )
+        );
+      }
+    )
+  };
+}
+
+// src/github.ts
+import { z as z11 } from "zod";
 function createGithubClient(cloud, _baseUrl, _hcOpts) {
   return {
     connect: withSchema(
-      z10.object({
-        projectId: z10.string().describe("Project name")
+      z11.object({
+        projectId: z11.string().describe("Project name")
       }),
       // why: the install-url route has a "GitHub App not configured" branch
       // that returns a bare `new Response(...)` (see notConfiguredResponse in
@@ -1179,14 +1251,14 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
     ),
     installations: {
       list: withSchema(
-        z10.object({
-          orgId: z10.string().describe("Organization slug")
+        z11.object({
+          orgId: z11.string().describe("Organization slug")
         }),
         (params) => call(cloud.github.installations.$get({ query: params }))
       ),
       repos: withSchema(
-        z10.object({
-          installationId: z10.string().describe("Installation row ID")
+        z11.object({
+          installationId: z11.string().describe("Installation row ID")
         }),
         (params) => call(
           cloud.github.installations[":installationId"].repos.$get({
@@ -1195,8 +1267,8 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
         )
       ),
       disconnect: withSchema(
-        z10.object({
-          installationId: z10.string().describe("Installation row ID")
+        z11.object({
+          installationId: z11.string().describe("Installation row ID")
         }),
         (params) => call(
           cloud.github.installations[":installationId"].$delete({
@@ -1205,9 +1277,9 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
         )
       ),
       recover: withSchema(
-        z10.object({
-          orgId: z10.string().describe("Organization slug"),
-          installationId: z10.number().int().positive().describe("GitHub installation ID (from the GitHub install URL)")
+        z11.object({
+          orgId: z11.string().describe("Organization slug"),
+          installationId: z11.number().int().positive().describe("GitHub installation ID (from the GitHub install URL)")
         }),
         // why: same bare-Response inference break as `connect` (the route's
         // not-configured branch returns `new Response(...)`), so the 200 body
@@ -1217,9 +1289,9 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
     },
     projects: {
       list: withSchema(
-        z10.object({
-          orgId: z10.string().describe("Organization slug"),
-          projectId: z10.string().describe("Project name")
+        z11.object({
+          orgId: z11.string().describe("Organization slug"),
+          projectId: z11.string().describe("Project name")
         }),
         (params) => call(
           cloud.orgs[":orgId"].projects[":projectId"]["github-repos"].$get({
@@ -1228,11 +1300,11 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
         )
       ),
       linkRepo: withSchema(
-        z10.object({
-          orgId: z10.string().describe("Organization slug"),
-          projectId: z10.string().describe("Project name"),
-          installationId: z10.string().describe("github_installations.id (UUID)"),
-          repoFullName: z10.string().describe('GitHub repo "owner/name"')
+        z11.object({
+          orgId: z11.string().describe("Organization slug"),
+          projectId: z11.string().describe("Project name"),
+          installationId: z11.string().describe("github_installations.id (UUID)"),
+          repoFullName: z11.string().describe('GitHub repo "owner/name"')
         }),
         (params) => {
           const { orgId, projectId, ...body } = params;
@@ -1245,10 +1317,10 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
         }
       ),
       unlinkRepo: withSchema(
-        z10.object({
-          orgId: z10.string().describe("Organization slug"),
-          projectId: z10.string().describe("Project name"),
-          id: z10.string().describe("project_github_repos.id (UUID) \u2014 returned by linkRepo")
+        z11.object({
+          orgId: z11.string().describe("Organization slug"),
+          projectId: z11.string().describe("Project name"),
+          id: z11.string().describe("project_github_repos.id (UUID) \u2014 returned by linkRepo")
         }),
         (params) => call(
           cloud.orgs[":orgId"].projects[":projectId"]["github-repos"][":id"].$delete({
@@ -1261,23 +1333,23 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
 }
 
 // src/blueprints.ts
-import { z as z11 } from "zod";
-var SpinInputSchema = z11.object({
-  orgId: z11.string().describe("Organization slug"),
-  blueprint: z11.string().describe("First-party blueprint name (e.g. k8s-fleet)"),
-  substrate: z11.enum(["bare-tf", "tfc", "atmos"]).optional(),
-  repo: z11.string().optional().describe("owner/repo to open the spin PR into (omit when createRepo is set)"),
-  prBase: z11.string().optional(),
-  githubToken: z11.string().optional(),
-  createRepo: z11.object({ name: z11.string(), private: z11.boolean().optional() }).optional().describe("Cloud opt-in: auto-create the target GitHub repo before spinning"),
-  createWorkspace: z11.object({ organization: z11.string(), name: z11.string(), apiToken: z11.string(), apiBaseUrl: z11.string().optional() }).optional().describe("Cloud opt-in: auto-create the TFC workspace shell before spinning"),
-  vars: z11.record(z11.string()).default({})
+import { z as z12 } from "zod";
+var SpinInputSchema = z12.object({
+  orgId: z12.string().describe("Organization slug"),
+  blueprint: z12.string().describe("First-party blueprint name (e.g. k8s-fleet)"),
+  substrate: z12.enum(["bare-tf", "tfc", "atmos"]).optional(),
+  repo: z12.string().optional().describe("owner/repo to open the spin PR into (omit when createRepo is set)"),
+  prBase: z12.string().optional(),
