@trycompai/mcp-server 0.3.0 → 0.3.2

package/bin/mcp-server.js

@@ -51377,9 +51377,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1.0",
-    sdkVersion: "0.3.0",
+    sdkVersion: "0.3.2",
     genVersion: "2.928.0",
-    userAgent: "speakeasy-sdk/mcp-typescript 0.3.0 2.928.0 1.0 @trycompai/mcp-server"
+    userAgent: "speakeasy-sdk/mcp-typescript 0.3.2 2.928.0 1.0 @trycompai/mcp-server"
   };
 });
 
@@ -53088,9 +53088,9 @@ Generate a signed download URL for a shared attachment linked to comments, evide
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args2,
     tool: async (client, args3, ctx) => {
@@ -53216,9 +53216,9 @@ List organization audit logs for compliance activity, access changes, evidence u
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args3,
     tool: async (client, args4, ctx) => {
@@ -53580,9 +53580,9 @@ List recent cloud security activity in Comp AI. Run AWS, Azure, and GCP cloud se
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args6,
     tool: async (client, args7, ctx) => {
@@ -53702,9 +53702,9 @@ Resolve the "About this check" description for a finding (AI-cached for AWS; pro
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args7,
     tool: async (client, args8, ctx) => {
@@ -53795,9 +53795,9 @@ List cloud security findings discovered by scans so teams can prioritize remedia
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await cloudSecurityCloudSecurityControllerGetFindingsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -53914,9 +53914,9 @@ List resolution, exception, and regression history for a connection in Comp AI.
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args8,
     tool: async (client, args9, ctx) => {
@@ -54007,9 +54007,9 @@ List supported cloud providers in Comp AI. Run AWS, Azure, and GCP cloud securit
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await cloudSecurityCloudSecurityControllerGetProvidersV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -54133,9 +54133,9 @@ Get a cloud security scan run by ID in Comp AI. Run AWS, Azure, and GCP cloud se
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args9,
     tool: async (client, args10, ctx) => {
@@ -54634,8 +54634,8 @@ var init_cloudSecurityCloudSecurityControllerRevokeExceptionV12 = __esm(() => {
 Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the org's owner.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -55790,8 +55790,8 @@ var init_commentsCommentsControllerDeleteCommentV12 = __esm(() => {
 Delete a comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -55920,9 +55920,9 @@ Get comments for an entity in Comp AI. Create and manage collaboration comments
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args23,
     tool: async (client, args24, ctx) => {
@@ -56056,7 +56056,7 @@ Update a comment in Comp AI. Create and manage collaboration comments on complia
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -56327,8 +56327,8 @@ var init_contextContextControllerDeleteContextV12 = __esm(() => {
 Permanently removes a context entry from the organization. This action cannot be undone.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -56488,9 +56488,9 @@ List organization context entries used as approved source material for evidence,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args27,
     tool: async (client, args28, ctx) => {
@@ -56642,9 +56642,9 @@ Retrieve one organization context entry with source details and approved content
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args28,
     tool: async (client, args29, ctx) => {
@@ -57048,8 +57048,8 @@ var init_controlsControlsControllerDeleteV12 = __esm(() => {
 Delete a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -57177,9 +57177,9 @@ List controls with linked policies, tasks, requirements, and document types for
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args32,
     tool: async (client, args33, ctx) => {
@@ -57304,9 +57304,9 @@ Get control detail with progress in Comp AI. Manage controls, map them to polici
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args33,
     tool: async (client, args34, ctx) => {
@@ -57397,9 +57397,9 @@ Get dropdown options for creating controls in Comp AI. Manage controls, map them
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await controlsControlsControllerGetOptionsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -58120,8 +58120,8 @@ var init_controlsControlsControllerUnlinkDocumentTypeV12 = __esm(() => {
 Remove a required document type from a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -58319,9 +58319,9 @@ Downloads the Comp AI Device Agent installer for macOS as a DMG file. The agent
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await deviceAgentDeviceAgentControllerDownloadMacAgentV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -58411,9 +58411,9 @@ Downloads a ZIP package containing the Comp AI Device Agent installer for Window
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await deviceAgentDeviceAgentControllerDownloadWindowsAgentV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -58742,9 +58742,9 @@ Get device-agent status in Comp AI. Register employee devices, submit device com
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args42,
     tool: async (client, args43, ctx) => {
@@ -58835,9 +58835,9 @@ List organizations for the current device in Comp AI. Register employee devices,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await deviceAgentDeviceAgentControllerGetMyOrganizationsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -58956,9 +58956,9 @@ Download a device-agent update in Comp AI. Register employee devices, submit dev
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args43,
     tool: async (client, args44, ctx) => {
@@ -59078,9 +59078,9 @@ Check a device-agent update's metadata in Comp AI. Register employee devices, su
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args44,
     tool: async (client, args45, ctx) => {
@@ -59304,8 +59304,8 @@ var init_deviceAgentDeviceAgentControllerRevokeAgentAccessV12 = __esm(() => {
 Revoke a device agent session in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -59426,8 +59426,8 @@ var init_devicesDevicesControllerDeleteDeviceV12 = __esm(() => {
 Delete device in Comp AI. Read and manage employee device inventory and Fleet compliance data used for endpoint security controls.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -59520,9 +59520,9 @@ List managed employee devices with endpoint compliance status, ownership, and se
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await devicesDevicesControllerGetAllDevicesV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -59803,9 +59803,9 @@ Returns all devices assigned to a specific member within the authenticated organ
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args48,
     tool: async (client, args49, ctx) => {
@@ -60050,9 +60050,9 @@ Export automation evidence as PDF in Comp AI. Export task evidence, automation e
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args50,
     tool: async (client, args51, ctx) => {
@@ -60177,9 +60177,9 @@ Download a ZIP package containing task evidence and automation results for audit
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args51,
     tool: async (client, args52, ctx) => {
@@ -60299,9 +60299,9 @@ Get task evidence summary in Comp AI. Export task evidence, automation evidence,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args52,
     tool: async (client, args53, ctx) => {
@@ -60427,8 +60427,8 @@ var init_evidenceFormsEvidenceFormsControllerDeleteSubmissionV12 = __esm(() => {
 Delete a submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -60552,9 +60552,9 @@ Export evidence form submissions as CSV for auditor requests, offline review, or
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args54,
     tool: async (client, args55, ctx) => {
@@ -60669,9 +60669,9 @@ Get document relevance settings in Comp AI. Collect, review, upload, and export
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args55,
     tool: async (client, args56, ctx) => {
@@ -60786,9 +60786,9 @@ Get submission statuses for all forms in Comp AI. Collect, review, upload, and e
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args56,
     tool: async (client, args57, ctx) => {
@@ -60919,9 +60919,9 @@ Get form definition and submissions in Comp AI. Collect, review, upload, and exp
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args57,
     tool: async (client, args58, ctx) => {
@@ -61041,9 +61041,9 @@ Get current user submissions in Comp AI. Collect, review, upload, and export str
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args58,
     tool: async (client, args59, ctx) => {
@@ -61158,9 +61158,9 @@ Get pending submission count for current user in Comp AI. Collect, review, uploa
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args59,
     tool: async (client, args60, ctx) => {
@@ -61287,9 +61287,9 @@ Get a single submission in Comp AI. Collect, review, upload, and export structur
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args60,
     tool: async (client, args61, ctx) => {
@@ -61404,9 +61404,9 @@ List structured evidence forms that collect recurring submissions for security,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args61,
     tool: async (client, args62, ctx) => {
@@ -62310,8 +62310,8 @@ var init_findingsFindingsControllerDeleteFindingV12 = __esm(() => {
 Delete a finding (auditor or platform admin only) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -62433,9 +62433,9 @@ Get finding by ID in Comp AI. Create, review, update, and track audit findings,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args69,
     tool: async (client, args70, ctx) => {
@@ -62555,9 +62555,9 @@ Get activity history for a finding in Comp AI. Create, review, update, and track
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args70,
     tool: async (client, args71, ctx) => {
@@ -62681,9 +62681,9 @@ List all findings for the organization in Comp AI. Create, review, update, and t
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args71,
     tool: async (client, args72, ctx) => {
@@ -62857,9 +62857,9 @@ List audit findings with status, severity, owner, history, and remediation conte
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args72,
     tool: async (client, args73, ctx) => {
@@ -63510,8 +63510,8 @@ var init_frameworksFrameworksControllerDeleteV12 = __esm(() => {
 Delete a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -63633,9 +63633,9 @@ List active SOC 2, ISO 27001, HIPAA, GDPR, and custom compliance frameworks with
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args78,
     tool: async (client, args79, ctx) => {
@@ -63726,9 +63726,9 @@ List frameworks available for activation before starting a new compliance progra
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await frameworksFrameworksControllerFindAvailableV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -63847,9 +63847,9 @@ Get a single framework instance with full detail in Comp AI. Manage SOC 2, ISO 2
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args79,
     tool: async (client, args80, ctx) => {
@@ -63974,9 +63974,9 @@ Get a specific requirement with related controls in Comp AI. Manage SOC 2, ISO 2
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args80,
     tool: async (client, args81, ctx) => {
@@ -64067,9 +64067,9 @@ Get update statuses for all framework instances in Comp AI. Manage SOC 2, ISO 27
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await frameworksFrameworksControllerGetAllUpdateStatusesV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -64159,9 +64159,9 @@ Retrieve framework readiness scores so teams can report progress toward audit re
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await frameworksFrameworksControllerGetScoresV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -64280,9 +64280,9 @@ Get sync history for a framework instance in Comp AI. Manage SOC 2, ISO 27001, H
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args81,
     tool: async (client, args82, ctx) => {
@@ -64402,9 +64402,9 @@ Preview changes from updating a framework instance in Comp AI. Manage SOC 2, ISO
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args82,
     tool: async (client, args83, ctx) => {
@@ -64524,9 +64524,9 @@ Get the update status for a framework instance in Comp AI. Manage SOC 2, ISO 270
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args83,
     tool: async (client, args84, ctx) => {
@@ -65318,9 +65318,9 @@ List checks for a connection in Comp AI. Connect vendor systems, configure OAuth
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args89,
     tool: async (client, args90, ctx) => {
@@ -65440,9 +65440,9 @@ List check definitions for a provider in Comp AI. Connect vendor systems, config
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args90,
     tool: async (client, args91, ctx) => {
@@ -65942,8 +65942,8 @@ var init_integrationsConnectionsControllerDeleteConnectionV12 = __esm(() => {
 Delete an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -66187,9 +66187,9 @@ Get an integration connection by ID in Comp AI. Connect vendor systems, configur
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args96,
     tool: async (client, args97, ctx) => {
@@ -66309,9 +66309,9 @@ Get an integration provider by slug in Comp AI. Connect vendor systems, configur
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args97,
     tool: async (client, args98, ctx) => {
@@ -66402,9 +66402,9 @@ List integration connections in Comp AI. Connect vendor systems, configure OAuth
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await integrationsConnectionsControllerListConnectionsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -66521,9 +66521,9 @@ List available integration providers that can connect to the organization for au
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args98,
     tool: async (client, args99, ctx) => {
@@ -67022,7 +67022,7 @@ Set services enabled on a connection in Comp AI. Connect vendor systems, configu
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -67279,9 +67279,9 @@ List services enabled on a connection in Comp AI. Connect vendor systems, config
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args104,
     tool: async (client, args105, ctx) => {
@@ -67399,9 +67399,9 @@ List sync providers available to the org in Comp AI. Connect vendor systems, con
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args105,
     tool: async (client, args106, ctx) => {
@@ -67492,9 +67492,9 @@ Get the currently configured device sync provider in Comp AI. Connect vendor sys
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await integrationsSyncControllerGetDeviceSyncProviderV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -67584,9 +67584,9 @@ Get the currently configured employee sync provider in Comp AI. Connect vendor s
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await integrationsSyncControllerGetEmployeeSyncProviderV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -68942,9 +68942,9 @@ List checks for a task template in Comp AI. Connect vendor systems, configure OA
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args113,
     tool: async (client, args114, ctx) => {
@@ -69064,9 +69064,9 @@ List checks attached to a task in Comp AI. Connect vendor systems, configure OAu
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args114,
     tool: async (client, args115, ctx) => {
@@ -69191,9 +69191,9 @@ List check runs for a task in Comp AI. Connect vendor systems, configure OAuth a
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args115,
     tool: async (client, args116, ctx) => {
@@ -69545,9 +69545,9 @@ List integrations that can supply per-user 2FA status in Comp AI. Connect vendor
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await integrationsTwoFactorSourceControllerGetAvailableTwoFactorSourcesV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -69637,9 +69637,9 @@ Get the configured 2FA source provider in Comp AI. Connect vendor systems, confi
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await integrationsTwoFactorSourceControllerGetTwoFactorSourceV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -69729,9 +69729,9 @@ Per-user 2FA status from the configured source in Comp AI. Connect vendor system
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await integrationsTwoFactorSourceControllerGetTwoFactorStatusesV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -69974,9 +69974,9 @@ Get options for a connection variable in Comp AI. Connect vendor systems, config
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args119,
     tool: async (client, args120, ctx) => {
@@ -70096,9 +70096,9 @@ List connection variables in Comp AI. Connect vendor systems, configure OAuth ap
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args120,
     tool: async (client, args121, ctx) => {
@@ -70218,9 +70218,9 @@ List variable definitions for a provider in Comp AI. Connect vendor systems, con
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args121,
     tool: async (client, args122, ctx) => {
@@ -70849,13 +70849,13 @@ var init_ismsISMSControllerDriftV12 = __esm(() => {
     name: "drift",
     description: `Detect drift against the approved snapshot
 
