@terrantula/sdk 0.13.0 → 0.14.0

package/dist/index.js

@@ -739,6 +739,18 @@ function createDeploymentTargetSetsClient(proj) {
           param: { name: params.name }
         })
       )
+    ),
+    listMembers: withSchema(
+      import_zod5.z.object({
+        orgId: import_zod5.z.string().describe("Organization slug"),
+        projectId: import_zod5.z.string().describe("Project ID"),
+        name: import_zod5.z.string().describe("Deployment target set name")
+      }),
+      (params) => call(
+        proj(params.orgId, params.projectId)["deployment-target-sets"][":name"]["members"].$get({
+          param: { name: params.name }
+        })
+      )
     )
   };
 }
@@ -1186,13 +1198,73 @@ function createApplyClient(projEnv) {
   );
 }
 
-// src/github.ts
+// src/observations.ts
 var import_zod10 = require("zod");
+var import_types8 = require("@terrantula/types");
+async function rawRequest(baseUrl, hcOpts, path, init = {}) {
+  const fetchImpl = hcOpts?.fetch ?? fetch;
+  const rawHeaders = hcOpts?.headers;
+  const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
+  return fetchImpl(`${baseUrl}${path}`, {
+    ...init,
+    headers: {
+      ...resolvedHeaders,
+      ...init.headers
+    }
+  });
+}
+async function callRaw(res) {
+  if (!res.ok) {
+    let message = fallbackMessage(res.status);
+    try {
+      const body = await res.json();
+      if (body.error) message = body.error;
+    } catch {
+    }
+    throw new TerrantulaError(res.status, { error: message });
+  }
+  return res.json();
+}
+function createObservationsClient(baseUrl, hcOpts) {
+  return {
+    /**
+     * POST /{orgId}/{projectId}/envs/{envName}/import
+     *
+     * Persists a full observation snapshot (resources + dependency edges)
+     * for a given environment. Requires `data:write` permission.
+     */
+    importPayload: withSchema(
+      import_types8.ObservationImportPayloadSchema.extend({
+        orgId: import_zod10.z.string().describe("Organization slug"),
+        projectId: import_zod10.z.string().describe("Project ID"),
+        envName: import_zod10.z.string().describe("Environment name")
+      }),
+      async (params) => {
+        const { orgId, projectId, envName, ...body } = params;
+        return callRaw(
+          await rawRequest(
+            baseUrl,
+            hcOpts,
+            `/${orgId}/${projectId}/envs/${envName}/import`,
+            {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify(body)
+            }
+          )
+        );
+      }
+    )
+  };
+}
+
+// src/github.ts
+var import_zod11 = require("zod");
 function createGithubClient(cloud, _baseUrl, _hcOpts) {
   return {
     connect: withSchema(
-      import_zod10.z.object({
-        projectId: import_zod10.z.string().describe("Project name")
+      import_zod11.z.object({
+        projectId: import_zod11.z.string().describe("Project name")
       }),
       // why: the install-url route has a "GitHub App not configured" branch
       // that returns a bare `new Response(...)` (see notConfiguredResponse in
@@ -1202,14 +1274,14 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
     ),
     installations: {
       list: withSchema(
-        import_zod10.z.object({
-          orgId: import_zod10.z.string().describe("Organization slug")
+        import_zod11.z.object({
+          orgId: import_zod11.z.string().describe("Organization slug")
         }),
         (params) => call(cloud.github.installations.$get({ query: params }))
       ),
       repos: withSchema(
-        import_zod10.z.object({
-          installationId: import_zod10.z.string().describe("Installation row ID")
+        import_zod11.z.object({
+          installationId: import_zod11.z.string().describe("Installation row ID")
         }),
         (params) => call(
           cloud.github.installations[":installationId"].repos.$get({
@@ -1218,8 +1290,8 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
         )
       ),
       disconnect: withSchema(
-        import_zod10.z.object({
-          installationId: import_zod10.z.string().describe("Installation row ID")
+        import_zod11.z.object({
+          installationId: import_zod11.z.string().describe("Installation row ID")
         }),
         (params) => call(
           cloud.github.installations[":installationId"].$delete({
@@ -1228,9 +1300,9 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
         )
       ),
       recover: withSchema(
-        import_zod10.z.object({
-          orgId: import_zod10.z.string().describe("Organization slug"),
-          installationId: import_zod10.z.number().int().positive().describe("GitHub installation ID (from the GitHub install URL)")
+        import_zod11.z.object({
+          orgId: import_zod11.z.string().describe("Organization slug"),
+          installationId: import_zod11.z.number().int().positive().describe("GitHub installation ID (from the GitHub install URL)")
         }),
         // why: same bare-Response inference break as `connect` (the route's
         // not-configured branch returns `new Response(...)`), so the 200 body
@@ -1240,9 +1312,9 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
     },
     projects: {
       list: withSchema(
-        import_zod10.z.object({
-          orgId: import_zod10.z.string().describe("Organization slug"),
-          projectId: import_zod10.z.string().describe("Project name")
+        import_zod11.z.object({
+          orgId: import_zod11.z.string().describe("Organization slug"),
+          projectId: import_zod11.z.string().describe("Project name")
         }),
         (params) => call(
           cloud.orgs[":orgId"].projects[":projectId"]["github-repos"].$get({
@@ -1251,11 +1323,11 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
         )
       ),
       linkRepo: withSchema(
-        import_zod10.z.object({
-          orgId: import_zod10.z.string().describe("Organization slug"),
-          projectId: import_zod10.z.string().describe("Project name"),
-          installationId: import_zod10.z.string().describe("github_installations.id (UUID)"),
-          repoFullName: import_zod10.z.string().describe('GitHub repo "owner/name"')
+        import_zod11.z.object({
+          orgId: import_zod11.z.string().describe("Organization slug"),
+          projectId: import_zod11.z.string().describe("Project name"),
+          installationId: import_zod11.z.string().describe("github_installations.id (UUID)"),
+          repoFullName: import_zod11.z.string().describe('GitHub repo "owner/name"')
         }),
         (params) => {
           const { orgId, projectId, ...body } = params;
@@ -1268,10 +1340,10 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
         }
       ),
       unlinkRepo: withSchema(
-        import_zod10.z.object({
-          orgId: import_zod10.z.string().describe("Organization slug"),
-          projectId: import_zod10.z.string().describe("Project name"),
-          id: import_zod10.z.string().describe("project_github_repos.id (UUID) \u2014 returned by linkRepo")
+        import_zod11.z.object({
+          orgId: import_zod11.z.string().describe("Organization slug"),
+          projectId: import_zod11.z.string().describe("Project name"),
+          id: import_zod11.z.string().describe("project_github_repos.id (UUID) \u2014 returned by linkRepo")
         }),
         (params) => call(
           cloud.orgs[":orgId"].projects[":projectId"]["github-repos"][":id"].$delete({
@@ -1284,23 +1356,23 @@ function createGithubClient(cloud, _baseUrl, _hcOpts) {
 }
 
