@wave-ai-os/wave-cli 0.1.72 → 0.1.74

package/README.md

@@ -74,6 +74,12 @@ The API base defaults to production: `https://api.ourwave.io`. Supply
 `--base-url`, stdin context, `WAVE_API_BASE_URL`/`WAVE_API_URL`, or config only
 when using a non-production environment.
 
+`wave login` always opens the production browser login at
+`https://app.ourwave.io/login` unless `--base-url` is supplied explicitly.
+The CLI uses `https://api.ourwave.io` only to create and poll that login
+session. Ambient endpoint configuration never redirects a bare login to a
+local environment.
+
 Organization-scoped data commands use the organization certified by the
 authenticated CLI token. `--organization-id` is the only local override.
 

package/dist/index.cjs

@@ -2556,6 +2556,20 @@ function parseSearchQuery(raw) {
   }
   return raw.trim();
 }
+function parseRequiredOption(raw, flag) {
+  if (typeof raw !== "string" || raw.trim().length === 0) {
+    throw new CliError({
+      message: `Missing required option: --${flag}.`,
+      kind: "invalid_args",
+      status: 400,
+      exitCode: EXIT_CODES.invalidArgs
+    });
+  }
+  return raw.trim();
+}
+function optionKey(flag) {
+  return flag.replace(/-([a-z])/g, (_, char) => char.toUpperCase());
+}
 function asRecord2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -2592,10 +2606,21 @@ function buildSearchTransform(query, transformData) {
   };
 }
 function registerGraphqlSearchCommand(command, config) {
-  command.command("search").description("Search records through the existing list GraphQL contract").requiredOption("--query <query>", "Search query").option("--page <page>").option("--per <per>").action(async (opts, cmd) => {
+  const requiredOptions = config.requiredOptions ?? [];
+  const search = command.command("search").description("Search records through the existing list GraphQL contract").requiredOption("--query <query>", "Search query").option("--page <page>").option("--per <per>");
+  for (const requiredOption of requiredOptions) {
+    search.requiredOption(`--${requiredOption.flag} <${requiredOption.flag}>`, requiredOption.description);
+  }
+  search.action(async (opts, cmd) => {
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
     const query = parseSearchQuery(opts.query);
+    const requiredVariables = Object.fromEntries(
+      requiredOptions.map((requiredOption) => [
+        requiredOption.variable,
+        parseRequiredOption(opts[optionKey(requiredOption.flag)], requiredOption.flag)
+      ])
+    );
     await runGraphqlQueryCommand({
       command: `${config.command}.search`,
       operationName: config.operationName,
@@ -2604,13 +2629,20 @@ function registerGraphqlSearchCommand(command, config) {
       variables: normalizeGraphqlVariables2({
         organization_id: organizationId,
         page: opts.page,
-        per: opts.per
+        per: opts.per,
+        ...requiredVariables
       }),
       variableTypes: {
         organization_id: "ID!",
         page: "Int",
         per: "Int",
-        ...config.variableTypes ?? {}
+        ...config.variableTypes ?? {},
+        ...Object.fromEntries(
+          requiredOptions.map((requiredOption) => [
+            requiredOption.variable,
+            requiredOption.variableType
+          ])
+        )
       },
       isList: true,
       selectionSet: config.selectionSet,
@@ -3448,8 +3480,8 @@ function registerEntityCrudCommands(program, config) {
     const extraQuery = allowQueryJson ? parseQueryJson(opts.queryJson ? String(opts.queryJson) : void 0) : {};
     const mappedKnownParams = Object.fromEntries(
       listParams.map((param) => {
-        const optionKey = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
-        return [param, opts[optionKey]];
+        const optionKey2 = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
+        return [param, opts[optionKey2]];
       })
     );
     const variables = normalizeGraphqlVariables2({
@@ -3488,8 +3520,8 @@ function registerEntityCrudCommands(program, config) {
     const defaultField = config.showField ?? (config.resourcePath === "feedback" ? "feedback" : toSingularResourceName(config.resourcePath));
     const mappedShowParams = Object.fromEntries(
       showParams.map((param) => {
-        const optionKey = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
-        return [param, opts[optionKey]];
+        const optionKey2 = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
+        return [param, opts[optionKey2]];
       })
     );
     const defaultVariables = normalizeGraphqlVariables2({
@@ -5788,12 +5820,41 @@ function registerFoundationCommands(program) {