+  githubToken: z12.string().optional(),
+  createRepo: z12.object({ name: z12.string(), private: z12.boolean().optional() }).optional().describe("Cloud opt-in: auto-create the target GitHub repo before spinning"),
+  createWorkspace: z12.object({ organization: z12.string(), name: z12.string(), apiToken: z12.string(), apiBaseUrl: z12.string().optional() }).optional().describe("Cloud opt-in: auto-create the TFC workspace shell before spinning"),
+  vars: z12.record(z12.string()).default({})
 });
 function createBlueprintsClient(cloud) {
   return {
     list: () => call(cloud.blueprints.$get()),
     get: withSchema(
-      z11.object({ name: z11.string().describe("Blueprint name") }),
+      z12.object({ name: z12.string().describe("Blueprint name") }),
       (params) => call(cloud.blueprints[":name"].$get({ param: params }))
     ),
     spin: withSchema(SpinInputSchema, (params) => {
@@ -1288,7 +1360,7 @@ function createBlueprintsClient(cloud) {
 }
 
 // src/export.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 var SERVER_FIELDS = /* @__PURE__ */ new Set(["id", "projectId", "envId", "createdAt", "updatedAt"]);
 function stripServerFields(row) {
   const out = {};
@@ -1299,10 +1371,10 @@ function stripServerFields(row) {
 }
 function createExportCatalogFn(proj, projEnv) {
   return withSchema(
-    z12.object({
-      orgId: z12.string().describe("Organization slug"),
-      projectId: z12.string().describe("Project ID"),
-      envName: z12.string().describe("Environment name to export secret declarations from")
+    z13.object({
+      orgId: z13.string().describe("Organization slug"),
+      projectId: z13.string().describe("Project ID"),
+      envName: z13.string().describe("Environment name to export secret declarations from")
     }).describe("Export every catalog kind as a single apply-shaped payload"),
     async (params) => {
       const projClient = proj(params.orgId, params.projectId);
@@ -1352,15 +1424,15 @@ function createExportCatalogFn(proj, projEnv) {
 }
 
 // src/catalog-revisions.ts
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 function createCatalogRevisionsClient(proj) {
   return {
     list: withSchema(
-      z13.object({
-        orgId: z13.string().describe("Organization slug"),
-        projectId: z13.string().describe("Project ID"),
-        limit: z13.coerce.number().int().min(1).max(200).optional().describe("Max revisions to return (1-200)"),
-        before: z13.string().datetime().optional().describe("ISO timestamp; only revisions with appliedAt strictly before this are returned (keyset upper-bound)")
+      z14.object({
+        orgId: z14.string().describe("Organization slug"),
+        projectId: z14.string().describe("Project ID"),
+        limit: z14.coerce.number().int().min(1).max(200).optional().describe("Max revisions to return (1-200)"),
+        before: z14.string().datetime().optional().describe("ISO timestamp; only revisions with appliedAt strictly before this are returned (keyset upper-bound)")
       }),
       (params) => {
         const { orgId, projectId, ...query } = params;
@@ -1370,20 +1442,20 @@ function createCatalogRevisionsClient(proj) {
       }
     ),
     get: withSchema(
-      z13.object({
-        orgId: z13.string().describe("Organization slug"),
-        projectId: z13.string().describe("Project ID"),
-        id: z13.string().uuid().describe("Revision ID")
+      z14.object({
+        orgId: z14.string().describe("Organization slug"),
+        projectId: z14.string().describe("Project ID"),
+        id: z14.string().uuid().describe("Revision ID")
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["catalog-revisions"][":id"].$get({ param: { id: params.id } })
       )
     ),
     snapshots: withSchema(
-      z13.object({
-        orgId: z13.string().describe("Organization slug"),
-        projectId: z13.string().describe("Project ID"),
-        id: z13.string().uuid().describe("Revision ID to read snapshots for")
+      z14.object({
+        orgId: z14.string().describe("Organization slug"),
+        projectId: z14.string().describe("Project ID"),
+        id: z14.string().uuid().describe("Revision ID to read snapshots for")
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["catalog-revisions"][":id"]["snapshots"].$get({
@@ -1397,12 +1469,12 @@ function createCatalogRevisionsClient(proj) {
      * `force: true`, mirroring POST /apply.
      */
     rollback: withSchema(
-      z13.object({
-        orgId: z13.string().describe("Organization slug"),
-        projectId: z13.string().describe("Project ID"),
-        id: z13.string().uuid().describe("Revision ID to roll back to"),
-        hunkId: z13.string().uuid().optional().describe("Single-hunk filter"),
-        force: z13.boolean().optional().describe("Required if the inverse diff is destructive")
+      z14.object({
+        orgId: z14.string().describe("Organization slug"),
+        projectId: z14.string().describe("Project ID"),
+        id: z14.string().uuid().describe("Revision ID to roll back to"),
+        hunkId: z14.string().uuid().optional().describe("Single-hunk filter"),
+        force: z14.boolean().optional().describe("Required if the inverse diff is destructive")
       }),
       (params) => {
         const { orgId, projectId, id, hunkId, force } = params;
@@ -1419,21 +1491,21 @@ function createCatalogRevisionsClient(proj) {
 }
 
 // src/audit-events.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 function createAuditEventsClient(proj) {
   return {
     list: withSchema(
-      z14.object({
-        orgId: z14.string().describe("Organization slug"),
-        projectId: z14.string().describe("Project name"),
-        envName: z14.string().optional().describe("Filter to a single env"),
-        actorType: z14.enum(["user", "token"]).optional().describe("Filter by actor type"),
-        actorId: z14.string().optional().describe("Filter by actor (user.id or apikey.id)"),
