@wave-ai-os/wave-cli 0.1.61 → 0.1.62

package/dist/index.cjs

@@ -3,7 +3,7 @@
 
 // src/index.ts
 var import_commander2 = require("commander");
-var import_zod19 = require("zod");
+var import_zod20 = require("zod");
 
 // src/cli.ts
 var import_commander = require("commander");
@@ -1759,6 +1759,21 @@ async function runGraphqlMutationCommand(input) {
       variableTypes: input.variableTypes,
       selectionSet: input.selectionSet ?? "{ ok status errorCode data errors }"
     });
+    if (result.envelope.ok && input.transformMutationPayload) {
+      const envelopeData = result.envelope.data;
+      if (!isRecord(envelopeData) || !Object.prototype.hasOwnProperty.call(envelopeData, input.field)) {
+        throw new CliError({
+          message: "Mutation response was missing its expected payload.",
+          kind: "malformed_response",
+          status: 502,
+          exitCode: EXIT_CODES.networkOrUpstream
+        });
+      }
+      result.envelope.data = {
+        ...envelopeData,
+        [input.field]: input.transformMutationPayload(envelopeData[input.field])
+      };
+    }
     printEnvelopeAndExit(result);
   } catch (error) {
     if (isEnvelopeEmittedSignal(error)) {
@@ -4216,7 +4231,7 @@ function findSkillById(id) {
   };
 }
 function registerSkillCommands(program) {
-  const skills = program.command("skills").description("Read Skill records");
+  const skills = program.command("skills").description("Skill record operations");
   skills.command("list").description("List Skill records").option("--scope <scope>", "Filter skills by scope").option("--query <query>", "Filter skills by search query").option("--limit <limit>", "Limit skills returned").requiredOption("--json", "Emit the stable JSON envelope").action(async (opts, cmd) => {
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
@@ -4242,7 +4257,7 @@ function registerSkillCommands(program) {
       isList: true
     });
   });
-  skills.command("show").description("Read one Skill record by id").requiredOption("--id <id>", "Skill id").requiredOption("--json", "Emit the stable JSON envelope").action(async (opts, cmd) => {
+  skills.command("show").description("Read one persisted Skill record by id").requiredOption("--id <id>", "Skill id").requiredOption("--json", "Emit the stable JSON envelope").action(async (opts, cmd) => {
     const id = idSchema7.parse(opts.id);
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
@@ -14886,6 +14901,259 @@ function registerAiNotesCommands(program) {
   });
 }
 
+// src/commands/atlasAuthoring.ts
+var import_zod19 = require("zod");
+var idSchema14 = import_zod19.z.string().trim().min(1);
+var idempotencyKeySchema = import_zod19.z.string().min(1).refine((value) => value.trim() === value, "Idempotency key must not have leading or trailing whitespace.");
+var skillScopeSchema = import_zod19.z.enum(["ADMIN_GLOBAL", "MEMBER_PERSONAL"]);
+var isoDateSchema = import_zod19.z.iso.date();
+var AGENT_SELECTION = `{
+  id
+  type
+  name
+  slug
+  description
+  notes
+  status
+  visibility
+  model
+  runWhenMentioned
+  webAccessEnabled
+  organizationId
+  memberId
+  createdAt
+  updatedAt
+}`;
+var AUTOMATION_SELECTION = `{
+  id
+  type
+  summary
+  slug
+  description
+  notes
+  status
+  priority
+  taskType
+  aiTaskConfig
+  organizationId
+  memberId
+  createdAt
+  updatedAt
+}`;
+function asRecord9(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function asRequiredString(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function parseBooleanOption(value, optionName) {
+  if (value === void 0) return void 0;
+  if (value === "true") return true;
+  if (value === "false") return false;
+  throw new CliError({
+    message: `Invalid ${optionName}: expected true or false.`,
