@wave-ai-os/wave-cli 0.1.87 → 0.1.88

package/dist/index.js

@@ -5,7 +5,226 @@ import { CommanderError, InvalidArgumentError } from "commander";
 import { ZodError } from "zod";
 
 // src/cli.ts
-import { Command } from "commander";
+import { Command, Option as Option2 } from "commander";
+
+// src/authStorage.ts
+import { execFile } from "child_process";
+import { constants, existsSync } from "fs";
+import { access, mkdir, readFile, rm, stat, writeFile, chmod } from "fs/promises";
+import { homedir } from "os";
+import { dirname, join } from "path";
+import { promisify } from "util";
+var execFileAsync = promisify(execFile);
+var KEYCHAIN_SERVICE = "wave-cli";
+var FILE_NAME = "auth-token.json";
+var DEFAULT_STORAGE_MODE = "auto";
+var activeOptions = {};
+function configureAuthStorage(options) {
+  activeOptions = { ...options };
+}
+async function withAuthStorageOptions(options, callback) {
+  const previous = activeOptions;
+  activeOptions = { ...options };
+  try {
+    return await callback();
+  } finally {
+    activeOptions = previous;
+  }
+}
+function normalize(raw) {
+  if (typeof raw !== "string") return void 0;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+function authHome() {
+  return normalize(activeOptions.home) ?? join(homedir(), ".wave");
+}
+function tokenPath() {
+  return join(authHome(), FILE_NAME);
+}
+function configPath() {
+  return normalize(activeOptions.configPath) ?? join(authHome(), "config.json");
+}
+function storageMode() {
+  return activeOptions.mode ?? DEFAULT_STORAGE_MODE;
+}
+function accountForBaseUrl(baseUrl) {
+  return normalize(baseUrl) ?? "default";
+}
+async function commandExists(command) {
+  try {
+    await access(command, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function keychainAvailable() {
+  if (process.platform !== "darwin") return false;
+  if (storageMode() === "file" || storageMode() === "disabled") return false;
+  return commandExists("/usr/bin/security");
+}
+async function preferredStorage() {
+  const mode = storageMode();
+  if (mode === "disabled") return "disabled";
+  if (mode === "file") return "file";
+  if (mode === "keychain") return await keychainAvailable() ? "keychain" : "file";
+  return await keychainAvailable() ? "keychain" : "file";
+}
+async function readKeychainToken(baseUrl) {
+  try {
+    const { stdout } = await execFileAsync("/usr/bin/security", [
+      "find-generic-password",
+      "-a",
+      accountForBaseUrl(baseUrl),
+      "-s",
+      KEYCHAIN_SERVICE,
+      "-w"
+    ], { encoding: "utf8" });
+    return normalize(String(stdout)) ?? null;
+  } catch {
+    return null;
+  }
+}
+async function writeKeychainToken(token, baseUrl) {
+  await execFileAsync("/usr/bin/security", [
+    "add-generic-password",
+    "-a",
+    accountForBaseUrl(baseUrl),
+    "-s",
+    KEYCHAIN_SERVICE,
+    "-w",
+    token,
+    "-U"
+  ]);
+}
+async function deleteKeychainToken(baseUrl) {
+  try {
+    await execFileAsync("/usr/bin/security", [
+      "delete-generic-password",
+      "-a",
+      accountForBaseUrl(baseUrl),
+      "-s",
+      KEYCHAIN_SERVICE
+    ]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function readFileToken(baseUrl) {
+  const path = tokenPath();
+  if (!existsSync(path)) return null;
+  try {
+    const raw = await readFile(path, "utf8");
+    const payload = JSON.parse(raw);
+    const token = normalize(payload.token);
+    const storedBaseUrl = normalize(payload.baseUrl);
+    const requestedBaseUrl = normalize(baseUrl);
+    if (!token) return null;
+    if (storedBaseUrl !== requestedBaseUrl) return null;
+    return token;
+  } catch {
+    return null;
+  }
+}
+async function writeFileToken(token, baseUrl) {
+  const home = authHome();
+  const path = tokenPath();
+  await mkdir(home, { recursive: true, mode: 448 });
+  await writeFile(
+    path,
+    `${JSON.stringify({ token, baseUrl: baseUrl ?? null, updatedAt: (/* @__PURE__ */ new Date()).toISOString() })}
+`,
+    { mode: 384 }
+  );
+  await chmod(path, 384);
+}
+async function deleteFileToken() {
+  const path = tokenPath();
+  if (!existsSync(path)) return false;
+  await rm(path, { force: true });
+  return true;
+}