-        action: z14.string().optional().describe('Comma-separated actions (e.g. "create,delete")'),
-        resourceKind: z14.string().optional().describe("Filter to one resource kind (Entity | Token | Member | \u2026)"),
-        since: z14.string().datetime().optional().describe("ISO timestamp; only events strictly after this are returned"),
-        before: z14.string().datetime().optional().describe("ISO timestamp; only events strictly before this are returned (keyset upper-bound)"),
-        limit: z14.coerce.number().int().min(1).max(500).optional().describe("Max rows (1-500)")
+      z15.object({
+        orgId: z15.string().describe("Organization slug"),
+        projectId: z15.string().describe("Project name"),
+        envName: z15.string().optional().describe("Filter to a single env"),
+        actorType: z15.enum(["user", "token"]).optional().describe("Filter by actor type"),
+        actorId: z15.string().optional().describe("Filter by actor (user.id or apikey.id)"),
+        action: z15.string().optional().describe('Comma-separated actions (e.g. "create,delete")'),
+        resourceKind: z15.string().optional().describe("Filter to one resource kind (Entity | Token | Member | \u2026)"),
+        since: z15.string().datetime().optional().describe("ISO timestamp; only events strictly after this are returned"),
+        before: z15.string().datetime().optional().describe("ISO timestamp; only events strictly before this are returned (keyset upper-bound)"),
+        limit: z15.coerce.number().int().min(1).max(500).optional().describe("Max rows (1-500)")
       }).describe("List audit events for a project \u2014 auditor-friendly read-only feed"),
       (params) => {
         const { orgId, projectId, ...query } = params;
@@ -1444,21 +1516,21 @@ function createAuditEventsClient(proj) {
 }
 
 // src/environments.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 function createEnvironmentsClient(proj) {
   return {
     list: withSchema(
-      z15.object({
-        orgId: z15.string().describe("Organization slug"),
-        projectId: z15.string().describe("Project name")
+      z16.object({
+        orgId: z16.string().describe("Organization slug"),
+        projectId: z16.string().describe("Project name")
       }),
       (params) => call(proj(params.orgId, params.projectId)["environments"].$get())
     ),
     create: withSchema(
-      z15.object({
-        orgId: z15.string().describe("Organization slug"),
-        projectId: z15.string().describe("Project name"),
-        name: z15.string().min(1).max(31).regex(/^[a-z0-9][a-z0-9-]{0,30}$/).describe("Environment name (lowercase letters, digits, hyphens; max 31 chars)")
+      z16.object({
+        orgId: z16.string().describe("Organization slug"),
+        projectId: z16.string().describe("Project name"),
+        name: z16.string().min(1).max(31).regex(/^[a-z0-9][a-z0-9-]{0,30}$/).describe("Environment name (lowercase letters, digits, hyphens; max 31 chars)")
       }),
       (params) => {
         const { orgId, projectId, name } = params;
@@ -1466,10 +1538,10 @@ function createEnvironmentsClient(proj) {
       }
     ),
     delete: withSchema(
-      z15.object({
-        orgId: z15.string().describe("Organization slug"),
-        projectId: z15.string().describe("Project name"),
-        name: z15.string().describe("Environment name")
+      z16.object({
+        orgId: z16.string().describe("Organization slug"),
+        projectId: z16.string().describe("Project name"),
+        name: z16.string().describe("Environment name")
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["environments"][":envName"].$delete({
@@ -1481,20 +1553,20 @@ function createEnvironmentsClient(proj) {
 }
 
 // src/drift-events.ts
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 function createDriftEventsClient(projEnv) {
   return {
     list: withSchema(
-      z16.object({
-        orgId: z16.string().describe("Organization slug"),
-        projectId: z16.string().describe("Project name"),
-        envName: z16.string().describe("Environment name"),
-        status: z16.enum(["open", "accepted", "reapplied", "snoozed"]).optional(),
-        kind: z16.string().optional().describe("Filter by entity type name"),
-        entityName: z16.string().optional().describe("Filter by entity name"),
-        since: z16.string().optional().describe("ISO timestamp lower bound on detectedAt"),
-        before: z16.string().datetime().optional().describe("ISO timestamp upper bound on detectedAt (keyset cursor)"),
-        limit: z16.coerce.number().int().min(1).max(500).optional()
+      z17.object({
+        orgId: z17.string().describe("Organization slug"),
+        projectId: z17.string().describe("Project name"),
+        envName: z17.string().describe("Environment name"),
+        status: z17.enum(["open", "accepted", "reapplied", "snoozed"]).optional(),
+        kind: z17.string().optional().describe("Filter by entity type name"),
+        entityName: z17.string().optional().describe("Filter by entity name"),
+        since: z17.string().optional().describe("ISO timestamp lower bound on detectedAt"),
+        before: z17.string().datetime().optional().describe("ISO timestamp upper bound on detectedAt (keyset cursor)"),
+        limit: z17.coerce.number().int().min(1).max(500).optional()
       }),
       (params) => {
         const { orgId, projectId, envName, ...query } = params;
@@ -1504,19 +1576,19 @@ function createDriftEventsClient(projEnv) {
       }
     ),
     count: withSchema(
-      z16.object({
-        orgId: z16.string().describe("Organization slug"),
-        projectId: z16.string().describe("Project name"),
-        envName: z16.string().describe("Environment name")
+      z17.object({
+        orgId: z17.string().describe("Organization slug"),
+        projectId: z17.string().describe("Project name"),