+    kind: "invalid_args",
+    status: 400,
+    exitCode: EXIT_CODES.invalidArgs
+  });
+}
+function parseCommaSeparatedStrings(value) {
+  if (value === void 0) return void 0;
+  const entries = String(value).split(",").map((entry2) => entry2.trim()).filter((entry2) => entry2.length > 0);
+  if (entries.length === 0) {
+    throw new CliError({
+      message: "--trusted-urls must include at least one URL.",
+      kind: "invalid_args",
+      status: 400,
+      exitCode: EXIT_CODES.invalidArgs
+    });
+  }
+  return entries;
+}
+function parseJson(value, optionName) {
+  try {
+    return JSON.parse(value);
+  } catch (error) {
+    throw new CliError({
+      message: error instanceof Error ? `Invalid ${optionName}: ${error.message}` : `Invalid ${optionName}.`,
+      kind: "invalid_args",
+      status: 400,
+      exitCode: EXIT_CODES.invalidArgs
+    });
+  }
+}
+function normalizePersistedCreatePayload(payload) {
+  const mutation = asRecord9(payload);
+  const mutationData = asRecord9(mutation?.data);
+  const persisted = asRecord9(mutationData?.data) ?? mutationData;
+  const attributes = asRecord9(persisted?.attributes);
+  const meta = asRecord9(mutationData?.meta);
+  const idempotency = asRecord9(meta?.atlas_idempotency);
+  const id = asRequiredString(persisted?.id);
+  const slug = asRequiredString(persisted?.slug) ?? asRequiredString(attributes?.slug);
+  const replay = idempotency?.replay;
+  if (!mutation || !mutationData || !persisted || !id || !slug || !idempotency || typeof replay !== "boolean") {
+    throw new CliError({
+      message: "Create response did not include persisted id/slug and idempotency metadata.",
+      kind: "malformed_response",
+      status: 502,
+      exitCode: EXIT_CODES.networkOrUpstream
+    });
+  }
+  return {
+    ok: mutation.ok,
+    status: mutation.status,
+    errorCode: mutation.errorCode ?? null,
+    errors: mutation.errors ?? null,
+    persisted: { id, slug },
+    idempotency: {
+      object_type: asRequiredString(idempotency.object_type),
+      id: asRequiredString(idempotency.id),
+      slug: asRequiredString(idempotency.slug),
+      idempotency_key: asRequiredString(idempotency.idempotency_key),
+      fingerprint: asRequiredString(idempotency.fingerprint),
+      replay,
+      action: asRequiredString(idempotency.action)
+    }
+  };
+}
+function registerAtlasAuthoringCommands(program) {
+  const agents = program.command("agents").description("Bounded Agent authoring operations");
+  agents.command("create").description("Create an Agent through the API-owned createAgent contract").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--name <name>").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").option("--status <status>").option("--visibility <visibility>").option("--model <model>").option("--run-when-mentioned <boolean>", "true or false").option("--web-access-enabled <boolean>", "true or false").option("--trusted-urls <urls>", "Comma-separated trusted URLs").action(async (opts, cmd) => {
+    const idempotencyKey = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const runWhenMentioned = parseBooleanOption(opts.runWhenMentioned, "--run-when-mentioned");
+    const webAccessEnabled = parseBooleanOption(opts.webAccessEnabled, "--web-access-enabled");
+    const trustedUrls = parseCommaSeparatedStrings(opts.trustedUrls);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlMutationCommand({
+      command: "agents.create",
+      operationName: "AgentsCreate",
+      runtimeOptions: context.runtimeOptions,
+      field: "create_agent",
+      variableTypes: {
+        organization_id: "ID!",
+        params: "CreateAgentParamsInput!",
+        idempotency_key: "String!"