+async function readStoredToken(baseUrl) {
+  const mode = await preferredStorage();
+  if (mode === "disabled") return null;
+  if (mode === "keychain") {
+    const keychainToken = await readKeychainToken(baseUrl);
+    if (keychainToken) return { token: keychainToken, source: "keychain" };
+  }
+  const fileToken = await readFileToken(baseUrl);
+  return fileToken ? { token: fileToken, source: "file" } : null;
+}
+async function writeStoredToken(token, baseUrl) {
+  const mode = await preferredStorage();
+  if (mode === "disabled") {
+    return { kind: "disabled", available: false };
+  }
+  if (mode === "keychain") {
+    try {
+      await writeKeychainToken(token, baseUrl);
+      return {
+        kind: "keychain",
+        available: true,
+        service: KEYCHAIN_SERVICE,
+        account: accountForBaseUrl(baseUrl)
+      };
+    } catch {
+      await writeFileToken(token, baseUrl);
+      return { kind: "file", available: true, path: tokenPath() };
+    }
+  }
+  await writeFileToken(token, baseUrl);
+  return { kind: "file", available: true, path: tokenPath() };
+}
+async function persistBaseUrl(baseUrl) {
+  const path = configPath();
+  let existing = {};
+  if (existsSync(path)) {
+    const raw = await readFile(path, "utf8");
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      throw new Error(`Wave config file must contain a JSON object: ${path}`);
+    }
+    existing = parsed;
+  }
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  await writeFile(path, `${JSON.stringify({ ...existing, baseUrl }, null, 2)}
+`, {
+    mode: 384
+  });
+  await chmod(path, 384);
+  return path;
+}
+async function removeStoredToken(baseUrl) {
+  const removedKeychain = await deleteKeychainToken(baseUrl);
+  const removedFile = await deleteFileToken();
+  return removedKeychain || removedFile;
+}
+async function getAuthStorageInfo(baseUrl) {
+  const mode = await preferredStorage();
+  if (mode === "disabled") return { kind: "disabled", available: false };
+  if (mode === "keychain") {
+    return {
+      kind: "keychain",
+      available: true,
+      service: KEYCHAIN_SERVICE,
+      account: accountForBaseUrl(baseUrl)
+    };
+  }
+  const path = tokenPath();
+  let available = true;
+  if (existsSync(path)) {
+    try {
+      const modeBits = (await stat(path)).mode & 511;
+      available = modeBits === 384;
+    } catch {
+      available = false;
+    }
+  }
+  return { kind: "file", available, path };
+}
 
 // src/commands/tasks.ts
 import { z as z3 } from "zod";
@@ -191,7 +410,7 @@ var ATLAS_LEDGER_VARIABLE_TYPES = {
 };
 var SECRET_KEY_PATTERN = /(authorization|password|passwd|secret|token|jwt|credential|api[_-]?key)/i;
 var MAX_EVIDENCE_DEPTH = 5;
-function normalize(raw) {
+function normalize2(raw) {
   if (typeof raw !== "string") {
     return void 0;
   }
@@ -199,12 +418,12 @@ function normalize(raw) {
   return trimmed.length > 0 ? trimmed : void 0;
 }
 function atlasContextFromConfig(config) {
-  const organizationId = normalize(config.organizationId);
-  const memberId = normalize(config.atlasMemberId);
-  const chatId = normalize(config.atlasChatId);
-  const assistantMessageId = normalize(config.atlasAssistantMessageId);
-  const activeTool = normalize(config.atlasActiveTool);
-  const targetTool = normalize(config.atlasTargetTool);
+  const organizationId = normalize2(config.organizationId);
+  const memberId = normalize2(config.atlasMemberId);
+  const chatId = normalize2(config.atlasChatId);
+  const assistantMessageId = normalize2(config.atlasAssistantMessageId);
+  const activeTool = normalize2(config.atlasActiveTool);
+  const targetTool = normalize2(config.atlasTargetTool);
   if (!organizationId || !memberId || !chatId || !assistantMessageId || !activeTool || !targetTool) {
     return null;
   }
@@ -215,8 +434,8 @@ function atlasContextFromConfig(config) {
     assistantMessageId,
     activeTool,
     targetTool,
-    routeReason: normalize(config.atlasRouteReason),
-    actionId: normalize(config.atlasActionId)
+    routeReason: normalize2(config.atlasRouteReason),
+    actionId: normalize2(config.atlasActionId)
   };
 }
 function summarizeVariableShape(value, key = void 0, depth = 0) {