+        envName: z17.string().describe("Environment name")
       }),
       (params) => call(projEnv(params.orgId, params.projectId, params.envName)["drift-events"].count.$get())
     ),
     get: withSchema(
-      z16.object({
-        orgId: z16.string().describe("Organization slug"),
-        projectId: z16.string().describe("Project name"),
-        envName: z16.string().describe("Environment name"),
-        id: z16.string().uuid()
+      z17.object({
+        orgId: z17.string().describe("Organization slug"),
+        projectId: z17.string().describe("Project name"),
+        envName: z17.string().describe("Environment name"),
+        id: z17.string().uuid()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["drift-events"][":id"].$get({
@@ -1525,11 +1597,11 @@ function createDriftEventsClient(projEnv) {
       )
     ),
     accept: withSchema(
-      z16.object({
-        orgId: z16.string().describe("Organization slug"),
-        projectId: z16.string().describe("Project name"),
-        envName: z16.string().describe("Environment name"),
-        id: z16.string().uuid()
+      z17.object({
+        orgId: z17.string().describe("Organization slug"),
+        projectId: z17.string().describe("Project name"),
+        envName: z17.string().describe("Environment name"),
+        id: z17.string().uuid()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["drift-events"][":id"].accept.$post({
@@ -1538,11 +1610,11 @@ function createDriftEventsClient(projEnv) {
       )
     ),
     reapply: withSchema(
-      z16.object({
-        orgId: z16.string().describe("Organization slug"),
-        projectId: z16.string().describe("Project name"),
-        envName: z16.string().describe("Environment name"),
-        id: z16.string().uuid()
+      z17.object({
+        orgId: z17.string().describe("Organization slug"),
+        projectId: z17.string().describe("Project name"),
+        envName: z17.string().describe("Environment name"),
+        id: z17.string().uuid()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["drift-events"][":id"].reapply.$post({
@@ -1551,12 +1623,12 @@ function createDriftEventsClient(projEnv) {
       )
     ),
     snooze: withSchema(
-      z16.object({
-        orgId: z16.string().describe("Organization slug"),
-        projectId: z16.string().describe("Project name"),
-        envName: z16.string().describe("Environment name"),
-        id: z16.string().uuid(),
-        untilSeconds: z16.number().int().positive().optional()
+      z17.object({
+        orgId: z17.string().describe("Organization slug"),
+        projectId: z17.string().describe("Project name"),
+        envName: z17.string().describe("Environment name"),
+        id: z17.string().uuid(),
+        untilSeconds: z17.number().int().positive().optional()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["drift-events"][":id"].snooze.$post({
@@ -1569,21 +1641,21 @@ function createDriftEventsClient(projEnv) {
 }
 
 // src/conformance-findings.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 import { FindingStatusSchema, FindingSeveritySchema } from "@terrantula/types";
 function createConformanceFindingsClient(projEnv) {
   return {
     list: withSchema(
-      z17.object({
-        orgId: z17.string().describe("Organization slug"),
-        projectId: z17.string().describe("Project name"),
-        envName: z17.string().describe("Environment name"),
+      z18.object({
+        orgId: z18.string().describe("Organization slug"),
+        projectId: z18.string().describe("Project name"),
+        envName: z18.string().describe("Environment name"),
         status: FindingStatusSchema.optional(),
         severity: FindingSeveritySchema.optional(),
-        kind: z17.string().optional().describe("Filter by entity type name"),
-        findingKind: z17.string().optional().describe("Filter by finding kind (e.g. MISSING_REQUIRED_PROPERTY)"),
-        entityName: z17.string().optional().describe("Filter by entity name"),
-        limit: z17.coerce.number().int().min(1).max(500).optional()
+        kind: z18.string().optional().describe("Filter by entity type name"),
+        findingKind: z18.string().optional().describe("Filter by finding kind (e.g. MISSING_REQUIRED_PROPERTY)"),
+        entityName: z18.string().optional().describe("Filter by entity name"),
+        limit: z18.coerce.number().int().min(1).max(500).optional()
       }),
       (params) => {
         const { orgId, projectId, envName, ...query } = params;
@@ -1593,19 +1665,19 @@ function createConformanceFindingsClient(projEnv) {
       }
     ),
     count: withSchema(
-      z17.object({
-        orgId: z17.string().describe("Organization slug"),
-        projectId: z17.string().describe("Project name"),
-        envName: z17.string().describe("Environment name")
+      z18.object({
+        orgId: z18.string().describe("Organization slug"),
+        projectId: z18.string().describe("Project name"),
+        envName: z18.string().describe("Environment name")
       }),
       (params) => call(projEnv(params.orgId, params.projectId, params.envName)["conformance-findings"].count.$get())
     ),
     get: withSchema(
-      z17.object({
-        orgId: z17.string().describe("Organization slug"),
-        projectId: z17.string().describe("Project name"),
-        envName: z17.string().describe("Environment name"),
-        id: z17.string().uuid()
+      z18.object({
+        orgId: z18.string().describe("Organization slug"),
+        projectId: z18.string().describe("Project name"),
+        envName: z18.string().describe("Environment name"),
+        id: z18.string().uuid()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["conformance-findings"][":id"].$get({
@@ -1617,15 +1689,15 @@ function createConformanceFindingsClient(projEnv) {
 }
 
 // src/stats.ts
-import { z as z18 } from "zod";
