@wave-ai-os/wave-cli 0.1.84 → 0.1.86

package/dist/index.cjs

@@ -705,6 +705,7 @@ async function requestGraphqlHttp(params) {
       "Content-Type": "application/json",
       "X-Origin": "wave-cli",
       "X-Request-Id": params.requestId,
+      ...params.input.config.requestId ? { "X-Wave-Trace-Id": params.input.config.requestId } : {},
       ...params.input.config.agentName ? { "X-Agent-Name": params.input.config.agentName } : {},
       ...params.input.config.agentRunId ? { "X-Agent-Run-Id": params.input.config.agentRunId } : {}
     },
@@ -1149,6 +1150,7 @@ function isEnvelopeEmittedSignal(error) {
 
 // src/commandRunner.ts
 var RESOURCE_QUERY_FIELDS = {
+  tool_config: ["toolKey", "expectations"],
   task: [
     "summary",
     "slug",
@@ -1655,7 +1657,7 @@ function buildCliErrorEnvelope(params) {
 }
 function defaultQuerySelectionSet(field, isList) {
   if (field === "organization") {
-    return "{ id slug membersCount organizationDetail { title name description timezone workspaceName } }";
+    return "{ id slug membersCount organizationDetail { title name description numberOfEmployees stage timezone companyUrl estimateType companyRevenuePeriod okrName workspaceName } }";
   }
   const canonicalField = RESOURCE_FIELD_ALIASES[field] ?? field;
   const explicitFields = RESOURCE_QUERY_FIELDS[canonicalField];
@@ -2611,6 +2613,7 @@ function applyMachineRuntimeAuth(resolved) {
       tokenSource: "machine",
       baseUrl: machineAuth.baseUrl,
       organizationId: machineAuth.organizationId,
+      ...machineAuth.requestId === void 0 ? {} : { requestId: machineAuth.requestId },
       ...machineAuth.timeoutMs === void 0 ? {} : { timeoutMs: machineAuth.timeoutMs }
     }
   };
@@ -5995,6 +5998,19 @@ function registerOrganizationCommands(program) {
       isShow: true
     });
   });
+  organizations.command("tool-config").description("Organization tool configuration operations").command("show").requiredOption("--tool-key <toolKey>", "Tool key").action(async (opts, cmd) => {
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    await runGraphqlQueryCommand({
+      command: "organizations.tool-config.show",
+      runtimeOptions: context.runtimeOptions,
+      field: "tool_config",
+      variables: {
+        organization_id: resolveOrganizationId(context.organizationId),
+        tool_key: String(opts.toolKey)
+      },
+      isShow: true
+    });
+  });
   organizations.command("update").option("--id <id>", "Organization ID (defaults to resolved organization context)").requiredOption(
     "--data-json <dataJson>",
     'JSON object for organization or {"organization": {...}}'
@@ -7901,7 +7917,7 @@ var import_commander = require("commander");
 var import_node_crypto3 = require("crypto");
 
 // src/version.ts
-var CLI_VERSION = "0.1.84";
+var CLI_VERSION = "0.1.85";
 
 // src/operationMetadata.ts
 var DISCOVERY_OPERATION_IDS = [
@@ -7930,6 +7946,8 @@ var DISCOVERY_OPERATION_IDS = [
   "customers.schema",
   "datasheets.examples",
   "datasheets.schema",
+  "desktop-context.examples",
+  "desktop-context.schema",
   "doctor",
   "doctor.examples",
   "doctor.schema",
@@ -8043,6 +8061,8 @@ var READ_OPERATION_IDS = [
   "datasheets.list",
   "datasheets.open",
   "datasheets.show",
+  "desktop-context.recent",
+  "desktop-context.status",
   "feedbacks.list",
   "feedbacks.search",
   "feedbacks.show",
@@ -8108,6 +8128,7 @@ var READ_OPERATION_IDS = [
   "organizations.key-metric-meta-profile.show",
   "organizations.meta-profile.show",
   "organizations.show",
+  "organizations.tool-config.show",
   "osmd.agent.children",
   "osmd.agent.read",
   "osmd.agent.status",
@@ -8190,6 +8211,8 @@ var READ_OPERATION_IDS = [
   "support.settings",
   "support.ticket-counts",
   "support.tickets",
+  "signatures.list",
+  "signatures.show",
   "surveys.list",
   "surveys.search",
   "surveys.show",
@@ -8334,6 +8357,13 @@ var WRITE_OPERATION_IDS = [
   "smart-kpi-views.create",
   "stand-ups.create",
   "stand-ups.update",
+  "signatures.archive",
+  "signatures.create",
+  "signatures.destroy",
+  "signatures.send",
+  "signatures.unarchive",
+  "signatures.update",
+  "signatures.void",
   "subissues.create",
   "subissues.destroy",
   "subissues.update",
@@ -8380,6 +8410,8 @@ var DESTRUCTIVE_OPERATION_IDS = /* @__PURE__ */ new Set([