@@ -252,7 +471,7 @@ function shouldReportAtlasActionLedgerEvent(input) {
   return input.operationType === "mutation" && input.field !== ATLAS_LEDGER_FIELD;
 }
 function deterministicAtlasActionId(input, config) {
-  const requestSegment = normalize(config.requestId) ? `:${config.requestId}` : "";
+  const requestSegment = normalize2(config.requestId) ? `:${config.requestId}` : "";
   return `cli:${input.command}:${input.field}${requestSegment}`;
 }
 function buildAtlasEvidenceRefs(params) {
@@ -583,118 +802,6 @@ function buildSparse422Diagnostic(input) {
     }
   };
 }
-function isFeedbackCreateCommand(input) {
-  return input.operationType === "mutation" && input.command === "feedbacks.create";
-}
-function asRecord(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    return null;
-  }
-  return value;
-}
-function asNonEmptyString(value) {
-  if (typeof value !== "string") {
-    return null;
-  }
-  const trimmed = value.trim();
-  return trimmed.length > 0 ? trimmed : null;
-}
-function extractFeedbackIdentity(variables) {
-  const organizationId = asNonEmptyString(variables.organization_id) ?? asNonEmptyString(variables.organizationId);
-  const params = asRecord(variables.params);
-  const feedback = params ? asRecord(params.feedback) : null;
-  const name = feedback ? asNonEmptyString(feedback.name) : null;
-  const quarter = feedback ? asNonEmptyString(feedback.quarter) : null;
-  const year = feedback ? asNonEmptyString(feedback.year) : null;
-  if (!organizationId || !name || !quarter || !year) {
-    return null;
-  }
-  return {
-    organizationId,
-    name,
-    quarter,
-    year
-  };
-}
-function collectMessageStrings(value) {
-  if (typeof value === "string") {
-    return [value];
-  }
-  if (Array.isArray(value)) {
-    return value.flatMap((entry2) => collectMessageStrings(entry2));
-  }
-  if (!value || typeof value !== "object") {
-    return [];
-  }
-  return Object.values(value).flatMap(
-    (entry2) => collectMessageStrings(entry2)
-  );
-}
-function isDuplicateFeedbackMutationError(mutationPayload) {
-  const messages = collectMessageStrings(mutationPayload.errors);
-  return messages.some(
-    (message) => message.toLowerCase().includes("already been taken")
-  );
-}
-function extractFeedbackListNode(graph) {
-  const data = asRecord(graph.data);
-  const feedbacks = data ? asRecord(data.feedbacks) : null;
-  if (!feedbacks) {
-    return null;
-  }
-  const rows = Array.isArray(feedbacks.data) ? feedbacks.data : [];
-  const first = rows.find((entry2) => asRecord(entry2));
-  return first ? first : null;
-}
-function buildFeedbackReuseEnvelope(params) {
-  return {
-    envelope: buildEnvelope({
-      ok: true,
-      command: params.command,
-      status: params.status,
-      data: {
-        [params.field]: {
-          ok: true,
-          status: params.status,
-          errorCode: null,
-          data: {
-            data: params.feedbackNode
-          },
-          errors: null,
-          reusedExisting: true,
-          idempotency: {
-            reason: params.reason
-          }
-        }
-      },
-      error: null,
-      requestId: params.requestId
-    }),
-    exitCode: EXIT_CODES.success
-  };
-}
-function buildFeedbackFindRequestBody(command, identity) {
-  return buildGraphqlBody({
-    config: {
-      baseUrl: "http://localhost",
-      token: "placeholder",
-      timeoutMs: 1e3,
-      debug: false
-    },
-    command,
-    operationType: "query",
-    field: "feedbacks",
-    variables: {
-      organization_id: identity.organizationId,
-      name: identity.name,
-      quarter: identity.quarter,
-      year: identity.year,
-      page: 1,
-      per: 1
-    },
-    selectionSet: "{ data { id type attributes { id name slug year quarter organizationId memberIds } } count currentPage totalPages }"
-  });
-}
 async function requestGraphqlHttp(params) {
   const response = await fetch(params.url, {
     method: "POST",
@@ -786,29 +893,6 @@ async function finalizeGraphqlResult(input, url, result) {
   }
   return result;
 }
-async function findExistingFeedback(params) {
-  const command = `${params.input.command}.find-existing`;
-  const body = buildFeedbackFindRequestBody(command, params.identity);