-var WindowSchema = z18.enum(["1h", "24h", "7d"]).optional().describe("Time window \u2014 default 24h");
-var BucketSchema = z18.enum(["1m", "5m", "1h", "1d"]).optional().describe("Bucket granularity \u2014 default 1h");
+import { z as z19 } from "zod";
+var WindowSchema = z19.enum(["1h", "24h", "7d"]).optional().describe("Time window \u2014 default 24h");
+var BucketSchema = z19.enum(["1m", "5m", "1h", "1d"]).optional().describe("Bucket granularity \u2014 default 1h");
 function createStatsClient(proj) {
   return {
     entitiesByState: withSchema(
-      z18.object({
-        orgId: z18.string().describe("Organization slug"),
-        projectId: z18.string().describe("Project name"),
+      z19.object({
+        orgId: z19.string().describe("Organization slug"),
+        projectId: z19.string().describe("Project name"),
         window: WindowSchema,
         bucket: BucketSchema
       }),
@@ -1635,9 +1707,9 @@ function createStatsClient(proj) {
       }
     ),
     runsByType: withSchema(
-      z18.object({
-        orgId: z18.string().describe("Organization slug"),
-        projectId: z18.string().describe("Project name"),
+      z19.object({
+        orgId: z19.string().describe("Organization slug"),
+        projectId: z19.string().describe("Project name"),
         window: WindowSchema
       }),
       (params) => {
@@ -1646,9 +1718,9 @@ function createStatsClient(proj) {
       }
     ),
     failingKinds: withSchema(
-      z18.object({
-        orgId: z18.string().describe("Organization slug"),
-        projectId: z18.string().describe("Project name"),
+      z19.object({
+        orgId: z19.string().describe("Organization slug"),
+        projectId: z19.string().describe("Project name"),
         window: WindowSchema
       }),
       (params) => {
@@ -1657,10 +1729,10 @@ function createStatsClient(proj) {
       }
     ),
     driftDensity: withSchema(
-      z18.object({
-        orgId: z18.string().describe("Organization slug"),
-        projectId: z18.string().describe("Project name"),
-        dim: z18.string().optional().describe('Dimensions to bucket \u2014 e.g. "kind,cell"')
+      z19.object({
+        orgId: z19.string().describe("Organization slug"),
+        projectId: z19.string().describe("Project name"),
+        dim: z19.string().optional().describe('Dimensions to bucket \u2014 e.g. "kind,cell"')
       }),
       (params) => {
         const { orgId, projectId, ...query } = params;
@@ -1671,32 +1743,32 @@ function createStatsClient(proj) {
 }
 
 // src/graph-views.ts
-import { z as z19 } from "zod";
-var PinnedPositionsSchema = z19.record(z19.string(), z19.object({ x: z19.number(), y: z19.number() })).nullable();
-var ViewSpecSchema = z19.unknown().nullable();
+import { z as z20 } from "zod";
+var PinnedPositionsSchema = z20.record(z20.string(), z20.object({ x: z20.number(), y: z20.number() })).nullable();
+var ViewSpecSchema = z20.unknown().nullable();
 function createGraphViewsClient(proj) {
   return {
     list: withSchema(
-      z19.object({
-        orgId: z19.string().describe("Organization slug"),
-        projectId: z19.string().describe("Project ID")
+      z20.object({
+        orgId: z20.string().describe("Organization slug"),
+        projectId: z20.string().describe("Project ID")
       }),
       (params) => call(proj(params.orgId, params.projectId)["graph-views"].$get())
     ),
     get: withSchema(
-      z19.object({
-        orgId: z19.string().describe("Organization slug"),
-        projectId: z19.string().describe("Project ID"),
-        id: z19.string().describe("View id")
+      z20.object({
+        orgId: z20.string().describe("Organization slug"),
+        projectId: z20.string().describe("Project ID"),
+        id: z20.string().describe("View id")
       }),
       (params) => call(proj(params.orgId, params.projectId)["graph-views"][":id"].$get({ param: { id: params.id } }))
     ),
     create: withSchema(
-      z19.object({
-        orgId: z19.string().describe("Organization slug"),
-        projectId: z19.string().describe("Project ID"),
-        name: z19.string().describe("View name"),
-        scope: z19.enum(["user", "project"]).describe("Personal or project scope"),
+      z20.object({
+        orgId: z20.string().describe("Organization slug"),
+        projectId: z20.string().describe("Project ID"),
+        name: z20.string().describe("View name"),
+        scope: z20.enum(["user", "project"]).describe("Personal or project scope"),
         pinnedPositions: PinnedPositionsSchema.optional().describe("Pinned node positions"),
         viewSpec: ViewSpecSchema.optional().describe("ViewSpec JSON (opaque passthrough)")
       }),
@@ -1706,11 +1778,11 @@ function createGraphViewsClient(proj) {
       }
     ),
     update: withSchema(
-      z19.object({
-        orgId: z19.string().describe("Organization slug"),
-        projectId: z19.string().describe("Project ID"),
-        id: z19.string().describe("View id"),
-        name: z19.string().optional().describe("New name"),
+      z20.object({
+        orgId: z20.string().describe("Organization slug"),
+        projectId: z20.string().describe("Project ID"),
+        id: z20.string().describe("View id"),
+        name: z20.string().optional().describe("New name"),
         pinnedPositions: PinnedPositionsSchema.optional().describe("Replacement pinned positions"),
         viewSpec: ViewSpecSchema.optional().describe("Replacement ViewSpec JSON (opaque passthrough)")
       }),
@@ -1722,18 +1794,18 @@ function createGraphViewsClient(proj) {
       }
     ),
     delete: withSchema(
-      z19.object({
-        orgId: z19.string().describe("Organization slug"),
-        projectId: z19.string().describe("Project ID"),
-        id: z19.string().describe("View id")
+      z20.object({
+        orgId: z20.string().describe("Organization slug"),
+        projectId: z20.string().describe("Project ID"),