 var import_zod13 = require("zod");
 var idSchema12 = import_zod13.z.string().min(1);
 var jsonObjectSchema = import_zod13.z.record(import_zod13.z.string(), import_zod13.z.unknown());
-function buildChildListSelectionSet(parentField, extraFields = []) {
+var NOTE_DETAIL_FIELDS = [
+  "notes",
+  "hasNotes",
+  "hasUnreadNotes",
+  "notesUpdatedAt",
+  "notesLastReadAt",
+  "estimateIds"
+];
+var PARENT_KIND_LABELS = {
+  task: "task",
+  rock: "rock",
+  listItem: "list item",
+  todo: "todo",
+  issue: "issue",
+  meeting: "meeting"
+};
+function requiredParentSearchOption(parentFlag, parentKind) {
+  return [
+    {
+      flag: parentFlag,
+      variable: parentFlag.replace(/-/g, "_"),
+      variableType: "ID!",
+      description: `Parent ${PARENT_KIND_LABELS[parentKind]} ID`
+    }
+  ];
+}
+function buildChildResourceSelectionSet(parentField, extraFields = []) {
   const fields = Array.from(
     /* @__PURE__ */ new Set(["id", "type", "name", "status", "priority", "rank", "dueDate", "memberId", parentField, ...extraFields])
   );
   const attributeFields = fields.filter((field) => field !== "type");
-  return `{ data { ${fields.join(" ")} attributes { ${attributeFields.join(" ")} } } count currentPage totalPages }`;
+  return `{ ${fields.join(" ")} attributes { ${attributeFields.join(" ")} } }`;
+}
+function buildChildListSelectionSet(parentField, extraFields = []) {
+  return `{ data ${buildChildResourceSelectionSet(parentField, extraFields)} count currentPage totalPages }`;
 }
 function parseJsonObject2(raw) {
   try {
@@ -5937,7 +5998,31 @@ function registerChildCommands(program, config) {
       )
     });
   });
-  registerGraphqlSearchCommand(command, {
+  if (config.showField) {
+    const showField = config.showField;
+    command.command("show").requiredOption("--id <id>").action(async (opts, cmd) => {
+      const context = await resolveCommandContext(cmd.optsWithGlobals());
+      const organizationId = resolveOrganizationId(context.organizationId);
+      const id = idSchema12.parse(opts.id);
+      await runGraphqlQueryCommand({
+        command: `${config.command}.show`,
+        ...config.showOperationName ? { operationName: config.showOperationName } : {},
+        runtimeOptions: context.runtimeOptions,
+        field: showField,
+        variables: {
+          organization_id: organizationId,
+          id
+        },
+        variableTypes: {
+          organization_id: "ID!",
+          id: "ID!"
+        },
+        ...config.showSelectionSet ? { selectionSet: config.showSelectionSet } : {},
+        isShow: true
+      });
+    });
+  }
+  const searchConfig = {
     command: config.command,
     operationName: `${config.listOperationName.replace(/List$/, "")}Search`,
     field: config.listField,
@@ -5947,8 +6032,10 @@ function registerChildCommands(program, config) {
       config.parentKind,
       void 0,
       config.listParentTypedField
-    )
-  });
+    ),
+    ...config.searchRequiredOptions ? { requiredOptions: config.searchRequiredOptions } : {}
+  };
+  registerGraphqlSearchCommand(command, searchConfig);
   command.command("create").requiredOption("--data-json <dataJson>").action(async (opts, cmd) => {
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
@@ -6019,6 +6106,10 @@ function registerChildEntityCommands(program) {
     destroyOperationName: "SubtasksDestroy",
     listSelectionSet: buildChildListSelectionSet("taskId"),
     listParentTypedField: "taskId",
+    searchRequiredOptions: requiredParentSearchOption("task-id", "task"),
+    showField: "subtask",
+    showOperationName: "SubtasksShow",
+    showSelectionSet: buildChildResourceSelectionSet("taskId", NOTE_DETAIL_FIELDS),
     normalizeCreateBody: normalizeSubtaskCreateBody
   });
   registerChildCommands(program, {
@@ -6036,7 +6127,12 @@ function registerChildEntityCommands(program) {
     createOperationName: "MilestonesCreate",
     updateOperationName: "MilestonesUpdate",
     destroyOperationName: "MilestonesDestroy",
-    listSelectionSet: buildChildListSelectionSet("rockId")
+    listSelectionSet: buildChildListSelectionSet("rockId"),
+    listParentTypedField: "rockId",
+    searchRequiredOptions: requiredParentSearchOption("rock-id", "rock"),
+    showField: "milestone",
+    showOperationName: "MilestonesShow",
+    showSelectionSet: buildChildResourceSelectionSet("rockId", NOTE_DETAIL_FIELDS)
   });
   registerChildCommands(program, {
     command: "subitems",
@@ -6054,7 +6150,11 @@ function registerChildEntityCommands(program) {
     updateOperationName: "SubitemsUpdate",