   "datasheets.view.delete",
   "milestones.destroy",
   "project-content.destroy",
+  "signatures.destroy",
+  "signatures.void",
   "subissues.destroy",
   "subitems.destroy",
   "subtasks.destroy",
@@ -8575,7 +8607,12 @@ function buildOperationManifest(program) {
 }
 
 // src/commands/osmd.ts
-var sourceSchema = import_zod18.z.enum(["canonical_osmd", "agent_overlay", "agent_wiki"]);
+var sourceSchema = import_zod18.z.enum([
+  "canonical_osmd",
+  "agent_overlay",
+  "agent_wiki",
+  "thread_workspace"
+]);
 var accessSchema = import_zod18.z.enum(["read_only", "read_write", "append_only"]).catch("read_write");
 var ownerSchema = import_zod18.z.enum(["system", "atlas"]);
 var suggestedActionSchema = import_zod18.z.enum([
@@ -8661,7 +8698,14 @@ var agentMarkdownFileSchema = import_zod18.z.preprocess(
     suggestedAction: suggestedActionSchema,
     errorCode: agentMarkdownErrorCodeFieldSchema.optional(),
     content: import_zod18.z.string().nullable().optional(),
-    url: import_zod18.z.string().nullable().optional()
+    url: import_zod18.z.string().nullable().optional(),
+    workspaceId: import_zod18.z.string().nullable().optional(),
+    fileId: import_zod18.z.string().nullable().optional(),
+    name: import_zod18.z.string().nullable().optional(),
+    displayName: import_zod18.z.string().nullable().optional(),
+    contentSha: import_zod18.z.string().nullable().optional(),
+    versionSha: import_zod18.z.string().nullable().optional(),
+    mediaType: import_zod18.z.string().nullable().optional()
   }).transform((value) => ({
     ...value,
     wikiRole: value.wikiRole ?? null,
@@ -8674,7 +8718,14 @@ var agentMarkdownFileSchema = import_zod18.z.preprocess(
     parentRef: value.parentRef ?? null,
     errorCode: value.errorCode ?? null,
     content: value.content ?? null,
-    url: value.url ?? null
+    url: value.url ?? null,
+    workspaceId: value.workspaceId ?? null,
+    fileId: value.fileId ?? null,
+    name: value.name ?? null,
+    displayName: value.displayName ?? null,
+    contentSha: value.contentSha ?? null,
+    versionSha: value.versionSha ?? null,
+    mediaType: value.mediaType ?? null
   }))
 );
 var agentMarkdownFilesSchema = import_zod18.z.array(agentMarkdownFileSchema);
@@ -8979,6 +9030,13 @@ var AGENT_MARKDOWN_FILE_SELECTION = `{
   errorCode
   content
   url
+  workspaceId
+  fileId
+  name
+  displayName
+  contentSha
+  versionSha
+  mediaType
 }`;
 var OSMD_SEARCH_SELECTION = `{
   query
@@ -9634,21 +9692,24 @@ async function runOsmdIngestFlow(params) {
     })
   });
 }
-function normalizeAgentFilePath(file) {
+var atlasThreadWorkspaceParentRefPattern = /^Atlas Workspace\/ATL-[A-Z0-9][A-Z0-9-]*$/;
+function normalizeAgentFilePath(file, parentRef) {
   const trimmed = nonEmptyString3.parse(file).trim().replace(/^\/+|\/+$/g, "");
   const fileName = trimmed.startsWith(".agent/") ? trimmed.slice(".agent/".length) : trimmed;
-  if (fileName.includes("\\") || fileName.includes("/") || fileName === "." || fileName === ".." || !isSupportedAgentOverlayFileName(fileName)) {
+  const isThreadWorkspace = atlasThreadWorkspaceParentRefPattern.test(parentRef);
+  const isSupportedFile = isThreadWorkspace ? /^[a-z0-9][a-z0-9-]*\.(?:md|txt)$/.test(fileName) : isSupportedAgentOverlayFileName(fileName);
+  if (fileName.includes("\\") || fileName.includes("/") || fileName === "." || fileName === ".." || !isSupportedFile) {
     throw new CliError({
-      message: ".agent supports only notes.md, summary.md, or <lowercase-kebab-slug>.md.",
+      message: isThreadWorkspace ? "Atlas task workspaces support only lowercase kebab-case .md or .txt basenames." : ".agent supports only notes.md, summary.md, or <lowercase-kebab-slug>.md.",
       kind: "invalid_args",
       status: 400,
       exitCode: EXIT_CODES.invalidArgs,
       details: {
-        supportedFiles: [...supportedAgentOverlaySystemFiles, "<lowercase-kebab-slug>.md"]
+        supportedFiles: isThreadWorkspace ? ["<lowercase-kebab-slug>.md", "<lowercase-kebab-slug>.txt"] : [...supportedAgentOverlaySystemFiles, "<lowercase-kebab-slug>.md"]
       }
     });
   }
-  return `.agent/${fileName}`;
+  return isThreadWorkspace ? fileName : `.agent/${fileName}`;
 }
 function formatHumanList(items) {
   if (items.length <= 1) {
