@wave-ai-os/wave-cli 0.1.85 → 0.1.87

package/dist/index.js

@@ -1164,6 +1164,8 @@ var RESOURCE_QUERY_FIELDS = {
     "archivedAt",
     "organizationId",
     "memberId",
+    "member",
+    "assignee",
     "creatorId",
     "projectId",
     "projectSlug",
@@ -1211,6 +1213,7 @@ var RESOURCE_QUERY_FIELDS = {
     "role",
     "status",
     "title",
+    "rolePurpose",
     "firstName",
     "lastName",
     "createdAt",
@@ -1661,7 +1664,8 @@ function defaultQuerySelectionSet(field, isList) {
   const canonicalField = RESOURCE_FIELD_ALIASES[field] ?? field;
   const explicitFields = RESOURCE_QUERY_FIELDS[canonicalField];
   if (explicitFields) {
-    const attributes = explicitFields.length > 0 ? `attributes { ${Array.from(/* @__PURE__ */ new Set(["id", ...explicitFields])).join(" ")} }` : "attributes";
+    const detailFields = canonicalField === "smart_kpi" && !isList ? ["smartKpiMetrics { id date value }", "smartKpiGoals { id date value }"] : [];
+    const attributes = explicitFields.length > 0 ? `attributes { ${Array.from(/* @__PURE__ */ new Set(["id", ...explicitFields, ...detailFields])).join(" ")} }` : "attributes";
     if (isList) {
       return `{ data { id type ${attributes} } count currentPage totalPages }`;
     }
@@ -4037,7 +4041,7 @@ var projectPriorityValues = projectPrioritySchema.options.join(", ");
 var projectCreateDataJsonHelp = buildDataJsonHelp("project", "create") ?? 'JSON object for project or {"project": {...}}';
 var projectUpdateDataJsonHelp = buildDataJsonHelp("project", "update") ?? 'JSON object for project or {"project": {...}}';
 function projectsIndexMinimalSelectionSet(includeProjectTypes = false) {
-  return `{ count currentPage totalPages data { id type attributes { name slug status priority${includeProjectTypes ? " projectType" : ""} } } }`;
+  return `{ count currentPage totalPages data { id type attributes { name slug status priority createdAt updatedAt${includeProjectTypes ? " projectType" : ""} } } }`;
 }
 var displayPreferenceAttributesSelectionSet = "attributes { id viewType favorite groupingField groupToggleState memberId focusMemberId focusTeamId displayableId displayableType preferenceType agendaItemId }";
 var filterPreferenceAttributesSelectionSet = "attributes { id filterType filter memberId focusMemberId focusTeamId filterableId filterableType preferenceType agendaItemId }";
@@ -4484,6 +4488,22 @@ function registerMeetingCommands(program) {
       isShow: true
     });
   });
+  meetings.command("note-show").description("Read the authorized AI note context for a meeting").requiredOption("--id <id>").action(async (opts, cmd) => {
+    const meetingId = idSchema5.parse(opts.id);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlQueryCommand({
+      command: "meetings.note-show",
+      runtimeOptions: context.runtimeOptions,
+      field: "meeting_note_by_meeting",
+      variables: {
+        organization_id: organizationId,
+        meeting_id: meetingId
+      },
+      selectionSet: "{ answerContext }",
+      isShow: true
+    });
+  });
   meetings.command("notes").requiredOption("--id <id>").requiredOption("--content <content>").action(async (opts, cmd) => {
     const id = idSchema5.parse(opts.id);
     const notes = notesSchema.parse(opts.content);
@@ -4539,10 +4559,25 @@ function registerMeetingCommands(program) {
 
 // src/commands/members.ts
 import { z as z8 } from "zod";
-var idSchema6 = z8.string().min(1);
+var idSchema6 = z8.string().trim().min(1);
 var createHelp3 = buildDataJsonHelp("member", "create") ?? 'JSON object for member or {"member": {...}}';
 var updateHelp3 = buildDataJsonHelp("member", "update") ?? 'JSON object for member or {"member": {...}}';
 var MEMBER_META_PROFILE_SELECTION = "{ id type memberId summary profile attributes { id memberId summary profile } }";
+var MEMBER_REFERENCE_RESOLUTION_SELECTION = `{
+  status
+  reasonCode
+  organizationId
+  reference
+  eligibilityPolicy
+  complete
+  source
+  asOf
+  traceId
+  receiptId
+  memberId
+  memberName
+  candidates { memberId memberName status eligible }
+}`;
 function parseStrictBooleanOption(value, optionName) {
   if (typeof value === "boolean") {
     return value;
@@ -4599,6 +4634,29 @@ function registerMemberCommands(program) {
     command: "members",
     field: "members"
   });
+  members.command("resolve").description("Resolve a member reference within the authenticated organization").requiredOption("--query <query>", "Member name or email reference").action(async (opts, cmd) => {
+    const reference = idSchema6.parse(opts.query);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlQueryCommand({
+      command: "members.resolve",
+      runtimeOptions: context.runtimeOptions,
+      operationName: "MemberReferenceResolution",
+      field: "member_reference_resolution",
+      variables: normalizeGraphqlVariables2({
+        organization_id: organizationId,
+        reference,
+        trace_id: context.runtimeOptions.requestId
+      }),
+      variableTypes: {
+        organization_id: "ID!",
+        reference: "String!",
+        trace_id: "String"
+      },
+      selectionSet: MEMBER_REFERENCE_RESOLUTION_SELECTION,
+      isShow: true
+    });
+  });
   members.command("meta-profile").description("Read a member meta profile by member id").requiredOption("--member-id <memberId>", "Member id").requiredOption("--json", "Emit the stable JSON envelope").action(async (opts, cmd) => {
     const memberId = idSchema6.parse(opts.memberId);
     const context = await resolveCommandContext(cmd.optsWithGlobals());
@@ -4667,10 +4725,69 @@ function registerMemberCommands(program) {
   });
 }
 
-// src/commands/skills.ts
+// src/commands/resources.ts
 import { z as z9 } from "zod";
-var idSchema7 = z9.string().min(1);
-var limitSchema = z9.coerce.number().int().positive();
+var resourceTypeSchema = z9.enum([
+  "project",
+  "team",
+  "agent",
+  "automation",
+  "file"
+]);
+var referenceSchema = z9.string().trim().min(1);
+var RESOURCE_REFERENCE_RESOLUTION_SELECTION = `{
+  status
+  reasonCode
+  organizationId
+  resourceType
+  reference
+  eligibilityPolicy
+  complete
+  source
+  asOf
+  traceId
+  receiptId
+  resourceId
+  resourceName
+  candidates { resourceId resourceName resourceType status eligible }
+}`;
+function registerResourceCommands(program) {
+  const resources = program.command("resources").description("Organization-scoped resource resolution");
+  resources.command("resolve").description("Resolve a project, team, agent, automation, or file reference").requiredOption(
+    "--type <type>",
+    "Resource type: project, team, agent, automation, or file"
+  ).requiredOption("--query <query>", "Resource name or reference").action(async (opts, cmd) => {
+    const resourceType = resourceTypeSchema.parse(opts.type);
+    const reference = referenceSchema.parse(opts.query);
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const organizationId = resolveOrganizationId(context.organizationId);
+    await runGraphqlQueryCommand({
+      command: "resources.resolve",
+      runtimeOptions: context.runtimeOptions,
+      operationName: "OrganizationResourceReferenceResolution",
+      field: "organization_resource_reference_resolution",
+      variables: normalizeGraphqlVariables2({
+        organization_id: organizationId,
+        resource_type: resourceType,
+        reference,
+        trace_id: context.runtimeOptions.requestId
+      }),
+      variableTypes: {
+        organization_id: "ID!",
+        resource_type: "String!",
+        reference: "String!",
+        trace_id: "String"
+      },
+      selectionSet: RESOURCE_REFERENCE_RESOLUTION_SELECTION,
+      isShow: true
+    });
+  });
+}
+
+// src/commands/skills.ts
+import { z as z10 } from "zod";
+var idSchema7 = z10.string().min(1);
+var limitSchema = z10.coerce.number().int().positive();
 var SKILL_SELECTION = `{
   id
   type
@@ -4746,14 +4863,14 @@ function registerSkillCommands(program) {
 }
 
 // src/commands/issues.ts
-import { z as z10 } from "zod";
-var issueGroupIdSchema = z10.string().min(1);
-var idSchema8 = z10.string().min(1);
-var nameSchema = z10.string().min(1);
-var issueTypeSchema = z10.string().min(1).refine((value) => value === "short_term" || value === "long_term", {
+import { z as z11 } from "zod";
+var issueGroupIdSchema = z11.string().min(1);
+var idSchema8 = z11.string().min(1);
+var nameSchema = z11.string().min(1);
+var issueTypeSchema = z11.string().min(1).refine((value) => value === "short_term" || value === "long_term", {
   message: "Invalid issue type. Use one of: short_term, long_term."
 });
-var issueStatusSchema = z10.string().min(1).refine((value) => value === "open" || value === "completed", {
+var issueStatusSchema = z11.string().min(1).refine((value) => value === "open" || value === "completed", {
   message: "Invalid issue status. Use one of: open, completed."
 });
 var updateHelp4 = buildDataJsonHelp("issue", "update") ?? 'JSON object for issue or {"issue": {...}}';
@@ -5817,8 +5934,8 @@ function registerSystemToolCommands(program) {
 }
 
 // src/commands/teams.ts
-import { z as z11 } from "zod";
-var idSchema9 = z11.string().min(1);
+import { z as z12 } from "zod";
+var idSchema9 = z12.string().min(1);
 function registerTeamCommands(program) {
   const teams = program.command("teams").description("Team operations");
   teams.command("list").option("--page <page>").option("--per <per>").action(async (opts, cmd) => {
@@ -5884,8 +6001,8 @@ function registerTeamCommands(program) {
 }
 