     destroyOperationName: "SubitemsDestroy",
     listSelectionSet: buildChildListSelectionSet("listItemId"),
-    listParentTypedField: "listItemId"
+    listParentTypedField: "listItemId",
+    searchRequiredOptions: requiredParentSearchOption("list-item-id", "listItem"),
+    showField: "subitem",
+    showOperationName: "SubitemsShow",
+    showSelectionSet: buildChildResourceSelectionSet("listItemId", NOTE_DETAIL_FIELDS)
   });
   registerChildCommands(program, {
     command: "subtodos",
@@ -6072,7 +6172,11 @@ function registerChildEntityCommands(program) {
     updateOperationName: "SubtodosUpdate",
     destroyOperationName: "SubtodosDestroy",
     listSelectionSet: buildChildListSelectionSet("todoId"),
-    listParentTypedField: "todoId"
+    listParentTypedField: "todoId",
+    searchRequiredOptions: requiredParentSearchOption("todo-id", "todo"),
+    showField: "sub_todo",
+    showOperationName: "SubtodosShow",
+    showSelectionSet: buildChildResourceSelectionSet("todoId", NOTE_DETAIL_FIELDS)
   });
   registerChildCommands(program, {
     command: "subissues",
@@ -6090,7 +6194,11 @@ function registerChildEntityCommands(program) {
     updateOperationName: "SubissuesUpdate",
     destroyOperationName: "SubissuesDestroy",
     listSelectionSet: buildChildListSelectionSet("issueId"),
-    listParentTypedField: "issueId"
+    listParentTypedField: "issueId",
+    searchRequiredOptions: requiredParentSearchOption("issue-id", "issue"),
+    showField: "sub_issue",
+    showOperationName: "SubissuesShow",
+    showSelectionSet: buildChildResourceSelectionSet("issueId", NOTE_DETAIL_FIELDS)
   });
   registerChildCommands(program, {
     command: "talking-points",
@@ -10166,6 +10274,9 @@ function asRecord5(value) {
 function asString(value) {
   return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
+function resolveLoginApiBaseUrl(globals) {
+  return asString(globals.baseUrl) ?? DEFAULT_PRODUCTION_API_BASE_URL;
+}
 function localUiBaseUrlFor(baseUrl) {
   const parsed = new URL(baseUrl);
   if ((parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1") && parsed.port === "3009") {
@@ -10228,9 +10339,10 @@ async function authStatusRequest(params) {
 }
 async function runTokenLogin(cmd, opts) {
   const context = await resolveUnscopedCommandContext(cmd.optsWithGlobals());
-  const baseUrl = context.runtimeOptions.baseUrl;
   const globals = cmd.optsWithGlobals();
-  const token = typeof opts.token === "string" && opts.token.trim() !== "" ? opts.token.trim() : typeof globals.token === "string" && globals.token.trim() !== "" ? globals.token.trim() : context.runtimeOptions.token;
+  const explicitBaseUrl = asString(globals.baseUrl);
+  const baseUrl = resolveLoginApiBaseUrl(globals);
+  const token = typeof opts.token === "string" && opts.token.trim() !== "" ? opts.token.trim() : typeof globals.token === "string" && globals.token.trim() !== "" ? globals.token.trim() : explicitBaseUrl ? context.runtimeOptions.token : void 0;
   const timeoutMs = positiveInt2(opts.timeoutMs ?? context.runtimeOptions.timeoutMs, 1e4);
   if (!baseUrl) {
     return printEnvelopeAndExit({
@@ -10295,7 +10407,7 @@ async function runTokenLogin(cmd, opts) {
 }
 async function runBrowserLogin(cmd, opts) {
   const context = await resolveUnscopedCommandContext(cmd.optsWithGlobals());
-  const baseUrl = context.runtimeOptions.baseUrl;
+  const baseUrl = resolveLoginApiBaseUrl(cmd.optsWithGlobals());
   const timeoutMs = positiveInt2(opts.timeoutMs ?? context.runtimeOptions.timeoutMs, DEFAULT_LOGIN_TIMEOUT_MS);
   const pollIntervalMs = positiveInt2(opts.pollIntervalMs, DEFAULT_POLL_INTERVAL_MS);
   if (!baseUrl) {
@@ -15233,7 +15345,7 @@ function registerAtlasAuthoringCommands(program) {
     });
   });
   const automations = program.command("automations").description("Bounded Automation authoring operations");
-  automations.command("create").description("Create an Automation through the API-owned createAutomation contract").requiredOption("--summary <summary>").requiredOption("--ai-task-config <json>", "Valid JSON for the API-owned ai_task_config field").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").option("--agent-id <agentId>", "Optional executor Agent id for a repeat Automation").option("--status <status>").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").action(async (opts, cmd) => {
+  automations.command("create").description("Create a Backlog Automation through the API-owned createAutomation contract").requiredOption("--summary <summary>").requiredOption("--ai-task-config <json>", "Valid JSON for the API-owned ai_task_config field").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").option("--agent-id <agentId>", "Optional executor Agent id for a repeat Automation").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").action(async (opts, cmd) => {