@@ -10875,12 +10936,13 @@ function registerOsmdCommands(program) {
   const agent = osmd.command("agent").description(".agent markdown attached to canonical OSMD parents");
   agent.command("status <parent-ref> <file>").description("Show .agent file metadata without creating files").action(async (parentRef, file, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+    const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
     const result = await requestAgentMarkdownStatus({
       command: "osmd.agent.status",
       runtimeOptions,
       organizationId,
-      path: normalizeAgentFilePath(file),
-      parentRef: nonEmptyString3.parse(parentRef).trim()
+      path: normalizeAgentFilePath(file, normalizedParentRef),
+      parentRef: normalizedParentRef
     });
     return printEnvelopeAndExit({
       envelope: buildSuccessEnvelope({
@@ -10907,12 +10969,13 @@ function registerOsmdCommands(program) {
   });
   agent.command("read <parent-ref> <file>").description("Read a .agent file without creating files").action(async (parentRef, file, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+    const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
     const result = await requestAgentMarkdownFile({
       command: "osmd.agent.read",
       runtimeOptions,
       organizationId,
-      path: normalizeAgentFilePath(file),
-      parentRef: nonEmptyString3.parse(parentRef).trim()
+      path: normalizeAgentFilePath(file, normalizedParentRef),
+      parentRef: normalizedParentRef
     });
     return printEnvelopeAndExit({
       envelope: buildSuccessEnvelope({
@@ -10930,13 +10993,14 @@ function registerOsmdCommands(program) {
       const globals = cmd.optsWithGlobals();
       const content = await resolveContentInput(opts, globals);
       const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+      const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
       return runWriteFlow({
         command: "osmd.agent.create",
         action: "create",
         runtimeOptions,
         organizationId,
-        path: normalizeAgentFilePath(file),
-        parentRef: nonEmptyString3.parse(parentRef).trim(),
+        path: normalizeAgentFilePath(file, normalizedParentRef),
+        parentRef: normalizedParentRef,
         content
       });
     }
@@ -10948,13 +11012,14 @@ function registerOsmdCommands(program) {
       const globals = cmd.optsWithGlobals();
       const content = await resolveContentInput(opts, globals);
       const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+      const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
       return runWriteFlow({
         command: "osmd.agent.update",
         action: "update",
         runtimeOptions,
         organizationId,
-        path: normalizeAgentFilePath(file),
-        parentRef: nonEmptyString3.parse(parentRef).trim(),
+        path: normalizeAgentFilePath(file, normalizedParentRef),
+        parentRef: normalizedParentRef,
         content
       });
     }
@@ -17227,6 +17292,59 @@ function registerAtlasAuthoringCommands(program) {
   });
 }
 
+// src/commands/desktopContext.ts
+var VARIABLE_TYPES = {
+  organization_id: "ID!",
+  member_id: "ID"
+};
+function parseRecentLimit(value) {
+  const limit = Number(value);
+  if (!Number.isInteger(limit) || limit < 1 || limit > 50) {
+    throw new Error("limit must be an integer between 1 and 50");
+  }
+  return limit;
+}
+async function runDesktopContextQuery(cmd, params) {
+  const context = await resolveCommandContext(cmd.optsWithGlobals());
+  await runGraphqlQueryCommand({
+    command: params.command,
+    operationName: params.operationName,
+    runtimeOptions: context.runtimeOptions,
+    field: params.field,
+    variables: normalizeGraphqlVariables2({
+      organization_id: resolveOrganizationId(context.organizationId),
+      member_id: params.memberId,
+      limit: params.limit
+    }),
+    variableTypes: {
+      ...VARIABLE_TYPES,
+      ...params.command === "desktop-context.recent" ? { limit: "Int" } : {}
+    },
+    isShow: true,
+    selectionSet: ""
+  });
+}
+function registerDesktopContextCommands(program) {
+  const desktopContext = program.command("desktop-context").description("Read sanitized, bounded desktop context and capture health");