 // src/commands/organizations.ts
-import { z as z12 } from "zod";
-var idSchema10 = z12.string().min(1);
+import { z as z13 } from "zod";
+var idSchema10 = z13.string().min(1);
 function isRecord3(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -6110,8 +6227,8 @@ function registerOrganizationCommands(program) {
 }
 
 // src/commands/foundation.ts
-import { z as z13 } from "zod";
-var idSchema11 = z13.string().min(1);
+import { z as z14 } from "zod";
+var idSchema11 = z14.string().min(1);
 var STRATEGIC_PLAN_ALLOWED_UPDATE_KEYS = /* @__PURE__ */ new Set([
   "published_at",
   "profile",
@@ -6312,9 +6429,9 @@ function registerFoundationCommands(program) {
 }
 
 // src/commands/childEntities.ts
-import { z as z14 } from "zod";
-var idSchema12 = z14.string().min(1);
-var jsonObjectSchema = z14.record(z14.string(), z14.unknown());
+import { z as z15 } from "zod";
+var idSchema12 = z15.string().min(1);
+var jsonObjectSchema = z15.record(z15.string(), z15.unknown());
 var NOTE_DETAIL_FIELDS = [
   "notes",
   "hasNotes",
@@ -6738,9 +6855,9 @@ function registerChildEntityCommands(program) {
 }
 
 // src/commands/content.ts
-import { z as z15 } from "zod";
-var idSchema13 = z15.string().min(1);
-var nonEmptyString = z15.string().min(1);
+import { z as z16 } from "zod";
+var idSchema13 = z16.string().min(1);
+var nonEmptyString = z16.string().min(1);
 var contentAttributesSelection = "attributes { id type name slug content firstChildSlug rootParentSlug status contentType lastEdited organizationId memberId focusMemberId focusTeamId teamId creatorId createdAt updatedAt childCount assignmentType contentableId contentableSlug contentableType votesTotal labelIds rootContentId parentContentId }";
 function assertUpdateFields(params) {
   if (!params.name && !params.content && !params.status) {
@@ -6928,9 +7045,9 @@ function registerContentCommands(program) {
 }
 
 // src/commands/markdownTree.ts
-import { z as z16 } from "zod";
-var nonEmptyString2 = z16.string().min(1);
-var nonNegativeInt = z16.coerce.number().int().min(0);
+import { z as z17 } from "zod";
+var nonEmptyString2 = z17.string().min(1);
+var nonNegativeInt = z17.coerce.number().int().min(0);
 function addScopeOptions(command) {
   return command.requiredOption("--tool-key <toolKey>").requiredOption("--node-key <nodeKey>").option("--parent-id <parentId>").option("--record-id <recordId>").option("--member-id <memberId>").option("--team-id <teamId>").option("--content-type <contentType>").option("--tree-view");
 }
@@ -7095,7 +7212,7 @@ function registerMarkdownTreeCommands(program) {
 }
 
 // src/commands/navigation.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 
 // src/internalOptions.ts
 var INTERNAL_OPTIONS_KEY = "__waveInternalOptions";
@@ -7125,8 +7242,8 @@ function getInternalCliOptions(command) {
 }
 
 // src/commands/navigation.ts
-var nonEmpty = z17.string().min(1);
-var nonNegativeInt2 = z17.coerce.number().int().min(0);
+var nonEmpty = z18.string().min(1);
+var nonNegativeInt2 = z18.coerce.number().int().min(0);
 var MIGRATED_BRANCHES = ["directory", "projects", "knowledge"];
 function normalizeText(input) {
   if (typeof input !== "string") return "";
@@ -7909,14 +8026,14 @@ function registerMutationCapabilityCommands(program) {
 // src/commands/osmd.ts
 import { readFile as readFile3 } from "fs/promises";
 import { basename } from "path";
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 import { Option } from "commander";
 
 // src/operationManifest.ts
 import { createHash } from "crypto";
 
 // src/version.ts
-var CLI_VERSION = "0.1.85";
+var CLI_VERSION = "0.1.87";
 
 // src/operationMetadata.ts
 var DISCOVERY_OPERATION_IDS = [
@@ -7944,6 +8061,8 @@ var DISCOVERY_OPERATION_IDS = [
   "customers.examples",
   "customers.schema",
   "datasheets.examples",
+  "data-pipeline.examples",
+  "data-pipeline.schema",
   "datasheets.schema",
   "desktop-context.examples",
   "desktop-context.schema",
@@ -8059,7 +8178,13 @@ var READ_OPERATION_IDS = [
   "customers.show",
   "datasheets.list",
   "datasheets.open",
+  "data-pipeline.execute-source-action",
+  "data-pipeline.overview",
+  "data-pipeline.source-actions",
+  "data-pipeline.sources",
   "datasheets.show",
+  "desktop-context.activity",
+  "desktop-context.member-statuses",
   "desktop-context.recent",
   "desktop-context.status",
   "feedbacks.list",
@@ -8111,12 +8236,15 @@ var READ_OPERATION_IDS = [
   "markdown-tree.root",
   "markdown-tree.subtree",
   "meetings.list",
+  "meetings.note-show",
   "meetings.search",
   "meetings.show",
   "members.list",
   "members.meta-profile",
+  "members.resolve",
   "members.search",
   "members.show",
+  "resources.resolve",
   "milestones.list",
   "milestones.search",
   "milestones.show",
@@ -8425,6 +8553,14 @@ var OPERATION_IDS_BY_CLASSIFICATION = {
   auth: AUTH_OPERATION_IDS
 };
 var metadataByOperationId = /* @__PURE__ */ new Map();
+function assertDataPipelineReadOnlyRegistration(id, metadata) {
+  if (!id.startsWith("data-pipeline.")) return;
+  const isReadOnlyOperation = metadata.classification === "read" && metadata.atlasSafetyClass === "read_only" || metadata.classification === "discovery" && metadata.atlasSafetyClass === "discovery";
+  if (isReadOnlyOperation && !metadata.requiresApproval && !metadata.machine.supportsPreview) {
+    return;
+  }
+  throw new Error(`Data Pipeline operations must remain read-only: ${id}`);
+}
 for (const [classification, operationIds] of Object.entries(OPERATION_IDS_BY_CLASSIFICATION)) {
   for (const id of operationIds) {
     if (metadataByOperationId.has(id)) {
@@ -8434,7 +8570,7 @@ for (const [classification, operationIds] of Object.entries(OPERATION_IDS_BY_CLA
     if (DESTRUCTIVE_OPERATION_IDS.has(id) && classification !== "write") {
       throw new Error(`Destructive Wave CLI operation must be a write: ${id}`);
     }
-    metadataByOperationId.set(id, {
+    const metadata = {
       classification,
       requiresApproval: classification === "write" && !DIRECT_MACHINE_WRITE_OPERATION_IDS.has(id),
       atlasSafetyClass,
@@ -8444,7 +8580,9 @@ for (const [classification, operationIds] of Object.entries(OPERATION_IDS_BY_CLA
         supportsExecute: true,
         executionMode: "sync"
       }
-    });
+    };
+    assertDataPipelineReadOnlyRegistration(id, metadata);
+    metadataByOperationId.set(id, metadata);
   }
 }
 function registeredOperationMetadata(id) {
@@ -8606,10 +8744,15 @@ function buildOperationManifest(program) {
 }
 