     const idempotencyKey = idempotencyKeySchema.parse(opts.idempotencyKey);
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
@@ -15256,7 +15368,6 @@ function registerAtlasAuthoringCommands(program) {
           ...opts.notes !== void 0 ? { notes: String(opts.notes) } : {},
           ...opts.memberId !== void 0 ? { member_id: idSchema14.parse(opts.memberId) } : {},
           ...opts.agentId !== void 0 ? { agentId: idSchema14.parse(opts.agentId) } : {},
-          ...opts.status !== void 0 ? { status: String(opts.status) } : {},
           ...opts.priority !== void 0 ? { priority: String(opts.priority) } : {},
           ...opts.dueDate !== void 0 ? { due_date: isoDateSchema.parse(opts.dueDate) } : {}
         },
@@ -15280,10 +15391,10 @@ function registerAtlasAuthoringCommands(program) {
       isShow: true
     });
   });
-  automations.command("update").description("Update one task-backed Automation through the API-owned updateTask contract").requiredOption("--id <idOrSlug>", "Automation id or slug").requiredOption(
+  automations.command("update").description("Update one task-backed Automation without changing its system-managed status").requiredOption("--id <idOrSlug>", "Automation id or slug").requiredOption(
     "--expected-update-version <version>",
     "Exact opaque updateVersion value from automations show; rejects stale writes"
-  ).option("--summary <summary>").option("--description <description>").option("--notes <notes>").option("--status <status>").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").option("--ai-task-config <json>", "Complete replacement ai_task_config JSON object").option(
+  ).option("--summary <summary>").option("--description <description>").option("--notes <notes>").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").option("--ai-task-config <json>", "Complete replacement ai_task_config JSON object").option(
     "--agent-id <agentId>",
     "Executor Agent id; requires --ai-task-config and is stored in that config"
   ).action(async (opts, cmd) => {
@@ -15303,7 +15414,6 @@ function registerAtlasAuthoringCommands(program) {
       ...opts.summary !== void 0 ? { summary: String(opts.summary) } : {},
       ...opts.description !== void 0 ? { description: String(opts.description) } : {},
       ...opts.notes !== void 0 ? { notes: String(opts.notes) } : {},
-      ...opts.status !== void 0 ? { status: String(opts.status) } : {},
       ...opts.priority !== void 0 ? { priority: String(opts.priority) } : {},
       ...opts.dueDate !== void 0 ? { due_date: isoDateSchema.parse(opts.dueDate) } : {},
       ...aiTaskConfig !== void 0 ? { ai_task_config: aiTaskConfig } : {}
@@ -15422,7 +15532,7 @@ var import_node_path4 = require("path");
 var import_node_crypto3 = require("crypto");
 
 // src/version.ts
-var CLI_VERSION = "0.1.72";
+var CLI_VERSION = "0.1.74";
 
 // src/operationMetadata.ts
 var DISCOVERY_OPERATION_IDS = [
@@ -15618,6 +15728,7 @@ var READ_OPERATION_IDS = [
   "members.show",
   "milestones.list",
   "milestones.search",
+  "milestones.show",
   "news.list",
   "news.search",
   "news.show",
@@ -15688,12 +15799,16 @@ var READ_OPERATION_IDS = [
   "stand-ups.show",
   "subissues.list",
   "subissues.search",
+  "subissues.show",
   "subitems.list",
   "subitems.search",
+  "subitems.show",
   "subtasks.list",
   "subtasks.search",
+  "subtasks.show",
   "subtodos.list",
   "subtodos.search",
+  "subtodos.show",
   "support.counts",
   "support.inbox",
   "support.knowledge-articles",
@@ -16254,9 +16369,10 @@ var NAMESPACE_DOCS = {
       mutates: true,
       safety: [
         "Create calls only createAutomation with an explicit idempotency key.",
+        "Create always leaves status to the API, which starts Automations in Backlog.",
         "Only the API-defined ai_task_config field accepts validated JSON.",
         "Optional executor Agent linkage is sent only through the API-defined top-level agentId input.",
-        "Update calls only updateTask with an exact opaque updateVersion token; it cannot change task type, ownership, or project linkage.",
+        "Update calls only updateTask with an exact opaque updateVersion token; it cannot change status, task type, ownership, or project linkage.",
         "Does not create a project Task, run an Automation, or invoke AI OS actions.",
         "Show uses the API-owned automation query by id; no slug fallback is implemented."