 // src/blueprints.ts
-var import_zod11 = require("zod");
-var SpinInputSchema = import_zod11.z.object({
-  orgId: import_zod11.z.string().describe("Organization slug"),
-  blueprint: import_zod11.z.string().describe("First-party blueprint name (e.g. k8s-fleet)"),
-  substrate: import_zod11.z.enum(["bare-tf", "tfc", "atmos"]).optional(),
-  repo: import_zod11.z.string().optional().describe("owner/repo to open the spin PR into (omit when createRepo is set)"),
-  prBase: import_zod11.z.string().optional(),
-  githubToken: import_zod11.z.string().optional(),
-  createRepo: import_zod11.z.object({ name: import_zod11.z.string(), private: import_zod11.z.boolean().optional() }).optional().describe("Cloud opt-in: auto-create the target GitHub repo before spinning"),
-  createWorkspace: import_zod11.z.object({ organization: import_zod11.z.string(), name: import_zod11.z.string(), apiToken: import_zod11.z.string(), apiBaseUrl: import_zod11.z.string().optional() }).optional().describe("Cloud opt-in: auto-create the TFC workspace shell before spinning"),
-  vars: import_zod11.z.record(import_zod11.z.string()).default({})
+var import_zod12 = require("zod");
+var SpinInputSchema = import_zod12.z.object({
+  orgId: import_zod12.z.string().describe("Organization slug"),
+  blueprint: import_zod12.z.string().describe("First-party blueprint name (e.g. k8s-fleet)"),
+  substrate: import_zod12.z.enum(["bare-tf", "tfc", "atmos"]).optional(),
+  repo: import_zod12.z.string().optional().describe("owner/repo to open the spin PR into (omit when createRepo is set)"),
+  prBase: import_zod12.z.string().optional(),
+  githubToken: import_zod12.z.string().optional(),
+  createRepo: import_zod12.z.object({ name: import_zod12.z.string(), private: import_zod12.z.boolean().optional() }).optional().describe("Cloud opt-in: auto-create the target GitHub repo before spinning"),
+  createWorkspace: import_zod12.z.object({ organization: import_zod12.z.string(), name: import_zod12.z.string(), apiToken: import_zod12.z.string(), apiBaseUrl: import_zod12.z.string().optional() }).optional().describe("Cloud opt-in: auto-create the TFC workspace shell before spinning"),
+  vars: import_zod12.z.record(import_zod12.z.string()).default({})
 });
 function createBlueprintsClient(cloud) {
   return {
     list: () => call(cloud.blueprints.$get()),
     get: withSchema(
-      import_zod11.z.object({ name: import_zod11.z.string().describe("Blueprint name") }),
+      import_zod12.z.object({ name: import_zod12.z.string().describe("Blueprint name") }),
       (params) => call(cloud.blueprints[":name"].$get({ param: params }))
     ),
     spin: withSchema(SpinInputSchema, (params) => {
@@ -1311,7 +1383,7 @@ function createBlueprintsClient(cloud) {
 }
 
 // src/export.ts
-var import_zod12 = require("zod");
+var import_zod13 = require("zod");
 var SERVER_FIELDS = /* @__PURE__ */ new Set(["id", "projectId", "envId", "createdAt", "updatedAt"]);
 function stripServerFields(row) {
   const out = {};
@@ -1322,10 +1394,10 @@ function stripServerFields(row) {
 }
 function createExportCatalogFn(proj, projEnv) {
   return withSchema(
-    import_zod12.z.object({
-      orgId: import_zod12.z.string().describe("Organization slug"),
-      projectId: import_zod12.z.string().describe("Project ID"),
-      envName: import_zod12.z.string().describe("Environment name to export secret declarations from")
+    import_zod13.z.object({
+      orgId: import_zod13.z.string().describe("Organization slug"),
+      projectId: import_zod13.z.string().describe("Project ID"),
+      envName: import_zod13.z.string().describe("Environment name to export secret declarations from")
     }).describe("Export every catalog kind as a single apply-shaped payload"),
     async (params) => {
       const projClient = proj(params.orgId, params.projectId);
@@ -1375,15 +1447,15 @@ function createExportCatalogFn(proj, projEnv) {
 }
 
 // src/catalog-revisions.ts
-var import_zod13 = require("zod");
+var import_zod14 = require("zod");
 function createCatalogRevisionsClient(proj) {
   return {
     list: withSchema(
-      import_zod13.z.object({
-        orgId: import_zod13.z.string().describe("Organization slug"),
-        projectId: import_zod13.z.string().describe("Project ID"),
-        limit: import_zod13.z.coerce.number().int().min(1).max(200).optional().describe("Max revisions to return (1-200)"),
-        before: import_zod13.z.string().datetime().optional().describe("ISO timestamp; only revisions with appliedAt strictly before this are returned (keyset upper-bound)")
+      import_zod14.z.object({
+        orgId: import_zod14.z.string().describe("Organization slug"),
+        projectId: import_zod14.z.string().describe("Project ID"),
+        limit: import_zod14.z.coerce.number().int().min(1).max(200).optional().describe("Max revisions to return (1-200)"),
+        before: import_zod14.z.string().datetime().optional().describe("ISO timestamp; only revisions with appliedAt strictly before this are returned (keyset upper-bound)")
       }),
       (params) => {
         const { orgId, projectId, ...query } = params;
@@ -1393,20 +1465,20 @@ function createCatalogRevisionsClient(proj) {
       }
     ),
     get: withSchema(
-      import_zod13.z.object({
-        orgId: import_zod13.z.string().describe("Organization slug"),
-        projectId: import_zod13.z.string().describe("Project ID"),
-        id: import_zod13.z.string().uuid().describe("Revision ID")
+      import_zod14.z.object({
+        orgId: import_zod14.z.string().describe("Organization slug"),
+        projectId: import_zod14.z.string().describe("Project ID"),
+        id: import_zod14.z.string().uuid().describe("Revision ID")
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["catalog-revisions"][":id"].$get({ param: { id: params.id } })
       )
     ),
     snapshots: withSchema(
-      import_zod13.z.object({
-        orgId: import_zod13.z.string().describe("Organization slug"),
-        projectId: import_zod13.z.string().describe("Project ID"),
-        id: import_zod13.z.string().uuid().describe("Revision ID to read snapshots for")
+      import_zod14.z.object({
+        orgId: import_zod14.z.string().describe("Organization slug"),
+        projectId: import_zod14.z.string().describe("Project ID"),
+        id: import_zod14.z.string().uuid().describe("Revision ID to read snapshots for")
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["catalog-revisions"][":id"]["snapshots"].$get({
@@ -1420,12 +1492,12 @@ function createCatalogRevisionsClient(proj) {
      * `force: true`, mirroring POST /apply.
      */
     rollback: withSchema(
-      import_zod13.z.object({
-        orgId: import_zod13.z.string().describe("Organization slug"),
-        projectId: import_zod13.z.string().describe("Project ID"),
-        id: import_zod13.z.string().uuid().describe("Revision ID to roll back to"),
-        hunkId: import_zod13.z.string().uuid().optional().describe("Single-hunk filter"),
-        force: import_zod13.z.boolean().optional().describe("Required if the inverse diff is destructive")
+      import_zod14.z.object({
+        orgId: import_zod14.z.string().describe("Organization slug"),
+        projectId: import_zod14.z.string().describe("Project ID"),
+        id: import_zod14.z.string().uuid().describe("Revision ID to roll back to"),
+        hunkId: import_zod14.z.string().uuid().optional().describe("Single-hunk filter"),
+        force: import_zod14.z.boolean().optional().describe("Required if the inverse diff is destructive")
       }),
       (params) => {
         const { orgId, projectId, id, hunkId, force } = params;
@@ -1442,21 +1514,21 @@ function createCatalogRevisionsClient(proj) {
 }
 