+      },
+      variables: {
+        organization_id: organizationId,
+        params: {
+          agent: {
+            ...opts.name !== void 0 ? { name: String(opts.name) } : {},
+            ...opts.description !== void 0 ? { description: String(opts.description) } : {},
+            ...opts.notes !== void 0 ? { notes: String(opts.notes) } : {},
+            ...opts.memberId !== void 0 ? { member_id: idSchema14.parse(opts.memberId) } : {},
+            ...opts.status !== void 0 ? { status: String(opts.status) } : {},
+            ...opts.visibility !== void 0 ? { visibility: String(opts.visibility) } : {},
+            ...opts.model !== void 0 ? { model: String(opts.model) } : {},
+            ...runWhenMentioned !== void 0 ? { run_when_mentioned: runWhenMentioned } : {},
+            ...webAccessEnabled !== void 0 ? { web_access_enabled: webAccessEnabled } : {},
+            ...trustedUrls !== void 0 ? { trusted_urls: trustedUrls } : {}
+          }
+        },
+        idempotency_key: idempotencyKey
+      },
+      transformMutationPayload: normalizePersistedCreatePayload
+    });
+  });
+  agents.command("show").description("Read one persisted Agent by id").requiredOption("--id <id>", "Agent id").action(async (opts, cmd) => {
+    const id = idSchema14.parse(opts.id);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlQueryCommand({
+      command: "agents.show",
+      operationName: "AgentsShow",
+      runtimeOptions: context.runtimeOptions,
+      field: "agent",
+      variables: { organization_id: organizationId, id },
+      variableTypes: { organization_id: "ID!", id: "ID!" },
+      selectionSet: AGENT_SELECTION,
+      isShow: true
+    });
+  });
+  const automations = program.command("automations").description("Bounded Automation authoring operations");
+  automations.command("create").description("Create an Automation through the API-owned createAutomation contract").requiredOption("--summary <summary>").requiredOption("--ai-task-config <json>", "Valid JSON for the API-owned ai_task_config field").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").option("--status <status>").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").action(async (opts, cmd) => {
+    const idempotencyKey = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlMutationCommand({
+      command: "automations.create",
+      operationName: "AutomationsCreate",
+      runtimeOptions: context.runtimeOptions,
+      field: "create_automation",
+      variableTypes: {
+        organization_id: "ID!",
+        input: "CreateAutomationInput!",
+        idempotency_key: "String!"
+      },
+      variables: {
+        organization_id: organizationId,
+        input: {
+          summary: idSchema14.parse(opts.summary),
+          ai_task_config: parseJson(String(opts.aiTaskConfig), "--ai-task-config"),
+          ...opts.description !== void 0 ? { description: String(opts.description) } : {},
+          ...opts.notes !== void 0 ? { notes: String(opts.notes) } : {},
+          ...opts.memberId !== void 0 ? { member_id: idSchema14.parse(opts.memberId) } : {},
+          ...opts.status !== void 0 ? { status: String(opts.status) } : {},
+          ...opts.priority !== void 0 ? { priority: String(opts.priority) } : {},
+          ...opts.dueDate !== void 0 ? { due_date: isoDateSchema.parse(opts.dueDate) } : {}
+        },
+        idempotency_key: idempotencyKey
+      },
+      transformMutationPayload: normalizePersistedCreatePayload
+    });
+  });
+  automations.command("show").description("Read one persisted Automation by id").requiredOption("--id <id>", "Automation id").action(async (opts, cmd) => {
+    const id = idSchema14.parse(opts.id);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlQueryCommand({
+      command: "automations.show",
+      operationName: "AutomationsShow",
+      runtimeOptions: context.runtimeOptions,
+      field: "automation",
+      variables: { organization_id: organizationId, id },
+      variableTypes: { organization_id: "ID!", id: "ID!" },
+      selectionSet: AUTOMATION_SELECTION,
+      isShow: true
+    });
+  });
+  const skills = program.commands.find((command) => command.name() === "skills");
+  if (!skills) {
+    throw new Error("Skills command must be registered before Atlas authoring commands.");
+  }
+  skills.command("create").description("Create a Skill through the API-owned createSkill contract").requiredOption("--name <name>").requiredOption("--scope <scope>", "ADMIN_GLOBAL or MEMBER_PERSONAL").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--emoji <emoji>").option("--description <description>").action(async (opts, cmd) => {
+    const idempotencyKey = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlMutationCommand({
+      command: "skills.create",
+      operationName: "SkillsCreate",
+      runtimeOptions: context.runtimeOptions,
+      field: "create_skill",
+      variableTypes: {
+        organization_id: "ID!",
+        input: "CreateSkillInput!",
+        idempotency_key: "String!"