       ],

package/dist/index.js

@@ -2555,6 +2555,20 @@ function parseSearchQuery(raw) {
   }
   return raw.trim();
 }
+function parseRequiredOption(raw, flag) {
+  if (typeof raw !== "string" || raw.trim().length === 0) {
+    throw new CliError({
+      message: `Missing required option: --${flag}.`,
+      kind: "invalid_args",
+      status: 400,
+      exitCode: EXIT_CODES.invalidArgs
+    });
+  }
+  return raw.trim();
+}
+function optionKey(flag) {
+  return flag.replace(/-([a-z])/g, (_, char) => char.toUpperCase());
+}
 function asRecord2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -2591,10 +2605,21 @@ function buildSearchTransform(query, transformData) {
   };
 }
 function registerGraphqlSearchCommand(command, config) {
-  command.command("search").description("Search records through the existing list GraphQL contract").requiredOption("--query <query>", "Search query").option("--page <page>").option("--per <per>").action(async (opts, cmd) => {
+  const requiredOptions = config.requiredOptions ?? [];
+  const search = command.command("search").description("Search records through the existing list GraphQL contract").requiredOption("--query <query>", "Search query").option("--page <page>").option("--per <per>");
+  for (const requiredOption of requiredOptions) {
+    search.requiredOption(`--${requiredOption.flag} <${requiredOption.flag}>`, requiredOption.description);
+  }
+  search.action(async (opts, cmd) => {
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
     const query = parseSearchQuery(opts.query);
+    const requiredVariables = Object.fromEntries(
+      requiredOptions.map((requiredOption) => [
+        requiredOption.variable,
+        parseRequiredOption(opts[optionKey(requiredOption.flag)], requiredOption.flag)
+      ])
+    );
     await runGraphqlQueryCommand({
       command: `${config.command}.search`,
       operationName: config.operationName,
@@ -2603,13 +2628,20 @@ function registerGraphqlSearchCommand(command, config) {
       variables: normalizeGraphqlVariables2({
         organization_id: organizationId,
         page: opts.page,
-        per: opts.per
+        per: opts.per,
+        ...requiredVariables
       }),
       variableTypes: {
         organization_id: "ID!",
         page: "Int",
         per: "Int",
-        ...config.variableTypes ?? {}
+        ...config.variableTypes ?? {},
+        ...Object.fromEntries(
+          requiredOptions.map((requiredOption) => [
+            requiredOption.variable,
+            requiredOption.variableType
+          ])
+        )
       },
       isList: true,
       selectionSet: config.selectionSet,
@@ -3447,8 +3479,8 @@ function registerEntityCrudCommands(program, config) {
     const extraQuery = allowQueryJson ? parseQueryJson(opts.queryJson ? String(opts.queryJson) : void 0) : {};
     const mappedKnownParams = Object.fromEntries(
       listParams.map((param) => {
-        const optionKey = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
-        return [param, opts[optionKey]];
+        const optionKey2 = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
+        return [param, opts[optionKey2]];
       })
     );
     const variables = normalizeGraphqlVariables2({
@@ -3487,8 +3519,8 @@ function registerEntityCrudCommands(program, config) {
     const defaultField = config.showField ?? (config.resourcePath === "feedback" ? "feedback" : toSingularResourceName(config.resourcePath));
     const mappedShowParams = Object.fromEntries(
       showParams.map((param) => {
-        const optionKey = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
-        return [param, opts[optionKey]];
+        const optionKey2 = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
+        return [param, opts[optionKey2]];
       })
     );
     const defaultVariables = normalizeGraphqlVariables2({
@@ -5787,12 +5819,41 @@ function registerFoundationCommands(program) {
 import { z as z13 } from "zod";
 var idSchema12 = z13.string().min(1);
 var jsonObjectSchema = z13.record(z13.string(), z13.unknown());
-function buildChildListSelectionSet(parentField, extraFields = []) {
+var NOTE_DETAIL_FIELDS = [
+  "notes",
+  "hasNotes",
+  "hasUnreadNotes",
+  "notesUpdatedAt",
+  "notesLastReadAt",
+  "estimateIds"
+];
+var PARENT_KIND_LABELS = {
+  task: "task",
+  rock: "rock",
+  listItem: "list item",
+  todo: "todo",
+  issue: "issue",
+  meeting: "meeting"
+};
+function requiredParentSearchOption(parentFlag, parentKind) {