+  desktopContext.command("status").description("Read capture freshness and synchronization status").option("--member-id <memberId>", "Member scope; defaults to the authenticated member").action(async (opts, cmd) => {
+    await runDesktopContextQuery(cmd, {
+      command: "desktop-context.status",
+      operationName: "DesktopContextStatus",
+      field: "desktop_context_status",
+      memberId: opts.memberId
+    });
+  });
+  desktopContext.command("recent").description("Read recent sanitized evidence excerpts").option("--member-id <memberId>", "Member scope; defaults to the authenticated member").option("--limit <limit>", "Maximum observations (1-50)", parseRecentLimit).action(async (opts, cmd) => {
+    await runDesktopContextQuery(cmd, {
+      command: "desktop-context.recent",
+      operationName: "DesktopContextRecent",
+      field: "desktop_context_recent",
+      memberId: opts.memberId,
+      limit: opts.limit
+    });
+  });
+}
+
 // src/commands/discovery.ts
 var import_node_fs4 = require("fs");
 var import_node_path5 = require("path");
@@ -17240,6 +17358,7 @@ var PRIMARY_NAMESPACES = [
   "planner",
   "mail",
   "datasheets",
+  "desktop-context",
   "phantom",
   "tasks",
   "projects",
@@ -17321,6 +17440,26 @@ var NAMESPACE_DOCS = {
       commands: ["tree", "status", "read", "children", "search", "lint", "memory-quality", "ingest", "agent", "wiki"]
     }
   },
+  "desktop-context": {
+    name: "desktop-context",
+    tier: "primary",
+    description: "Sanitized desktop capture health and recent evidence for Atlas grounding.",
+    examples: [
+      "wave desktop-context status",
+      "wave desktop-context recent --limit 20",
+      "wave desktop-context status --member-id 123"
+    ],
+    schema: {
+      output: "json-envelope-default",
+      readOnly: true,
+      safety: [
+        "Reads only API-sanitized status metadata and bounded evidence excerpts.",
+        "Does not expose screenshots, raw audio, accessibility trees, clipboard contents, keystrokes, URLs, or filesystem paths.",
+        "Cross-member reads remain subject to backend organization policy and every response carries backend trace correlation when available."
+      ],
+      commands: ["status", "recent"]
+    }
+  },
   phantom: {
     name: "phantom",
     tier: "primary",
@@ -18287,6 +18426,7 @@ function buildCli(options) {
   registerPhantomCommands(program);
   registerDatasheetsCommands(program);
   registerSignatureCommands(program);
+  registerDesktopContextCommands(program);
   registerAuthCommands(program);
   registerDiscoveryCommands(program);
   attachNamespaceDiscovery(program);
@@ -18435,7 +18575,7 @@ function parseTrustedJsonFromFd(fd, predicate) {
   }
 }
 function isTrustedAuth(value) {
-  return isPlainObject2(value) && typeof value.token === "string" && value.token.trim() !== "" && typeof value.baseUrl === "string" && value.baseUrl.trim() !== "" && typeof value.organizationId === "string" && value.organizationId.trim() !== "" && typeof value.actorId === "string" && value.actorId.trim() !== "" && (value.timeoutMs === void 0 || typeof value.timeoutMs === "number" && Number.isInteger(value.timeoutMs) && value.timeoutMs > 0);
+  return isPlainObject2(value) && typeof value.token === "string" && value.token.trim() !== "" && typeof value.baseUrl === "string" && value.baseUrl.trim() !== "" && typeof value.organizationId === "string" && value.organizationId.trim() !== "" && typeof value.actorId === "string" && value.actorId.trim() !== "" && (value.requestId === void 0 || typeof value.requestId === "string" && value.requestId.trim() !== "" && Buffer.byteLength(value.requestId, "utf8") <= 255 && /^[\x21-\x7E]+$/.test(value.requestId)) && (value.timeoutMs === void 0 || typeof value.timeoutMs === "number" && Number.isInteger(value.timeoutMs) && value.timeoutMs > 0);
 }
 function isTrustedApproval(value) {
   return isPlainObject2(value) && typeof value.operation === "string" && typeof value.inputDigest === "string" && typeof value.cliVersion === "string" && typeof value.registryDigest === "string" && typeof value.organizationId === "string" && value.organizationId.trim() !== "" && typeof value.actorId === "string" && value.actorId.trim() !== "";

package/dist/index.js

@@ -704,6 +704,7 @@ async function requestGraphqlHttp(params) {
       "Content-Type": "application/json",