 // src/commands/osmd.ts
-var sourceSchema = z18.enum(["canonical_osmd", "agent_overlay", "agent_wiki"]);
-var accessSchema = z18.enum(["read_only", "read_write", "append_only"]).catch("read_write");
-var ownerSchema = z18.enum(["system", "atlas"]);
-var suggestedActionSchema = z18.enum([
+var sourceSchema = z19.enum([
+  "canonical_osmd",
+  "agent_overlay",
+  "agent_wiki",
+  "thread_workspace"
+]);
+var accessSchema = z19.enum(["read_only", "read_write", "append_only"]).catch("read_write");
+var ownerSchema = z19.enum(["system", "atlas"]);
+var suggestedActionSchema = z19.enum([
   "read",
   "create",
   "init",
@@ -8618,7 +8761,7 @@ var suggestedActionSchema = z18.enum([
   "forbidden",
   "invalid_parent"
 ]).catch("update");
-var agentMarkdownErrorCodeSchema = z18.enum([
+var agentMarkdownErrorCodeSchema = z19.enum([
   "canonical_osmd_read_only",
   "agent_parent_not_found",
   "agent_file_not_found",
@@ -8629,9 +8772,9 @@ var agentMarkdownErrorCodeSchema = z18.enum([
   "invalid_agent_wiki_path"
 ]);
 var agentMarkdownErrorCodeFieldSchema = agentMarkdownErrorCodeSchema.nullable().catch(null);
-var nonEmptyString3 = z18.string().min(1);
-var nonNegativeInt3 = z18.coerce.number().int().min(0);
-var positiveInt = z18.coerce.number().int().min(1);
+var nonEmptyString3 = z19.string().min(1);
+var nonNegativeInt3 = z19.coerce.number().int().min(0);
+var positiveInt = z19.coerce.number().int().min(1);
 var supportedAgentOverlaySystemFiles = ["notes.md", "summary.md"];
 var supportedWikiIndexFile = "index.md";
 var supportedWikiLogFile = "log.md";
@@ -8647,20 +8790,20 @@ var supportedWikiControlledPatterns = supportedWikiControlledFolders.map(
 );
 var controlledWikiSlugPattern = /^[a-z0-9][a-z0-9-]*$/;
 var agentMarkdownSlugPattern = /^[a-z0-9][a-z0-9-]*$/;
-var osmdSearchScopeSchema = z18.enum([
+var osmdSearchScopeSchema = z19.enum([
   "os-only",
   "agent-overlay-only",
   "agent-wiki-only",
   "combined"
 ]);
-var osmdLintScopeSchema = z18.enum([
+var osmdLintScopeSchema = z19.enum([
   "combined",
   "agent-overlay-only",
   "agent-wiki-only"
 ]);
-var osmdMemoryQualityScopeSchema = z18.enum(["agent-overlay-only"]);
-var osmdIngestKindSchema = z18.enum(["text", "file", "url", "transcript"]);
-var osmdRawSourceTypeSchema = z18.enum([
+var osmdMemoryQualityScopeSchema = z19.enum(["agent-overlay-only"]);
+var osmdIngestKindSchema = z19.enum(["text", "file", "url", "transcript"]);
+var osmdRawSourceTypeSchema = z19.enum([
   "pasted_text",
   "uploaded_markdown",
   "uploaded_text",
@@ -8669,30 +8812,37 @@ var osmdRawSourceTypeSchema = z18.enum([
   "meeting_transcript",
   "url"
 ]);
-var agentMarkdownFileSchema = z18.preprocess(
+var agentMarkdownFileSchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    path: z18.string(),
+  z19.object({
+    path: z19.string(),
     source: sourceSchema,
     access: accessSchema,
     owner: ownerSchema,
-    exists: z18.boolean(),
-    canCreate: z18.boolean(),
-    canUpdate: z18.boolean(),
-    canAppend: z18.boolean(),
-    wikiRole: z18.string().nullable().optional(),
-    formatVersion: z18.string().nullable().optional(),
-    createdAt: z18.string().nullable().optional(),
-    updatedAt: z18.string().nullable().optional(),
-    ingestedAt: z18.string().nullable().optional(),
-    lastSeenAt: z18.string().nullable().optional(),
-    canonicalParentUpdatedAt: z18.string().nullable().optional(),
-    parentRef: z18.string().nullable().optional(),
-    agentChildrenAllowed: z18.boolean(),
+    exists: z19.boolean(),
+    canCreate: z19.boolean(),
+    canUpdate: z19.boolean(),
+    canAppend: z19.boolean(),
+    wikiRole: z19.string().nullable().optional(),
+    formatVersion: z19.string().nullable().optional(),
+    createdAt: z19.string().nullable().optional(),
+    updatedAt: z19.string().nullable().optional(),
+    ingestedAt: z19.string().nullable().optional(),
+    lastSeenAt: z19.string().nullable().optional(),
+    canonicalParentUpdatedAt: z19.string().nullable().optional(),
+    parentRef: z19.string().nullable().optional(),
+    agentChildrenAllowed: z19.boolean(),
     suggestedAction: suggestedActionSchema,
     errorCode: agentMarkdownErrorCodeFieldSchema.optional(),
-    content: z18.string().nullable().optional(),
-    url: z18.string().nullable().optional()
+    content: z19.string().nullable().optional(),
+    url: z19.string().nullable().optional(),
+    workspaceId: z19.string().nullable().optional(),
+    fileId: z19.string().nullable().optional(),
+    name: z19.string().nullable().optional(),
+    displayName: z19.string().nullable().optional(),
+    contentSha: z19.string().nullable().optional(),
+    versionSha: z19.string().nullable().optional(),
+    mediaType: z19.string().nullable().optional()
   }).transform((value) => ({
     ...value,
     wikiRole: value.wikiRole ?? null,
@@ -8705,34 +8855,41 @@ var agentMarkdownFileSchema = z18.preprocess(
     parentRef: value.parentRef ?? null,
     errorCode: value.errorCode ?? null,
     content: value.content ?? null,
-    url: value.url ?? null
+    url: value.url ?? null,
+    workspaceId: value.workspaceId ?? null,
+    fileId: value.fileId ?? null,
+    name: value.name ?? null,
+    displayName: value.displayName ?? null,
+    contentSha: value.contentSha ?? null,
+    versionSha: value.versionSha ?? null,
+    mediaType: value.mediaType ?? null
   }))
 );
-var agentMarkdownFilesSchema = z18.array(agentMarkdownFileSchema);
-var agentMarkdownMutationDataSchema = z18.union([
+var agentMarkdownFilesSchema = z19.array(agentMarkdownFileSchema);
+var agentMarkdownMutationDataSchema = z19.union([
   agentMarkdownFileSchema,
-  z18.object({ files: agentMarkdownFilesSchema })
+  z19.object({ files: agentMarkdownFilesSchema })
 ]);
-var osmdSearchCandidateSchema = z18.preprocess(
+var osmdSearchCandidateSchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    path: z18.string(),
+  z19.object({
+    path: z19.string(),
     source: sourceSchema,
     access: accessSchema,
     owner: ownerSchema,
-    wikiRole: z18.string().nullable().optional(),
-    formatVersion: z18.string().nullable().optional(),
-    parentRef: z18.string().nullable().optional(),
-    exists: z18.boolean(),
-    agentChildrenAllowed: z18.boolean(),
-    title: z18.string(),
-    label: z18.string(),
-    snippet: z18.string().nullable().optional(),
-    rank: z18.number().int(),
-    matchReason: z18.string().nullable().optional(),
-    toolKey: z18.string().nullable().optional(),
-    nodeKey: z18.string().nullable().optional(),
-    nodeKind: z18.string().nullable().optional()
+    wikiRole: z19.string().nullable().optional(),
+    formatVersion: z19.string().nullable().optional(),
+    parentRef: z19.string().nullable().optional(),
+    exists: z19.boolean(),
+    agentChildrenAllowed: z19.boolean(),
+    title: z19.string(),
+    label: z19.string(),
+    snippet: z19.string().nullable().optional(),
+    rank: z19.number().int(),
+    matchReason: z19.string().nullable().optional(),
+    toolKey: z19.string().nullable().optional(),
+    nodeKey: z19.string().nullable().optional(),
+    nodeKind: z19.string().nullable().optional()
   }).transform((value) => ({
     ...value,
     wikiRole: value.wikiRole ?? null,
@@ -8745,26 +8902,26 @@ var osmdSearchCandidateSchema = z18.preprocess(
     nodeKind: value.nodeKind ?? null
   }))
 );
-var osmdSearchResultSchema = z18.preprocess(
+var osmdSearchResultSchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    query: z18.string(),
-    scope: z18.string(),
-    count: z18.number().int().min(0),
-    candidates: z18.array(osmdSearchCandidateSchema)
+  z19.object({
+    query: z19.string(),
+    scope: z19.string(),
+    count: z19.number().int().min(0),
+    candidates: z19.array(osmdSearchCandidateSchema)
   })
 );
-var osmdWikiLintIssueSchema = z18.preprocess(
+var osmdWikiLintIssueSchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    code: z18.string(),
-    severity: z18.string(),
-    path: z18.string(),
-    source: z18.string().nullable().optional(),
-    parentRef: z18.string().nullable().optional(),
-    message: z18.string(),
-    suggestedAction: z18.string().nullable().optional(),
-    canAutoFix: z18.boolean()
+  z19.object({
+    code: z19.string(),
+    severity: z19.string(),
+    path: z19.string(),
+    source: z19.string().nullable().optional(),
+    parentRef: z19.string().nullable().optional(),
+    message: z19.string(),
+    suggestedAction: z19.string().nullable().optional(),
+    canAutoFix: z19.boolean()
   }).transform((value) => ({
     ...value,
     source: value.source ?? null,
@@ -8772,37 +8929,37 @@ var osmdWikiLintIssueSchema = z18.preprocess(
     suggestedAction: value.suggestedAction ?? null
   }))
 );
-var osmdWikiLintResultSchema = z18.preprocess(
+var osmdWikiLintResultSchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    status: z18.string(),
-    summary: z18.object({
-      totalIssues: z18.number().int().min(0),
-      errors: z18.number().int().min(0),
-      warnings: z18.number().int().min(0),
-      suggestions: z18.number().int().min(0)
+  z19.object({
+    status: z19.string(),
+    summary: z19.object({
+      totalIssues: z19.number().int().min(0),
+      errors: z19.number().int().min(0),
+      warnings: z19.number().int().min(0),
+      suggestions: z19.number().int().min(0)
     }),
-    issues: z18.array(osmdWikiLintIssueSchema)
+    issues: z19.array(osmdWikiLintIssueSchema)
   })
 );
-var nullableCountSchema = z18.preprocess(
+var nullableCountSchema = z19.preprocess(
   (value) => value === void 0 || value === null || value === "" ? null : value,
-  z18.coerce.number().int().min(0).nullable()
+  z19.coerce.number().int().min(0).nullable()
 ).catch(null);
-var osmdMemoryQualityIssueSchema = z18.preprocess(
+var osmdMemoryQualityIssueSchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    code: z18.string().nullable().optional(),
-    issueCode: z18.string().nullable().optional(),
-    path: z18.string().nullable().optional(),
-    parentRef: z18.string().nullable().optional(),
-    dimension: z18.string().nullable().optional(),
-    evidence: z18.string().nullable().optional(),
-    evidenceSnippet: z18.string().nullable().optional(),
-    message: z18.string().nullable().optional(),
-    severity: z18.string().nullable().optional(),
-    suggestedAction: z18.string().nullable().optional(),
-    canAutoFix: z18.boolean().nullable().optional()
+  z19.object({
+    code: z19.string().nullable().optional(),
+    issueCode: z19.string().nullable().optional(),
+    path: z19.string().nullable().optional(),
+    parentRef: z19.string().nullable().optional(),
+    dimension: z19.string().nullable().optional(),
+    evidence: z19.string().nullable().optional(),
+    evidenceSnippet: z19.string().nullable().optional(),
+    message: z19.string().nullable().optional(),
+    severity: z19.string().nullable().optional(),
+    suggestedAction: z19.string().nullable().optional(),
+    canAutoFix: z19.boolean().nullable().optional()
   }).passthrough().transform((value) => ({
     ...value,
     code: value.code ?? value.issueCode ?? "unknown_issue",
@@ -8817,16 +8974,16 @@ var osmdMemoryQualityIssueSchema = z18.preprocess(
     canAutoFix: value.canAutoFix === true ? true : false
   }))
 );
-var osmdMemoryQualityOverlaySchema = z18.preprocess(
+var osmdMemoryQualityOverlaySchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    path: z18.string().nullable().optional(),
-    parentRef: z18.string().nullable().optional(),
-    status: z18.string().nullable().optional(),
-    score: z18.union([z18.number(), z18.string()]).nullable().optional(),
-    overallScore: z18.union([z18.number(), z18.string()]).nullable().optional(),
-    dimensions: z18.unknown().nullable().optional(),
-    issues: z18.array(osmdMemoryQualityIssueSchema).optional()
+  z19.object({
+    path: z19.string().nullable().optional(),
+    parentRef: z19.string().nullable().optional(),
+    status: z19.string().nullable().optional(),
+    score: z19.union([z19.number(), z19.string()]).nullable().optional(),
+    overallScore: z19.union([z19.number(), z19.string()]).nullable().optional(),
+    dimensions: z19.unknown().nullable().optional(),
+    issues: z19.array(osmdMemoryQualityIssueSchema).optional()
   }).passthrough().transform((value) => ({
     ...value,
     path: value.path ?? null,
@@ -8838,9 +8995,9 @@ var osmdMemoryQualityOverlaySchema = z18.preprocess(
     issues: value.issues ?? []
   }))
 );
-var osmdMemoryQualitySummarySchema = z18.preprocess(
+var osmdMemoryQualitySummarySchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