+        id: z20.string().describe("View id")
       }),
       (params) => call(proj(params.orgId, params.projectId)["graph-views"][":id"].$delete({ param: { id: params.id } }))
     ),
     setDefault: withSchema(
-      z19.object({
-        orgId: z19.string().describe("Organization slug"),
-        projectId: z19.string().describe("Project ID"),
-        id: z19.string().describe("View id")
+      z20.object({
+        orgId: z20.string().describe("Organization slug"),
+        projectId: z20.string().describe("Project ID"),
+        id: z20.string().describe("View id")
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["graph-views"][":id"]["default"].$patch({
@@ -1745,15 +1817,15 @@ function createGraphViewsClient(proj) {
 }
 
 // src/notifications.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 import { hc as hc2 } from "hono/client";
 function createNotificationsClient(baseUrl, hcOpts) {
   const c = hc2(`${baseUrl}/notifications`, hcOpts);
   return {
     list: withSchema(
-      z20.object({
-        limit: z20.coerce.number().int().min(1).max(100).optional(),
-        unread: z20.boolean().optional()
+      z21.object({
+        limit: z21.coerce.number().int().min(1).max(100).optional(),
+        unread: z21.boolean().optional()
       }),
       (params) => {
         const query = {};
@@ -1763,19 +1835,19 @@ function createNotificationsClient(baseUrl, hcOpts) {
       }
     ),
     read: withSchema(
-      z20.object({ id: z20.string().uuid() }),
+      z21.object({ id: z21.string().uuid() }),
       (params) => call(c[":id"].read.$post({ param: { id: params.id } }))
     ),
     readAll: withSchema(
-      z20.object({}),
+      z21.object({}),
       () => call(c["read-all"].$post())
     )
   };
 }
 
 // src/audit-export.ts
-import { z as z21 } from "zod";
-async function rawRequest(baseUrl, hcOpts, path, init = {}) {
+import { z as z22 } from "zod";
+async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
   const fetchImpl = hcOpts?.fetch ?? fetch;
   const rawHeaders = hcOpts?.headers;
   const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
@@ -1787,7 +1859,7 @@ async function rawRequest(baseUrl, hcOpts, path, init = {}) {
     }
   });
 }
-async function callRaw(res) {
+async function callRaw2(res) {
   if (!res.ok) {
     let message = fallbackMessage(res.status);
     try {
@@ -1803,24 +1875,24 @@ function createAuditExportClient(baseUrl, hcOpts) {
   return {
     /** GET /orgs/:orgId/audit-export/config — returns current config or throws 404. */
     getConfig: withSchema(
-      z21.object({ orgId: z21.string().describe("Organization ID") }),
-      async (params) => callRaw(
-        await rawRequest(baseUrl, hcOpts, `/orgs/${params.orgId}/audit-export/config`)
+      z22.object({ orgId: z22.string().describe("Organization ID") }),
+      async (params) => callRaw2(
+        await rawRequest2(baseUrl, hcOpts, `/orgs/${params.orgId}/audit-export/config`)
       )
     ),
     /** POST /orgs/:orgId/audit-export/config — upsert the S3 export config. */
     setConfig: withSchema(
-      z21.object({
-        orgId: z21.string().describe("Organization ID"),
-        bucket: z21.string().describe("S3 bucket name"),
-        region: z21.string().describe("AWS region"),
-        roleArn: z21.string().describe("IAM role ARN for assume-role"),
-        enabled: z21.boolean().optional().describe("Enable/disable export")
+      z22.object({
+        orgId: z22.string().describe("Organization ID"),
+        bucket: z22.string().describe("S3 bucket name"),
+        region: z22.string().describe("AWS region"),
+        roleArn: z22.string().describe("IAM role ARN for assume-role"),
+        enabled: z22.boolean().optional().describe("Enable/disable export")
       }),
       async (params) => {
         const { orgId, ...body } = params;
-        return callRaw(
-          await rawRequest(baseUrl, hcOpts, `/orgs/${orgId}/audit-export/config`, {
+        return callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/orgs/${orgId}/audit-export/config`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify(body)
@@ -1830,16 +1902,16 @@ function createAuditExportClient(baseUrl, hcOpts) {
     ),
     /** POST /orgs/:orgId/audit-export/test-connection — dry-run write+delete. */
     testConnection: withSchema(
-      z21.object({
-        orgId: z21.string().describe("Organization ID"),
-        bucket: z21.string().describe("S3 bucket name"),
-        region: z21.string().describe("AWS region"),
-        roleArn: z21.string().describe("IAM role ARN for assume-role")
+      z22.object({
+        orgId: z22.string().describe("Organization ID"),
+        bucket: z22.string().describe("S3 bucket name"),
+        region: z22.string().describe("AWS region"),
+        roleArn: z22.string().describe("IAM role ARN for assume-role")
       }),
       async (params) => {
         const { orgId, ...body } = params;
-        return callRaw(
-          await rawRequest(baseUrl, hcOpts, `/orgs/${orgId}/audit-export/test-connection`, {
+        return callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/orgs/${orgId}/audit-export/test-connection`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify(body)
@@ -1849,14 +1921,14 @@ function createAuditExportClient(baseUrl, hcOpts) {
     ),
     /** GET /orgs/:orgId/audit-export/runs — recent batch run history. */
     listRuns: withSchema(
-      z21.object({
-        orgId: z21.string().describe("Organization ID"),
-        limit: z21.number().optional().describe("Max results (default 20, max 100)")
+      z22.object({
+        orgId: z22.string().describe("Organization ID"),
+        limit: z22.number().optional().describe("Max results (default 20, max 100)")
       }),
       async (params) => {
         const qs = params.limit ? `?limit=${params.limit}` : "";
-        return callRaw(