       "X-Origin": "wave-cli",
       "X-Request-Id": params.requestId,
+      ...params.input.config.requestId ? { "X-Wave-Trace-Id": params.input.config.requestId } : {},
       ...params.input.config.agentName ? { "X-Agent-Name": params.input.config.agentName } : {},
       ...params.input.config.agentRunId ? { "X-Agent-Run-Id": params.input.config.agentRunId } : {}
     },
@@ -1148,6 +1149,7 @@ function isEnvelopeEmittedSignal(error) {
 
 // src/commandRunner.ts
 var RESOURCE_QUERY_FIELDS = {
+  tool_config: ["toolKey", "expectations"],
   task: [
     "summary",
     "slug",
@@ -1654,7 +1656,7 @@ function buildCliErrorEnvelope(params) {
 }
 function defaultQuerySelectionSet(field, isList) {
   if (field === "organization") {
-    return "{ id slug membersCount organizationDetail { title name description timezone workspaceName } }";
+    return "{ id slug membersCount organizationDetail { title name description numberOfEmployees stage timezone companyUrl estimateType companyRevenuePeriod okrName workspaceName } }";
   }
   const canonicalField = RESOURCE_FIELD_ALIASES[field] ?? field;
   const explicitFields = RESOURCE_QUERY_FIELDS[canonicalField];
@@ -2610,6 +2612,7 @@ function applyMachineRuntimeAuth(resolved) {
       tokenSource: "machine",
       baseUrl: machineAuth.baseUrl,
       organizationId: machineAuth.organizationId,
+      ...machineAuth.requestId === void 0 ? {} : { requestId: machineAuth.requestId },
       ...machineAuth.timeoutMs === void 0 ? {} : { timeoutMs: machineAuth.timeoutMs }
     }
   };
@@ -5994,6 +5997,19 @@ function registerOrganizationCommands(program) {
       isShow: true
     });
   });
+  organizations.command("tool-config").description("Organization tool configuration operations").command("show").requiredOption("--tool-key <toolKey>", "Tool key").action(async (opts, cmd) => {
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    await runGraphqlQueryCommand({
+      command: "organizations.tool-config.show",
+      runtimeOptions: context.runtimeOptions,
+      field: "tool_config",
+      variables: {
+        organization_id: resolveOrganizationId(context.organizationId),
+        tool_key: String(opts.toolKey)
+      },
+      isShow: true
+    });
+  });
   organizations.command("update").option("--id <id>", "Organization ID (defaults to resolved organization context)").requiredOption(
     "--data-json <dataJson>",
     'JSON object for organization or {"organization": {...}}'
@@ -7900,7 +7916,7 @@ import { Option } from "commander";
 import { createHash } from "crypto";
 
 // src/version.ts
-var CLI_VERSION = "0.1.84";
+var CLI_VERSION = "0.1.85";
 
 // src/operationMetadata.ts
 var DISCOVERY_OPERATION_IDS = [
@@ -7929,6 +7945,8 @@ var DISCOVERY_OPERATION_IDS = [
   "customers.schema",
   "datasheets.examples",
   "datasheets.schema",
+  "desktop-context.examples",
+  "desktop-context.schema",
   "doctor",
   "doctor.examples",
   "doctor.schema",
@@ -8042,6 +8060,8 @@ var READ_OPERATION_IDS = [
   "datasheets.list",
   "datasheets.open",
   "datasheets.show",
+  "desktop-context.recent",
+  "desktop-context.status",
   "feedbacks.list",
   "feedbacks.search",
   "feedbacks.show",
@@ -8107,6 +8127,7 @@ var READ_OPERATION_IDS = [
   "organizations.key-metric-meta-profile.show",
   "organizations.meta-profile.show",
   "organizations.show",
+  "organizations.tool-config.show",
   "osmd.agent.children",
   "osmd.agent.read",
   "osmd.agent.status",
@@ -8189,6 +8210,8 @@ var READ_OPERATION_IDS = [
   "support.settings",
   "support.ticket-counts",
   "support.tickets",
+  "signatures.list",
+  "signatures.show",
   "surveys.list",
   "surveys.search",
   "surveys.show",
@@ -8333,6 +8356,13 @@ var WRITE_OPERATION_IDS = [
   "smart-kpi-views.create",
   "stand-ups.create",
   "stand-ups.update",
+  "signatures.archive",
+  "signatures.create",
+  "signatures.destroy",
+  "signatures.send",
+  "signatures.unarchive",
+  "signatures.update",
+  "signatures.void",
   "subissues.create",
   "subissues.destroy",
   "subissues.update",
@@ -8379,6 +8409,8 @@ var DESTRUCTIVE_OPERATION_IDS = /* @__PURE__ */ new Set([
   "datasheets.view.delete",
   "milestones.destroy",
   "project-content.destroy",
+  "signatures.destroy",
+  "signatures.void",
   "subissues.destroy",