-  const http = await requestGraphqlHttp({
-    input: params.input,
-    url: params.url,
-    requestId: params.requestId,
-    body,
-    controller: params.controller
-  });
-  const gqlErrors = http.graph.errors;
-  if (Array.isArray(gqlErrors) && gqlErrors.length > 0) {
-    return null;
-  }
-  const feedbackNode = extractFeedbackListNode(http.graph);
-  if (!feedbackNode) {
-    return null;
-  }
-  return {
-    feedbackNode,
-    requestId: http.requestId
-  };
-}
 function graphqlTypeForValue(value) {
   if (Array.isArray(value)) {
     const firstNonNull = value.find((item) => item !== null && item !== void 0);
@@ -908,32 +992,6 @@ async function graphqlRequest(input) {
   const controller = new AbortController();
   const timeoutId = setTimeout(() => controller.abort(), input.config.timeoutMs);
   try {
-    if (isFeedbackCreateCommand(input)) {
-      const feedbackIdentity = extractFeedbackIdentity(input.variables);
-      if (feedbackIdentity) {
-        const existing = await findExistingFeedback({
-          input,
-          url,
-          requestId,
-          controller,
-          identity: feedbackIdentity
-        });
-        if (existing) {
-          return finalizeGraphqlResult(
-            input,
-            url,
-            buildFeedbackReuseEnvelope({
-              command: input.command,
-              field: input.field,
-              status: 200,
-              requestId: existing.requestId,
-              feedbackNode: existing.feedbackNode,
-              reason: "preexisting"
-            })
-          );
-        }
-      }
-    }
     const http = await requestGraphqlHttpWithRetry({
       input,
       url,
@@ -978,32 +1036,6 @@ async function graphqlRequest(input) {
       const ok = Boolean(mutationPayload.ok);
       const status = typeof mutationPayload.status === "number" ? mutationPayload.status : ok ? 200 : 400;
       if (!ok) {
-        if (isFeedbackCreateCommand(input) && isDuplicateFeedbackMutationError(mutationPayload)) {
-          const feedbackIdentity = extractFeedbackIdentity(input.variables);
-          if (feedbackIdentity) {
-            const existing = await findExistingFeedback({
-              input,
-              url,
-              requestId: responseRequestId,
-              controller,
-              identity: feedbackIdentity
-            });
-            if (existing) {
-              return finalizeGraphqlResult(
-                input,
-                url,
-                buildFeedbackReuseEnvelope({
-                  command: input.command,
-                  field: input.field,
-                  status: 200,
-                  requestId: existing.requestId,
-                  feedbackNode: existing.feedbackNode,
-                  reason: "duplicate_race"
-                })
-              );
-            }
-          }
-        }
         const mutationErrors = mutationPayload.errors ?? null;
         const details = {
           errors: mutationErrors,
@@ -1459,14 +1491,6 @@ var RESOURCE_QUERY_FIELDS = {
     "acceptedAnswerIds",
     "labelIds"
   ],
-  feedback: [
-    "name",
-    "slug",
-    "year",
-    "quarter",
-    "organizationId",
-    "memberIds"
-  ],
   survey: [
     "name",
     "slug",
@@ -1628,7 +1652,6 @@ var RESOURCE_FIELD_ALIASES = {
   stand_ups: "stand_up",
   headlines: "headline",
   questions: "question",
-  feedbacks: "feedback",
   surveys: "survey",
   responsibilities: "responsibility",
   smart_kpi_views: "smart_kpi_view",
@@ -1875,222 +1898,15 @@ async function runGraphqlMutationCommand(input) {
         message
       }),
       exitCode: EXIT_CODES.generic
-    });
-  }
-}
-
-// src/commands/runtimeOptions.ts
-import { existsSync as existsSync2 } from "fs";
-import { readFile as readFile2 } from "fs/promises";
-import { join as join2 } from "path";
-
-// src/authStorage.ts
-import { execFile } from "child_process";
-import { constants, existsSync } from "fs";
-import { access, mkdir, readFile, rm, stat, writeFile, chmod } from "fs/promises";
-import { homedir } from "os";
-import { dirname, join } from "path";
-import { promisify } from "util";
-var execFileAsync = promisify(execFile);