-Reports whether an ISMS document's derived content is stale by comparing the platform data captured at its last generation against current data. Returns isStale plus the changed sources; a never-generated document reports no-baseline.`,
+Reports whether an ISMS document's derived content is stale by comparing the platform data captured at its last generation against current data. Returns hasBaseline, isStale and the changed sources; with no baseline, nothing has drifted.`,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args126,
     tool: async (client, args127, ctx) => {
@@ -70998,6 +70998,7 @@ var init_exportismsdocumentdto = __esm(() => {
     "docx"
   ]).describe("File format to export the ISMS document as");
   ExportIsmsDocumentDto$zodSchema = object({
+    draft: boolean2().optional().describe("Export the WORKING DRAFT rather than the published version — the customer's attached file when the document is in upload mode, or a live render of the form when it is not. Cannot be combined with versionId: the two name different artifacts, so asking for both is rejected."),
     format: Format$zodSchema.describe("File format to export the ISMS document as"),
     versionId: string2().optional().describe("Published version to export. Omit to export the document's current published version (or the working draft if it has never been published); provide a version id to download exactly what was approved at that version.")
   });
@@ -71106,7 +71107,7 @@ var init_ismsISMSControllerExportDocumentV12 = __esm(() => {
     name: "isms-export-document",
     description: `Export an ISMS document as PDF or DOCX
 
-Downloads an ISMS document as a PDF or DOCX file rather than JSON. Defaults to the latest published version, not the working draft; pass a versionId to retrieve a specific historical version exactly as it was approved.`,
+Downloads an ISMS document as PDF or DOCX rather than JSON. Defaults to the latest published version; pass a versionId for a specific historical version exactly as approved, or draft:true for the working draft (their uploaded file).`,
     annotations: {
       title: "",
       destructiveHint: false,
@@ -71354,9 +71355,9 @@ Returns one ISMS document with every register expanded — context issues, inter
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args130,
     tool: async (client, args131, ctx) => {
@@ -71476,9 +71477,9 @@ Lists an ISMS document's published versions newest first with version number, pu
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args131,
     tool: async (client, args132, ctx) => {
@@ -71602,8 +71603,8 @@ var init_ismsISMSControllerRemoveControlV12 = __esm(() => {
 Removes the mapping between an ISMS document and one organization control. Takes the control id, not the link row id. The control itself is not deleted, and unlinking a control that was never linked succeeds silently.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -71621,21 +71622,21 @@ Removes the mapping between an ISMS document and one organization control. Takes
   };
 });
 
-// src/models/ismscontrollerrisktreatmentv1op.ts
-var IsmsControllerRiskTreatmentV1Request$zodSchema;
-var init_ismscontrollerrisktreatmentv1op = __esm(() => {
+// src/models/ismscontrollerremovedocumentfilev1op.ts
+var IsmsControllerRemoveDocumentFileV1Request$zodSchema;
+var init_ismscontrollerremovedocumentfilev1op = __esm(() => {
   init_zod();
-  IsmsControllerRiskTreatmentV1Request$zodSchema = object({
+  IsmsControllerRemoveDocumentFileV1Request$zodSchema = object({
     id: string2()
   });
 });
 
-// src/funcs/ismsISMSControllerRiskTreatmentV1.ts
-function ismsISMSControllerRiskTreatmentV1(client$, request, options) {
+// src/funcs/ismsISMSControllerRemoveDocumentFileV1.ts
+function ismsISMSControllerRemoveDocumentFileV1(client$, request, options) {
   return new APIPromise($do153(client$, request, options));
 }
 async function $do153(client$, request, options) {
-  const parsed$ = safeParse4(request, (value$) => IsmsControllerRiskTreatmentV1Request$zodSchema.parse(value$), "Input validation failed");
+  const parsed$ = safeParse4(request, (value$) => IsmsControllerRemoveDocumentFileV1Request$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
   }
@@ -71647,7 +71648,7 @@ async function $do153(client$, request, options) {
       charEncoding: "percent"
     })
   };
-  const path$ = pathToFunc("/v1/isms/documents/{id}/risk-treatment")(pathParams$);
+  const path$ = pathToFunc("/v1/isms/documents/{id}/upload")(pathParams$);
   const headers$ = new Headers(compactMap({
     Accept: "*/*"
   }));
@@ -71656,7 +71657,7 @@ async function $do153(client$, request, options) {
   const context = {
     options: client$._options,
     baseURL: options?.serverURL ?? client$._baseURL ?? "",
-    operationID: "IsmsController_riskTreatment_v1",
+    operationID: "IsmsController_removeDocumentFile_v1",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client$._options.security,
@@ -71671,7 +71672,7 @@ async function $do153(client$, request, options) {
   };
   const requestRes = client$._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "DELETE",
     baseURL: options?.serverURL,
     path: path$,
     headers: headers$,
@@ -71698,40 +71699,40 @@ async function $do153(client$, request, options) {
     response: doResult.value
   }];
 }
-var init_ismsISMSControllerRiskTreatmentV1 = __esm(() => {
+var init_ismsISMSControllerRemoveDocumentFileV1 = __esm(() => {
   init_encodings();
   init_primitives();
   init_schemas4();
   init_security();
   init_url();
-  init_ismscontrollerrisktreatmentv1op();
+  init_ismscontrollerremovedocumentfilev1op();
   init_async();
 });
 
-// src/mcp-server/tools/ismsISMSControllerRiskTreatmentV1.ts
-var args133, tool$ismsISMSControllerRiskTreatmentV1;
-var init_ismsISMSControllerRiskTreatmentV12 = __esm(() => {
-  init_ismsISMSControllerRiskTreatmentV1();
-  init_ismscontrollerrisktreatmentv1op();
+// src/mcp-server/tools/ismsISMSControllerRemoveDocumentFileV1.ts
+var args133, tool$ismsISMSControllerRemoveDocumentFileV1;
+var init_ismsISMSControllerRemoveDocumentFileV12 = __esm(() => {
+  init_ismsISMSControllerRemoveDocumentFileV1();
+  init_ismscontrollerremovedocumentfilev1op();
   init_tools();
   args133 = {
-    request: IsmsControllerRiskTreatmentV1Request$zodSchema
+    request: IsmsControllerRemoveDocumentFileV1Request$zodSchema
   };
-  tool$ismsISMSControllerRiskTreatmentV1 = {
-    name: "risk-treatment",
-    description: `The Risk Treatment Plan's rows (Clause 6.1.3)
+  tool$ismsISMSControllerRemoveDocumentFileV1 = {
+    name: "remove-isms-document-file",
+    description: `Remove an ISMS document's uploaded file
 
-Returns the organisational and supplier risk rows the Risk Treatment Plan renders (from the Risk Register and Vendors, with acceptance state per row) plus its submit-readiness messages.`,
+Detaches the pending uploaded file from an ISMS document's draft. Already-published versions keep their own copy and stay downloadable. Returns the refreshed document.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
     args: args133,
     tool: async (client, args134, ctx) => {
-      const [result] = await ismsISMSControllerRiskTreatmentV1(client, args134.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result] = await ismsISMSControllerRemoveDocumentFileV1(client, args134.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -71743,46 +71744,34 @@ Returns the organisational and supplier risk rows the Risk Treatment Plan render
   };
 });
 