+      },
+      variables: {
+        organization_id: organizationId,
+        input: {
+          name: idSchema14.parse(opts.name),
+          scope: skillScopeSchema.parse(opts.scope),
+          ...opts.emoji !== void 0 ? { emoji: String(opts.emoji) } : {},
+          ...opts.description !== void 0 ? { description: String(opts.description) } : {}
+        },
+        idempotency_key: idempotencyKey
+      },
+      transformMutationPayload: normalizePersistedCreatePayload
+    });
+  });
+}
+
 // src/commands/discovery.ts
 var import_node_fs4 = require("fs");
 var import_node_path4 = require("path");
@@ -14906,6 +15174,8 @@ var PRIMARY_NAMESPACES = [
   "rocks",
   "meetings",
   "members",
+  "agents",
+  "automations",
   "skills",
   "teams",
   "issues",
@@ -15019,20 +15289,62 @@ var NAMESPACE_DOCS = {
   skills: {
     name: "skills",
     tier: "primary",
-    description: "Read-only Skill record proof surfaces.",
+    description: "Skill record readback and bounded create operations.",
     examples: [
       "wave skills list --json",
       "wave skills list --scope ADMIN_GLOBAL --json",
-      "wave skills show --id 123 --json"
+      "wave skills show --id 123 --json",
+      'wave skills create --name "Weekly planning" --scope MEMBER_PERSONAL --idempotency-key skill-create-001'
     ],
     schema: {
       output: "json-envelope-default",
-      readOnly: true,
+      mutates: true,
       safety: [
         "Uses API-owned Skill GraphQL read fields only.",
-        "Does not create, update, destroy, archive, approve, or apply Skill records."
+        "Create calls only createSkill with an explicit idempotency key.",
+        "Skill create supports the API-defined ADMIN_GLOBAL and MEMBER_PERSONAL scopes.",
+        "Does not update, destroy, archive, approve, or apply Skill records."
       ],
-      commands: ["list", "show"]
+      commands: ["list", "show", "create"]
+    }
+  },
+  agents: {
+    name: "agents",
+    tier: "primary",
+    description: "Bounded Agent create and persisted readback operations.",
+    examples: [
+      'wave agents create --name "Planning helper" --idempotency-key agent-create-001',
+      "wave agents show --id 123"
+    ],
+    schema: {
+      output: "json-envelope-default",
+      mutates: true,
+      safety: [
+        "Create calls only createAgent with an explicit idempotency key.",
+        "Create preserves API-owned defaults by sending only supplied typed Agent fields.",
+        "Show uses the API-owned agent query by id; no slug fallback is implemented."
+      ],
+      commands: ["create", "show"]
+    }
+  },
+  automations: {
+    name: "automations",
+    tier: "primary",
+    description: "Bounded Automation create and persisted readback operations.",
+    examples: [
+      `wave automations create --summary "Weekly review" --ai-task-config '{"prompt":"Review tasks"}' --idempotency-key automation-create-001`,
+      "wave automations show --id 123"
+    ],
+    schema: {
+      output: "json-envelope-default",
+      mutates: true,
+      safety: [
+        "Create calls only createAutomation with an explicit idempotency key.",
+        "Only the API-defined ai_task_config field accepts validated JSON.",
+        "Does not create a project Task, run an Automation, or invoke AI OS actions.",
+        "Show uses the API-owned automation query by id; no slug fallback is implemented."