   "subitems.destroy",
   "subtasks.destroy",
@@ -8574,7 +8606,12 @@ function buildOperationManifest(program) {
 }
 
 // src/commands/osmd.ts
-var sourceSchema = z18.enum(["canonical_osmd", "agent_overlay", "agent_wiki"]);
+var sourceSchema = z18.enum([
+  "canonical_osmd",
+  "agent_overlay",
+  "agent_wiki",
+  "thread_workspace"
+]);
 var accessSchema = z18.enum(["read_only", "read_write", "append_only"]).catch("read_write");
 var ownerSchema = z18.enum(["system", "atlas"]);
 var suggestedActionSchema = z18.enum([
@@ -8660,7 +8697,14 @@ var agentMarkdownFileSchema = z18.preprocess(
     suggestedAction: suggestedActionSchema,
     errorCode: agentMarkdownErrorCodeFieldSchema.optional(),
     content: z18.string().nullable().optional(),
-    url: z18.string().nullable().optional()
+    url: z18.string().nullable().optional(),
+    workspaceId: z18.string().nullable().optional(),
+    fileId: z18.string().nullable().optional(),
+    name: z18.string().nullable().optional(),
+    displayName: z18.string().nullable().optional(),
+    contentSha: z18.string().nullable().optional(),
+    versionSha: z18.string().nullable().optional(),
+    mediaType: z18.string().nullable().optional()
   }).transform((value) => ({
     ...value,
     wikiRole: value.wikiRole ?? null,
@@ -8673,7 +8717,14 @@ var agentMarkdownFileSchema = z18.preprocess(
     parentRef: value.parentRef ?? null,
     errorCode: value.errorCode ?? null,
     content: value.content ?? null,
-    url: value.url ?? null
+    url: value.url ?? null,
+    workspaceId: value.workspaceId ?? null,
+    fileId: value.fileId ?? null,
+    name: value.name ?? null,
+    displayName: value.displayName ?? null,
+    contentSha: value.contentSha ?? null,
+    versionSha: value.versionSha ?? null,
+    mediaType: value.mediaType ?? null
   }))
 );
 var agentMarkdownFilesSchema = z18.array(agentMarkdownFileSchema);
@@ -8978,6 +9029,13 @@ var AGENT_MARKDOWN_FILE_SELECTION = `{
   errorCode
   content
   url
+  workspaceId
+  fileId
+  name
+  displayName
+  contentSha
+  versionSha
+  mediaType
 }`;
 var OSMD_SEARCH_SELECTION = `{
   query
@@ -9633,21 +9691,24 @@ async function runOsmdIngestFlow(params) {
     })
   });
 }
-function normalizeAgentFilePath(file) {
+var atlasThreadWorkspaceParentRefPattern = /^Atlas Workspace\/ATL-[A-Z0-9][A-Z0-9-]*$/;
+function normalizeAgentFilePath(file, parentRef) {
   const trimmed = nonEmptyString3.parse(file).trim().replace(/^\/+|\/+$/g, "");
   const fileName = trimmed.startsWith(".agent/") ? trimmed.slice(".agent/".length) : trimmed;
-  if (fileName.includes("\\") || fileName.includes("/") || fileName === "." || fileName === ".." || !isSupportedAgentOverlayFileName(fileName)) {
+  const isThreadWorkspace = atlasThreadWorkspaceParentRefPattern.test(parentRef);
+  const isSupportedFile = isThreadWorkspace ? /^[a-z0-9][a-z0-9-]*\.(?:md|txt)$/.test(fileName) : isSupportedAgentOverlayFileName(fileName);
+  if (fileName.includes("\\") || fileName.includes("/") || fileName === "." || fileName === ".." || !isSupportedFile) {
     throw new CliError({
-      message: ".agent supports only notes.md, summary.md, or <lowercase-kebab-slug>.md.",
+      message: isThreadWorkspace ? "Atlas task workspaces support only lowercase kebab-case .md or .txt basenames." : ".agent supports only notes.md, summary.md, or <lowercase-kebab-slug>.md.",
       kind: "invalid_args",
       status: 400,
       exitCode: EXIT_CODES.invalidArgs,
       details: {
-        supportedFiles: [...supportedAgentOverlaySystemFiles, "<lowercase-kebab-slug>.md"]
+        supportedFiles: isThreadWorkspace ? ["<lowercase-kebab-slug>.md", "<lowercase-kebab-slug>.txt"] : [...supportedAgentOverlaySystemFiles, "<lowercase-kebab-slug>.md"]
       }
     });
   }
-  return `.agent/${fileName}`;
+  return isThreadWorkspace ? fileName : `.agent/${fileName}`;
 }
 function formatHumanList(items) {
   if (items.length <= 1) {
@@ -10874,12 +10935,13 @@ function registerOsmdCommands(program) {
   const agent = osmd.command("agent").description(".agent markdown attached to canonical OSMD parents");
   agent.command("status <parent-ref> <file>").description("Show .agent file metadata without creating files").action(async (parentRef, file, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+    const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