 // src/audit-events.ts
-var import_zod14 = require("zod");
+var import_zod15 = require("zod");
 function createAuditEventsClient(proj) {
   return {
     list: withSchema(
-      import_zod14.z.object({
-        orgId: import_zod14.z.string().describe("Organization slug"),
-        projectId: import_zod14.z.string().describe("Project name"),
-        envName: import_zod14.z.string().optional().describe("Filter to a single env"),
-        actorType: import_zod14.z.enum(["user", "token"]).optional().describe("Filter by actor type"),
-        actorId: import_zod14.z.string().optional().describe("Filter by actor (user.id or apikey.id)"),
-        action: import_zod14.z.string().optional().describe('Comma-separated actions (e.g. "create,delete")'),
-        resourceKind: import_zod14.z.string().optional().describe("Filter to one resource kind (Entity | Token | Member | \u2026)"),
-        since: import_zod14.z.string().datetime().optional().describe("ISO timestamp; only events strictly after this are returned"),
-        before: import_zod14.z.string().datetime().optional().describe("ISO timestamp; only events strictly before this are returned (keyset upper-bound)"),
-        limit: import_zod14.z.coerce.number().int().min(1).max(500).optional().describe("Max rows (1-500)")
+      import_zod15.z.object({
+        orgId: import_zod15.z.string().describe("Organization slug"),
+        projectId: import_zod15.z.string().describe("Project name"),
+        envName: import_zod15.z.string().optional().describe("Filter to a single env"),
+        actorType: import_zod15.z.enum(["user", "token"]).optional().describe("Filter by actor type"),
+        actorId: import_zod15.z.string().optional().describe("Filter by actor (user.id or apikey.id)"),
+        action: import_zod15.z.string().optional().describe('Comma-separated actions (e.g. "create,delete")'),
+        resourceKind: import_zod15.z.string().optional().describe("Filter to one resource kind (Entity | Token | Member | \u2026)"),
+        since: import_zod15.z.string().datetime().optional().describe("ISO timestamp; only events strictly after this are returned"),
+        before: import_zod15.z.string().datetime().optional().describe("ISO timestamp; only events strictly before this are returned (keyset upper-bound)"),
+        limit: import_zod15.z.coerce.number().int().min(1).max(500).optional().describe("Max rows (1-500)")
       }).describe("List audit events for a project \u2014 auditor-friendly read-only feed"),
       (params) => {
         const { orgId, projectId, ...query } = params;
@@ -1467,21 +1539,21 @@ function createAuditEventsClient(proj) {
 }
 
 // src/environments.ts
-var import_zod15 = require("zod");
+var import_zod16 = require("zod");
 function createEnvironmentsClient(proj) {
   return {
     list: withSchema(
-      import_zod15.z.object({
-        orgId: import_zod15.z.string().describe("Organization slug"),
-        projectId: import_zod15.z.string().describe("Project name")
+      import_zod16.z.object({
+        orgId: import_zod16.z.string().describe("Organization slug"),
+        projectId: import_zod16.z.string().describe("Project name")
       }),
       (params) => call(proj(params.orgId, params.projectId)["environments"].$get())
     ),
     create: withSchema(
-      import_zod15.z.object({
-        orgId: import_zod15.z.string().describe("Organization slug"),
-        projectId: import_zod15.z.string().describe("Project name"),
-        name: import_zod15.z.string().min(1).max(31).regex(/^[a-z0-9][a-z0-9-]{0,30}$/).describe("Environment name (lowercase letters, digits, hyphens; max 31 chars)")
+      import_zod16.z.object({
+        orgId: import_zod16.z.string().describe("Organization slug"),
+        projectId: import_zod16.z.string().describe("Project name"),
+        name: import_zod16.z.string().min(1).max(31).regex(/^[a-z0-9][a-z0-9-]{0,30}$/).describe("Environment name (lowercase letters, digits, hyphens; max 31 chars)")
       }),
       (params) => {
         const { orgId, projectId, name } = params;
@@ -1489,10 +1561,10 @@ function createEnvironmentsClient(proj) {
       }
     ),
     delete: withSchema(
-      import_zod15.z.object({
-        orgId: import_zod15.z.string().describe("Organization slug"),
-        projectId: import_zod15.z.string().describe("Project name"),
-        name: import_zod15.z.string().describe("Environment name")
+      import_zod16.z.object({
+        orgId: import_zod16.z.string().describe("Organization slug"),
+        projectId: import_zod16.z.string().describe("Project name"),
+        name: import_zod16.z.string().describe("Environment name")
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["environments"][":envName"].$delete({
@@ -1504,20 +1576,20 @@ function createEnvironmentsClient(proj) {
 }
 