+      ],
+      commands: ["create", "show"]
     }
   },
   broadcast: {
@@ -15846,7 +16158,7 @@ function attachDiscoveryHelp(program) {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.1.61";
+var CLI_VERSION = "0.1.62";
 
 // src/cli.ts
 function buildCli(options) {
@@ -15901,6 +16213,7 @@ function buildCli(options) {
   registerMeetingCommands(program);
   registerMemberCommands(program);
   registerSkillCommands(program);
+  registerAtlasAuthoringCommands(program);
   registerTeamCommands(program);
   registerOrganizationCommands(program);
   registerIssueCommands(program);
@@ -15980,13 +16293,13 @@ main().catch((error) => {
     });
     return;
   }
-  if (error instanceof import_zod19.ZodError || error instanceof import_commander2.InvalidArgumentError) {
+  if (error instanceof import_zod20.ZodError || error instanceof import_commander2.InvalidArgumentError) {
     printCliFailure({
       status: 400,
       code: "invalid_args",
       message: "Invalid command arguments.",
       details: {
-        issues: error instanceof import_zod19.ZodError ? error.issues : [{ message: error.message, code: "invalid_argument" }]
+        issues: error instanceof import_zod20.ZodError ? error.issues : [{ message: error.message, code: "invalid_argument" }]
       },
       exitCode: EXIT_CODES.invalidArgs
     });

package/dist/index.js

@@ -1758,6 +1758,21 @@ async function runGraphqlMutationCommand(input) {
       variableTypes: input.variableTypes,
       selectionSet: input.selectionSet ?? "{ ok status errorCode data errors }"
     });
+    if (result.envelope.ok && input.transformMutationPayload) {
+      const envelopeData = result.envelope.data;
+      if (!isRecord(envelopeData) || !Object.prototype.hasOwnProperty.call(envelopeData, input.field)) {
+        throw new CliError({
+          message: "Mutation response was missing its expected payload.",
+          kind: "malformed_response",
+          status: 502,
+          exitCode: EXIT_CODES.networkOrUpstream
+        });
+      }
+      result.envelope.data = {
+        ...envelopeData,
+        [input.field]: input.transformMutationPayload(envelopeData[input.field])
+      };
+    }
     printEnvelopeAndExit(result);
   } catch (error) {
     if (isEnvelopeEmittedSignal(error)) {
@@ -4215,7 +4230,7 @@ function findSkillById(id) {
   };
 }
 function registerSkillCommands(program) {
-  const skills = program.command("skills").description("Read Skill records");
+  const skills = program.command("skills").description("Skill record operations");
   skills.command("list").description("List Skill records").option("--scope <scope>", "Filter skills by scope").option("--query <query>", "Filter skills by search query").option("--limit <limit>", "Limit skills returned").requiredOption("--json", "Emit the stable JSON envelope").action(async (opts, cmd) => {
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
@@ -4241,7 +4256,7 @@ function registerSkillCommands(program) {
       isList: true
     });
   });
-  skills.command("show").description("Read one Skill record by id").requiredOption("--id <id>", "Skill id").requiredOption("--json", "Emit the stable JSON envelope").action(async (opts, cmd) => {
+  skills.command("show").description("Read one persisted Skill record by id").requiredOption("--id <id>", "Skill id").requiredOption("--json", "Emit the stable JSON envelope").action(async (opts, cmd) => {
     const id = idSchema7.parse(opts.id);
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
@@ -14885,6 +14900,259 @@ function registerAiNotesCommands(program) {
   });
 }
 
+// src/commands/atlasAuthoring.ts
+import { z as z19 } from "zod";
+var idSchema14 = z19.string().trim().min(1);
+var idempotencyKeySchema = z19.string().min(1).refine((value) => value.trim() === value, "Idempotency key must not have leading or trailing whitespace.");
+var skillScopeSchema = z19.enum(["ADMIN_GLOBAL", "MEMBER_PERSONAL"]);
+var isoDateSchema = z19.iso.date();
+var AGENT_SELECTION = `{
+  id
+  type
+  name
+  slug
+  description
+  notes
+  status
+  visibility
+  model
+  runWhenMentioned
+  webAccessEnabled
+  organizationId
+  memberId
+  createdAt
+  updatedAt
+}`;
+var AUTOMATION_SELECTION = `{
+  id
+  type
+  summary
+  slug