+  return [
+    {
+      flag: parentFlag,
+      variable: parentFlag.replace(/-/g, "_"),
+      variableType: "ID!",
+      description: `Parent ${PARENT_KIND_LABELS[parentKind]} ID`
+    }
+  ];
+}
+function buildChildResourceSelectionSet(parentField, extraFields = []) {
   const fields = Array.from(
     /* @__PURE__ */ new Set(["id", "type", "name", "status", "priority", "rank", "dueDate", "memberId", parentField, ...extraFields])
   );
   const attributeFields = fields.filter((field) => field !== "type");
-  return `{ data { ${fields.join(" ")} attributes { ${attributeFields.join(" ")} } } count currentPage totalPages }`;
+  return `{ ${fields.join(" ")} attributes { ${attributeFields.join(" ")} } }`;
+}
+function buildChildListSelectionSet(parentField, extraFields = []) {
+  return `{ data ${buildChildResourceSelectionSet(parentField, extraFields)} count currentPage totalPages }`;
 }
 function parseJsonObject2(raw) {
   try {
@@ -5936,7 +5997,31 @@ function registerChildCommands(program, config) {
       )
     });
   });
-  registerGraphqlSearchCommand(command, {
+  if (config.showField) {
+    const showField = config.showField;
+    command.command("show").requiredOption("--id <id>").action(async (opts, cmd) => {
+      const context = await resolveCommandContext(cmd.optsWithGlobals());
+      const organizationId = resolveOrganizationId(context.organizationId);
+      const id = idSchema12.parse(opts.id);
+      await runGraphqlQueryCommand({
+        command: `${config.command}.show`,
+        ...config.showOperationName ? { operationName: config.showOperationName } : {},
+        runtimeOptions: context.runtimeOptions,
+        field: showField,
+        variables: {
+          organization_id: organizationId,
+          id
+        },
+        variableTypes: {
+          organization_id: "ID!",
+          id: "ID!"
+        },
+        ...config.showSelectionSet ? { selectionSet: config.showSelectionSet } : {},
+        isShow: true
+      });
+    });
+  }
+  const searchConfig = {
     command: config.command,
     operationName: `${config.listOperationName.replace(/List$/, "")}Search`,
     field: config.listField,
@@ -5946,8 +6031,10 @@ function registerChildCommands(program, config) {
       config.parentKind,
       void 0,
       config.listParentTypedField
-    )
-  });
+    ),
+    ...config.searchRequiredOptions ? { requiredOptions: config.searchRequiredOptions } : {}
+  };
+  registerGraphqlSearchCommand(command, searchConfig);
   command.command("create").requiredOption("--data-json <dataJson>").action(async (opts, cmd) => {
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
@@ -6018,6 +6105,10 @@ function registerChildEntityCommands(program) {
     destroyOperationName: "SubtasksDestroy",
     listSelectionSet: buildChildListSelectionSet("taskId"),
     listParentTypedField: "taskId",
+    searchRequiredOptions: requiredParentSearchOption("task-id", "task"),
+    showField: "subtask",
+    showOperationName: "SubtasksShow",
+    showSelectionSet: buildChildResourceSelectionSet("taskId", NOTE_DETAIL_FIELDS),
     normalizeCreateBody: normalizeSubtaskCreateBody
   });
   registerChildCommands(program, {
@@ -6035,7 +6126,12 @@ function registerChildEntityCommands(program) {
     createOperationName: "MilestonesCreate",
     updateOperationName: "MilestonesUpdate",
     destroyOperationName: "MilestonesDestroy",
-    listSelectionSet: buildChildListSelectionSet("rockId")
+    listSelectionSet: buildChildListSelectionSet("rockId"),
+    listParentTypedField: "rockId",
+    searchRequiredOptions: requiredParentSearchOption("rock-id", "rock"),
+    showField: "milestone",
+    showOperationName: "MilestonesShow",
+    showSelectionSet: buildChildResourceSelectionSet("rockId", NOTE_DETAIL_FIELDS)
   });
   registerChildCommands(program, {
     command: "subitems",
@@ -6053,7 +6149,11 @@ function registerChildEntityCommands(program) {
     updateOperationName: "SubitemsUpdate",
     destroyOperationName: "SubitemsDestroy",
     listSelectionSet: buildChildListSelectionSet("listItemId"),
-    listParentTypedField: "listItemId"
+    listParentTypedField: "listItemId",
+    searchRequiredOptions: requiredParentSearchOption("list-item-id", "listItem"),
+    showField: "subitem",
+    showOperationName: "SubitemsShow",
+    showSelectionSet: buildChildResourceSelectionSet("listItemId", NOTE_DETAIL_FIELDS)
   });
   registerChildCommands(program, {
     command: "subtodos",