 // src/drift-events.ts
-var import_zod16 = require("zod");
+var import_zod17 = require("zod");
 function createDriftEventsClient(projEnv) {
   return {
     list: withSchema(
-      import_zod16.z.object({
-        orgId: import_zod16.z.string().describe("Organization slug"),
-        projectId: import_zod16.z.string().describe("Project name"),
-        envName: import_zod16.z.string().describe("Environment name"),
-        status: import_zod16.z.enum(["open", "accepted", "reapplied", "snoozed"]).optional(),
-        kind: import_zod16.z.string().optional().describe("Filter by entity type name"),
-        entityName: import_zod16.z.string().optional().describe("Filter by entity name"),
-        since: import_zod16.z.string().optional().describe("ISO timestamp lower bound on detectedAt"),
-        before: import_zod16.z.string().datetime().optional().describe("ISO timestamp upper bound on detectedAt (keyset cursor)"),
-        limit: import_zod16.z.coerce.number().int().min(1).max(500).optional()
+      import_zod17.z.object({
+        orgId: import_zod17.z.string().describe("Organization slug"),
+        projectId: import_zod17.z.string().describe("Project name"),
+        envName: import_zod17.z.string().describe("Environment name"),
+        status: import_zod17.z.enum(["open", "accepted", "reapplied", "snoozed"]).optional(),
+        kind: import_zod17.z.string().optional().describe("Filter by entity type name"),
+        entityName: import_zod17.z.string().optional().describe("Filter by entity name"),
+        since: import_zod17.z.string().optional().describe("ISO timestamp lower bound on detectedAt"),
+        before: import_zod17.z.string().datetime().optional().describe("ISO timestamp upper bound on detectedAt (keyset cursor)"),
+        limit: import_zod17.z.coerce.number().int().min(1).max(500).optional()
       }),
       (params) => {
         const { orgId, projectId, envName, ...query } = params;
@@ -1527,19 +1599,19 @@ function createDriftEventsClient(projEnv) {
       }
     ),
     count: withSchema(
-      import_zod16.z.object({
-        orgId: import_zod16.z.string().describe("Organization slug"),
-        projectId: import_zod16.z.string().describe("Project name"),
-        envName: import_zod16.z.string().describe("Environment name")
+      import_zod17.z.object({
+        orgId: import_zod17.z.string().describe("Organization slug"),
+        projectId: import_zod17.z.string().describe("Project name"),
+        envName: import_zod17.z.string().describe("Environment name")
       }),
       (params) => call(projEnv(params.orgId, params.projectId, params.envName)["drift-events"].count.$get())
     ),
     get: withSchema(
-      import_zod16.z.object({
-        orgId: import_zod16.z.string().describe("Organization slug"),
-        projectId: import_zod16.z.string().describe("Project name"),
-        envName: import_zod16.z.string().describe("Environment name"),
-        id: import_zod16.z.string().uuid()
+      import_zod17.z.object({
+        orgId: import_zod17.z.string().describe("Organization slug"),
+        projectId: import_zod17.z.string().describe("Project name"),
+        envName: import_zod17.z.string().describe("Environment name"),
+        id: import_zod17.z.string().uuid()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["drift-events"][":id"].$get({
@@ -1548,11 +1620,11 @@ function createDriftEventsClient(projEnv) {
       )
     ),
     accept: withSchema(
-      import_zod16.z.object({
-        orgId: import_zod16.z.string().describe("Organization slug"),
-        projectId: import_zod16.z.string().describe("Project name"),
-        envName: import_zod16.z.string().describe("Environment name"),
-        id: import_zod16.z.string().uuid()
+      import_zod17.z.object({
+        orgId: import_zod17.z.string().describe("Organization slug"),
+        projectId: import_zod17.z.string().describe("Project name"),
+        envName: import_zod17.z.string().describe("Environment name"),
+        id: import_zod17.z.string().uuid()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["drift-events"][":id"].accept.$post({
@@ -1561,11 +1633,11 @@ function createDriftEventsClient(projEnv) {
       )
     ),
     reapply: withSchema(
-      import_zod16.z.object({
-        orgId: import_zod16.z.string().describe("Organization slug"),
-        projectId: import_zod16.z.string().describe("Project name"),
-        envName: import_zod16.z.string().describe("Environment name"),
-        id: import_zod16.z.string().uuid()
+      import_zod17.z.object({
+        orgId: import_zod17.z.string().describe("Organization slug"),
+        projectId: import_zod17.z.string().describe("Project name"),
+        envName: import_zod17.z.string().describe("Environment name"),
+        id: import_zod17.z.string().uuid()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["drift-events"][":id"].reapply.$post({
@@ -1574,12 +1646,12 @@ function createDriftEventsClient(projEnv) {
       )
     ),
     snooze: withSchema(
-      import_zod16.z.object({
-        orgId: import_zod16.z.string().describe("Organization slug"),
-        projectId: import_zod16.z.string().describe("Project name"),
-        envName: import_zod16.z.string().describe("Environment name"),
-        id: import_zod16.z.string().uuid(),
-        untilSeconds: import_zod16.z.number().int().positive().optional()
+      import_zod17.z.object({
+        orgId: import_zod17.z.string().describe("Organization slug"),
+        projectId: import_zod17.z.string().describe("Project name"),
+        envName: import_zod17.z.string().describe("Environment name"),
+        id: import_zod17.z.string().uuid(),
+        untilSeconds: import_zod17.z.number().int().positive().optional()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["drift-events"][":id"].snooze.$post({
@@ -1592,21 +1664,21 @@ function createDriftEventsClient(projEnv) {
 }
 
 // src/conformance-findings.ts
-var import_zod17 = require("zod");
-var import_types8 = require("@terrantula/types");
+var import_zod18 = require("zod");
+var import_types9 = require("@terrantula/types");
 function createConformanceFindingsClient(projEnv) {
   return {
     list: withSchema(
-      import_zod17.z.object({
-        orgId: import_zod17.z.string().describe("Organization slug"),
-        projectId: import_zod17.z.string().describe("Project name"),
-        envName: import_zod17.z.string().describe("Environment name"),
-        status: import_types8.FindingStatusSchema.optional(),
-        severity: import_types8.FindingSeveritySchema.optional(),
-        kind: import_zod17.z.string().optional().describe("Filter by entity type name"),
-        findingKind: import_zod17.z.string().optional().describe("Filter by finding kind (e.g. MISSING_REQUIRED_PROPERTY)"),
-        entityName: import_zod17.z.string().optional().describe("Filter by entity name"),
-        limit: import_zod17.z.coerce.number().int().min(1).max(500).optional()
+      import_zod18.z.object({
+        orgId: import_zod18.z.string().describe("Organization slug"),
+        projectId: import_zod18.z.string().describe("Project name"),
+        envName: import_zod18.z.string().describe("Environment name"),
+        status: import_types9.FindingStatusSchema.optional(),
+        severity: import_types9.FindingSeveritySchema.optional(),
+        kind: import_zod18.z.string().optional().describe("Filter by entity type name"),
+        findingKind: import_zod18.z.string().optional().describe("Filter by finding kind (e.g. MISSING_REQUIRED_PROPERTY)"),
+        entityName: import_zod18.z.string().optional().describe("Filter by entity name"),
+        limit: import_zod18.z.coerce.number().int().min(1).max(500).optional()
       }),
       (params) => {
         const { orgId, projectId, envName, ...query } = params;
@@ -1616,19 +1688,19 @@ function createConformanceFindingsClient(projEnv) {
       }
     ),
     count: withSchema(
-      import_zod17.z.object({
-        orgId: import_zod17.z.string().describe("Organization slug"),
-        projectId: import_zod17.z.string().describe("Project name"),
-        envName: import_zod17.z.string().describe("Environment name")
+      import_zod18.z.object({
+        orgId: import_zod18.z.string().describe("Organization slug"),
+        projectId: import_zod18.z.string().describe("Project name"),
+        envName: import_zod18.z.string().describe("Environment name")
       }),
       (params) => call(projEnv(params.orgId, params.projectId, params.envName)["conformance-findings"].count.$get())
     ),
     get: withSchema(
-      import_zod17.z.object({
-        orgId: import_zod17.z.string().describe("Organization slug"),
-        projectId: import_zod17.z.string().describe("Project name"),
-        envName: import_zod17.z.string().describe("Environment name"),
-        id: import_zod17.z.string().uuid()
+      import_zod18.z.object({
+        orgId: import_zod18.z.string().describe("Organization slug"),
+        projectId: import_zod18.z.string().describe("Project name"),
+        envName: import_zod18.z.string().describe("Environment name"),
+        id: import_zod18.z.string().uuid()
       }),
       (params) => call(
         projEnv(params.orgId, params.projectId, params.envName)["conformance-findings"][":id"].$get({
@@ -1640,15 +1712,15 @@ function createConformanceFindingsClient(projEnv) {
 }
 