+  description
+  notes
+  status
+  priority
+  taskType
+  aiTaskConfig
+  organizationId
+  memberId
+  createdAt
+  updatedAt
+}`;
+function asRecord9(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function asRequiredString(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function parseBooleanOption(value, optionName) {
+  if (value === void 0) return void 0;
+  if (value === "true") return true;
+  if (value === "false") return false;
+  throw new CliError({
+    message: `Invalid ${optionName}: expected true or false.`,
+    kind: "invalid_args",
+    status: 400,
+    exitCode: EXIT_CODES.invalidArgs
+  });
+}
+function parseCommaSeparatedStrings(value) {
+  if (value === void 0) return void 0;
+  const entries = String(value).split(",").map((entry2) => entry2.trim()).filter((entry2) => entry2.length > 0);
+  if (entries.length === 0) {
+    throw new CliError({
+      message: "--trusted-urls must include at least one URL.",
+      kind: "invalid_args",
+      status: 400,
+      exitCode: EXIT_CODES.invalidArgs
+    });
+  }
+  return entries;
+}
+function parseJson(value, optionName) {
+  try {
+    return JSON.parse(value);
+  } catch (error) {
+    throw new CliError({
+      message: error instanceof Error ? `Invalid ${optionName}: ${error.message}` : `Invalid ${optionName}.`,
+      kind: "invalid_args",
+      status: 400,
+      exitCode: EXIT_CODES.invalidArgs
+    });
+  }
+}
+function normalizePersistedCreatePayload(payload) {
+  const mutation = asRecord9(payload);
+  const mutationData = asRecord9(mutation?.data);
+  const persisted = asRecord9(mutationData?.data) ?? mutationData;
+  const attributes = asRecord9(persisted?.attributes);
+  const meta = asRecord9(mutationData?.meta);
+  const idempotency = asRecord9(meta?.atlas_idempotency);
+  const id = asRequiredString(persisted?.id);
+  const slug = asRequiredString(persisted?.slug) ?? asRequiredString(attributes?.slug);
+  const replay = idempotency?.replay;
+  if (!mutation || !mutationData || !persisted || !id || !slug || !idempotency || typeof replay !== "boolean") {
+    throw new CliError({
+      message: "Create response did not include persisted id/slug and idempotency metadata.",
+      kind: "malformed_response",
+      status: 502,
+      exitCode: EXIT_CODES.networkOrUpstream
+    });
+  }
+  return {
+    ok: mutation.ok,
+    status: mutation.status,
+    errorCode: mutation.errorCode ?? null,
+    errors: mutation.errors ?? null,
+    persisted: { id, slug },
+    idempotency: {
+      object_type: asRequiredString(idempotency.object_type),
+      id: asRequiredString(idempotency.id),
+      slug: asRequiredString(idempotency.slug),
+      idempotency_key: asRequiredString(idempotency.idempotency_key),
+      fingerprint: asRequiredString(idempotency.fingerprint),
+      replay,
+      action: asRequiredString(idempotency.action)
+    }
+  };
+}
+function registerAtlasAuthoringCommands(program) {
+  const agents = program.command("agents").description("Bounded Agent authoring operations");
+  agents.command("create").description("Create an Agent through the API-owned createAgent contract").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--name <name>").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").option("--status <status>").option("--visibility <visibility>").option("--model <model>").option("--run-when-mentioned <boolean>", "true or false").option("--web-access-enabled <boolean>", "true or false").option("--trusted-urls <urls>", "Comma-separated trusted URLs").action(async (opts, cmd) => {
+    const idempotencyKey = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const runWhenMentioned = parseBooleanOption(opts.runWhenMentioned, "--run-when-mentioned");
+    const webAccessEnabled = parseBooleanOption(opts.webAccessEnabled, "--web-access-enabled");
+    const trustedUrls = parseCommaSeparatedStrings(opts.trustedUrls);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlMutationCommand({
+      command: "agents.create",
+      operationName: "AgentsCreate",
+      runtimeOptions: context.runtimeOptions,
+      field: "create_agent",
+      variableTypes: {
+        organization_id: "ID!",
+        params: "CreateAgentParamsInput!",
+        idempotency_key: "String!"