     const result = await requestAgentMarkdownStatus({
       command: "osmd.agent.status",
       runtimeOptions,
       organizationId,
-      path: normalizeAgentFilePath(file),
-      parentRef: nonEmptyString3.parse(parentRef).trim()
+      path: normalizeAgentFilePath(file, normalizedParentRef),
+      parentRef: normalizedParentRef
     });
     return printEnvelopeAndExit({
       envelope: buildSuccessEnvelope({
@@ -10906,12 +10968,13 @@ function registerOsmdCommands(program) {
   });
   agent.command("read <parent-ref> <file>").description("Read a .agent file without creating files").action(async (parentRef, file, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+    const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
     const result = await requestAgentMarkdownFile({
       command: "osmd.agent.read",
       runtimeOptions,
       organizationId,
-      path: normalizeAgentFilePath(file),
-      parentRef: nonEmptyString3.parse(parentRef).trim()
+      path: normalizeAgentFilePath(file, normalizedParentRef),
+      parentRef: normalizedParentRef
     });
     return printEnvelopeAndExit({
       envelope: buildSuccessEnvelope({
@@ -10929,13 +10992,14 @@ function registerOsmdCommands(program) {
       const globals = cmd.optsWithGlobals();
       const content = await resolveContentInput(opts, globals);
       const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+      const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
       return runWriteFlow({
         command: "osmd.agent.create",
         action: "create",
         runtimeOptions,
         organizationId,
-        path: normalizeAgentFilePath(file),
-        parentRef: nonEmptyString3.parse(parentRef).trim(),
+        path: normalizeAgentFilePath(file, normalizedParentRef),
+        parentRef: normalizedParentRef,
         content
       });
     }
@@ -10947,13 +11011,14 @@ function registerOsmdCommands(program) {
       const globals = cmd.optsWithGlobals();
       const content = await resolveContentInput(opts, globals);
       const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+      const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
       return runWriteFlow({
         command: "osmd.agent.update",
         action: "update",
         runtimeOptions,
         organizationId,
-        path: normalizeAgentFilePath(file),
-        parentRef: nonEmptyString3.parse(parentRef).trim(),
+        path: normalizeAgentFilePath(file, normalizedParentRef),
+        parentRef: normalizedParentRef,
         content
       });
     }
@@ -17226,6 +17291,59 @@ function registerAtlasAuthoringCommands(program) {
   });
 }
 
+// src/commands/desktopContext.ts
+var VARIABLE_TYPES = {
+  organization_id: "ID!",
+  member_id: "ID"
+};
+function parseRecentLimit(value) {
+  const limit = Number(value);
+  if (!Number.isInteger(limit) || limit < 1 || limit > 50) {
+    throw new Error("limit must be an integer between 1 and 50");
+  }
+  return limit;
+}
+async function runDesktopContextQuery(cmd, params) {
+  const context = await resolveCommandContext(cmd.optsWithGlobals());
+  await runGraphqlQueryCommand({
+    command: params.command,
+    operationName: params.operationName,
+    runtimeOptions: context.runtimeOptions,
+    field: params.field,
+    variables: normalizeGraphqlVariables2({
+      organization_id: resolveOrganizationId(context.organizationId),
+      member_id: params.memberId,
+      limit: params.limit
+    }),
+    variableTypes: {
+      ...VARIABLE_TYPES,
+      ...params.command === "desktop-context.recent" ? { limit: "Int" } : {}
+    },
+    isShow: true,
+    selectionSet: ""
+  });
+}
+function registerDesktopContextCommands(program) {
+  const desktopContext = program.command("desktop-context").description("Read sanitized, bounded desktop context and capture health");
+  desktopContext.command("status").description("Read capture freshness and synchronization status").option("--member-id <memberId>", "Member scope; defaults to the authenticated member").action(async (opts, cmd) => {
+    await runDesktopContextQuery(cmd, {
+      command: "desktop-context.status",
+      operationName: "DesktopContextStatus",
+      field: "desktop_context_status",
+      memberId: opts.memberId