-// src/models/submitismsforapprovaldto.ts
-var SubmitIsmsForApprovalDto$zodSchema;
-var init_submitismsforapprovaldto = __esm(() => {
-  init_zod();
-  SubmitIsmsForApprovalDto$zodSchema = object({
-    approverId: string2().describe("Member ID of the approver to submit the ISMS to")
-  });
-});
-
-// src/models/ismscontrollersubmitforapprovalv1op.ts
-var IsmsControllerSubmitForApprovalV1Request$zodSchema;
-var init_ismscontrollersubmitforapprovalv1op = __esm(() => {
+// src/models/ismscontrollerrisktreatmentv1op.ts
+var IsmsControllerRiskTreatmentV1Request$zodSchema;
+var init_ismscontrollerrisktreatmentv1op = __esm(() => {
   init_zod();
-  init_submitismsforapprovaldto();
-  IsmsControllerSubmitForApprovalV1Request$zodSchema = object({
-    body: SubmitIsmsForApprovalDto$zodSchema,
+  IsmsControllerRiskTreatmentV1Request$zodSchema = object({
     id: string2()
   });
 });
 
-// src/funcs/ismsISMSControllerSubmitForApprovalV1.ts
-function ismsISMSControllerSubmitForApprovalV1(client$, request, options) {
+// src/funcs/ismsISMSControllerRiskTreatmentV1.ts
+function ismsISMSControllerRiskTreatmentV1(client$, request, options) {
   return new APIPromise($do154(client$, request, options));
 }
 async function $do154(client$, request, options) {
-  const parsed$ = safeParse4(request, (value$) => IsmsControllerSubmitForApprovalV1Request$zodSchema.parse(value$), "Input validation failed");
+  const parsed$ = safeParse4(request, (value$) => IsmsControllerRiskTreatmentV1Request$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
   }
   const payload$ = parsed$.value;
-  const body$ = encodeJSON("body", payload$.body, { explode: true });
+  const body$ = null;
   const pathParams$ = {
     id: encodeSimple("id", payload$.id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path$ = pathToFunc("/v1/isms/documents/{id}/submit-for-approval")(pathParams$);
+  const path$ = pathToFunc("/v1/isms/documents/{id}/risk-treatment")(pathParams$);
   const headers$ = new Headers(compactMap({
-    "Content-Type": "application/json",
     Accept: "*/*"
   }));
   const securityInput = await extractSecurity(client$._options.security);
@@ -71790,7 +71779,7 @@ async function $do154(client$, request, options) {
   const context = {
     options: client$._options,
     baseURL: options?.serverURL ?? client$._baseURL ?? "",
-    operationID: "IsmsController_submitForApproval_v1",
+    operationID: "IsmsController_riskTreatment_v1",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client$._options.security,
@@ -71805,7 +71794,7 @@ async function $do154(client$, request, options) {
   };
   const requestRes = client$._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "GET",
     baseURL: options?.serverURL,
     path: path$,
     headers: headers$,
@@ -71832,40 +71821,40 @@ async function $do154(client$, request, options) {
     response: doResult.value
   }];
 }
-var init_ismsISMSControllerSubmitForApprovalV1 = __esm(() => {
+var init_ismsISMSControllerRiskTreatmentV1 = __esm(() => {
   init_encodings();
   init_primitives();
   init_schemas4();
   init_security();
   init_url();
-  init_ismscontrollersubmitforapprovalv1op();
+  init_ismscontrollerrisktreatmentv1op();
   init_async();
 });
 
-// src/mcp-server/tools/ismsISMSControllerSubmitForApprovalV1.ts
-var args134, tool$ismsISMSControllerSubmitForApprovalV1;
-var init_ismsISMSControllerSubmitForApprovalV12 = __esm(() => {
-  init_ismsISMSControllerSubmitForApprovalV1();
-  init_ismscontrollersubmitforapprovalv1op();
+// src/mcp-server/tools/ismsISMSControllerRiskTreatmentV1.ts
+var args134, tool$ismsISMSControllerRiskTreatmentV1;
+var init_ismsISMSControllerRiskTreatmentV12 = __esm(() => {
+  init_ismsISMSControllerRiskTreatmentV1();
+  init_ismscontrollerrisktreatmentv1op();
   init_tools();
   args134 = {
-    request: IsmsControllerSubmitForApprovalV1Request$zodSchema
+    request: IsmsControllerRiskTreatmentV1Request$zodSchema
   };
-  tool$ismsISMSControllerSubmitForApprovalV1 = {
-    name: "isms-submit-for-approval",
-    description: `Submit an ISMS document for approval
+  tool$ismsISMSControllerRiskTreatmentV1 = {
+    name: "risk-treatment",
+    description: `The Risk Treatment Plan's rows (Clause 6.1.3)
 
-Sends an ISMS document to a named approver for review, setting its status to needs_review. Requires the approverId of an active member. Rejected if any blocking todo remains, so read the document's todos first.`,
+Returns the organisational and supplier risk rows the Risk Treatment Plan renders (from the Risk Register and Vendors, with acceptance state per row) plus its submit-readiness messages.`,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args134,
     tool: async (client, args135, ctx) => {
-      const [result] = await ismsISMSControllerSubmitForApprovalV1(client, args135.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result] = await ismsISMSControllerRiskTreatmentV1(client, args135.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -71877,27 +71866,48 @@ Sends an ISMS document to a named approver for review, setting its status to nee
   };
 });
 
-// src/models/generatealldto.ts
-var GenerateAllDto$zodSchema;
-var init_generatealldto = __esm(() => {
+// src/models/setismscontentsourcedto.ts
+var ContentSource$zodSchema, SetIsmsContentSourceDto$zodSchema;
+var init_setismscontentsourcedto = __esm(() => {
   init_zod();
-  GenerateAllDto$zodSchema = object({
-    frameworkId: string2().describe("ID of the framework to generate all ISMS profile documents for")
+  ContentSource$zodSchema = _enum([
+    "generated",
+    "uploaded"
+  ]).describe("generated = build the document from our form and render it; uploaded = the customer-supplied file attached via the upload endpoint is the document.");
+  SetIsmsContentSourceDto$zodSchema = object({
+    contentSource: ContentSource$zodSchema.describe("generated = build the document from our form and render it; uploaded = the customer-supplied file attached via the upload endpoint is the document.")
   });
 });
 
-// src/funcs/ismsISMSProfileControllerGenerateAllV1.ts
-function ismsISMSProfileControllerGenerateAllV1(client$, request, options) {
+// src/models/ismscontrollersetcontentsourcev1op.ts
+var IsmsControllerSetContentSourceV1Request$zodSchema;
+var init_ismscontrollersetcontentsourcev1op = __esm(() => {
+  init_zod();
+  init_setismscontentsourcedto();
+  IsmsControllerSetContentSourceV1Request$zodSchema = object({
+    body: SetIsmsContentSourceDto$zodSchema,
+    id: string2()
+  });
+});
+
+// src/funcs/ismsISMSControllerSetContentSourceV1.ts
+function ismsISMSControllerSetContentSourceV1(client$, request, options) {
   return new APIPromise($do155(client$, request, options));
 }
 async function $do155(client$, request, options) {
-  const parsed$ = safeParse4(request, (value$) => GenerateAllDto$zodSchema.parse(value$), "Input validation failed");
+  const parsed$ = safeParse4(request, (value$) => IsmsControllerSetContentSourceV1Request$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
   }
   const payload$ = parsed$.value;
-  const body$ = encodeJSON("body", payload$, { explode: true });
-  const path$ = pathToFunc("/v1/isms/generate-all")();
+  const body$ = encodeJSON("body", payload$.body, { explode: true });
+  const pathParams$ = {
+    id: encodeSimple("id", payload$.id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path$ = pathToFunc("/v1/isms/documents/{id}/content-source")(pathParams$);
   const headers$ = new Headers(compactMap({
     "Content-Type": "application/json",
     Accept: "*/*"
@@ -71907,7 +71917,7 @@ async function $do155(client$, request, options) {
   const context = {
     options: client$._options,
     baseURL: options?.serverURL ?? client$._baseURL ?? "",
-    operationID: "IsmsProfileController_generateAll_v1",
+    operationID: "IsmsController_setContentSource_v1",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client$._options.security,
@@ -71922,7 +71932,7 @@ async function $do155(client$, request, options) {
   };
   const requestRes = client$._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "PATCH",
     baseURL: options?.serverURL,
     path: path$,
     headers: headers$,
@@ -71949,30 +71959,30 @@ async function $do155(client$, request, options) {
     response: doResult.value
   }];
 }
-var init_ismsISMSProfileControllerGenerateAllV1 = __esm(() => {
+var init_ismsISMSControllerSetContentSourceV1 = __esm(() => {
   init_encodings();
   init_primitives();
   init_schemas4();
   init_security();
   init_url();
-  init_generatealldto();
+  init_ismscontrollersetcontentsourcev1op();
   init_async();
 });
 
-// src/mcp-server/tools/ismsISMSProfileControllerGenerateAllV1.ts
-var args135, tool$ismsISMSProfileControllerGenerateAllV1;
-var init_ismsISMSProfileControllerGenerateAllV12 = __esm(() => {
-  init_ismsISMSProfileControllerGenerateAllV1();
-  init_generatealldto();
+// src/mcp-server/tools/ismsISMSControllerSetContentSourceV1.ts
+var args135, tool$ismsISMSControllerSetContentSourceV1;
+var init_ismsISMSControllerSetContentSourceV12 = __esm(() => {
+  init_ismsISMSControllerSetContentSourceV1();
+  init_ismscontrollersetcontentsourcev1op();
   init_tools();
   args135 = {
-    request: GenerateAllDto$zodSchema
+    request: IsmsControllerSetContentSourceV1Request$zodSchema
   };
-  tool$ismsISMSProfileControllerGenerateAllV1 = {
-    name: "generate-all",
-    description: `Ensure and regenerate all ISMS documents
+  tool$ismsISMSControllerSetContentSourceV1 = {
+    name: "set-isms-content-source",
+    description: `Switch an ISMS document between form and uploaded file
 
-Creates any missing ISMS documents and regenerates all twelve in dependency order for a framework. Runs synchronously and is slow, with no job id to poll. Reverts every approved document to draft. Call after completing the wizard.`,
+Sets whether the document's content is 'generated' from our form or is the 'uploaded' customer file. Switching is lossless — the form data and the uploaded file are both kept. Returns the refreshed document.`,
     annotations: {
       title: "",
       destructiveHint: false,
@@ -71982,7 +71992,7 @@ Creates any missing ISMS documents and regenerates all twelve in dependency orde
     },
     args: args135,
     tool: async (client, args136, ctx) => {
-      const [result] = await ismsISMSProfileControllerGenerateAllV1(client, args136.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result] = await ismsISMSControllerSetContentSourceV1(client, args136.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -71994,31 +72004,46 @@ Creates any missing ISMS documents and regenerates all twelve in dependency orde
   };
 });
 