+      },
+      variables: {
+        organization_id: organizationId,
+        params: {
+          agent: {
+            ...opts.name !== void 0 ? { name: String(opts.name) } : {},
+            ...opts.description !== void 0 ? { description: String(opts.description) } : {},
+            ...opts.notes !== void 0 ? { notes: String(opts.notes) } : {},
+            ...opts.memberId !== void 0 ? { member_id: idSchema14.parse(opts.memberId) } : {},
+            ...opts.status !== void 0 ? { status: String(opts.status) } : {},
+            ...opts.visibility !== void 0 ? { visibility: String(opts.visibility) } : {},
+            ...opts.model !== void 0 ? { model: String(opts.model) } : {},
+            ...runWhenMentioned !== void 0 ? { run_when_mentioned: runWhenMentioned } : {},
+            ...webAccessEnabled !== void 0 ? { web_access_enabled: webAccessEnabled } : {},
+            ...trustedUrls !== void 0 ? { trusted_urls: trustedUrls } : {}
+          }
+        },
+        idempotency_key: idempotencyKey
+      },
+      transformMutationPayload: normalizePersistedCreatePayload
+    });
+  });
+  agents.command("show").description("Read one persisted Agent by id").requiredOption("--id <id>", "Agent id").action(async (opts, cmd) => {
+    const id = idSchema14.parse(opts.id);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlQueryCommand({
+      command: "agents.show",
+      operationName: "AgentsShow",
+      runtimeOptions: context.runtimeOptions,
+      field: "agent",
+      variables: { organization_id: organizationId, id },
+      variableTypes: { organization_id: "ID!", id: "ID!" },
+      selectionSet: AGENT_SELECTION,
+      isShow: true
+    });
+  });
+  const automations = program.command("automations").description("Bounded Automation authoring operations");
+  automations.command("create").description("Create an Automation through the API-owned createAutomation contract").requiredOption("--summary <summary>").requiredOption("--ai-task-config <json>", "Valid JSON for the API-owned ai_task_config field").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").option("--status <status>").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").action(async (opts, cmd) => {
+    const idempotencyKey = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlMutationCommand({
+      command: "automations.create",
+      operationName: "AutomationsCreate",
+      runtimeOptions: context.runtimeOptions,
+      field: "create_automation",
+      variableTypes: {
+        organization_id: "ID!",
+        input: "CreateAutomationInput!",
+        idempotency_key: "String!"
+      },
+      variables: {
+        organization_id: organizationId,
+        input: {
+          summary: idSchema14.parse(opts.summary),
+          ai_task_config: parseJson(String(opts.aiTaskConfig), "--ai-task-config"),
+          ...opts.description !== void 0 ? { description: String(opts.description) } : {},
+          ...opts.notes !== void 0 ? { notes: String(opts.notes) } : {},
+          ...opts.memberId !== void 0 ? { member_id: idSchema14.parse(opts.memberId) } : {},
+          ...opts.status !== void 0 ? { status: String(opts.status) } : {},
+          ...opts.priority !== void 0 ? { priority: String(opts.priority) } : {},
+          ...opts.dueDate !== void 0 ? { due_date: isoDateSchema.parse(opts.dueDate) } : {}
+        },
+        idempotency_key: idempotencyKey
+      },
+      transformMutationPayload: normalizePersistedCreatePayload
+    });
+  });
+  automations.command("show").description("Read one persisted Automation by id").requiredOption("--id <id>", "Automation id").action(async (opts, cmd) => {
+    const id = idSchema14.parse(opts.id);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlQueryCommand({
+      command: "automations.show",
+      operationName: "AutomationsShow",
+      runtimeOptions: context.runtimeOptions,
+      field: "automation",
+      variables: { organization_id: organizationId, id },
+      variableTypes: { organization_id: "ID!", id: "ID!" },
+      selectionSet: AUTOMATION_SELECTION,
+      isShow: true
+    });
+  });
+  const skills = program.commands.find((command) => command.name() === "skills");
+  if (!skills) {
+    throw new Error("Skills command must be registered before Atlas authoring commands.");
+  }
+  skills.command("create").description("Create a Skill through the API-owned createSkill contract").requiredOption("--name <name>").requiredOption("--scope <scope>", "ADMIN_GLOBAL or MEMBER_PERSONAL").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--emoji <emoji>").option("--description <description>").action(async (opts, cmd) => {
+    const idempotencyKey = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlMutationCommand({
+      command: "skills.create",
+      operationName: "SkillsCreate",
+      runtimeOptions: context.runtimeOptions,
+      field: "create_skill",
+      variableTypes: {
+        organization_id: "ID!",
+        input: "CreateSkillInput!",
+        idempotency_key: "String!"