+    });
+  });
+  desktopContext.command("recent").description("Read recent sanitized evidence excerpts").option("--member-id <memberId>", "Member scope; defaults to the authenticated member").option("--limit <limit>", "Maximum observations (1-50)", parseRecentLimit).action(async (opts, cmd) => {
+    await runDesktopContextQuery(cmd, {
+      command: "desktop-context.recent",
+      operationName: "DesktopContextRecent",
+      field: "desktop_context_recent",
+      memberId: opts.memberId,
+      limit: opts.limit
+    });
+  });
+}
+
 // src/commands/discovery.ts
 import { existsSync as existsSync3, readFileSync } from "fs";
 import { join as join3 } from "path";
@@ -17239,6 +17357,7 @@ var PRIMARY_NAMESPACES = [
   "planner",
   "mail",
   "datasheets",
+  "desktop-context",
   "phantom",
   "tasks",
   "projects",
@@ -17320,6 +17439,26 @@ var NAMESPACE_DOCS = {
       commands: ["tree", "status", "read", "children", "search", "lint", "memory-quality", "ingest", "agent", "wiki"]
     }
   },
+  "desktop-context": {
+    name: "desktop-context",
+    tier: "primary",
+    description: "Sanitized desktop capture health and recent evidence for Atlas grounding.",
+    examples: [
+      "wave desktop-context status",
+      "wave desktop-context recent --limit 20",
+      "wave desktop-context status --member-id 123"
+    ],
+    schema: {
+      output: "json-envelope-default",
+      readOnly: true,
+      safety: [
+        "Reads only API-sanitized status metadata and bounded evidence excerpts.",
+        "Does not expose screenshots, raw audio, accessibility trees, clipboard contents, keystrokes, URLs, or filesystem paths.",
+        "Cross-member reads remain subject to backend organization policy and every response carries backend trace correlation when available."
+      ],
+      commands: ["status", "recent"]
+    }
+  },
   phantom: {
     name: "phantom",
     tier: "primary",
@@ -18286,6 +18425,7 @@ function buildCli(options) {
   registerPhantomCommands(program);
   registerDatasheetsCommands(program);
   registerSignatureCommands(program);
+  registerDesktopContextCommands(program);
   registerAuthCommands(program);
   registerDiscoveryCommands(program);
   attachNamespaceDiscovery(program);
@@ -18434,7 +18574,7 @@ function parseTrustedJsonFromFd(fd, predicate) {
   }
 }
 function isTrustedAuth(value) {
-  return isPlainObject2(value) && typeof value.token === "string" && value.token.trim() !== "" && typeof value.baseUrl === "string" && value.baseUrl.trim() !== "" && typeof value.organizationId === "string" && value.organizationId.trim() !== "" && typeof value.actorId === "string" && value.actorId.trim() !== "" && (value.timeoutMs === void 0 || typeof value.timeoutMs === "number" && Number.isInteger(value.timeoutMs) && value.timeoutMs > 0);
+  return isPlainObject2(value) && typeof value.token === "string" && value.token.trim() !== "" && typeof value.baseUrl === "string" && value.baseUrl.trim() !== "" && typeof value.organizationId === "string" && value.organizationId.trim() !== "" && typeof value.actorId === "string" && value.actorId.trim() !== "" && (value.requestId === void 0 || typeof value.requestId === "string" && value.requestId.trim() !== "" && Buffer.byteLength(value.requestId, "utf8") <= 255 && /^[\x21-\x7E]+$/.test(value.requestId)) && (value.timeoutMs === void 0 || typeof value.timeoutMs === "number" && Number.isInteger(value.timeoutMs) && value.timeoutMs > 0);
 }
 function isTrustedApproval(value) {
   return isPlainObject2(value) && typeof value.operation === "string" && typeof value.inputDigest === "string" && typeof value.cliVersion === "string" && typeof value.registryDigest === "string" && typeof value.organizationId === "string" && value.organizationId.trim() !== "" && typeof value.actorId === "string" && value.actorId.trim() !== "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wave-ai-os/wave-cli",
-  "version": "0.1.84",
+  "version": "0.1.86",
   "type": "module",
   "bin": {
     "wave": "dist/index.js"
@@ -31,5 +31,6 @@
     "tsx": "^4.20.6",
     "typescript": "^5.9.3",
     "vitest": "^3.2.4"
-  }
+  },
+  "packageManager": "pnpm@11.18.0+sha512.33d83c77da82f49fba836925c6f1b841181ec3132b670639bd012f7075f5c7cf634c5f870147c19aae7478fac01df09d8892e880454896edd23ee9b33757563c"
 }