-// src/models/ismsprofilecontrollergetprofilev1op.ts
-var IsmsProfileControllerGetProfileV1Request$zodSchema;
-var init_ismsprofilecontrollergetprofilev1op = __esm(() => {
+// src/models/submitismsforapprovaldto.ts
+var SubmitIsmsForApprovalDto$zodSchema;
+var init_submitismsforapprovaldto = __esm(() => {
+  init_zod();
+  SubmitIsmsForApprovalDto$zodSchema = object({
+    approverId: string2().describe("Member ID of the approver to submit the ISMS to")
+  });
+});
+
+// src/models/ismscontrollersubmitforapprovalv1op.ts
+var IsmsControllerSubmitForApprovalV1Request$zodSchema;
+var init_ismscontrollersubmitforapprovalv1op = __esm(() => {
   init_zod();
-  IsmsProfileControllerGetProfileV1Request$zodSchema = object({
-    frameworkId: string2()
+  init_submitismsforapprovaldto();
+  IsmsControllerSubmitForApprovalV1Request$zodSchema = object({
+    body: SubmitIsmsForApprovalDto$zodSchema,
+    id: string2()
   });
 });
 
-// src/funcs/ismsISMSProfileControllerGetProfileV1.ts
-function ismsISMSProfileControllerGetProfileV1(client$, request, options) {
+// src/funcs/ismsISMSControllerSubmitForApprovalV1.ts
+function ismsISMSControllerSubmitForApprovalV1(client$, request, options) {
   return new APIPromise($do156(client$, request, options));
 }
 async function $do156(client$, request, options) {
-  const parsed$ = safeParse4(request, (value$) => IsmsProfileControllerGetProfileV1Request$zodSchema.parse(value$), "Input validation failed");
+  const parsed$ = safeParse4(request, (value$) => IsmsControllerSubmitForApprovalV1Request$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
   }
   const payload$ = parsed$.value;
-  const body$ = null;
-  const path$ = pathToFunc("/v1/isms/profile")();
-  const query$ = encodeFormQuery({
-    frameworkId: payload$.frameworkId
-  });
+  const body$ = encodeJSON("body", payload$.body, { explode: true });
+  const pathParams$ = {
+    id: encodeSimple("id", payload$.id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path$ = pathToFunc("/v1/isms/documents/{id}/submit-for-approval")(pathParams$);
   const headers$ = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "*/*"
   }));
   const securityInput = await extractSecurity(client$._options.security);
@@ -72026,7 +72051,7 @@ async function $do156(client$, request, options) {
   const context = {
     options: client$._options,
     baseURL: options?.serverURL ?? client$._baseURL ?? "",
-    operationID: "IsmsProfileController_getProfile_v1",
+    operationID: "IsmsController_submitForApproval_v1",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client$._options.security,
@@ -72041,11 +72066,10 @@ async function $do156(client$, request, options) {
   };
   const requestRes = client$._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "POST",
     baseURL: options?.serverURL,
     path: path$,
     headers: headers$,
-    query: query$,
     body: body$,
     userAgent: client$._options.userAgent,
     timeoutMs: options?.timeoutMs || client$._options.timeoutMs || 120000
@@ -72069,30 +72093,30 @@ async function $do156(client$, request, options) {
     response: doResult.value
   }];
 }
-var init_ismsISMSProfileControllerGetProfileV1 = __esm(() => {
+var init_ismsISMSControllerSubmitForApprovalV1 = __esm(() => {
   init_encodings();
   init_primitives();
   init_schemas4();
   init_security();
   init_url();
-  init_ismsprofilecontrollergetprofilev1op();
+  init_ismscontrollersubmitforapprovalv1op();
   init_async();
 });
 
-// src/mcp-server/tools/ismsISMSProfileControllerGetProfileV1.ts
-var args136, tool$ismsISMSProfileControllerGetProfileV1;
-var init_ismsISMSProfileControllerGetProfileV12 = __esm(() => {
-  init_ismsISMSProfileControllerGetProfileV1();
-  init_ismsprofilecontrollergetprofilev1op();
+// src/mcp-server/tools/ismsISMSControllerSubmitForApprovalV1.ts
+var args136, tool$ismsISMSControllerSubmitForApprovalV1;
+var init_ismsISMSControllerSubmitForApprovalV12 = __esm(() => {
+  init_ismsISMSControllerSubmitForApprovalV1();
+  init_ismscontrollersubmitforapprovalv1op();
   init_tools();
   args136 = {
-    request: IsmsProfileControllerGetProfileV1Request$zodSchema
+    request: IsmsControllerSubmitForApprovalV1Request$zodSchema
   };
-  tool$ismsISMSProfileControllerGetProfileV1 = {
-    name: "get-profile",
-    description: `Get the ISMS wizard profile, defaults and members
+  tool$ismsISMSControllerSubmitForApprovalV1 = {
+    name: "isms-submit-for-approval",
+    description: `Submit an ISMS document for approval
 
-Returns the saved ISO 27001 onboarding wizard answers for a framework, together with computed defaults for scope, objectives and capabilities, and the member list usable as approver ids. Requires a frameworkId query parameter.`,
+Sends an ISMS document to a named approver for review, setting its status to needs_review. Requires the approverId of an active member. Rejected if any blocking todo remains, so read the document's todos first.`,
     annotations: {
       title: "",
       destructiveHint: false,
@@ -72102,7 +72126,7 @@ Returns the saved ISO 27001 onboarding wizard answers for a framework, together
     },
     args: args136,
     tool: async (client, args137, ctx) => {
-      const [result] = await ismsISMSProfileControllerGetProfileV1(client, args137.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result] = await ismsISMSControllerSubmitForApprovalV1(client, args137.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -72114,29 +72138,51 @@ Returns the saved ISO 27001 onboarding wizard answers for a framework, together
   };
 });
 
-// src/models/ismsprofilecontrollersaveprofilev1op.ts
-var IsmsProfileControllerSaveProfileV1Request$zodSchema;
-var init_ismsprofilecontrollersaveprofilev1op = __esm(() => {
+// src/models/uploadismsdocumentdto.ts
+var FileType$zodSchema, UploadIsmsDocumentDto$zodSchema;
+var init_uploadismsdocumentdto = __esm(() => {
   init_zod();
-  IsmsProfileControllerSaveProfileV1Request$zodSchema = object({
-    answers: record(string2(), any()).describe("Deeply-partial wizard answers (any subset of the wizard steps)"),
-    complete: boolean2().optional().describe("Whether the wizard is being finalized"),
-    frameworkId: string2()
-  }).describe("Partial ISMS wizard answers (validated at runtime by zod)");
+  FileType$zodSchema = _enum([
+    "application/pdf",
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+  ]).describe("MIME type of the file. Only PDF and DOCX are accepted — an uploaded file is the document itself and is never converted.");
+  UploadIsmsDocumentDto$zodSchema = object({
+    fileData: string2().optional().describe("Base64-encoded file contents, for the web UI and direct callers. AI/MCP clients should upload via /v1/uploads/presign (purpose=document) and pass s3Key instead. Provide exactly one of fileData or s3Key."),
+    fileName: string2().describe("Original filename. Stored as-is for display and download; only a sanitised copy is used in the storage key."),
+    fileType: FileType$zodSchema.describe("MIME type of the file. Only PDF and DOCX are accepted — an uploaded file is the document itself and is never converted."),
+    s3Key: string2().optional().describe("Key of a file already uploaded via /v1/uploads/presign (purpose=document). The server reads the bytes from storage. Provide exactly one of fileData or s3Key.")
+  });
 });
 
-// src/funcs/ismsISMSProfileControllerSaveProfileV1.ts
-function ismsISMSProfileControllerSaveProfileV1(client$, request, options) {
+// src/models/ismscontrolleruploaddocumentfilev1op.ts
+var IsmsControllerUploadDocumentFileV1Request$zodSchema;
+var init_ismscontrolleruploaddocumentfilev1op = __esm(() => {
+  init_zod();
+  init_uploadismsdocumentdto();
+  IsmsControllerUploadDocumentFileV1Request$zodSchema = object({
+    body: UploadIsmsDocumentDto$zodSchema,
+    id: string2()
+  });
+});
+
+// src/funcs/ismsISMSControllerUploadDocumentFileV1.ts
+function ismsISMSControllerUploadDocumentFileV1(client$, request, options) {
   return new APIPromise($do157(client$, request, options));
 }
 async function $do157(client$, request, options) {
-  const parsed$ = safeParse4(request, (value$) => IsmsProfileControllerSaveProfileV1Request$zodSchema.parse(value$), "Input validation failed");
+  const parsed$ = safeParse4(request, (value$) => IsmsControllerUploadDocumentFileV1Request$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
   }
   const payload$ = parsed$.value;
-  const body$ = encodeJSON("body", payload$, { explode: true });
-  const path$ = pathToFunc("/v1/isms/profile")();
+  const body$ = encodeJSON("body", payload$.body, { explode: true });
+  const pathParams$ = {
+    id: encodeSimple("id", payload$.id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path$ = pathToFunc("/v1/isms/documents/{id}/upload")(pathParams$);
   const headers$ = new Headers(compactMap({
     "Content-Type": "application/json",
     Accept: "*/*"
@@ -72146,7 +72192,7 @@ async function $do157(client$, request, options) {
   const context = {
     options: client$._options,
     baseURL: options?.serverURL ?? client$._baseURL ?? "",
-    operationID: "IsmsProfileController_saveProfile_v1",
+    operationID: "IsmsController_uploadDocumentFile_v1",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client$._options.security,
@@ -72188,30 +72234,30 @@ async function $do157(client$, request, options) {
     response: doResult.value
   }];
 }
-var init_ismsISMSProfileControllerSaveProfileV1 = __esm(() => {
+var init_ismsISMSControllerUploadDocumentFileV1 = __esm(() => {
   init_encodings();
   init_primitives();
   init_schemas4();
   init_security();
   init_url();
-  init_ismsprofilecontrollersaveprofilev1op();
+  init_ismscontrolleruploaddocumentfilev1op();
   init_async();
 });
 