+  z19.object({
     evaluatedCount: nullableCountSchema.optional(),
     passCount: nullableCountSchema.optional(),
     warnCount: nullableCountSchema.optional(),
@@ -8858,19 +9015,19 @@ var osmdMemoryQualitySummarySchema = z18.preprocess(
     failCount: value.failCount ?? value.failures ?? null
   }))
 );
-var osmdMemoryQualityResultSchema = z18.preprocess(
+var osmdMemoryQualityResultSchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    status: z18.string(),
-    scope: z18.string().nullable().optional(),
+  z19.object({
+    status: z19.string(),
+    scope: z19.string().nullable().optional(),
     evaluatedCount: nullableCountSchema.optional(),
     passCount: nullableCountSchema.optional(),
     warnCount: nullableCountSchema.optional(),
     failCount: nullableCountSchema.optional(),
     summary: osmdMemoryQualitySummarySchema.optional(),
-    weakestOverlays: z18.array(osmdMemoryQualityOverlaySchema).optional(),
-    issues: z18.array(osmdMemoryQualityIssueSchema).optional(),
-    scores: z18.array(osmdMemoryQualityOverlaySchema).optional()
+    weakestOverlays: z19.array(osmdMemoryQualityOverlaySchema).optional(),
+    issues: z19.array(osmdMemoryQualityIssueSchema).optional(),
+    scores: z19.array(osmdMemoryQualityOverlaySchema).optional()
   }).passthrough().transform((value) => {
     const summary = isRecord5(value.summary) ? value.summary : null;
     return {
@@ -8894,24 +9051,24 @@ function normalizeOsmdIngestFileRecordInput(value) {
   }
   return normalized;
 }
-var osmdIngestFileRecordSchema = z18.preprocess(
+var osmdIngestFileRecordSchema = z19.preprocess(
   normalizeOsmdIngestFileRecordInput,
-  z18.object({
-    path: z18.string(),
-    source: z18.string().nullable().optional(),
-    access: z18.string().nullable().optional(),
-    owner: z18.string().nullable().optional(),
-    parentRef: z18.string().nullable().optional(),
-    exists: z18.boolean().nullable().optional(),
-    canCreate: z18.boolean().nullable().optional(),
-    canUpdate: z18.boolean().nullable().optional(),
-    canAppend: z18.boolean().nullable().optional(),
-    wikiRole: z18.string().nullable().optional(),
-    formatVersion: z18.string().nullable().optional(),
-    createdAt: z18.string().nullable().optional(),
-    updatedAt: z18.string().nullable().optional(),
-    suggestedAction: z18.string().nullable().optional(),
-    errorCode: z18.string().nullable().optional()
+  z19.object({
+    path: z19.string(),
+    source: z19.string().nullable().optional(),
+    access: z19.string().nullable().optional(),
+    owner: z19.string().nullable().optional(),
+    parentRef: z19.string().nullable().optional(),
+    exists: z19.boolean().nullable().optional(),
+    canCreate: z19.boolean().nullable().optional(),
+    canUpdate: z19.boolean().nullable().optional(),
+    canAppend: z19.boolean().nullable().optional(),
+    wikiRole: z19.string().nullable().optional(),
+    formatVersion: z19.string().nullable().optional(),
+    createdAt: z19.string().nullable().optional(),
+    updatedAt: z19.string().nullable().optional(),
+    suggestedAction: z19.string().nullable().optional(),
+    errorCode: z19.string().nullable().optional()
   }).passthrough().transform((value) => ({
     ...value,
     source: value.source ?? null,
@@ -8930,17 +9087,17 @@ var osmdIngestFileRecordSchema = z18.preprocess(
     errorCode: value.errorCode ?? null
   }))
 );
-var osmdIngestResultSchema = z18.preprocess(
+var osmdIngestResultSchema = z19.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  z18.object({
-    rawSourceId: z18.union([z18.string(), z18.number()]).nullable().optional(),
-    sourceSummaryPath: z18.string().nullable().optional(),
+  z19.object({
+    rawSourceId: z19.union([z19.string(), z19.number()]).nullable().optional(),
+    sourceSummaryPath: z19.string().nullable().optional(),
     sourceSummaryFile: osmdIngestFileRecordSchema.nullable().optional(),
-    slug: z18.string().nullable().optional(),
-    runLint: z18.boolean().nullable().optional(),
-    createdFiles: z18.array(osmdIngestFileRecordSchema).optional(),
-    updatedFiles: z18.array(osmdIngestFileRecordSchema).optional(),
-    skippedUpdates: z18.array(z18.unknown()).optional(),
+    slug: z19.string().nullable().optional(),
+    runLint: z19.boolean().nullable().optional(),
+    createdFiles: z19.array(osmdIngestFileRecordSchema).optional(),
+    updatedFiles: z19.array(osmdIngestFileRecordSchema).optional(),
+    skippedUpdates: z19.array(z19.unknown()).optional(),
     lintResult: osmdWikiLintResultSchema.nullable().optional()
   }).passthrough().transform((value) => ({
     ...value,
@@ -8955,37 +9112,37 @@ var osmdIngestResultSchema = z18.preprocess(
     lintResult: value.lintResult ?? null
   }))
 );
-var mutationPayloadSchema = z18.object({
-  ok: z18.boolean(),
-  status: z18.number(),
-  errorCode: z18.string().nullable().optional(),
-  data: z18.unknown().nullable().optional(),
-  errors: z18.unknown().nullable().optional()
+var mutationPayloadSchema = z19.object({
+  ok: z19.boolean(),
+  status: z19.number(),
+  errorCode: z19.string().nullable().optional(),
+  data: z19.unknown().nullable().optional(),
+  errors: z19.unknown().nullable().optional()
 });
-var markdownTreeNodeSchema = z18.lazy(
-  () => z18.object({
-    toolKey: z18.string(),
-    nodeKey: z18.string(),
-    nodeKind: z18.string(),
-    runtimeLabel: z18.string(),
-    path: z18.string().nullable().optional().transform((value) => value ?? null),
+var markdownTreeNodeSchema = z19.lazy(
+  () => z19.object({
+    toolKey: z19.string(),
+    nodeKey: z19.string(),
+    nodeKind: z19.string(),
+    runtimeLabel: z19.string(),
+    path: z19.string().nullable().optional().transform((value) => value ?? null),
     source: sourceSchema,
     access: accessSchema,
     owner: ownerSchema,
-    parentRef: z18.string().nullable().optional().transform((value) => value ?? null),
-    agentChildrenAllowed: z18.boolean(),
-    exists: z18.boolean(),
-    resolvedScope: z18.object({
-      parentId: z18.string().nullable().optional().transform((value) => value ?? null),
-      recordId: z18.string().nullable().optional().transform((value) => value ?? null),
-      memberId: z18.string().nullable().optional().transform((value) => value ?? null),
-      teamId: z18.string().nullable().optional().transform((value) => value ?? null),
-      contentType: z18.string().nullable().optional().transform((value) => value ?? null)
+    parentRef: z19.string().nullable().optional().transform((value) => value ?? null),
+    agentChildrenAllowed: z19.boolean(),
+    exists: z19.boolean(),
+    resolvedScope: z19.object({
+      parentId: z19.string().nullable().optional().transform((value) => value ?? null),
+      recordId: z19.string().nullable().optional().transform((value) => value ?? null),
+      memberId: z19.string().nullable().optional().transform((value) => value ?? null),
+      teamId: z19.string().nullable().optional().transform((value) => value ?? null),
+      contentType: z19.string().nullable().optional().transform((value) => value ?? null)
     }),
-    isLeaf: z18.boolean(),
-    treeView: z18.boolean(),
-    details: z18.unknown().nullable(),
-    children: z18.array(markdownTreeNodeSchema).optional().transform((value) => value ?? [])
+    isLeaf: z19.boolean(),
+    treeView: z19.boolean(),
+    details: z19.unknown().nullable(),
+    children: z19.array(markdownTreeNodeSchema).optional().transform((value) => value ?? [])
   })
 );
 var AGENT_MARKDOWN_FILE_SELECTION = `{
@@ -9010,6 +9167,13 @@ var AGENT_MARKDOWN_FILE_SELECTION = `{
   errorCode
   content
   url
+  workspaceId
+  fileId
+  name
+  displayName
+  contentSha
+  versionSha
+  mediaType
 }`;
 var OSMD_SEARCH_SELECTION = `{
   query
@@ -9665,21 +9829,24 @@ async function runOsmdIngestFlow(params) {
     })
   });
 }
-function normalizeAgentFilePath(file) {
+var atlasThreadWorkspaceParentRefPattern = /^Atlas Workspace\/ATL-[A-Z0-9][A-Z0-9-]*$/;
+function normalizeAgentFilePath(file, parentRef) {
   const trimmed = nonEmptyString3.parse(file).trim().replace(/^\/+|\/+$/g, "");
   const fileName = trimmed.startsWith(".agent/") ? trimmed.slice(".agent/".length) : trimmed;
-  if (fileName.includes("\\") || fileName.includes("/") || fileName === "." || fileName === ".." || !isSupportedAgentOverlayFileName(fileName)) {
+  const isThreadWorkspace = atlasThreadWorkspaceParentRefPattern.test(parentRef);
+  const isSupportedFile = isThreadWorkspace ? /^[a-z0-9][a-z0-9-]*\.(?:md|txt)$/.test(fileName) : isSupportedAgentOverlayFileName(fileName);
+  if (fileName.includes("\\") || fileName.includes("/") || fileName === "." || fileName === ".." || !isSupportedFile) {
     throw new CliError({
-      message: ".agent supports only notes.md, summary.md, or <lowercase-kebab-slug>.md.",
+      message: isThreadWorkspace ? "Atlas task workspaces support only lowercase kebab-case .md or .txt basenames." : ".agent supports only notes.md, summary.md, or <lowercase-kebab-slug>.md.",
       kind: "invalid_args",
       status: 400,
       exitCode: EXIT_CODES.invalidArgs,
       details: {
-        supportedFiles: [...supportedAgentOverlaySystemFiles, "<lowercase-kebab-slug>.md"]
+        supportedFiles: isThreadWorkspace ? ["<lowercase-kebab-slug>.md", "<lowercase-kebab-slug>.txt"] : [...supportedAgentOverlaySystemFiles, "<lowercase-kebab-slug>.md"]
       }
     });
   }
-  return `.agent/${fileName}`;
+  return isThreadWorkspace ? fileName : `.agent/${fileName}`;
 }
 function formatHumanList(items) {
   if (items.length <= 1) {
@@ -10906,12 +11073,13 @@ function registerOsmdCommands(program) {
   const agent = osmd.command("agent").description(".agent markdown attached to canonical OSMD parents");
   agent.command("status <parent-ref> <file>").description("Show .agent file metadata without creating files").action(async (parentRef, file, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+    const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
     const result = await requestAgentMarkdownStatus({
       command: "osmd.agent.status",
       runtimeOptions,
       organizationId,
-      path: normalizeAgentFilePath(file),
-      parentRef: nonEmptyString3.parse(parentRef).trim()
+      path: normalizeAgentFilePath(file, normalizedParentRef),
+      parentRef: normalizedParentRef
     });
     return printEnvelopeAndExit({
       envelope: buildSuccessEnvelope({
@@ -10938,12 +11106,13 @@ function registerOsmdCommands(program) {
   });
   agent.command("read <parent-ref> <file>").description("Read a .agent file without creating files").action(async (parentRef, file, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+    const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
     const result = await requestAgentMarkdownFile({
       command: "osmd.agent.read",
       runtimeOptions,
       organizationId,
-      path: normalizeAgentFilePath(file),
-      parentRef: nonEmptyString3.parse(parentRef).trim()
+      path: normalizeAgentFilePath(file, normalizedParentRef),
+      parentRef: normalizedParentRef
     });
     return printEnvelopeAndExit({
       envelope: buildSuccessEnvelope({
@@ -10961,13 +11130,14 @@ function registerOsmdCommands(program) {
       const globals = cmd.optsWithGlobals();
       const content = await resolveContentInput(opts, globals);
       const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+      const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
       return runWriteFlow({
         command: "osmd.agent.create",
         action: "create",
         runtimeOptions,
         organizationId,
-        path: normalizeAgentFilePath(file),
-        parentRef: nonEmptyString3.parse(parentRef).trim(),
+        path: normalizeAgentFilePath(file, normalizedParentRef),
+        parentRef: normalizedParentRef,
         content
       });
     }
@@ -10979,13 +11149,14 @@ function registerOsmdCommands(program) {
       const globals = cmd.optsWithGlobals();
       const content = await resolveContentInput(opts, globals);
       const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
+      const normalizedParentRef = nonEmptyString3.parse(parentRef).trim();
       return runWriteFlow({
         command: "osmd.agent.update",
         action: "update",
         runtimeOptions,
         organizationId,
-        path: normalizeAgentFilePath(file),
-        parentRef: nonEmptyString3.parse(parentRef).trim(),
+        path: normalizeAgentFilePath(file, normalizedParentRef),
+        parentRef: normalizedParentRef,
         content
       });
     }
@@ -13898,14 +14069,14 @@ function registerMailCommands(program) {
 }
 