 // src/stats.ts
-var import_zod18 = require("zod");
-var WindowSchema = import_zod18.z.enum(["1h", "24h", "7d"]).optional().describe("Time window \u2014 default 24h");
-var BucketSchema = import_zod18.z.enum(["1m", "5m", "1h", "1d"]).optional().describe("Bucket granularity \u2014 default 1h");
+var import_zod19 = require("zod");
+var WindowSchema = import_zod19.z.enum(["1h", "24h", "7d"]).optional().describe("Time window \u2014 default 24h");
+var BucketSchema = import_zod19.z.enum(["1m", "5m", "1h", "1d"]).optional().describe("Bucket granularity \u2014 default 1h");
 function createStatsClient(proj) {
   return {
     entitiesByState: withSchema(
-      import_zod18.z.object({
-        orgId: import_zod18.z.string().describe("Organization slug"),
-        projectId: import_zod18.z.string().describe("Project name"),
+      import_zod19.z.object({
+        orgId: import_zod19.z.string().describe("Organization slug"),
+        projectId: import_zod19.z.string().describe("Project name"),
         window: WindowSchema,
         bucket: BucketSchema
       }),
@@ -1658,9 +1730,9 @@ function createStatsClient(proj) {
       }
     ),
     runsByType: withSchema(
-      import_zod18.z.object({
-        orgId: import_zod18.z.string().describe("Organization slug"),
-        projectId: import_zod18.z.string().describe("Project name"),
+      import_zod19.z.object({
+        orgId: import_zod19.z.string().describe("Organization slug"),
+        projectId: import_zod19.z.string().describe("Project name"),
         window: WindowSchema
       }),
       (params) => {
@@ -1669,9 +1741,9 @@ function createStatsClient(proj) {
       }
     ),
     failingKinds: withSchema(
-      import_zod18.z.object({
-        orgId: import_zod18.z.string().describe("Organization slug"),
-        projectId: import_zod18.z.string().describe("Project name"),
+      import_zod19.z.object({
+        orgId: import_zod19.z.string().describe("Organization slug"),
+        projectId: import_zod19.z.string().describe("Project name"),
         window: WindowSchema
       }),
       (params) => {
@@ -1680,10 +1752,10 @@ function createStatsClient(proj) {
       }
     ),
     driftDensity: withSchema(
-      import_zod18.z.object({
-        orgId: import_zod18.z.string().describe("Organization slug"),
-        projectId: import_zod18.z.string().describe("Project name"),
-        dim: import_zod18.z.string().optional().describe('Dimensions to bucket \u2014 e.g. "kind,cell"')
+      import_zod19.z.object({
+        orgId: import_zod19.z.string().describe("Organization slug"),
+        projectId: import_zod19.z.string().describe("Project name"),
+        dim: import_zod19.z.string().optional().describe('Dimensions to bucket \u2014 e.g. "kind,cell"')
       }),
       (params) => {
         const { orgId, projectId, ...query } = params;
@@ -1694,32 +1766,32 @@ function createStatsClient(proj) {
 }
 
 // src/graph-views.ts
-var import_zod19 = require("zod");
-var PinnedPositionsSchema = import_zod19.z.record(import_zod19.z.string(), import_zod19.z.object({ x: import_zod19.z.number(), y: import_zod19.z.number() })).nullable();
-var ViewSpecSchema = import_zod19.z.unknown().nullable();
+var import_zod20 = require("zod");
+var PinnedPositionsSchema = import_zod20.z.record(import_zod20.z.string(), import_zod20.z.object({ x: import_zod20.z.number(), y: import_zod20.z.number() })).nullable();
+var ViewSpecSchema = import_zod20.z.unknown().nullable();
 function createGraphViewsClient(proj) {
   return {
     list: withSchema(
-      import_zod19.z.object({
-        orgId: import_zod19.z.string().describe("Organization slug"),
-        projectId: import_zod19.z.string().describe("Project ID")
+      import_zod20.z.object({
+        orgId: import_zod20.z.string().describe("Organization slug"),
+        projectId: import_zod20.z.string().describe("Project ID")
       }),
       (params) => call(proj(params.orgId, params.projectId)["graph-views"].$get())
     ),
     get: withSchema(
-      import_zod19.z.object({
-        orgId: import_zod19.z.string().describe("Organization slug"),
-        projectId: import_zod19.z.string().describe("Project ID"),
-        id: import_zod19.z.string().describe("View id")
+      import_zod20.z.object({
+        orgId: import_zod20.z.string().describe("Organization slug"),
+        projectId: import_zod20.z.string().describe("Project ID"),
+        id: import_zod20.z.string().describe("View id")
       }),
       (params) => call(proj(params.orgId, params.projectId)["graph-views"][":id"].$get({ param: { id: params.id } }))
     ),
     create: withSchema(
-      import_zod19.z.object({
-        orgId: import_zod19.z.string().describe("Organization slug"),
-        projectId: import_zod19.z.string().describe("Project ID"),
-        name: import_zod19.z.string().describe("View name"),
-        scope: import_zod19.z.enum(["user", "project"]).describe("Personal or project scope"),
+      import_zod20.z.object({
+        orgId: import_zod20.z.string().describe("Organization slug"),
+        projectId: import_zod20.z.string().describe("Project ID"),
+        name: import_zod20.z.string().describe("View name"),
+        scope: import_zod20.z.enum(["user", "project"]).describe("Personal or project scope"),
         pinnedPositions: PinnedPositionsSchema.optional().describe("Pinned node positions"),
         viewSpec: ViewSpecSchema.optional().describe("ViewSpec JSON (opaque passthrough)")
       }),
@@ -1729,11 +1801,11 @@ function createGraphViewsClient(proj) {
       }
     ),
     update: withSchema(
-      import_zod19.z.object({
-        orgId: import_zod19.z.string().describe("Organization slug"),
-        projectId: import_zod19.z.string().describe("Project ID"),
-        id: import_zod19.z.string().describe("View id"),
-        name: import_zod19.z.string().optional().describe("New name"),
+      import_zod20.z.object({
+        orgId: import_zod20.z.string().describe("Organization slug"),
+        projectId: import_zod20.z.string().describe("Project ID"),
+        id: import_zod20.z.string().describe("View id"),
+        name: import_zod20.z.string().optional().describe("New name"),
         pinnedPositions: PinnedPositionsSchema.optional().describe("Replacement pinned positions"),
         viewSpec: ViewSpecSchema.optional().describe("Replacement ViewSpec JSON (opaque passthrough)")
       }),
@@ -1745,18 +1817,18 @@ function createGraphViewsClient(proj) {
       }
     ),
     delete: withSchema(
-      import_zod19.z.object({
-        orgId: import_zod19.z.string().describe("Organization slug"),
-        projectId: import_zod19.z.string().describe("Project ID"),
-        id: import_zod19.z.string().describe("View id")
+      import_zod20.z.object({
+        orgId: import_zod20.z.string().describe("Organization slug"),
+        projectId: import_zod20.z.string().describe("Project ID"),
+        id: import_zod20.z.string().describe("View id")
       }),
       (params) => call(proj(params.orgId, params.projectId)["graph-views"][":id"].$delete({ param: { id: params.id } }))
     ),
     setDefault: withSchema(
-      import_zod19.z.object({
-        orgId: import_zod19.z.string().describe("Organization slug"),
-        projectId: import_zod19.z.string().describe("Project ID"),
-        id: import_zod19.z.string().describe("View id")
+      import_zod20.z.object({
+        orgId: import_zod20.z.string().describe("Organization slug"),
+        projectId: import_zod20.z.string().describe("Project ID"),
+        id: import_zod20.z.string().describe("View id")
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["graph-views"][":id"]["default"].$patch({
@@ -1768,15 +1840,15 @@ function createGraphViewsClient(proj) {
 }
 