-// src/mcp-server/tools/ismsISMSProfileControllerSaveProfileV1.ts
-var args137, tool$ismsISMSProfileControllerSaveProfileV1;
-var init_ismsISMSProfileControllerSaveProfileV12 = __esm(() => {
-  init_ismsISMSProfileControllerSaveProfileV1();
-  init_ismsprofilecontrollersaveprofilev1op();
+// src/mcp-server/tools/ismsISMSControllerUploadDocumentFileV1.ts
+var args137, tool$ismsISMSControllerUploadDocumentFileV1;
+var init_ismsISMSControllerUploadDocumentFileV12 = __esm(() => {
+  init_ismsISMSControllerUploadDocumentFileV1();
+  init_ismscontrolleruploaddocumentfilev1op();
   init_tools();
   args137 = {
-    request: IsmsProfileControllerSaveProfileV1Request$zodSchema.describe(`Partial ISMS wizard answers (validated at runtime by zod)`)
+    request: IsmsControllerUploadDocumentFileV1Request$zodSchema
   };
-  tool$ismsISMSProfileControllerSaveProfileV1 = {
-    name: "save-profile",
-    description: `Save (partial) ISMS wizard answers
+  tool$ismsISMSControllerUploadDocumentFileV1 = {
+    name: "upload-isms-document-file",
+    description: `Upload a file as an ISMS document's content
 
-Saves ISO 27001 onboarding wizard answers as a partial update — supplied fields are merged onto stored answers and arrays replace wholesale. Set complete to true to validate the full set. Saving does not regenerate documents.`,
+Attaches a customer-supplied PDF or DOCX as the document's content. Does not switch the document to it — call PATCH content-source with 'uploaded' for that. Returns the refreshed document.`,
     annotations: {
       title: "",
       destructiveHint: false,
@@ -72221,7 +72267,7 @@ Saves ISO 27001 onboarding wizard answers as a partial update — supplied field
     },
     args: args137,
     tool: async (client, args138, ctx) => {
-      const [result] = await ismsISMSProfileControllerSaveProfileV1(client, args138.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result] = await ismsISMSControllerUploadDocumentFileV1(client, args138.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -72367,12 +72413,14 @@ Record measurements for several metrics/periods in one save (Metrics due / backf
 });
 
 // src/models/ismsregisterscontrollercreaterowv1op.ts
-var IsmsRegistersControllerCreateRowV1Kind$zodSchema, IsmsRegistersControllerCreateRowV1Status$zodSchema, IsmsRegistersControllerCreateRowV1AuditRoute$zodSchema, IsmsRegistersControllerCreateRowV1BasisOfCompetence$zodSchema, IsmsRegistersControllerCreateRowV1ConclusionVerdict$zodSchema, IsmsRegistersControllerCreateRowV1Result$zodSchema, IsmsRegistersControllerCreateRowV1Type$zodSchema, IsmsRegistersControllerCreateRowV1Attendee$zodSchema, IsmsRegistersControllerCreateRowV1RequestBody$zodSchema, IsmsRegistersControllerCreateRowV1Request$zodSchema;
+var IsmsRegistersControllerCreateRowV1Kind$zodSchema, IsmsRegistersControllerCreateRowV1Status$zodSchema, IsmsRegistersControllerCreateRowV1AuditRoute$zodSchema, IsmsRegistersControllerCreateRowV1BasisOfCompetence$zodSchema, IsmsRegistersControllerCreateRowV1Unit$zodSchema, IsmsRegistersControllerCreateRowV1TargetKind$zodSchema, IsmsRegistersControllerCreateRowV1TargetOperator$zodSchema, IsmsRegistersControllerCreateRowV1ConclusionVerdict$zodSchema, IsmsRegistersControllerCreateRowV1Result$zodSchema, IsmsRegistersControllerCreateRowV1Type$zodSchema, IsmsRegistersControllerCreateRowV1Attendee$zodSchema, IsmsRegistersControllerCreateRowV1RequestBody$zodSchema, IsmsRegistersControllerCreateRowV1Request$zodSchema;
 var init_ismsregisterscontrollercreaterowv1op = __esm(() => {
   init_zod();
   IsmsRegistersControllerCreateRowV1Kind$zodSchema = _enum([
     "internal",
-    "external"
+    "external",
+    "recurring",
+    "milestone"
   ]);
   IsmsRegistersControllerCreateRowV1Status$zodSchema = _enum([
     "not_started",
@@ -72396,6 +72444,22 @@ var init_ismsregisterscontrollercreaterowv1op = __esm(() => {
     "experience",
     "combination"
   ]);
+  IsmsRegistersControllerCreateRowV1Unit$zodSchema = _enum([
+    "percent",
+    "count",
+    "days",
+    "hours",
+    "minutes"
+  ]);
+  IsmsRegistersControllerCreateRowV1TargetKind$zodSchema = _enum([
+    "structured",
+    "text"
+  ]).describe("Defaults to 'text'. 'structured' requires targetOperator, targetValue and unit.");
+  IsmsRegistersControllerCreateRowV1TargetOperator$zodSchema = _enum([
+    "at_least",
+    "at_most",
+    "exactly"
+  ]);
   IsmsRegistersControllerCreateRowV1ConclusionVerdict$zodSchema = _enum([
     "conform",
     "substantially_conform",
@@ -72461,14 +72525,14 @@ var init_ismsregisterscontrollercreaterowv1op = __esm(() => {
     meetingDate: string2().nullable().optional(),
     memberId: string2().optional(),
     method: string2().optional(),
-    metricId: string2().optional(),
+    metricId: string2().nullable().optional().describe("Measurements: the metric being recorded. Objectives: the metric the objective inherits its target, cadence and status from (recurring objectives only)."),
     monitorMemberId: string2().nullable().optional(),
     name: string2().optional(),
     needsExpectations: string2().optional(),
     note: string2().nullable().optional(),
     notes: string2().nullable().optional(),
     objective: string2().optional(),
-    objectiveId: string2().nullable().optional(),
+    objectiveId: string2().nullable().optional().describe("Deprecated: objectives now take their numbers from a metric, not the reverse."),
     ownerMemberId: string2().optional(),
     partyName: string2().optional(),
     periodStart: string2().optional().describe("First day of the covered period (YYYY-MM-DD), aligned to the metric cadence"),
@@ -72495,8 +72559,13 @@ var init_ismsregisterscontrollercreaterowv1op = __esm(() => {
     signoffTopMgmtName: string2().nullable().optional(),
     status: IsmsRegistersControllerCreateRowV1Status$zodSchema.optional(),
     target: string2().optional(),
+    targetDate: string2().nullable().optional().describe("Milestone objectives only: due date (YYYY-MM-DD)"),
+    targetKind: IsmsRegistersControllerCreateRowV1TargetKind$zodSchema.optional().describe("Defaults to 'text'. 'structured' requires targetOperator, targetValue and unit."),
+    targetOperator: IsmsRegistersControllerCreateRowV1TargetOperator$zodSchema.nullable().optional(),
+    targetValue: number2().nullable().optional(),
     treatment: string2().optional(),
     type: IsmsRegistersControllerCreateRowV1Type$zodSchema.optional(),
+    unit: IsmsRegistersControllerCreateRowV1Unit$zodSchema.nullable().optional(),
     value: string2().optional(),
     whatIsMeasured: string2().optional(),
     whatItCovers: string2().optional(),
@@ -72736,8 +72805,8 @@ var init_ismsISMSRegistersControllerDeleteRowV12 = __esm(() => {
 Permanently deletes one row from an ISMS register, and cascades: deleting an audit removes its controls and findings, and deleting a metric removes its whole measurement history. Seeded metrics and roles cannot be deleted.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -72883,12 +72952,14 @@ Replaces the working draft narrative of a document type that stores one, such as
 });
 