-          await rawRequest(
+        return callRaw2(
+          await rawRequest2(
             baseUrl,
             hcOpts,
             `/orgs/${params.orgId}/audit-export/runs${qs}`
@@ -1895,33 +1967,33 @@ function createUserPreferencesClient(baseUrl, hcOpts) {
 }
 
 // src/import-sources.ts
-import { z as z22 } from "zod";
-var SourceKindEnum = z22.enum(["tf-state", "atmos-manifests"]);
-var PolicyEnum = z22.enum(["auto-update", "human-approval"]);
+import { z as z23 } from "zod";
+var SourceKindEnum = z23.enum(["tf-state", "atmos-manifests"]);
+var PolicyEnum = z23.enum(["auto-update", "human-approval"]);
 function createImportSourcesClient(proj) {
   return {
     list: withSchema(
-      z22.object({
-        orgId: z22.string().describe("Organization slug"),
-        projectId: z22.string().describe("Project ID")
+      z23.object({
+        orgId: z23.string().describe("Organization slug"),
+        projectId: z23.string().describe("Project ID")
       }),
       (params) => call(proj(params.orgId, params.projectId)["import-sources"].$get())
     ),
     get: withSchema(
-      z22.object({
-        orgId: z22.string().describe("Organization slug"),
-        projectId: z22.string().describe("Project ID"),
-        id: z22.string().uuid().describe("ImportSource ID")
+      z23.object({
+        orgId: z23.string().describe("Organization slug"),
+        projectId: z23.string().describe("Project ID"),
+        id: z23.string().uuid().describe("ImportSource ID")
       }),
       (params) => call(proj(params.orgId, params.projectId)["import-sources"][":id"].$get({ param: { id: params.id } }))
     ),
     registerOrUpdate: withSchema(
-      z22.object({
-        orgId: z22.string().describe("Organization slug"),
-        projectId: z22.string().describe("Project ID"),
-        envName: z22.string().describe("Env name the source belongs to"),
+      z23.object({
+        orgId: z23.string().describe("Organization slug"),
+        projectId: z23.string().describe("Project ID"),
+        envName: z23.string().describe("Env name the source belongs to"),
         sourceKind: SourceKindEnum,
-        sourceUri: z22.string().describe("Stable URI identifying the source"),
+        sourceUri: z23.string().describe("Stable URI identifying the source"),
         reconciliationPolicy: PolicyEnum.optional()
       }),
       (params) => {
@@ -1930,13 +2002,13 @@ function createImportSourcesClient(proj) {
       }
     ),
     rescan: withSchema(
-      z22.object({
-        orgId: z22.string().describe("Organization slug"),
-        projectId: z22.string().describe("Project ID"),
-        id: z22.string().uuid(),
-        envName: z22.string(),
-        items: z22.array(z22.unknown()),
-        deletions: z22.array(z22.object({ kind: z22.string(), name: z22.string() })).optional()
+      z23.object({
+        orgId: z23.string().describe("Organization slug"),
+        projectId: z23.string().describe("Project ID"),
+        id: z23.string().uuid(),
+        envName: z23.string(),
+        items: z23.array(z23.unknown()),
+        deletions: z23.array(z23.object({ kind: z23.string(), name: z23.string() })).optional()
       }),
       (params) => {
         const { orgId, projectId, id, ...body } = params;
@@ -1952,19 +2024,19 @@ function createImportSourcesClient(proj) {
       }
     ),
     drift: withSchema(
-      z22.object({
-        orgId: z22.string().describe("Organization slug"),
-        projectId: z22.string().describe("Project ID"),
-        id: z22.string().uuid()
+      z23.object({
+        orgId: z23.string().describe("Organization slug"),
+        projectId: z23.string().describe("Project ID"),
+        id: z23.string().uuid()
       }),
       (params) => call(proj(params.orgId, params.projectId)["import-sources"][":id"].drift.$get({ param: { id: params.id } }))
     ),
     approveProposal: withSchema(
-      z22.object({
-        orgId: z22.string().describe("Organization slug"),
-        projectId: z22.string().describe("Project ID"),
-        id: z22.string().uuid(),
-        proposalId: z22.string().uuid()
+      z23.object({
+        orgId: z23.string().describe("Organization slug"),
+        projectId: z23.string().describe("Project ID"),
+        id: z23.string().uuid(),
+        proposalId: z23.string().uuid()
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["import-sources"][":id"]["drift-proposals"][":proposalId"].approve.$post({
@@ -1973,11 +2045,11 @@ function createImportSourcesClient(proj) {
       )
     ),
     rejectProposal: withSchema(
-      z22.object({
-        orgId: z22.string().describe("Organization slug"),
-        projectId: z22.string().describe("Project ID"),
-        id: z22.string().uuid(),
-        proposalId: z22.string().uuid()
+      z23.object({
+        orgId: z23.string().describe("Organization slug"),
+        projectId: z23.string().describe("Project ID"),
+        id: z23.string().uuid(),
+        proposalId: z23.string().uuid()
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["import-sources"][":id"]["drift-proposals"][":proposalId"].reject.$post({
@@ -1989,8 +2061,8 @@ function createImportSourcesClient(proj) {
 }
 
 // src/admin.ts
-import { z as z23 } from "zod";
-async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
+import { z as z24 } from "zod";
+async function rawRequest3(baseUrl, hcOpts, path, init = {}) {
   const fetchImpl = hcOpts?.fetch ?? fetch;
   const rawHeaders = hcOpts?.headers;
   const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
@@ -2002,7 +2074,7 @@ async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
     }
   });
 }
-async function callRaw2(res) {
+async function callRaw3(res) {
   if (!res.ok) {
     let message = fallbackMessage(res.status);
     try {
@@ -2022,14 +2094,14 @@ function createAdminClient(baseUrl, hcOpts) {
        * List super-admin audit events with optional filters.