+      },
+      variables: {
+        organization_id: organizationId,
+        input: {
+          name: idSchema14.parse(opts.name),
+          scope: skillScopeSchema.parse(opts.scope),
+          ...opts.emoji !== void 0 ? { emoji: String(opts.emoji) } : {},
+          ...opts.description !== void 0 ? { description: String(opts.description) } : {}
+        },
+        idempotency_key: idempotencyKey
+      },
+      transformMutationPayload: normalizePersistedCreatePayload
+    });
+  });
+}
+
 // src/commands/discovery.ts
 import { existsSync as existsSync3, readFileSync } from "fs";
 import { join as join3 } from "path";
@@ -14905,6 +15173,8 @@ var PRIMARY_NAMESPACES = [
   "rocks",
   "meetings",
   "members",
+  "agents",
+  "automations",
   "skills",
   "teams",
   "issues",
@@ -15018,20 +15288,62 @@ var NAMESPACE_DOCS = {
   skills: {
     name: "skills",
     tier: "primary",
-    description: "Read-only Skill record proof surfaces.",
+    description: "Skill record readback and bounded create operations.",
     examples: [
       "wave skills list --json",
       "wave skills list --scope ADMIN_GLOBAL --json",
-      "wave skills show --id 123 --json"
+      "wave skills show --id 123 --json",
+      'wave skills create --name "Weekly planning" --scope MEMBER_PERSONAL --idempotency-key skill-create-001'
     ],
     schema: {
       output: "json-envelope-default",
-      readOnly: true,
+      mutates: true,
       safety: [
         "Uses API-owned Skill GraphQL read fields only.",
-        "Does not create, update, destroy, archive, approve, or apply Skill records."
+        "Create calls only createSkill with an explicit idempotency key.",
+        "Skill create supports the API-defined ADMIN_GLOBAL and MEMBER_PERSONAL scopes.",
+        "Does not update, destroy, archive, approve, or apply Skill records."
       ],
-      commands: ["list", "show"]
+      commands: ["list", "show", "create"]
+    }
+  },
+  agents: {
+    name: "agents",
+    tier: "primary",
+    description: "Bounded Agent create and persisted readback operations.",
+    examples: [
+      'wave agents create --name "Planning helper" --idempotency-key agent-create-001',
+      "wave agents show --id 123"
+    ],
+    schema: {
+      output: "json-envelope-default",
+      mutates: true,
+      safety: [
+        "Create calls only createAgent with an explicit idempotency key.",
+        "Create preserves API-owned defaults by sending only supplied typed Agent fields.",
+        "Show uses the API-owned agent query by id; no slug fallback is implemented."
+      ],
+      commands: ["create", "show"]
+    }
+  },
+  automations: {
+    name: "automations",
+    tier: "primary",
+    description: "Bounded Automation create and persisted readback operations.",
+    examples: [
+      `wave automations create --summary "Weekly review" --ai-task-config '{"prompt":"Review tasks"}' --idempotency-key automation-create-001`,
+      "wave automations show --id 123"
+    ],
+    schema: {
+      output: "json-envelope-default",
+      mutates: true,
+      safety: [
+        "Create calls only createAutomation with an explicit idempotency key.",
+        "Only the API-defined ai_task_config field accepts validated JSON.",
+        "Does not create a project Task, run an Automation, or invoke AI OS actions.",
+        "Show uses the API-owned automation query by id; no slug fallback is implemented."
+      ],
+      commands: ["create", "show"]
     }
   },
   broadcast: {
@@ -15845,7 +16157,7 @@ function attachDiscoveryHelp(program) {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.1.61";
+var CLI_VERSION = "0.1.62";
 
 // src/cli.ts
 function buildCli(options) {
@@ -15900,6 +16212,7 @@ function buildCli(options) {
   registerMeetingCommands(program);
   registerMemberCommands(program);
   registerSkillCommands(program);
+  registerAtlasAuthoringCommands(program);
   registerTeamCommands(program);
   registerOrganizationCommands(program);
   registerIssueCommands(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wave-ai-os/wave-cli",
-  "version": "0.1.61",
+  "version": "0.1.62",
   "type": "module",
   "bin": {
     "wave": "dist/index.js"