 // src/models/ismsregisterscontrollerupdaterowv1op.ts
-var IsmsRegistersControllerUpdateRowV1Kind$zodSchema, IsmsRegistersControllerUpdateRowV1Status$zodSchema, IsmsRegistersControllerUpdateRowV1AuditRoute$zodSchema, IsmsRegistersControllerUpdateRowV1BasisOfCompetence$zodSchema, IsmsRegistersControllerUpdateRowV1ConclusionVerdict$zodSchema, IsmsRegistersControllerUpdateRowV1Result$zodSchema, IsmsRegistersControllerUpdateRowV1Type$zodSchema, IsmsRegistersControllerUpdateRowV1Attendee$zodSchema, IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema, IsmsRegistersControllerUpdateRowV1Request$zodSchema;
+var IsmsRegistersControllerUpdateRowV1Kind$zodSchema, IsmsRegistersControllerUpdateRowV1Status$zodSchema, IsmsRegistersControllerUpdateRowV1AuditRoute$zodSchema, IsmsRegistersControllerUpdateRowV1BasisOfCompetence$zodSchema, IsmsRegistersControllerUpdateRowV1Unit$zodSchema, IsmsRegistersControllerUpdateRowV1TargetKind$zodSchema, IsmsRegistersControllerUpdateRowV1TargetOperator$zodSchema, IsmsRegistersControllerUpdateRowV1ConclusionVerdict$zodSchema, IsmsRegistersControllerUpdateRowV1Result$zodSchema, IsmsRegistersControllerUpdateRowV1Type$zodSchema, IsmsRegistersControllerUpdateRowV1Attendee$zodSchema, IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema, IsmsRegistersControllerUpdateRowV1Request$zodSchema;
 var init_ismsregisterscontrollerupdaterowv1op = __esm(() => {
   init_zod();
   IsmsRegistersControllerUpdateRowV1Kind$zodSchema = _enum([
     "internal",
-    "external"
+    "external",
+    "recurring",
+    "milestone"
   ]);
   IsmsRegistersControllerUpdateRowV1Status$zodSchema = _enum([
     "not_started",
@@ -72912,6 +72983,22 @@ var init_ismsregisterscontrollerupdaterowv1op = __esm(() => {
     "experience",
     "combination"
   ]);
+  IsmsRegistersControllerUpdateRowV1Unit$zodSchema = _enum([
+    "percent",
+    "count",
+    "days",
+    "hours",
+    "minutes"
+  ]);
+  IsmsRegistersControllerUpdateRowV1TargetKind$zodSchema = _enum([
+    "structured",
+    "text"
+  ]).describe("Defaults to 'text'. 'structured' requires targetOperator, targetValue and unit.");
+  IsmsRegistersControllerUpdateRowV1TargetOperator$zodSchema = _enum([
+    "at_least",
+    "at_most",
+    "exactly"
+  ]);
   IsmsRegistersControllerUpdateRowV1ConclusionVerdict$zodSchema = _enum([
     "conform",
     "substantially_conform",
@@ -72977,14 +73064,14 @@ var init_ismsregisterscontrollerupdaterowv1op = __esm(() => {
     meetingDate: string2().nullable().optional(),
     memberId: string2().optional(),
     method: string2().optional(),
-    metricId: string2().optional(),
+    metricId: string2().nullable().optional().describe("Measurements: the metric being recorded. Objectives: the metric the objective inherits its target, cadence and status from (recurring objectives only)."),
     monitorMemberId: string2().nullable().optional(),
     name: string2().optional(),
     needsExpectations: string2().optional(),
     note: string2().nullable().optional(),
     notes: string2().nullable().optional(),
     objective: string2().optional(),
-    objectiveId: string2().nullable().optional(),
+    objectiveId: string2().nullable().optional().describe("Deprecated: objectives now take their numbers from a metric, not the reverse."),
     ownerMemberId: string2().optional(),
     partyName: string2().optional(),
     periodStart: string2().optional().describe("First day of the covered period (YYYY-MM-DD), aligned to the metric cadence"),
@@ -73011,8 +73098,13 @@ var init_ismsregisterscontrollerupdaterowv1op = __esm(() => {
     signoffTopMgmtName: string2().nullable().optional(),
     status: IsmsRegistersControllerUpdateRowV1Status$zodSchema.optional(),
     target: string2().optional(),
+    targetDate: string2().nullable().optional().describe("Milestone objectives only: due date (YYYY-MM-DD)"),
+    targetKind: IsmsRegistersControllerUpdateRowV1TargetKind$zodSchema.optional().describe("Defaults to 'text'. 'structured' requires targetOperator, targetValue and unit."),
+    targetOperator: IsmsRegistersControllerUpdateRowV1TargetOperator$zodSchema.nullable().optional(),
+    targetValue: number2().nullable().optional(),
     treatment: string2().optional(),
     type: IsmsRegistersControllerUpdateRowV1Type$zodSchema.optional(),
+    unit: IsmsRegistersControllerUpdateRowV1Unit$zodSchema.nullable().optional(),
     value: string2().optional(),
     whatIsMeasured: string2().optional(),
     whatItCovers: string2().optional(),
@@ -73822,9 +73914,9 @@ List uploaded knowledge base documents that Comp AI can use as approved source m
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await knowledgeBaseKnowledgeBaseControllerListDocumentsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -73914,9 +74006,9 @@ List all manual answers for an organization in Comp AI. Upload source documents,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await knowledgeBaseKnowledgeBaseControllerListManualAnswersV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -74626,8 +74718,8 @@ var init_offboardingChecklistOffboardingChecklistControllerDeleteTemplateItemV12
 Removes an item from the organization's offboarding checklist template by id so it no longer appears on members' offboarding checklists.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -74720,9 +74812,9 @@ Exports a zip archive containing the offboarding checklist evidence for every me
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await offboardingChecklistOffboardingChecklistControllerExportAllEvidenceV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -74841,9 +74933,9 @@ Exports a zip archive of the offboarding checklist evidence collected for a sing
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args154,
     tool: async (client, args155, ctx) => {
@@ -74963,9 +75055,9 @@ Lists the vendors a departing member had access to and whether each has been rev
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args155,
     tool: async (client, args156, ctx) => {
@@ -75085,9 +75177,9 @@ Returns the offboarding checklist for a specific member, including each item and
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args156,
     tool: async (client, args157, ctx) => {
@@ -75178,9 +75270,9 @@ Lists members whose offboarding checklist is still incomplete, with their outsta
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await offboardingChecklistOffboardingChecklistControllerGetPendingOffboardingsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -75270,9 +75362,9 @@ Returns the organization's offboarding checklist template: the ordered set of it
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await offboardingChecklistOffboardingChecklistControllerGetTemplateV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -75644,8 +75736,8 @@ var init_offboardingChecklistOffboardingChecklistControllerUncompleteItemV12 = _
 Reverts a previously completed offboarding checklist item back to incomplete for a member, in case the step was marked done by mistake.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -75771,8 +75863,8 @@ var init_offboardingChecklistOffboardingChecklistControllerUndoVendorRevocationV
 Reverses a vendor access revocation for a member, marking that vendor's access as not revoked again, in case it was confirmed by mistake during offboarding.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -76316,8 +76408,8 @@ var init_organizationOrganizationControllerDeleteOrganizationV12 = __esm(() => {
 Permanently deletes the authenticated organization. This action cannot be undone.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -76409,9 +76501,9 @@ Retrieve available API key scopes and permissions before creating credentials fo
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await organizationOrganizationControllerGetAvailableScopesV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -76501,9 +76593,9 @@ Get organization onboarding status in Comp AI. Manage organization profile data,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await organizationOrganizationControllerGetOnboardingV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -76646,9 +76738,9 @@ Retrieve organization profile data used to personalize compliance workflows, Tru
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args163,
     tool: async (client, args164, ctx) => {
@@ -76785,9 +76877,9 @@ Retrieve the organization primary brand color used for Trust Center theming, por
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args164,
     tool: async (client, args165, ctx) => {
@@ -76878,9 +76970,9 @@ Get role notification settings in Comp AI. Manage organization profile data, API
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await organizationOrganizationControllerGetRoleNotificationsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -76970,9 +77062,9 @@ List active API keys for an organization so administrators can audit automation
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await organizationOrganizationControllerListApiKeysV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -77061,8 +77153,8 @@ var init_organizationOrganizationControllerRemoveLogoV12 = __esm(() => {
 Remove organization logo in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -77587,7 +77679,7 @@ Update role notification settings in Comp AI. Manage organization profile data,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -77795,8 +77887,8 @@ var init_orgChartOrgChartControllerDeleteOrgChartV12 = __esm(() => {
 Delete the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -77913,9 +78005,9 @@ Get the organization chart in Comp AI. Manage organization chart metadata and ev
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args169,
     tool: async (client, args170, ctx) => {
@@ -78161,7 +78253,7 @@ Create or update an interactive organization chart in Comp AI. Manage organizati
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -78536,8 +78628,8 @@ var init_peoplePeopleControllerDeleteEmploymentEvidenceV12 = __esm(() => {
 Delete employment evidence in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -78692,8 +78784,8 @@ var init_peoplePeopleControllerDeleteMemberV12 = __esm(() => {
 Permanently removes a member from the organization. This action cannot be undone.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -78914,9 +79006,9 @@ List employees and contractors with onboarding, training, device, and compliance
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args176,
     tool: async (client, args177, ctx) => {
@@ -79007,9 +79099,9 @@ Get all employee devices with fleet compliance data in Comp AI. Invite and manag
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await peoplePeopleControllerGetDevicesV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -79099,9 +79191,9 @@ Get current user email notification preferences in Comp AI. Invite and manage wo
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await peoplePeopleControllerGetEmailPreferencesV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -79229,9 +79321,9 @@ Get employment evidence attachments in Comp AI. Invite and manage workforce memb
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args177,
     tool: async (client, args178, ctx) => {
@@ -79351,9 +79443,9 @@ Retrieve Fleet device compliance status so endpoint security findings can suppor
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args178,
     tool: async (client, args179, ctx) => {
@@ -79473,9 +79565,9 @@ Aggregates the latest Employee Access check results from every connected integra
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args179,
     tool: async (client, args180, ctx) => {
@@ -79593,9 +79685,9 @@ Get members who can read a specific resource type in Comp AI. Invite and manage
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args180,
     tool: async (client, args181, ctx) => {
@@ -79731,9 +79823,9 @@ Returns a specific member by ID for the authenticated organization with their us
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args181,
     tool: async (client, args182, ctx) => {
@@ -79824,9 +79916,9 @@ Get integration test statistics grouped by assignee in Comp AI. Invite and manag
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await peoplePeopleControllerGetTestStatsByAssigneeV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -79945,9 +80037,9 @@ Get training video completions for a member in Comp AI. Invite and manage workfo
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args182,
     tool: async (client, args183, ctx) => {
@@ -80345,8 +80437,8 @@ var init_peoplePeopleControllerRemoveHostV12 = __esm(() => {
 Removes a single host (device) from FleetDM by host ID. Only organization owners can perform this action. Validates that the organization exists and the member exists within the organization.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -80742,7 +80834,7 @@ Update current user email notification preferences in Comp AI. Invite and manage
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -82063,8 +82155,8 @@ var init_policiesPoliciesControllerDeletePolicyPdfV12 = __esm(() => {
 Deletes the PDF from a specific policy version. If no versionId is provided, deletes from the latest draft version. Cannot delete PDFs from published or pending-approval versions.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -82211,8 +82303,8 @@ var init_policiesPoliciesControllerDeletePolicyV12 = __esm(() => {
 Delete a compliance policy that is no longer part of the organization evidence library or control program.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -82358,8 +82450,8 @@ var init_policiesPoliciesControllerDeletePolicyVersionV12 = __esm(() => {
 Delete policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -82600,9 +82692,9 @@ Generate a single PDF bundle of published compliance policies for auditors, cust
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args201,
     tool: async (client, args202, ctx) => {
@@ -82745,9 +82837,9 @@ Lists an organization's active compliance policies by default, covering the whol
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args202,
     tool: async (client, args203, ctx) => {
@@ -82874,9 +82966,9 @@ Get a signed URL for the policy PDF in Comp AI. Create, version, publish, export
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args203,
     tool: async (client, args204, ctx) => {
@@ -83003,9 +83095,9 @@ Get signed URL for policy PDF (alternate path) in Comp AI. Create, version, publ
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args204,
     tool: async (client, args205, ctx) => {
@@ -83127,9 +83219,9 @@ Get mapped and all controls for a policy in Comp AI. Create, version, publish, e
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args205,
     tool: async (client, args206, ctx) => {
@@ -83251,9 +83343,9 @@ Get tasks that serve as evidence for a policy, grouped by control in Comp AI. Cr
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args206,
     tool: async (client, args207, ctx) => {
@@ -83387,9 +83479,9 @@ Retrieve a single compliance policy by its ID, including current content, draft
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args207,
     tool: async (client, args208, ctx) => {
@@ -83533,9 +83625,9 @@ Get policy version by ID in Comp AI. Create, version, publish, export, map, and
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args208,
     tool: async (client, args209, ctx) => {
@@ -83674,9 +83766,9 @@ Get policy versions in Comp AI. Create, version, publish, export, map, and impro
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args209,
     tool: async (client, args210, ctx) => {
@@ -84200,8 +84292,8 @@ var init_policiesPoliciesControllerRemovePolicyControlV12 = __esm(() => {
 Remove a control mapping from a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -85107,9 +85199,9 @@ Returns one row per member per required policy, with the acknowledgment date whe
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args219,
     tool: async (client, args220, ctx) => {
@@ -85200,9 +85292,9 @@ Returns one row per active member with the date of their most recent policy acce
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await policiesPolicyAcknowledgmentsControllerSummarizeAcknowledgmentsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -85557,9 +85649,9 @@ List policies with framework template updates available in Comp AI. Create, vers
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args222,
     tool: async (client, args223, ctx) => {
@@ -85681,9 +85773,9 @@ Preview the framework template updates for one policy in Comp AI. Create, versio
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args223,
     tool: async (client, args224, ctx) => {
@@ -86028,8 +86120,8 @@ var init_questionnaireQuestionnaireControllerDeleteByIdV12 = __esm(() => {
 Delete a saved security questionnaire when a customer review or vendor assessment no longer needs to be retained.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -86227,9 +86319,9 @@ List saved security questionnaires for an organization so teams can track custom
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await questionnaireQuestionnaireControllerFindAllV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -86348,9 +86440,9 @@ Retrieve one saved security questionnaire, including extracted questions, genera
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args228,
     tool: async (client, args229, ctx) => {
@@ -86988,9 +87080,9 @@ Returns the residual-risk acceptance history for a risk, newest first. Each even
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args233,
     tool: async (client, args234, ctx) => {
@@ -87525,8 +87617,8 @@ var init_risksRisksControllerDeleteRiskV12 = __esm(() => {
 Delete an organization risk that no longer needs active tracking in the risk register or compliance program.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -87771,9 +87863,9 @@ List organization risks with owners, departments, severity, mitigation status, a
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args237,
     tool: async (client, args238, ctx) => {
@@ -88001,9 +88093,9 @@ Retrieve one organization risk with owner, department, likelihood, impact, mitig