 // src/notifications.ts
-var import_zod20 = require("zod");
+var import_zod21 = require("zod");
 var import_client2 = require("hono/client");
 function createNotificationsClient(baseUrl, hcOpts) {
   const c = (0, import_client2.hc)(`${baseUrl}/notifications`, hcOpts);
   return {
     list: withSchema(
-      import_zod20.z.object({
-        limit: import_zod20.z.coerce.number().int().min(1).max(100).optional(),
-        unread: import_zod20.z.boolean().optional()
+      import_zod21.z.object({
+        limit: import_zod21.z.coerce.number().int().min(1).max(100).optional(),
+        unread: import_zod21.z.boolean().optional()
       }),
       (params) => {
         const query = {};
@@ -1786,19 +1858,19 @@ function createNotificationsClient(baseUrl, hcOpts) {
       }
     ),
     read: withSchema(
-      import_zod20.z.object({ id: import_zod20.z.string().uuid() }),
+      import_zod21.z.object({ id: import_zod21.z.string().uuid() }),
       (params) => call(c[":id"].read.$post({ param: { id: params.id } }))
     ),
     readAll: withSchema(
-      import_zod20.z.object({}),
+      import_zod21.z.object({}),
       () => call(c["read-all"].$post())
     )
   };
 }
 
 // src/audit-export.ts
-var import_zod21 = require("zod");
-async function rawRequest(baseUrl, hcOpts, path, init = {}) {
+var import_zod22 = require("zod");
+async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
   const fetchImpl = hcOpts?.fetch ?? fetch;
   const rawHeaders = hcOpts?.headers;
   const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
@@ -1810,7 +1882,7 @@ async function rawRequest(baseUrl, hcOpts, path, init = {}) {
     }
   });
 }
-async function callRaw(res) {
+async function callRaw2(res) {
   if (!res.ok) {
     let message = fallbackMessage(res.status);
     try {
@@ -1826,24 +1898,24 @@ function createAuditExportClient(baseUrl, hcOpts) {
   return {
     /** GET /orgs/:orgId/audit-export/config — returns current config or throws 404. */
     getConfig: withSchema(
-      import_zod21.z.object({ orgId: import_zod21.z.string().describe("Organization ID") }),
-      async (params) => callRaw(
-        await rawRequest(baseUrl, hcOpts, `/orgs/${params.orgId}/audit-export/config`)
+      import_zod22.z.object({ orgId: import_zod22.z.string().describe("Organization ID") }),
+      async (params) => callRaw2(
+        await rawRequest2(baseUrl, hcOpts, `/orgs/${params.orgId}/audit-export/config`)
       )
     ),
     /** POST /orgs/:orgId/audit-export/config — upsert the S3 export config. */
     setConfig: withSchema(
-      import_zod21.z.object({
-        orgId: import_zod21.z.string().describe("Organization ID"),
-        bucket: import_zod21.z.string().describe("S3 bucket name"),
-        region: import_zod21.z.string().describe("AWS region"),
-        roleArn: import_zod21.z.string().describe("IAM role ARN for assume-role"),
-        enabled: import_zod21.z.boolean().optional().describe("Enable/disable export")
+      import_zod22.z.object({
+        orgId: import_zod22.z.string().describe("Organization ID"),
+        bucket: import_zod22.z.string().describe("S3 bucket name"),
+        region: import_zod22.z.string().describe("AWS region"),
+        roleArn: import_zod22.z.string().describe("IAM role ARN for assume-role"),
+        enabled: import_zod22.z.boolean().optional().describe("Enable/disable export")
       }),
       async (params) => {
         const { orgId, ...body } = params;
-        return callRaw(
-          await rawRequest(baseUrl, hcOpts, `/orgs/${orgId}/audit-export/config`, {
+        return callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/orgs/${orgId}/audit-export/config`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify(body)
@@ -1853,16 +1925,16 @@ function createAuditExportClient(baseUrl, hcOpts) {
     ),
     /** POST /orgs/:orgId/audit-export/test-connection — dry-run write+delete. */
     testConnection: withSchema(
-      import_zod21.z.object({
-        orgId: import_zod21.z.string().describe("Organization ID"),
-        bucket: import_zod21.z.string().describe("S3 bucket name"),
-        region: import_zod21.z.string().describe("AWS region"),
-        roleArn: import_zod21.z.string().describe("IAM role ARN for assume-role")
+      import_zod22.z.object({
+        orgId: import_zod22.z.string().describe("Organization ID"),
+        bucket: import_zod22.z.string().describe("S3 bucket name"),
+        region: import_zod22.z.string().describe("AWS region"),
+        roleArn: import_zod22.z.string().describe("IAM role ARN for assume-role")
       }),
       async (params) => {
         const { orgId, ...body } = params;
-        return callRaw(
-          await rawRequest(baseUrl, hcOpts, `/orgs/${orgId}/audit-export/test-connection`, {
+        return callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/orgs/${orgId}/audit-export/test-connection`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify(body)
@@ -1872,14 +1944,14 @@ function createAuditExportClient(baseUrl, hcOpts) {
     ),
     /** GET /orgs/:orgId/audit-export/runs — recent batch run history. */
     listRuns: withSchema(
-      import_zod21.z.object({
-        orgId: import_zod21.z.string().describe("Organization ID"),
-        limit: import_zod21.z.number().optional().describe("Max results (default 20, max 100)")
+      import_zod22.z.object({
+        orgId: import_zod22.z.string().describe("Organization ID"),
+        limit: import_zod22.z.number().optional().describe("Max results (default 20, max 100)")
       }),
       async (params) => {
         const qs = params.limit ? `?limit=${params.limit}` : "";
-        return callRaw(
-          await rawRequest(
+        return callRaw2(
+          await rawRequest2(
             baseUrl,
             hcOpts,
             `/orgs/${params.orgId}/audit-export/runs${qs}`
@@ -1918,33 +1990,33 @@ function createUserPreferencesClient(baseUrl, hcOpts) {
 }
 