@@ -6071,7 +6171,11 @@ function registerChildEntityCommands(program) {
     updateOperationName: "SubtodosUpdate",
     destroyOperationName: "SubtodosDestroy",
     listSelectionSet: buildChildListSelectionSet("todoId"),
-    listParentTypedField: "todoId"
+    listParentTypedField: "todoId",
+    searchRequiredOptions: requiredParentSearchOption("todo-id", "todo"),
+    showField: "sub_todo",
+    showOperationName: "SubtodosShow",
+    showSelectionSet: buildChildResourceSelectionSet("todoId", NOTE_DETAIL_FIELDS)
   });
   registerChildCommands(program, {
     command: "subissues",
@@ -6089,7 +6193,11 @@ function registerChildEntityCommands(program) {
     updateOperationName: "SubissuesUpdate",
     destroyOperationName: "SubissuesDestroy",
     listSelectionSet: buildChildListSelectionSet("issueId"),
-    listParentTypedField: "issueId"
+    listParentTypedField: "issueId",
+    searchRequiredOptions: requiredParentSearchOption("issue-id", "issue"),
+    showField: "sub_issue",
+    showOperationName: "SubissuesShow",
+    showSelectionSet: buildChildResourceSelectionSet("issueId", NOTE_DETAIL_FIELDS)
   });
   registerChildCommands(program, {
     command: "talking-points",
@@ -10165,6 +10273,9 @@ function asRecord5(value) {
 function asString(value) {
   return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
+function resolveLoginApiBaseUrl(globals) {
+  return asString(globals.baseUrl) ?? DEFAULT_PRODUCTION_API_BASE_URL;
+}
 function localUiBaseUrlFor(baseUrl) {
   const parsed = new URL(baseUrl);
   if ((parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1") && parsed.port === "3009") {
@@ -10227,9 +10338,10 @@ async function authStatusRequest(params) {
 }
 async function runTokenLogin(cmd, opts) {
   const context = await resolveUnscopedCommandContext(cmd.optsWithGlobals());
-  const baseUrl = context.runtimeOptions.baseUrl;
   const globals = cmd.optsWithGlobals();
-  const token = typeof opts.token === "string" && opts.token.trim() !== "" ? opts.token.trim() : typeof globals.token === "string" && globals.token.trim() !== "" ? globals.token.trim() : context.runtimeOptions.token;
+  const explicitBaseUrl = asString(globals.baseUrl);
+  const baseUrl = resolveLoginApiBaseUrl(globals);
+  const token = typeof opts.token === "string" && opts.token.trim() !== "" ? opts.token.trim() : typeof globals.token === "string" && globals.token.trim() !== "" ? globals.token.trim() : explicitBaseUrl ? context.runtimeOptions.token : void 0;
   const timeoutMs = positiveInt2(opts.timeoutMs ?? context.runtimeOptions.timeoutMs, 1e4);
   if (!baseUrl) {
     return printEnvelopeAndExit({
@@ -10294,7 +10406,7 @@ async function runTokenLogin(cmd, opts) {
 }
 async function runBrowserLogin(cmd, opts) {
   const context = await resolveUnscopedCommandContext(cmd.optsWithGlobals());
-  const baseUrl = context.runtimeOptions.baseUrl;
+  const baseUrl = resolveLoginApiBaseUrl(cmd.optsWithGlobals());
   const timeoutMs = positiveInt2(opts.timeoutMs ?? context.runtimeOptions.timeoutMs, DEFAULT_LOGIN_TIMEOUT_MS);
   const pollIntervalMs = positiveInt2(opts.pollIntervalMs, DEFAULT_POLL_INTERVAL_MS);
   if (!baseUrl) {
@@ -15232,7 +15344,7 @@ function registerAtlasAuthoringCommands(program) {
     });
   });
   const automations = program.command("automations").description("Bounded Automation authoring operations");
-  automations.command("create").description("Create an Automation through the API-owned createAutomation contract").requiredOption("--summary <summary>").requiredOption("--ai-task-config <json>", "Valid JSON for the API-owned ai_task_config field").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").option("--agent-id <agentId>", "Optional executor Agent id for a repeat Automation").option("--status <status>").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").action(async (opts, cmd) => {
+  automations.command("create").description("Create a Backlog Automation through the API-owned createAutomation contract").requiredOption("--summary <summary>").requiredOption("--ai-task-config <json>", "Valid JSON for the API-owned ai_task_config field").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").option("--agent-id <agentId>", "Optional executor Agent id for a repeat Automation").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").action(async (opts, cmd) => {
     const idempotencyKey = idempotencyKeySchema.parse(opts.idempotencyKey);
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