 // src/commands/phantom.ts
-import { z as z19 } from "zod";
-var nonNegativeInt4 = z19.coerce.number().int().min(0);
-var nullableString = z19.string().nullable().optional().transform((value) => value ?? null);
-var idString = z19.union([z19.string(), z19.number()]).transform((value) => String(value));
-var nullableIdString = z19.union([z19.string(), z19.number()]).nullable().optional().transform(
+import { z as z20 } from "zod";
+var nonNegativeInt4 = z20.coerce.number().int().min(0);
+var nullableString = z20.string().nullable().optional().transform((value) => value ?? null);
+var idString = z20.union([z20.string(), z20.number()]).transform((value) => String(value));
+var nullableIdString = z20.union([z20.string(), z20.number()]).nullable().optional().transform(
   (value) => value === void 0 || value === null ? null : String(value)
 );
-var jsonObject = z19.record(z19.string(), z19.unknown());
+var jsonObject = z20.record(z20.string(), z20.unknown());
 var PHANTOM_LEDGER_INVENTORY_SELECTION = `{
   schemaVersion
   runsCount
@@ -14118,10 +14289,10 @@ var PHANTOM_LEDGER_KEY_ALIASES = {
   content_hash: "contentHash",
   observed_at: "observedAt"
 };
-var phantomLedgerInventorySchema = z19.preprocess(
+var phantomLedgerInventorySchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
-    schemaVersion: z19.string(),
+  z20.object({
+    schemaVersion: z20.string(),
     runsCount: nonNegativeInt4,
     observationsCount: nonNegativeInt4,
     candidatesCount: nonNegativeInt4,
@@ -14131,16 +14302,16 @@ var phantomLedgerInventorySchema = z19.preprocess(
     reportsCount: nonNegativeInt4
   })
 );
-var phantomRunSchema = z19.preprocess(
+var phantomRunSchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
+  z20.object({
     id: idString,
     organizationId: idString,
-    notificationId: z19.union([z19.string(), z19.number()]).nullable().optional().transform(
+    notificationId: z20.union([z20.string(), z20.number()]).nullable().optional().transform(
       (value) => value === void 0 || value === null ? null : String(value)
     ),
-    status: z19.string(),
-    triggerType: z19.string(),
+    status: z20.string(),
+    triggerType: z20.string(),
     startedAt: nullableString,
     completedAt: nullableString,
     scannedFileCount: nonNegativeInt4,
@@ -14150,163 +14321,163 @@ var phantomRunSchema = z19.preprocess(
     errorCount: nonNegativeInt4,
     warningCount: nonNegativeInt4,
     errorMessage: nullableString,
-    dryRun: z19.boolean(),
-    schemaVersion: z19.string(),
+    dryRun: z20.boolean(),
+    schemaVersion: z20.string(),
     testRunId: nullableString,
     idempotencyKey: nullableString,
     ledgerMetadata: jsonObject.catch({}),
-    createdAt: z19.string(),
-    updatedAt: z19.string()
+    createdAt: z20.string(),
+    updatedAt: z20.string()
   })
 );
-var phantomRunListItemSchema = z19.preprocess(
+var phantomRunListItemSchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
+  z20.object({
     id: idString,
     organizationId: idString,
-    status: z19.string(),
-    triggerType: z19.string(),
-    dryRun: z19.boolean(),
-    schemaVersion: z19.string(),
+    status: z20.string(),
+    triggerType: z20.string(),
+    dryRun: z20.boolean(),
+    schemaVersion: z20.string(),
     testRunId: nullableString,
-    createdAt: z19.string(),
-    updatedAt: z19.string()
+    createdAt: z20.string(),
+    updatedAt: z20.string()
   })
 );
-var phantomReportSchema = z19.preprocess(
+var phantomReportSchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
+  z20.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
-    status: z19.string(),
-    reportType: z19.string(),
-    schemaVersion: z19.string(),
+    status: z20.string(),
+    reportType: z20.string(),
+    schemaVersion: z20.string(),
     markdownPath: nullableString,
     payload: jsonObject.catch({}),
     testRunId: nullableString,
-    idempotencyKey: z19.string(),
-    createdAt: z19.string(),
-    updatedAt: z19.string()
+    idempotencyKey: z20.string(),
+    createdAt: z20.string(),
+    updatedAt: z20.string()
   })
 );
-var phantomObservationSchema = z19.preprocess(
+var phantomObservationSchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
+  z20.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
-    status: z19.string(),
-    observationType: z19.string(),
+    status: z20.string(),
+    observationType: z20.string(),
     targetType: nullableString,
     targetId: nullableString,
     sourceTable: nullableString,
     sourceRecordId: nullableString,
     sourceEventId: nullableString,
     contentHash: nullableString,
-    observedAt: z19.string(),
-    confidence: z19.coerce.number(),
+    observedAt: z20.string(),
+    confidence: z20.coerce.number(),
     payload: jsonObject.catch({}),
-    schemaVersion: z19.string(),
+    schemaVersion: z20.string(),
     testRunId: nullableString,
-    idempotencyKey: z19.string(),
-    createdAt: z19.string(),
-    updatedAt: z19.string()
+    idempotencyKey: z20.string(),
+    createdAt: z20.string(),
+    updatedAt: z20.string()
   })
 );
-var phantomCandidateSchema = z19.preprocess(
+var phantomCandidateSchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
+  z20.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
     phantomObservationId: nullableString,
-    status: z19.string(),
-    candidateType: z19.string(),
+    status: z20.string(),
+    candidateType: z20.string(),
     targetType: nullableString,
     targetId: nullableString,
     title: nullableString,
-    dryRun: z19.boolean(),
+    dryRun: z20.boolean(),
     payload: jsonObject.catch({}),
-    approvalStatus: z19.string(),
+    approvalStatus: z20.string(),
     approvedById: nullableIdString,
     approvedAt: nullableString,
     approvalSource: nullableString,
     approvalReason: nullableString,
     approvalMetadata: jsonObject.catch({}),
-    schemaVersion: z19.string(),
+    schemaVersion: z20.string(),
     testRunId: nullableString,
-    idempotencyKey: z19.string(),
-    createdAt: z19.string(),
-    updatedAt: z19.string()
+    idempotencyKey: z20.string(),
+    createdAt: z20.string(),
+    updatedAt: z20.string()
   })
 );
-var phantomCandidateEvidenceSchema = z19.preprocess(
+var phantomCandidateEvidenceSchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
+  z20.object({
     id: idString,
     organizationId: idString,
     phantomCandidateId: idString,
     phantomObservationId: nullableString,
-    evidenceType: z19.string(),
+    evidenceType: z20.string(),
     sourceType: nullableString,
     sourceId: nullableString,
     contentHash: nullableString,
     payload: jsonObject.catch({}),
-    schemaVersion: z19.string(),
+    schemaVersion: z20.string(),
     testRunId: nullableString,
-    idempotencyKey: z19.string(),
-    createdAt: z19.string(),
-    updatedAt: z19.string()
+    idempotencyKey: z20.string(),
+    createdAt: z20.string(),
+    updatedAt: z20.string()
   })
 );
-var phantomValidationSchema = z19.preprocess(
+var phantomValidationSchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
+  z20.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
     phantomCandidateId: idString,
-    status: z19.string(),
-    validationType: z19.string(),
-    dryRun: z19.boolean(),
+    status: z20.string(),
+    validationType: z20.string(),
+    dryRun: z20.boolean(),
     payload: jsonObject.catch({}),
     resultPayload: jsonObject.catch({}),
-    schemaVersion: z19.string(),
+    schemaVersion: z20.string(),
     testRunId: nullableString,
-    idempotencyKey: z19.string(),
-    createdAt: z19.string(),
-    updatedAt: z19.string()
+    idempotencyKey: z20.string(),
+    createdAt: z20.string(),
+    updatedAt: z20.string()
   })
 );
-var phantomApplyOperationSchema = z19.preprocess(
+var phantomApplyOperationSchema = z20.preprocess(
   normalizePhantomLedgerKeys,
-  z19.object({
+  z20.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
     phantomCandidateId: idString,
-    status: z19.string(),
-    operationType: z19.string(),
-    dryRun: z19.boolean(),
+    status: z20.string(),
+    operationType: z20.string(),
+    dryRun: z20.boolean(),
     targetType: nullableString,
     targetId: nullableString,
     payload: jsonObject.catch({}),
     resultPayload: jsonObject.catch({}),
-    schemaVersion: z19.string(),
+    schemaVersion: z20.string(),
     testRunId: nullableString,
-    idempotencyKey: z19.string(),
-    createdAt: z19.string(),
-    updatedAt: z19.string()
+    idempotencyKey: z20.string(),
+    createdAt: z20.string(),
+    updatedAt: z20.string()
   })
 );
-var phantomRunsSchema = z19.array(phantomRunListItemSchema);
-var phantomReportsSchema = z19.array(phantomReportSchema);
-var phantomObservationsSchema = z19.array(phantomObservationSchema);
-var phantomCandidatesSchema = z19.array(phantomCandidateSchema);
-var phantomCandidateEvidencesSchema = z19.array(phantomCandidateEvidenceSchema);
-var phantomValidationsSchema = z19.array(phantomValidationSchema);
-var phantomApplyOperationsSchema = z19.array(phantomApplyOperationSchema);
+var phantomRunsSchema = z20.array(phantomRunListItemSchema);
+var phantomReportsSchema = z20.array(phantomReportSchema);
+var phantomObservationsSchema = z20.array(phantomObservationSchema);
+var phantomCandidatesSchema = z20.array(phantomCandidateSchema);
+var phantomCandidateEvidencesSchema = z20.array(phantomCandidateEvidenceSchema);
+var phantomValidationsSchema = z20.array(phantomValidationSchema);
+var phantomApplyOperationsSchema = z20.array(phantomApplyOperationSchema);
 function isRecord6(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -16235,72 +16406,72 @@ function registerSignatureCommands(program) {
 }
 