 // src/import-sources.ts
-var import_zod22 = require("zod");
-var SourceKindEnum = import_zod22.z.enum(["tf-state", "atmos-manifests"]);
-var PolicyEnum = import_zod22.z.enum(["auto-update", "human-approval"]);
+var import_zod23 = require("zod");
+var SourceKindEnum = import_zod23.z.enum(["tf-state", "atmos-manifests"]);
+var PolicyEnum = import_zod23.z.enum(["auto-update", "human-approval"]);
 function createImportSourcesClient(proj) {
   return {
     list: withSchema(
-      import_zod22.z.object({
-        orgId: import_zod22.z.string().describe("Organization slug"),
-        projectId: import_zod22.z.string().describe("Project ID")
+      import_zod23.z.object({
+        orgId: import_zod23.z.string().describe("Organization slug"),
+        projectId: import_zod23.z.string().describe("Project ID")
       }),
       (params) => call(proj(params.orgId, params.projectId)["import-sources"].$get())
     ),
     get: withSchema(
-      import_zod22.z.object({
-        orgId: import_zod22.z.string().describe("Organization slug"),
-        projectId: import_zod22.z.string().describe("Project ID"),
-        id: import_zod22.z.string().uuid().describe("ImportSource ID")
+      import_zod23.z.object({
+        orgId: import_zod23.z.string().describe("Organization slug"),
+        projectId: import_zod23.z.string().describe("Project ID"),
+        id: import_zod23.z.string().uuid().describe("ImportSource ID")
       }),
       (params) => call(proj(params.orgId, params.projectId)["import-sources"][":id"].$get({ param: { id: params.id } }))
     ),
     registerOrUpdate: withSchema(
-      import_zod22.z.object({
-        orgId: import_zod22.z.string().describe("Organization slug"),
-        projectId: import_zod22.z.string().describe("Project ID"),
-        envName: import_zod22.z.string().describe("Env name the source belongs to"),
+      import_zod23.z.object({
+        orgId: import_zod23.z.string().describe("Organization slug"),
+        projectId: import_zod23.z.string().describe("Project ID"),
+        envName: import_zod23.z.string().describe("Env name the source belongs to"),
         sourceKind: SourceKindEnum,
-        sourceUri: import_zod22.z.string().describe("Stable URI identifying the source"),
+        sourceUri: import_zod23.z.string().describe("Stable URI identifying the source"),
         reconciliationPolicy: PolicyEnum.optional()
       }),
       (params) => {
@@ -1953,13 +2025,13 @@ function createImportSourcesClient(proj) {
       }
     ),
     rescan: withSchema(
-      import_zod22.z.object({
-        orgId: import_zod22.z.string().describe("Organization slug"),
-        projectId: import_zod22.z.string().describe("Project ID"),
-        id: import_zod22.z.string().uuid(),
-        envName: import_zod22.z.string(),
-        items: import_zod22.z.array(import_zod22.z.unknown()),
-        deletions: import_zod22.z.array(import_zod22.z.object({ kind: import_zod22.z.string(), name: import_zod22.z.string() })).optional()
+      import_zod23.z.object({
+        orgId: import_zod23.z.string().describe("Organization slug"),
+        projectId: import_zod23.z.string().describe("Project ID"),
+        id: import_zod23.z.string().uuid(),
+        envName: import_zod23.z.string(),
+        items: import_zod23.z.array(import_zod23.z.unknown()),
+        deletions: import_zod23.z.array(import_zod23.z.object({ kind: import_zod23.z.string(), name: import_zod23.z.string() })).optional()
       }),
       (params) => {
         const { orgId, projectId, id, ...body } = params;
@@ -1975,19 +2047,19 @@ function createImportSourcesClient(proj) {
       }
     ),
     drift: withSchema(
-      import_zod22.z.object({
-        orgId: import_zod22.z.string().describe("Organization slug"),
-        projectId: import_zod22.z.string().describe("Project ID"),
-        id: import_zod22.z.string().uuid()
+      import_zod23.z.object({
+        orgId: import_zod23.z.string().describe("Organization slug"),
+        projectId: import_zod23.z.string().describe("Project ID"),
+        id: import_zod23.z.string().uuid()
       }),
       (params) => call(proj(params.orgId, params.projectId)["import-sources"][":id"].drift.$get({ param: { id: params.id } }))
     ),
     approveProposal: withSchema(
-      import_zod22.z.object({
-        orgId: import_zod22.z.string().describe("Organization slug"),
-        projectId: import_zod22.z.string().describe("Project ID"),
-        id: import_zod22.z.string().uuid(),
-        proposalId: import_zod22.z.string().uuid()
+      import_zod23.z.object({
+        orgId: import_zod23.z.string().describe("Organization slug"),
+        projectId: import_zod23.z.string().describe("Project ID"),
+        id: import_zod23.z.string().uuid(),
+        proposalId: import_zod23.z.string().uuid()
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["import-sources"][":id"]["drift-proposals"][":proposalId"].approve.$post({
@@ -1996,11 +2068,11 @@ function createImportSourcesClient(proj) {
       )
     ),
     rejectProposal: withSchema(
-      import_zod22.z.object({
-        orgId: import_zod22.z.string().describe("Organization slug"),
-        projectId: import_zod22.z.string().describe("Project ID"),
-        id: import_zod22.z.string().uuid(),
-        proposalId: import_zod22.z.string().uuid()
+      import_zod23.z.object({
+        orgId: import_zod23.z.string().describe("Organization slug"),
+        projectId: import_zod23.z.string().describe("Project ID"),
+        id: import_zod23.z.string().uuid(),
+        proposalId: import_zod23.z.string().uuid()
       }),
       (params) => call(
         proj(params.orgId, params.projectId)["import-sources"][":id"]["drift-proposals"][":proposalId"].reject.$post({
@@ -2012,8 +2084,8 @@ function createImportSourcesClient(proj) {
 }
 