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args238,
     tool: async (client, args239, ctx) => {
@@ -88094,9 +88186,9 @@ Get risk statistics grouped by assignee in Comp AI. Create, update, and report o
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await risksRisksControllerGetStatsByAssigneeV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -88186,9 +88278,9 @@ Get risk counts grouped by department in Comp AI. Create, update, and report on
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await risksRisksControllerGetStatsByDepartmentV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -88741,8 +88833,8 @@ var init_rolesRolesControllerDeleteRoleV12 = __esm(() => {
 Delete a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -88871,9 +88963,9 @@ Returns the effective obligations for a built-in role (owner, admin, auditor, em
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args242,
     tool: async (client, args243, ctx) => {
@@ -88994,9 +89086,9 @@ Returns the merged permissions for the given custom role names. Used by the fron
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args243,
     tool: async (client, args244, ctx) => {
@@ -89125,9 +89217,9 @@ Get a role by ID in Comp AI. Create custom roles and resolve permission sets for
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args244,
     tool: async (client, args245, ctx) => {
@@ -89218,9 +89310,9 @@ List all roles in Comp AI. Create custom roles and resolve permission sets for o
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await rolesRolesControllerListRolesV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -89632,9 +89724,9 @@ Returns the customer-written context notes attached to pentest findings for a ta
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args247,
     tool: async (client, args248, ctx) => {
@@ -89755,8 +89847,8 @@ var init_securityPenetrationTestsPentestFindingContextsControllerRemoveV12 = __e
 Deletes the customer context note attached to a pentest finding so future scans of the target no longer receive it from the testing agent briefing.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -89893,7 +89985,7 @@ Saves a customer context note on a pentest finding, e.g. an accepted-by-design r
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -90148,9 +90240,9 @@ Get penetration test status in Comp AI. Create AI-powered penetration test runs,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args251,
     tool: async (client, args252, ctx) => {
@@ -90272,9 +90364,9 @@ Returns the real-time agent activity log emitted during a run (tool calls, obser
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args252,
     tool: async (client, args253, ctx) => {
@@ -90396,9 +90488,9 @@ Returns the structured findings discovered during the run. Grows over time durin
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args253,
     tool: async (client, args254, ctx) => {
@@ -90520,9 +90612,9 @@ Get penetration test PDF in Comp AI. Create AI-powered penetration test runs, tr
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args254,
     tool: async (client, args255, ctx) => {
@@ -90644,9 +90736,9 @@ Get penetration test progress in Comp AI. Create AI-powered penetration test run
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args255,
     tool: async (client, args256, ctx) => {
@@ -90768,9 +90860,9 @@ Get penetration test output in Comp AI. Create AI-powered penetration test runs,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args256,
     tool: async (client, args257, ctx) => {
@@ -90885,9 +90977,9 @@ List penetration test runs in Comp AI. Create AI-powered penetration test runs,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args257,
     tool: async (client, args258, ctx) => {
@@ -92098,8 +92190,8 @@ var init_taskAutomationsAutomationsControllerDeleteAutomationV12 = __esm(() => {
 Delete an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -92226,9 +92318,9 @@ Get all runs for a specific automation in Comp AI. Create, version, run, and ins
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args269,
     tool: async (client, args270, ctx) => {
@@ -92353,9 +92445,9 @@ Get automation details in Comp AI. Create, version, run, and inspect automated e
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args270,
     tool: async (client, args271, ctx) => {
@@ -92499,9 +92591,9 @@ Get all versions for an automation in Comp AI. Create, version, run, and inspect
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args271,
     tool: async (client, args272, ctx) => {
@@ -92641,9 +92733,9 @@ Get all automation runs for a task in Comp AI. Create, version, run, and inspect
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args272,
     tool: async (client, args273, ctx) => {
@@ -92763,9 +92855,9 @@ Get all automations for a task in Comp AI. Create, version, run, and inspect aut
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args273,
     tool: async (client, args274, ctx) => {
@@ -93198,8 +93290,8 @@ var init_taskManagementTaskManagementControllerDeleteTaskItemAttachmentV12 = __e
 Delete attachment from task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -93320,8 +93412,8 @@ var init_taskManagementTaskManagementControllerDeleteTaskItemV12 = __esm(() => {
 Delete a task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -93443,9 +93535,9 @@ Get task item activity log in Comp AI. Manage task items and attachments linked
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args278,
     tool: async (client, args279, ctx) => {
@@ -93580,9 +93672,9 @@ Get task items statistics for an entity in Comp AI. Manage task items and attach
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args279,
     tool: async (client, args280, ctx) => {
@@ -93744,9 +93836,9 @@ Get task items for an entity in Comp AI. Manage task items and attachments linke
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args280,
     tool: async (client, args281, ctx) => {
@@ -93896,7 +93988,7 @@ Update a task item in Comp AI. Manage task items and attachments linked to opera
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -94534,8 +94626,8 @@ var init_tasksTasksControllerDeleteTaskAttachmentV12 = __esm(() => {
 Delete task attachment in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -94654,8 +94746,8 @@ var init_tasksTasksControllerDeleteTasksV12 = __esm(() => {
 Delete multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -94780,8 +94872,8 @@ var init_tasksTasksControllerDeleteTaskV12 = __esm(() => {
 Delete a task in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -94910,9 +95002,9 @@ Get task activity in Comp AI. Manage compliance task lifecycle, assignments, rev
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args289,
     tool: async (client, args290, ctx) => {
@@ -95052,9 +95144,9 @@ Generate a signed download URL for an attachment on a compliance task so reviewe
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args290,
     tool: async (client, args291, ctx) => {
@@ -95200,9 +95292,9 @@ Get task attachments in Comp AI. Manage compliance task lifecycle, assignments,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args291,
     tool: async (client, args292, ctx) => {
@@ -95293,9 +95385,9 @@ Get page options for tasks overview in Comp AI. Manage compliance task lifecycle
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await tasksTasksControllerGetTaskOptionsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -95414,9 +95506,9 @@ Get policies that reference a task via shared controls in Comp AI. Manage compli
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args292,
     tool: async (client, args293, ctx) => {
@@ -95574,9 +95666,9 @@ List compliance tasks with assignments and status so teams can track audit readi
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args293,
     tool: async (client, args294, ctx) => {
@@ -95694,9 +95786,9 @@ Get task templates in Comp AI. Manage compliance task lifecycle, assignments, re
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args294,
     tool: async (client, args295, ctx) => {
@@ -95824,9 +95916,9 @@ Get task by ID in Comp AI. Manage compliance task lifecycle, assignments, review
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args295,
     tool: async (client, args296, ctx) => {
@@ -96969,9 +97061,9 @@ List timelines for the organization in Comp AI. Track audit and compliance readi
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await timelinesTimelinesControllerFindAllV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -97090,9 +97182,9 @@ Get a single timeline instance with phases in Comp AI. Track audit and complianc
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args304,
     tool: async (client, args305, ctx) => {
@@ -97536,9 +97628,9 @@ List security awareness and HIPAA training completion records for workforce comp
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await trainingTrainingControllerGetCompletionsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -98402,9 +98494,9 @@ Retrieve one Trust Center access request with requester context, status, review
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args314,
     tool: async (client, args315, ctx) => {
@@ -98533,9 +98625,9 @@ Retrieve published Trust Center FAQs for an organization so public trust pages c
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args315,
     tool: async (client, args316, ctx) => {
@@ -98655,9 +98747,9 @@ Public list of the security controls visible on a published trust portal. Contro
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args316,
     tool: async (client, args317, ctx) => {
@@ -98777,9 +98869,9 @@ Get org-authored custom frameworks shown on a trust portal in Comp AI. Manage ex
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args317,
     tool: async (client, args318, ctx) => {
@@ -98899,9 +98991,9 @@ List published custom links shown on an organization Trust Center for customer s
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args318,
     tool: async (client, args319, ctx) => {
@@ -99024,9 +99116,9 @@ Retrieve the favicon URL used by a published Trust Center so embedded or mirrore
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args319,
     tool: async (client, args320, ctx) => {
@@ -99146,9 +99238,9 @@ Retrieve the published Trust Center overview for an organization, including publ
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args320,
     tool: async (client, args321, ctx) => {
@@ -99271,9 +99363,9 @@ Whether the org offers the AI-assisted Security Questionnaire on its public trus
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args321,
     tool: async (client, args322, ctx) => {
@@ -99393,9 +99485,9 @@ List published vendors and subprocessors for an organization Trust Center so rev
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args322,
     tool: async (client, args323, ctx) => {
@@ -99519,9 +99611,9 @@ List pending and completed Trust Center access requests so teams can review cust
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args323,
     tool: async (client, args324, ctx) => {
@@ -99612,9 +99704,9 @@ List active, expired, and revoked Trust Access grants for customer security revi
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await trustAccessTrustAccessControllerListGrantsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -101066,9 +101158,9 @@ Get domain verification status in Comp AI. Configure the live Trust Center, cust
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args333,
     tool: async (client, args334, ctx) => {
@@ -101186,9 +101278,9 @@ Get trust portal overview in Comp AI. Configure the live Trust Center, custom do
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args334,
     tool: async (client, args335, ctx) => {
@@ -101279,9 +101371,9 @@ Retrieve Trust Center settings used to configure public status, custom domains,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await trustPortalTrustPortalControllerGetSettingsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -101622,9 +101714,9 @@ List org-authored custom frameworks with their trust portal selection in Comp AI
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await trustPortalTrustPortalControllerListCustomFrameworksV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -101741,9 +101833,9 @@ List custom links for trust portal in Comp AI. Configure the live Trust Center,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args337,
     tool: async (client, args338, ctx) => {
@@ -101969,9 +102061,9 @@ List vendors configured for trust portal in Comp AI. Configure the live Trust Ce
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args339,
     tool: async (client, args340, ctx) => {
@@ -102088,8 +102180,8 @@ var init_trustPortalTrustPortalControllerRemoveCustomFrameworkBadgeV12 = __esm((
 Remove a custom framework's Trust Portal badge image in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -102181,8 +102273,8 @@ var init_trustPortalTrustPortalControllerRemoveFaviconV12 = __esm(() => {
 Remove the trust portal favicon in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -102392,7 +102484,7 @@ Enable or disable the trust portal in Comp AI. Configure the live Trust Center,
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -102484,7 +102576,7 @@ Update allowed domains for the trust portal in Comp AI. Configure the live Trust
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -102600,7 +102692,7 @@ Update allowed emails for the trust portal in Comp AI. Configure the live Trust
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -102738,7 +102830,7 @@ Enable/disable a custom framework on the trust portal and set its status in Comp
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -102981,7 +103073,7 @@ Update trust portal FAQs in Comp AI. Configure the live Trust Center, custom dom
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -103074,7 +103166,7 @@ Update trust portal framework settings in Comp AI. Configure the live Trust Cent
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -103310,7 +103402,7 @@ Show or hide the Security Questionnaire on the public trust portal in Comp AI. C
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -103994,9 +104086,9 @@ Returns the organization's non-archived controls with their trust portal visibil
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await trustPortalTrustPortalControlsControllerListControlsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -104454,9 +104546,9 @@ Returns the residual-risk acceptance history for a vendor, newest first. Each ev
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args354,
     tool: async (client, args355, ctx) => {
@@ -104970,8 +105062,8 @@ var init_vendorsVendorsControllerDeleteVendorV12 = __esm(() => {
 Permanently removes a vendor from the organization. This action cannot be undone.`,
     annotations: {
       title: "",
-      destructiveHint: false,
-      idempotentHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
       openWorldHint: false,
       readOnlyHint: false
     },
@@ -105064,9 +105156,9 @@ List third-party vendors with risk level, owner, assessment status, and Trust Ce
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     tool: async (client, ctx) => {
       const [result] = await vendorsVendorsControllerGetAllVendorsV1(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -105269,9 +105361,9 @@ Retrieve one vendor record with ownership, review status, risk context, and thir
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args358,
     tool: async (client, args359, ctx) => {
@@ -105389,9 +105481,9 @@ Search global vendor records to prefill vendor profiles and speed up third-party
     annotations: {
       title: "",
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: false,
-      readOnlyHint: false
+      readOnlyHint: true
     },
     args: args359,
     tool: async (client, args360, ctx) => {
@@ -105819,7 +105911,7 @@ Update vendor ownership, risk attributes, review metadata, and third-party compl
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "CompAi",
-    version: "0.3.0"
+    version: "0.3.2"
   });
   const getClient = deps.getSDK || (() => new CompAiCore({
     security: deps.security,
@@ -106157,6 +106249,9 @@ function createMCPServer(deps) {
   tool(tool$ismsISMSControllerSubmitForApprovalV1);
   tool(tool$ismsISMSControllerApproveV1);
   tool(tool$ismsISMSControllerDeclineV1);
+  tool(tool$ismsISMSControllerUploadDocumentFileV1);
+  tool(tool$ismsISMSControllerRemoveDocumentFileV1);
+  tool(tool$ismsISMSControllerSetContentSourceV1);
   tool(tool$ismsISMSControllerDriftV1);
   tool(tool$ismsISMSControllerRiskTreatmentV1);
   tool(tool$ismsISMSControllerGetVersionsV1);
@@ -106166,9 +106261,6 @@ function createMCPServer(deps) {
   tool(tool$ismsISMSRegistersControllerDeleteRowV1);
   tool(tool$ismsISMSRegistersControllerBulkCreateMeasurementsV1);
   tool(tool$ismsISMSRegistersControllerSaveNarrativeV1);
-  tool(tool$ismsISMSProfileControllerGetProfileV1);
-  tool(tool$ismsISMSProfileControllerSaveProfileV1);
-  tool(tool$ismsISMSProfileControllerGenerateAllV1);
   tool(tool$taskManagementTaskManagementControllerGetTaskItemsStatsV1);
   tool(tool$taskManagementTaskManagementControllerGetTaskItemsV1);
   tool(tool$taskManagementTaskManagementControllerCreateTaskItemV1);
@@ -106419,11 +106511,11 @@ var init_server2 = __esm(() => {
   init_ismsISMSControllerGetDocumentV12();
   init_ismsISMSControllerGetVersionsV12();
   init_ismsISMSControllerRemoveControlV12();
+  init_ismsISMSControllerRemoveDocumentFileV12();
   init_ismsISMSControllerRiskTreatmentV12();
+  init_ismsISMSControllerSetContentSourceV12();
   init_ismsISMSControllerSubmitForApprovalV12();
-  init_ismsISMSProfileControllerGenerateAllV12();
-  init_ismsISMSProfileControllerGetProfileV12();
-  init_ismsISMSProfileControllerSaveProfileV12();
+  init_ismsISMSControllerUploadDocumentFileV12();
   init_ismsISMSRegistersControllerBulkCreateMeasurementsV12();
   init_ismsISMSRegistersControllerCreateRowV12();
   init_ismsISMSRegistersControllerDeleteRowV12();
@@ -108603,12 +108695,30 @@ Approves an ISMS document that is pending review, freezing an immutable publishe
       description: `Decline an ISMS document
 