 // src/commands/atlasAuthoring.ts
-import { z as z20 } from "zod";
-var idSchema15 = z20.string().trim().min(1);
-var idempotencyKeySchema = z20.string().min(1).refine((value) => value.trim() === value, "Idempotency key must not have leading or trailing whitespace.");
-var skillScopeSchema = z20.enum(["ADMIN_GLOBAL", "MEMBER_PERSONAL"]);
-var isoDateSchema = z20.iso.date();
-var nonEmptyStringSchema = z20.string().trim().min(1);
+import { z as z21 } from "zod";
+var idSchema15 = z21.string().trim().min(1);
+var idempotencyKeySchema = z21.string().min(1).refine((value) => value.trim() === value, "Idempotency key must not have leading or trailing whitespace.");
+var skillScopeSchema = z21.enum(["ADMIN_GLOBAL", "MEMBER_PERSONAL"]);
+var isoDateSchema = z21.iso.date();
+var nonEmptyStringSchema = z21.string().trim().min(1);
 var AUTOMATION_RUN_HTTP_TIMEOUT_MS = 6e4;
-var agentToolAccessSchema = z20.array(
-  z20.object({
+var agentToolAccessSchema = z21.array(
+  z21.object({
     tool_key: nonEmptyStringSchema,
     scope_value: nonEmptyStringSchema
   }).strict()
 ).min(1);
 var agentToolAccessUpdateSchema = agentToolAccessSchema.min(0);
-var agentPluginConnectionsSchema = z20.array(
-  z20.object({
+var agentPluginConnectionsSchema = z21.array(
+  z21.object({
     external_tool_connection_id: nonEmptyStringSchema,
     tool_key: nonEmptyStringSchema,
     scope_value: nonEmptyStringSchema.optional(),
-    allowed_tools: z20.array(nonEmptyStringSchema).optional(),
-    allowed_scopes: z20.array(nonEmptyStringSchema).optional(),
-    requires_confirmation: z20.boolean().optional(),
-    enabled: z20.boolean().optional()
+    allowed_tools: z21.array(nonEmptyStringSchema).optional(),
+    allowed_scopes: z21.array(nonEmptyStringSchema).optional(),
+    requires_confirmation: z21.boolean().optional(),
+    enabled: z21.boolean().optional()
   }).strict()
 ).min(1);
-var agentPluginConnectionUpdateSchema = z20.array(
-  z20.union([
-    z20.object({
+var agentPluginConnectionUpdateSchema = z21.array(
+  z21.union([
+    z21.object({
       id: nonEmptyStringSchema,
-      _destroy: z20.literal(true)
+      _destroy: z21.literal(true)
     }).strict(),
-    z20.object({
+    z21.object({
       id: nonEmptyStringSchema.optional(),
       external_tool_connection_id: nonEmptyStringSchema.optional(),
       tool_key: nonEmptyStringSchema.optional(),
       scope_value: nonEmptyStringSchema.optional(),
-      allowed_tools: z20.array(nonEmptyStringSchema).optional(),
-      allowed_scopes: z20.array(nonEmptyStringSchema).optional(),
-      requires_confirmation: z20.boolean().optional(),
-      enabled: z20.boolean().optional()
+      allowed_tools: z21.array(nonEmptyStringSchema).optional(),
+      allowed_scopes: z21.array(nonEmptyStringSchema).optional(),
+      requires_confirmation: z21.boolean().optional(),
+      enabled: z21.boolean().optional()
     }).strict().superRefine((value, context) => {
       if (value.id || value.external_tool_connection_id && value.tool_key) return;
       context.addIssue({
-        code: z20.ZodIssueCode.custom,
+        code: z21.ZodIssueCode.custom,
         message: "Plugin updates require an id, or both external_tool_connection_id and tool_key for a new grant."
       });
     })
   ])
 );
-var agentTriggerSchema = z20.object({
-  trigger_type: z20.literal("cron"),
+var agentTriggerSchema = z21.object({
+  trigger_type: z21.literal("cron"),
   cron_expression: nonEmptyStringSchema,
   timezone: nonEmptyStringSchema,
-  starts_at: z20.iso.datetime({ offset: true }).nullable().optional(),
-  ends_at: z20.iso.datetime({ offset: true }).nullable().optional(),
-  max_runs: z20.number().int().positive().nullable().optional(),
-  enabled: z20.boolean().optional()
+  starts_at: z21.iso.datetime({ offset: true }).nullable().optional(),
+  ends_at: z21.iso.datetime({ offset: true }).nullable().optional(),
+  max_runs: z21.number().int().positive().nullable().optional(),
+  enabled: z21.boolean().optional()
 }).strict();
-var agentTriggerUpdateSchema = z20.union([
+var agentTriggerUpdateSchema = z21.union([
   agentTriggerSchema.extend({ id: nonEmptyStringSchema.optional() }).strict(),
-  z20.object({
+  z21.object({
     id: nonEmptyStringSchema,
-    _destroy: z20.literal(true)
+    _destroy: z21.literal(true)
   }).strict()
 ]);
-var automationConfigSchema = z20.record(z20.string(), z20.unknown());
+var automationConfigSchema = z21.record(z21.string(), z21.unknown());
 var AGENT_SELECTION = `{
   id
   type
@@ -16978,7 +17149,7 @@ function registerAtlasAuthoringCommands(program) {
     "--service <service>",
     "Supported service: gmail, calendar, slack, or stripe"
   ).action(async (opts, cmd) => {
-    const service = z20.enum(["gmail", "calendar", "slack", "stripe"]).parse(opts.service);
+    const service = z21.enum(["gmail", "calendar", "slack", "stripe"]).parse(opts.service);
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
     await runGraphqlQueryCommand({
@@ -17263,6 +17434,15 @@ var VARIABLE_TYPES = {
   organization_id: "ID!",
   member_id: "ID"
 };
+var ACTIVITY_VARIABLE_TYPES = {
+  ...VARIABLE_TYPES,
+  start_at: "ISO8601DateTime!",
+  end_at: "ISO8601DateTime!"
+};
+var MEMBER_STATUSES_VARIABLE_TYPES = {
+  organization_id: "ID!",
+  member_ids: "[ID!]!"
+};
 function parseRecentLimit(value) {
   const limit = Number(value);
   if (!Number.isInteger(limit) || limit < 1 || limit > 50) {
@@ -17270,6 +17450,25 @@ function parseRecentLimit(value) {
   }
   return limit;
 }
+function parseIsoDateTime(optionName, value) {
+  const timestamp = Date.parse(value);
+  if (!Number.isFinite(timestamp) || !value.includes("T")) {
+    throw new Error(`${optionName} must be an ISO 8601 date-time`);
+  }
+  return value;
+}
+function validateActivityRange(startAt, endAt) {
+  if (Date.parse(endAt) <= Date.parse(startAt)) {
+    throw new Error("end-at must be after start-at");
+  }
+}
+function parseMemberIds(value) {
+  const memberIds = [...new Set(value.split(",").map((id) => id.trim()).filter(Boolean))];
+  if (memberIds.length < 1 || memberIds.length > 100) {
+    throw new Error("member-ids must contain between 1 and 100 unique member IDs");
+  }
+  return memberIds;
+}
 async function runDesktopContextQuery(cmd, params) {
   const context = await resolveCommandContext(cmd.optsWithGlobals());
   await runGraphqlQueryCommand({
@@ -17280,9 +17479,12 @@ async function runDesktopContextQuery(cmd, params) {
     variables: normalizeGraphqlVariables2({
       organization_id: resolveOrganizationId(context.organizationId),
       member_id: params.memberId,
-      limit: params.limit
+      member_ids: params.memberIds,
+      limit: params.limit,
+      start_at: params.startAt,
+      end_at: params.endAt
     }),
-    variableTypes: {
+    variableTypes: params.command === "desktop-context.activity" ? ACTIVITY_VARIABLE_TYPES : params.command === "desktop-context.member-statuses" ? MEMBER_STATUSES_VARIABLE_TYPES : {
       ...VARIABLE_TYPES,
       ...params.command === "desktop-context.recent" ? { limit: "Int" } : {}
     },
@@ -17300,6 +17502,18 @@ function registerDesktopContextCommands(program) {
       memberId: opts.memberId
     });
   });
+  desktopContext.command("member-statuses").description("Read capture and enrollment status for up to 100 organization members").requiredOption(
+    "--member-ids <memberIds>",
+    "Comma-separated organization member IDs (1-100)",
+    parseMemberIds
+  ).action(async (opts, cmd) => {
+    await runDesktopContextQuery(cmd, {
+      command: "desktop-context.member-statuses",
+      operationName: "DesktopContextMemberStatuses",
+      field: "desktop_context_member_statuses",
+      memberIds: opts.memberIds
+    });
+  });
   desktopContext.command("recent").description("Read recent sanitized evidence excerpts").option("--member-id <memberId>", "Member scope; defaults to the authenticated member").option("--limit <limit>", "Maximum observations (1-50)", parseRecentLimit).action(async (opts, cmd) => {
     await runDesktopContextQuery(cmd, {
       command: "desktop-context.recent",
@@ -17309,6 +17523,380 @@ function registerDesktopContextCommands(program) {
       limit: opts.limit
     });
   });
+  desktopContext.command("activity").description("Read canonical active, AFK, gap, and app duration for a bounded range").requiredOption(
+    "--start-at <dateTime>",
+    "Inclusive ISO 8601 range start",
+    (value) => parseIsoDateTime("start-at", value)
+  ).requiredOption(
+    "--end-at <dateTime>",
+    "Exclusive ISO 8601 range end",
+    (value) => parseIsoDateTime("end-at", value)
+  ).option("--member-id <memberId>", "Member scope; defaults to the authenticated member").action(async (opts, cmd) => {
+    validateActivityRange(opts.startAt, opts.endAt);
+    await runDesktopContextQuery(cmd, {
+      command: "desktop-context.activity",
+      operationName: "DesktopContextActivity",
+      field: "desktop_context_activity_summary",
+      memberId: opts.memberId,
+      startAt: opts.startAt,
+      endAt: opts.endAt
+    });
+  });
+}
+
+// src/commands/dataPipeline.ts
+var MAX_PARAMETERS_JSON_BYTES = 16384;
+var SECRET_LIKE_PARAMETER_KEY = /(?:^|_)(?:api_?key|authorization|credential|password|secret|token)(?:$|_)/i;
+var UNSAFE_PARAMETER_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+var ORGANIZATION_VARIABLE_TYPES = {
+  organization_id: "ID!"
+};
+var SOURCES_VARIABLE_TYPES = {
+  ...ORGANIZATION_VARIABLE_TYPES,
+  category_key: "String!"
+};
+var SOURCE_ACTIONS_VARIABLE_TYPES = {
+  ...ORGANIZATION_VARIABLE_TYPES,
+  source_id: "ID!"
+};
+var EXECUTE_SOURCE_ACTION_VARIABLE_TYPES = {
+  ...SOURCE_ACTIONS_VARIABLE_TYPES,
+  category_key: "String!",
+  provider_key: "String!",
+  action_key: "String!",
+  parameters: "JSON"
+};
+var PROVIDER_SELECTION = `
+organizationPluginId
+key
+name
+categories
+availability
+integrationKey
+arcadeProvider
+arcadeService
+logoAssetPath
+`.trim();
+var OVERVIEW_SELECTION = `
+{
+totalSourceCount
+connectedSourceCount
+categoriesConfiguredCount
+actionRequiredCount
+categories {
+  key
+  name
+  description
+  iconKey
+  sortOrder
+  allowedSourceTypes
+  suggestedSourceLabels
+  sourceCount
+  activeSourceCount
+  attentionSourceCount
+  status
+  providers {