 // src/admin.ts
-var import_zod23 = require("zod");
-async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
+var import_zod24 = require("zod");
+async function rawRequest3(baseUrl, hcOpts, path, init = {}) {
   const fetchImpl = hcOpts?.fetch ?? fetch;
   const rawHeaders = hcOpts?.headers;
   const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
@@ -2025,7 +2097,7 @@ async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
     }
   });
 }
-async function callRaw2(res) {
+async function callRaw3(res) {
   if (!res.ok) {
     let message = fallbackMessage(res.status);
     try {
@@ -2045,14 +2117,14 @@ function createAdminClient(baseUrl, hcOpts) {
        * List super-admin audit events with optional filters.
        */
       list: withSchema(
-        import_zod23.z.object({
-          actor: import_zod23.z.string().optional().describe("Filter by actor user ID"),
-          action: import_zod23.z.string().optional().describe("Filter by action name"),
-          resourceKind: import_zod23.z.string().optional().describe("Filter by resource kind"),
-          since: import_zod23.z.string().optional().describe("ISO 8601 datetime lower bound"),
-          until: import_zod23.z.string().optional().describe("ISO 8601 datetime upper bound"),
-          limit: import_zod23.z.coerce.number().int().min(1).max(200).optional().describe("Max results (1-200)"),
-          offset: import_zod23.z.coerce.number().int().min(0).optional().describe("Pagination offset")
+        import_zod24.z.object({
+          actor: import_zod24.z.string().optional().describe("Filter by actor user ID"),
+          action: import_zod24.z.string().optional().describe("Filter by action name"),
+          resourceKind: import_zod24.z.string().optional().describe("Filter by resource kind"),
+          since: import_zod24.z.string().optional().describe("ISO 8601 datetime lower bound"),
+          until: import_zod24.z.string().optional().describe("ISO 8601 datetime upper bound"),
+          limit: import_zod24.z.coerce.number().int().min(1).max(200).optional().describe("Max results (1-200)"),
+          offset: import_zod24.z.coerce.number().int().min(0).optional().describe("Pagination offset")
         }),
         async (params) => {
           const qs = new URLSearchParams();
@@ -2064,8 +2136,8 @@ function createAdminClient(baseUrl, hcOpts) {
           if (params.limit !== void 0) qs.set("limit", String(params.limit));
           if (params.offset !== void 0) qs.set("offset", String(params.offset));
           const search = qs.toString();
-          return callRaw2(
-            await rawRequest2(baseUrl, hcOpts, `/admin/audit${search ? `?${search}` : ""}`)
+          return callRaw3(
+            await rawRequest3(baseUrl, hcOpts, `/admin/audit${search ? `?${search}` : ""}`)
           );
         }
       )
@@ -2076,9 +2148,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * List all organizations across tenants with member + project counts.
        */
       list: withSchema(
-        import_zod23.z.object({}),
-        async () => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, "/admin/orgs")
+        import_zod24.z.object({}),
+        async () => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, "/admin/orgs")
         )
       ),
       /**
@@ -2086,9 +2158,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * Detail view: org fields + member list + project list.
        */
       get: withSchema(
-        import_zod23.z.object({ id: import_zod23.z.string().describe("Organization ID") }),
-        async (params) => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}`)
+        import_zod24.z.object({ id: import_zod24.z.string().describe("Organization ID") }),
+        async (params) => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, `/admin/orgs/${params.id}`)
         )
       ),
       /**
@@ -2096,9 +2168,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * Set suspended_at = now(). Idempotent.
        */
       suspend: withSchema(
-        import_zod23.z.object({ id: import_zod23.z.string().describe("Organization ID") }),
-        async (params) => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/suspend`, {
+        import_zod24.z.object({ id: import_zod24.z.string().describe("Organization ID") }),
+        async (params) => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, `/admin/orgs/${params.id}/suspend`, {
             method: "POST"
           })
         )
@@ -2108,9 +2180,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * Clear suspended_at.
        */
       unsuspend: withSchema(
-        import_zod23.z.object({ id: import_zod23.z.string().describe("Organization ID") }),
-        async (params) => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/unsuspend`, {
+        import_zod24.z.object({ id: import_zod24.z.string().describe("Organization ID") }),
+        async (params) => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, `/admin/orgs/${params.id}/unsuspend`, {
             method: "POST"
           })
         )
@@ -2124,9 +2196,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * api tokens, and environments. Idempotent. Super-admin only.
        */
       nuke: withSchema(
-        import_zod23.z.object({ projectId: import_zod23.z.string().describe("Project ID to nuke") }),
-        async (params) => callRaw2(
-          await rawRequest2(
+        import_zod24.z.object({ projectId: import_zod24.z.string().describe("Project ID to nuke") }),
+        async (params) => callRaw3(
+          await rawRequest3(
             baseUrl,
             hcOpts,
             `/admin/projects/${encodeURIComponent(params.projectId)}/nuke`,
@@ -2142,9 +2214,9 @@ function createAdminClient(baseUrl, hcOpts) {
        * all derived from single-table COUNT queries.
        */
       overview: withSchema(
-        import_zod23.z.object({}),
-        async () => callRaw2(
-          await rawRequest2(baseUrl, hcOpts, "/admin/metrics/overview")
+        import_zod24.z.object({}),
+        async () => callRaw3(
+          await rawRequest3(baseUrl, hcOpts, "/admin/metrics/overview")
         )
       )
     },
@@ -2157,9 +2229,9 @@ function createAdminClient(baseUrl, hcOpts) {
          * Requires super-admin.
          */
         list: withSchema(
-          import_zod23.z.object({}),
-          async () => callRaw2(
-            await rawRequest2(
+          import_zod24.z.object({}),
+          async () => callRaw3(
+            await rawRequest3(
               baseUrl,
               hcOpts,
               "/admin/integrations/github-installations"
@@ -2172,15 +2244,15 @@ function createAdminClient(baseUrl, hcOpts) {
 }
 
 // src/resolve-source.ts
-var import_zod24 = require("zod");
+var import_zod25 = require("zod");
 function createResolveSourceFn(proj) {
   return withSchema(
-    import_zod24.z.object({
-      orgId: import_zod24.z.string().describe("Organization slug"),
-      projectId: import_zod24.z.string().describe("Project ID"),
-      kind: import_zod24.z.literal("registry").describe('Source kind \u2014 only "registry" is supported today'),
-      ref: import_zod24.z.string().regex(/^[^/]+\/[^/]+\/[^/]+$/, { message: "ref must be <namespace>/<name>/<provider>" }).describe("Terraform Registry module ref (<namespace>/<name>/<provider>)"),
-      version: import_zod24.z.string().optional().describe("Module version semver \u2014 resolves latest if omitted")
+    import_zod25.z.object({
+      orgId: import_zod25.z.string().describe("Organization slug"),
+      projectId: import_zod25.z.string().describe("Project ID"),
+      kind: import_zod25.z.literal("registry").describe('Source kind \u2014 only "registry" is supported today'),
+      ref: import_zod25.z.string().regex(/^[^/]+\/[^/]+\/[^/]+$/, { message: "ref must be <namespace>/<name>/<provider>" }).describe("Terraform Registry module ref (<namespace>/<name>/<provider>)"),
+      version: import_zod25.z.string().optional().describe("Module version semver \u2014 resolves latest if omitted")
     }),
     (params) => {
       const { orgId, projectId, kind, ref, version } = params;
@@ -2221,6 +2293,7 @@ var createClient = (baseUrl, options = {}) => {
     actionRuns: createActionRunsClient(projEnv),
     secrets: createSecretsClient(projEnv),
     apply: createApplyClient(projEnv),
+    observations: createObservationsClient(baseUrl, hcOpts),
     catalogRevisions,
     auditEvents: createAuditEventsClient(proj),
     driftEvents: createDriftEventsClient(projEnv),