 Rejects an ISMS document that is pending review, setting its status to declined without creating a version. Only the assigned approver can call it, using a signed-in user session; there is no field for a reason or comment.`
+    },
+    {
+      name: "upload-isms-document-file",
+      description: `Upload a file as an ISMS document's content
+
+Attaches a customer-supplied PDF or DOCX as the document's content. Does not switch the document to it — call PATCH content-source with 'uploaded' for that. Returns the refreshed document.`
+    },
+    {
+      name: "remove-isms-document-file",
+      description: `Remove an ISMS document's uploaded file
+
+Detaches the pending uploaded file from an ISMS document's draft. Already-published versions keep their own copy and stay downloadable. Returns the refreshed document.`
+    },
+    {
+      name: "set-isms-content-source",
+      description: `Switch an ISMS document between form and uploaded file
+
+Sets whether the document's content is 'generated' from our form or is the 'uploaded' customer file. Switching is lossless — the form data and the uploaded file are both kept. Returns the refreshed document.`
     },
     {
       name: "drift",
       description: `Detect drift against the approved snapshot
 
-Reports whether an ISMS document's derived content is stale by comparing the platform data captured at its last generation against current data. Returns isStale plus the changed sources; a never-generated document reports no-baseline.`
+Reports whether an ISMS document's derived content is stale by comparing the platform data captured at its last generation against current data. Returns hasBaseline, isStale and the changed sources; with no baseline, nothing has drifted.`
     },
     {
       name: "risk-treatment",
@@ -108626,7 +108736,7 @@ Lists an ISMS document's published versions newest first with version number, pu
       name: "isms-export-document",
       description: `Export an ISMS document as PDF or DOCX
 
-Downloads an ISMS document as a PDF or DOCX file rather than JSON. Defaults to the latest published version, not the working draft; pass a versionId to retrieve a specific historical version exactly as it was approved.`
+Downloads an ISMS document as PDF or DOCX rather than JSON. Defaults to the latest published version; pass a versionId for a specific historical version exactly as approved, or draft:true for the working draft (their uploaded file).`
     },
     {
       name: "create-row",
@@ -108657,24 +108767,6 @@ Record measurements for several metrics/periods in one save (Metrics due / backf
       description: `Save a singleton document narrative
 
 Replaces the working draft narrative of a document type that stores one, such as ISMS scope, leadership commitment, internal audit or risk assessment methodology. The narrative object is fully replaced, not merged.`
-    },
-    {
-      name: "get-profile",
-      description: `Get the ISMS wizard profile, defaults and members
-
-Returns the saved ISO 27001 onboarding wizard answers for a framework, together with computed defaults for scope, objectives and capabilities, and the member list usable as approver ids. Requires a frameworkId query parameter.`
-    },
-    {
-      name: "save-profile",
-      description: `Save (partial) ISMS wizard answers
-
-Saves ISO 27001 onboarding wizard answers as a partial update — supplied fields are merged onto stored answers and arrays replace wholesale. Set complete to true to validate the full set. Saving does not regenerate documents.`
-    },
-    {
-      name: "generate-all",
-      description: `Ensure and regenerate all ISMS documents
-
-Creates any missing ISMS documents and regenerates all twelve in dependency order for a framework. Runs synchronously and is slow, with no job id to poll. Reverts every approved document to draft. Call after completing the wizard.`
     },
     {
       name: "get-task-items-stats",
@@ -110108,7 +110200,7 @@ http_headers = { "apikey" = "YOUR_APIKEY" }`;
         <h1>Instructions</h1>
         <p>One-click installation for Claude Desktop users</p>
         <div class="instruction-item">
-          <a href="https://github.com/trycompai/comp-v2/releases/download/v0.3.0/mcp-server.mcpb" download="mcp-server.mcpb" class="action-button header-action" style="display: inline-flex; margin-bottom: 16px;">
+          <a href="https://github.com/trycompai/comp-v2/releases/download/v0.3.2/mcp-server.mcpb" download="mcp-server.mcpb" class="action-button header-action" style="display: inline-flex; margin-bottom: 16px;">
             \uD83D\uDCE5 Download MCP Bundle
           </a>
         </div>
@@ -112733,7 +112825,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.3.0"
+    currentVersion: "0.3.2"
   }
 });
 run(app, process4.argv.slice(2), buildContext(process4));
@@ -112741,5 +112833,5 @@ export {
   app
 };
 
-//# debugId=FE3D968CD34015D364756E2164756E21
+//# debugId=8A8558C8AE3CD5A564756E2164756E21
 //# sourceMappingURL=mcp-server.js.map