+    ${PROVIDER_SELECTION}
+  }
+}
+}
+`.trim();
+var SOURCE_SELECTION = `
+{
+id
+type
+organizationId
+categoryKey
+sourceType
+providerKey
+organizationPluginId
+name
+url
+status
+connection
+configuration
+metadata
+lastSyncedAt
+lastSuccessfulSyncAt
+lastErrorAt
+lastErrorMessage
+createdById
+createdAt
+updatedAt
+}
+`.trim();
+var SOURCE_ACTION_SELECTION = `
+{
+key
+displayName
+inputSchema
+safetyClass
+requiresApproval
+}
+`.trim();
+var SOURCE_ACTION_RESULT_SELECTION = `
+{
+ok
+status
+errorCode
+errors
+traceId
+organizationId
+categoryKey
+providerKey
+sourceId
+actionKey
+records
+pageInfo
+metadata
+}
+`.trim();
+function invalidParameters(message, details = {}) {
+  return new CliError({
+    message,
+    kind: "invalid_args",
+    status: 400,
+    exitCode: EXIT_CODES.invalidArgs,
+    details
+  });
+}
+function parseNonBlank(value, optionName) {
+  const parsed = value.trim();
+  if (!parsed) {
+    throw invalidParameters(`${optionName} must not be blank`);
+  }
+  return parsed;
+}
+function parseCategoryKey(value) {
+  return parseNonBlank(value, "category-key");
+}
+function secretLikeParameterPath(value, path = []) {
+  if (!value || typeof value !== "object") return null;
+  if (Array.isArray(value)) {
+    for (let index = 0; index < value.length; index += 1) {
+      const nestedPath = secretLikeParameterPath(value[index], [...path, String(index)]);
+      if (nestedPath) return nestedPath;
+    }
+    return null;
+  }
+  for (const [key, nestedValue] of Object.entries(value)) {
+    const keyPath = [...path, key];
+    if (UNSAFE_PARAMETER_KEYS.has(key) || SECRET_LIKE_PARAMETER_KEY.test(key)) {
+      return keyPath.join(".");
+    }
+    const nestedPath = secretLikeParameterPath(nestedValue, keyPath);
+    if (nestedPath) return nestedPath;
+  }
+  return null;
+}
+function parseSourceActionParameters(raw) {
+  if (Buffer.byteLength(raw, "utf8") > MAX_PARAMETERS_JSON_BYTES) {
+    throw invalidParameters(
+      `parameters-json must not exceed ${MAX_PARAMETERS_JSON_BYTES} bytes`
+    );
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw invalidParameters("parameters-json must be a valid JSON object");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw invalidParameters("parameters-json must be a JSON object");
+  }
+  const secretPath = secretLikeParameterPath(parsed);
+  if (secretPath) {
+    throw invalidParameters(
+      `parameters-json contains a secret-like parameter key: ${secretPath}`,
+      { parameterPath: secretPath }
+    );
+  }
+  return parsed;
+}
+function isJsonRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function sourceActionFailureKind(errorCode, status) {
+  if (errorCode === "AUTH_REQUIRED" || errorCode === "UNAUTHORIZED") return "missing_auth";
+  if (errorCode === "NOT_FOUND") return "not_found";
+  if (errorCode === "PROVIDER_ERROR") return "upstream_error";
+  if (errorCode === "ACTION_NOT_ALLOWED") return "forbidden";
+  if (errorCode === "INVALID_INPUT" || errorCode === "INVALID_SOURCE") {
+    return "validation";
+  }
+  if (status === 403) return "forbidden";
+  if (status === 404) return "not_found";
+  if (status >= 500) return "upstream_error";
+  if (status === 400 || status === 422) return "validation";
+  return "generic_error";
+}
+function sourceActionFailureExitCode(kind, status) {
+  if (kind === "missing_auth") return EXIT_CODES.missingOrInvalidAuth;
+  if (kind === "forbidden") return EXIT_CODES.forbidden;
+  if (kind === "not_found") return EXIT_CODES.notFound;
+  if (kind === "validation") return EXIT_CODES.validationFailure;
+  if (kind === "upstream_error" || kind === "malformed_response") {
+    return EXIT_CODES.networkOrUpstream;
+  }
+  return mapStatusToExitCode(status);
+}
+function transformSourceActionResult(value) {
+  if (!isJsonRecord(value) || typeof value.ok !== "boolean") {
+    throw new CliError({
+      message: "Data Pipeline source action returned a malformed response",
+      kind: "malformed_response",
+      status: 502,
+      exitCode: EXIT_CODES.networkOrUpstream
+    });
+  }
+  if (value.ok) return value;
+  const status = typeof value.status === "number" && Number.isInteger(value.status) ? value.status : 500;
+  const errorCode = typeof value.errorCode === "string" && value.errorCode.length > 0 ? value.errorCode.toUpperCase() : "SOURCE_ACTION_FAILED";
+  const errors = Array.isArray(value.errors) ? value.errors.filter((error) => typeof error === "string") : [];
+  const traceId = typeof value.traceId === "string" ? value.traceId : null;
+  const kind = sourceActionFailureKind(errorCode, status);
+  throw new CliError({
+    message: errors.find((error) => error.trim().length > 0) ?? "Data Pipeline source action failed",
+    kind,
+    status,
+    exitCode: sourceActionFailureExitCode(kind, status),
+    details: { errorCode, traceId, errors }
+  });
+}
+function transformSourceActions(value) {
+  if (!Array.isArray(value)) {
+    throw new CliError({
+      message: "Data Pipeline source action discovery returned a malformed response",
+      kind: "malformed_response",
+      status: 502,
+      exitCode: EXIT_CODES.networkOrUpstream
+    });
+  }
+  for (const action of value) {
+    if (!isJsonRecord(action) || typeof action.key !== "string") {
+      throw new CliError({
+        message: "Data Pipeline source action discovery returned a malformed action",
+        kind: "malformed_response",
+        status: 502,
+        exitCode: EXIT_CODES.networkOrUpstream
+      });
+    }
+    if (action.safetyClass !== "read_only" || action.requiresApproval !== false) {
+      throw new CliError({
+        message: `Data Pipeline source action discovery returned a non-read-only action: ${action.key}`,
+        kind: "malformed_response",
+        status: 502,
+        exitCode: EXIT_CODES.networkOrUpstream,
+        details: {
+          actionKey: action.key,
+          safetyClass: action.safetyClass,
+          requiresApproval: action.requiresApproval
+        }
+      });
+    }
+  }
+  return value;
+}
+function registerDataPipelineCommands(program) {
+  const dataPipeline = program.command("data-pipeline").description("Inspect the organization's configured Data Pipeline control plane");
+  dataPipeline.command("overview").description("Read source counts, category status, and available organization plugins").action(async (_opts, cmd) => {
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    await runGraphqlQueryCommand({
+      command: "data-pipeline.overview",
+      operationName: "DataPipelineOverview",
+      runtimeOptions: context.runtimeOptions,
+      field: "data_pipeline_overview",
+      variables: {
+        organization_id: resolveOrganizationId(context.organizationId)
+      },
+      variableTypes: ORGANIZATION_VARIABLE_TYPES,
+      isShow: true,
+      selectionSet: OVERVIEW_SELECTION
+    });
+  });
+  dataPipeline.command("sources").description("Read the saved source records configured for one Data Pipeline category").requiredOption(
+    "--category-key <categoryKey>",
+    "Data Pipeline category key from the overview response",
+    parseCategoryKey
+  ).action(async (opts, cmd) => {
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    await runGraphqlQueryCommand({
+      command: "data-pipeline.sources",
+      operationName: "DataPipelineSources",
+      runtimeOptions: context.runtimeOptions,
+      field: "data_pipeline_sources",
+      variables: {
+        organization_id: resolveOrganizationId(context.organizationId),
+        category_key: opts.categoryKey
+      },
+      variableTypes: SOURCES_VARIABLE_TYPES,
+      isList: true,
+      selectionSet: SOURCE_SELECTION
+    });
+  });
+  dataPipeline.command("source-actions").description("Read the certified provider actions available for one configured source").requiredOption(
+    "--source-id <sourceId>",
+    "Configured Data Pipeline source ID",
+    (value) => parseNonBlank(value, "source-id")
+  ).action(async (opts, cmd) => {
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    await runGraphqlQueryCommand({
+      command: "data-pipeline.source-actions",
+      operationName: "DataPipelineSourceActions",
+      runtimeOptions: context.runtimeOptions,
+      field: "data_pipeline_source_actions",
+      variables: {
+        organization_id: resolveOrganizationId(context.organizationId),
+        source_id: opts.sourceId
+      },
+      variableTypes: SOURCE_ACTIONS_VARIABLE_TYPES,
+      isList: true,
+      transformData: transformSourceActions,
+      selectionSet: SOURCE_ACTION_SELECTION
+    });
+  });
+  dataPipeline.command("execute-source-action").description("Execute one backend-certified read-only action for a configured source").requiredOption(
+    "--category-key <categoryKey>",
+    "Data Pipeline category key",
+    parseCategoryKey
+  ).requiredOption(
+    "--provider-key <providerKey>",
+    "Provider key from the configured source",
+    (value) => parseNonBlank(value, "provider-key")
+  ).requiredOption(
+    "--source-id <sourceId>",
+    "Configured Data Pipeline source ID",
+    (value) => parseNonBlank(value, "source-id")
+  ).requiredOption(
+    "--action-key <actionKey>",
+    "Action key returned by source-actions",
+    (value) => parseNonBlank(value, "action-key")
+  ).option(
+    "--parameters-json <parametersJson>",
+    "Bounded JSON object matching the discovered action input schema",
+    parseSourceActionParameters,
+    {}
+  ).action(async (opts, cmd) => {
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    await runGraphqlQueryCommand({
+      command: "data-pipeline.execute-source-action",
+      operationName: "DataPipelineExecuteSourceAction",
+      runtimeOptions: context.runtimeOptions,
+      field: "data_pipeline_execute_source_action",
+      variables: {
+        organization_id: resolveOrganizationId(context.organizationId),
+        category_key: opts.categoryKey,
+        provider_key: opts.providerKey,
+        source_id: opts.sourceId,
+        action_key: opts.actionKey,
+        parameters: opts.parametersJson
+      },
+      variableTypes: EXECUTE_SOURCE_ACTION_VARIABLE_TYPES,
+      isShow: true,
+      transformData: transformSourceActionResult,
+      selectionSet: SOURCE_ACTION_RESULT_SELECTION
+    });
+  });
 }
 