        */
       list: withSchema(
-        z23.object({
-          actor: z23.string().optional().describe("Filter by actor user ID"),
-          action: z23.string().optional().describe("Filter by action name"),
-          resourceKind: z23.string().optional().describe("Filter by resource kind"),
-          since: z23.string().optional().describe("ISO 8601 datetime lower bound"),
-          until: z23.string().optional().describe("ISO 8601 datetime upper bound"),
-          limit: z23.coerce.number().int().min(1).max(200).optional().describe("Max results (1-200)"),
-          offset: z23.coerce.number().int().min(0).optional().describe("Pagination offset")
+        z24.object({
+          actor: z24.string().optional().describe("Filter by actor user ID"),
+          action: z24.string().optional().describe("Filter by action name"),
+          resourceKind: z24.string().optional().describe("Filter by resource kind"),
+          since: z24.string().optional().describe("ISO 8601 datetime lower bound"),
+          until: z24.string().optional().describe("ISO 8601 datetime upper bound"),
+          limit: z24.coerce.number().int().min(1).max(200).optional().describe("Max results (1-200)"),
+          offset: z24.coerce.number().int().min(0).optional().describe("Pagination offset")
         }),
         async (params) => {
           const qs = new URLSearchParams();
@@ -2041,8 +2113,8 @@ function createAdminClient(baseUrl, hcOpts) {
           if (params.limit !== void 0) qs.set("limit", String(params.limit));
           if (params.offset !== void 0) qs.set("offset", String(params.offset));
           const search = qs.toString();
-          return callRaw2(
-            await rawRequest2(baseUrl, hcOpts, `/admin/audit${search ? `?${search}` : ""}`)
+          return callRaw3(
+            await rawRequest3(baseUrl, hcOpts, `/admin/audit${search ? `?${search}` : ""}`)
           );
         }
       )
@@ -2053,9 +2125,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * List all organizations across tenants with member + project counts.
        */
       list: withSchema(
-        z23.object({}),
-        async () => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, "/admin/orgs")
+        z24.object({}),
+        async () => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, "/admin/orgs")
         )
       ),
       /**
@@ -2063,9 +2135,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * Detail view: org fields + member list + project list.
        */
       get: withSchema(
-        z23.object({ id: z23.string().describe("Organization ID") }),
-        async (params) => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}`)
+        z24.object({ id: z24.string().describe("Organization ID") }),
+        async (params) => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, `/admin/orgs/${params.id}`)
         )
       ),
       /**
@@ -2073,9 +2145,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * Set suspended_at = now(). Idempotent.
        */
       suspend: withSchema(
-        z23.object({ id: z23.string().describe("Organization ID") }),
-        async (params) => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/suspend`, {
+        z24.object({ id: z24.string().describe("Organization ID") }),
+        async (params) => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, `/admin/orgs/${params.id}/suspend`, {
             method: "POST"
           })
         )
@@ -2085,9 +2157,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * Clear suspended_at.
        */
       unsuspend: withSchema(
-        z23.object({ id: z23.string().describe("Organization ID") }),
-        async (params) => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/unsuspend`, {
+        z24.object({ id: z24.string().describe("Organization ID") }),
+        async (params) => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, `/admin/orgs/${params.id}/unsuspend`, {
             method: "POST"
           })
         )
@@ -2101,9 +2173,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * api tokens, and environments. Idempotent. Super-admin only.
        */
       nuke: withSchema(
-        z23.object({ projectId: z23.string().describe("Project ID to nuke") }),
-        async (params) => callRaw2(
-          await rawRequest2(
+        z24.object({ projectId: z24.string().describe("Project ID to nuke") }),
+        async (params) => callRaw3(
+          await rawRequest3(
             baseUrl,
             hcOpts,
             `/admin/projects/${encodeURIComponent(params.projectId)}/nuke`,
@@ -2119,9 +2191,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * all derived from single-table COUNT queries.
        */
       overview: withSchema(
-        z23.object({}),
-        async () => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, "/admin/metrics/overview")
+        z24.object({}),
+        async () => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, "/admin/metrics/overview")
         )
       )
     },
@@ -2134,9 +2206,9 @@ function createAdminClient(baseUrl, hcOpts) {
          * Requires super-admin.
          */
         list: withSchema(
-          z23.object({}),
-          async () => callRaw2(
-            await rawRequest2(
+          z24.object({}),
+          async () => callRaw3(
+            await rawRequest3(
               baseUrl,
               hcOpts,
               "/admin/integrations/github-installations"
@@ -2149,15 +2221,15 @@ function createAdminClient(baseUrl, hcOpts) {
 }
 
 // src/resolve-source.ts
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 function createResolveSourceFn(proj) {
   return withSchema(
-    z24.object({
-      orgId: z24.string().describe("Organization slug"),
-      projectId: z24.string().describe("Project ID"),
-      kind: z24.literal("registry").describe('Source kind \u2014 only "registry" is supported today'),
-      ref: z24.string().regex(/^[^/]+\/[^/]+\/[^/]+$/, { message: "ref must be <namespace>/<name>/<provider>" }).describe("Terraform Registry module ref (<namespace>/<name>/<provider>)"),
-      version: z24.string().optional().describe("Module version semver \u2014 resolves latest if omitted")
+    z25.object({
+      orgId: z25.string().describe("Organization slug"),
+      projectId: z25.string().describe("Project ID"),
+      kind: z25.literal("registry").describe('Source kind \u2014 only "registry" is supported today'),
+      ref: z25.string().regex(/^[^/]+\/[^/]+\/[^/]+$/, { message: "ref must be <namespace>/<name>/<provider>" }).describe("Terraform Registry module ref (<namespace>/<name>/<provider>)"),
+      version: z25.string().optional().describe("Module version semver \u2014 resolves latest if omitted")
     }),
     (params) => {
       const { orgId, projectId, kind, ref, version } = params;
@@ -2198,6 +2270,7 @@ var createClient = (baseUrl, options = {}) => {
     actionRuns: createActionRunsClient(projEnv),
     secrets: createSecretsClient(projEnv),
     apply: createApplyClient(projEnv),
+    observations: createObservationsClient(baseUrl, hcOpts),
     catalogRevisions,
     auditEvents: createAuditEventsClient(proj),
     driftEvents: createDriftEventsClient(projEnv),