@@ -15255,7 +15367,6 @@ function registerAtlasAuthoringCommands(program) {
           ...opts.notes !== void 0 ? { notes: String(opts.notes) } : {},
           ...opts.memberId !== void 0 ? { member_id: idSchema14.parse(opts.memberId) } : {},
           ...opts.agentId !== void 0 ? { agentId: idSchema14.parse(opts.agentId) } : {},
-          ...opts.status !== void 0 ? { status: String(opts.status) } : {},
           ...opts.priority !== void 0 ? { priority: String(opts.priority) } : {},
           ...opts.dueDate !== void 0 ? { due_date: isoDateSchema.parse(opts.dueDate) } : {}
         },
@@ -15279,10 +15390,10 @@ function registerAtlasAuthoringCommands(program) {
       isShow: true
     });
   });
-  automations.command("update").description("Update one task-backed Automation through the API-owned updateTask contract").requiredOption("--id <idOrSlug>", "Automation id or slug").requiredOption(
+  automations.command("update").description("Update one task-backed Automation without changing its system-managed status").requiredOption("--id <idOrSlug>", "Automation id or slug").requiredOption(
     "--expected-update-version <version>",
     "Exact opaque updateVersion value from automations show; rejects stale writes"
-  ).option("--summary <summary>").option("--description <description>").option("--notes <notes>").option("--status <status>").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").option("--ai-task-config <json>", "Complete replacement ai_task_config JSON object").option(
+  ).option("--summary <summary>").option("--description <description>").option("--notes <notes>").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").option("--ai-task-config <json>", "Complete replacement ai_task_config JSON object").option(
     "--agent-id <agentId>",
     "Executor Agent id; requires --ai-task-config and is stored in that config"
   ).action(async (opts, cmd) => {
@@ -15302,7 +15413,6 @@ function registerAtlasAuthoringCommands(program) {
       ...opts.summary !== void 0 ? { summary: String(opts.summary) } : {},
       ...opts.description !== void 0 ? { description: String(opts.description) } : {},
       ...opts.notes !== void 0 ? { notes: String(opts.notes) } : {},
-      ...opts.status !== void 0 ? { status: String(opts.status) } : {},
       ...opts.priority !== void 0 ? { priority: String(opts.priority) } : {},
       ...opts.dueDate !== void 0 ? { due_date: isoDateSchema.parse(opts.dueDate) } : {},
       ...aiTaskConfig !== void 0 ? { ai_task_config: aiTaskConfig } : {}
@@ -15421,7 +15531,7 @@ import { join as join3 } from "path";
 import { createHash } from "crypto";
 
 // src/version.ts
-var CLI_VERSION = "0.1.72";
+var CLI_VERSION = "0.1.74";
 
 // src/operationMetadata.ts
 var DISCOVERY_OPERATION_IDS = [
@@ -15617,6 +15727,7 @@ var READ_OPERATION_IDS = [
   "members.show",
   "milestones.list",
   "milestones.search",
+  "milestones.show",
   "news.list",
   "news.search",
   "news.show",
@@ -15687,12 +15798,16 @@ var READ_OPERATION_IDS = [
   "stand-ups.show",
   "subissues.list",
   "subissues.search",
+  "subissues.show",
   "subitems.list",
   "subitems.search",
+  "subitems.show",
   "subtasks.list",
   "subtasks.search",
+  "subtasks.show",
   "subtodos.list",
   "subtodos.search",
+  "subtodos.show",
   "support.counts",
   "support.inbox",
   "support.knowledge-articles",
@@ -16253,9 +16368,10 @@ var NAMESPACE_DOCS = {
       mutates: true,
       safety: [
         "Create calls only createAutomation with an explicit idempotency key.",
+        "Create always leaves status to the API, which starts Automations in Backlog.",
         "Only the API-defined ai_task_config field accepts validated JSON.",
         "Optional executor Agent linkage is sent only through the API-defined top-level agentId input.",
-        "Update calls only updateTask with an exact opaque updateVersion token; it cannot change task type, ownership, or project linkage.",
+        "Update calls only updateTask with an exact opaque updateVersion token; it cannot change status, task type, ownership, or project linkage.",
         "Does not create a project Task, run an Automation, or invoke AI OS actions.",
         "Show uses the API-owned automation query by id; no slug fallback is implemented."
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wave-ai-os/wave-cli",
-  "version": "0.1.72",
+  "version": "0.1.74",
   "type": "module",
   "bin": {
     "wave": "dist/index.js"