 // src/commands/discovery.ts
@@ -17324,6 +17912,7 @@ var PRIMARY_NAMESPACES = [
   "planner",
   "mail",
   "datasheets",
+  "data-pipeline",
   "desktop-context",
   "phantom",
   "tasks",
@@ -17412,7 +18001,9 @@ var NAMESPACE_DOCS = {
     description: "Sanitized desktop capture health and recent evidence for Atlas grounding.",
     examples: [
       "wave desktop-context status",
+      "wave desktop-context member-statuses --member-ids 123,456",
       "wave desktop-context recent --limit 20",
+      "wave desktop-context activity --start-at 2026-08-18T08:00:00Z --end-at 2026-08-18T09:00:00Z",
       "wave desktop-context status --member-id 123"
     ],
     schema: {
@@ -17423,7 +18014,28 @@ var NAMESPACE_DOCS = {
         "Does not expose screenshots, raw audio, accessibility trees, clipboard contents, keystrokes, URLs, or filesystem paths.",
         "Cross-member reads remain subject to backend organization policy and every response carries backend trace correlation when available."
       ],
-      commands: ["status", "recent"]
+      commands: ["status", "member-statuses", "recent", "activity"]
+    }
+  },
+  "data-pipeline": {
+    name: "data-pipeline",
+    tier: "primary",
+    description: "Organization Data Pipeline configuration, saved sources, and certified provider reads.",
+    examples: [
+      "wave data-pipeline overview",
+      "wave data-pipeline sources --category-key communication_meetings",
+      "wave data-pipeline source-actions --source-id 123",
+      `wave data-pipeline execute-source-action --category-key marketing_analytics --provider-key posthog --source-id 123 --action-key posthog.list_dashboards --parameters-json '{"limit":10,"offset":0}'`
+    ],
+    schema: {
+      output: "json-envelope-default",
+      readOnly: true,
+      safety: [
+        "Reads organization-scoped Data Pipeline configuration and backend-certified provider records only.",
+        "Provider actions are discovered from the backend and remain read-only and approval-free.",
+        "Does not install, enable, disable, or uninstall plugins; manage credentials; or create, update, or delete sources."
+      ],
+      commands: ["overview", "sources", "source-actions", "execute-source-action"]
     }
   },
   phantom: {
@@ -18369,6 +18981,7 @@ function buildCli(options) {
   registerRockCommands(program);
   registerMeetingCommands(program);
   registerMemberCommands(program);
+  registerResourceCommands(program);
   registerSkillCommands(program);
   registerAtlasAuthoringCommands(program);
   registerTeamCommands(program);
@@ -18393,6 +19006,7 @@ function buildCli(options) {
   registerDatasheetsCommands(program);
   registerSignatureCommands(program);
   registerDesktopContextCommands(program);
+  registerDataPipelineCommands(program);
   registerAuthCommands(program);
   registerDiscoveryCommands(program);
   attachNamespaceDiscovery(program);