-var KEYCHAIN_SERVICE = "wave-cli";
-var FILE_NAME = "auth-token.json";
-function normalize2(raw) {
-  if (typeof raw !== "string") return void 0;
-  const trimmed = raw.trim();
-  return trimmed.length > 0 ? trimmed : void 0;
-}
-function authHome(env = process.env) {
-  return normalize2(env.WAVE_CLI_HOME) ?? join(homedir(), ".wave");
-}
-function tokenPath(env = process.env) {
-  return join(authHome(env), FILE_NAME);
-}
-function configPath(env = process.env) {
-  return normalize2(env.WAVE_CONFIG_PATH) ?? join(authHome(env), "config.json");
-}
-function storageMode(env = process.env) {
-  const raw = normalize2(env.WAVE_CLI_AUTH_STORAGE)?.toLowerCase();
-  if (raw === "keychain" || raw === "file" || raw === "disabled") return raw;
-  return "auto";
-}
-function accountForBaseUrl(baseUrl) {
-  return normalize2(baseUrl) ?? "default";
-}
-async function commandExists(command) {
-  try {
-    await access(command, constants.X_OK);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function keychainAvailable(env = process.env) {
-  if (process.platform !== "darwin") return false;
-  if (storageMode(env) === "file" || storageMode(env) === "disabled") return false;
-  return commandExists("/usr/bin/security");
-}
-async function preferredStorage(env = process.env) {
-  const mode = storageMode(env);
-  if (mode === "disabled") return "disabled";
-  if (mode === "file") return "file";
-  if (mode === "keychain") return await keychainAvailable(env) ? "keychain" : "file";
-  return await keychainAvailable(env) ? "keychain" : "file";
-}
-async function readKeychainToken(baseUrl) {
-  try {
-    const { stdout } = await execFileAsync("/usr/bin/security", [
-      "find-generic-password",
-      "-a",
-      accountForBaseUrl(baseUrl),
-      "-s",
-      KEYCHAIN_SERVICE,
-      "-w"
-    ], { encoding: "utf8" });
-    return normalize2(String(stdout)) ?? null;
-  } catch {
-    return null;
-  }
-}
-async function writeKeychainToken(token, baseUrl) {
-  await execFileAsync("/usr/bin/security", [
-    "add-generic-password",
-    "-a",
-    accountForBaseUrl(baseUrl),
-    "-s",
-    KEYCHAIN_SERVICE,
-    "-w",
-    token,
-    "-U"
-  ]);
-}
-async function deleteKeychainToken(baseUrl) {
-  try {
-    await execFileAsync("/usr/bin/security", [
-      "delete-generic-password",
-      "-a",
-      accountForBaseUrl(baseUrl),
-      "-s",
-      KEYCHAIN_SERVICE
-    ]);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function readFileToken(baseUrl, env = process.env) {
-  const path = tokenPath(env);
-  if (!existsSync(path)) return null;
-  try {
-    const raw = await readFile(path, "utf8");
-    const payload = JSON.parse(raw);
-    const token = normalize2(payload.token);
-    const storedBaseUrl = normalize2(payload.baseUrl);
-    const requestedBaseUrl = normalize2(baseUrl);
-    if (!token) return null;
-    if (storedBaseUrl !== requestedBaseUrl) return null;
-    return token;
-  } catch {
-    return null;
-  }
-}
-async function writeFileToken(token, baseUrl, env = process.env) {
-  const home = authHome(env);
-  const path = tokenPath(env);
-  await mkdir(home, { recursive: true, mode: 448 });
-  await writeFile(
-    path,
-    `${JSON.stringify({ token, baseUrl: baseUrl ?? null, updatedAt: (/* @__PURE__ */ new Date()).toISOString() })}
-`,
-    { mode: 384 }
-  );
-  await chmod(path, 384);
-}
-async function deleteFileToken(env = process.env) {
-  const path = tokenPath(env);
-  if (!existsSync(path)) return false;
-  await rm(path, { force: true });
-  return true;
-}
-async function readStoredToken(baseUrl) {
-  const mode = await preferredStorage();
-  if (mode === "disabled") return null;
-  if (mode === "keychain") {
-    const keychainToken = await readKeychainToken(baseUrl);
-    if (keychainToken) return { token: keychainToken, source: "keychain" };
-  }
-  const fileToken = await readFileToken(baseUrl);
-  return fileToken ? { token: fileToken, source: "file" } : null;
-}
-async function writeStoredToken(token, baseUrl) {
-  const mode = await preferredStorage();
-  if (mode === "disabled") {
-    return { kind: "disabled", available: false };
-  }
-  if (mode === "keychain") {
-    try {
-      await writeKeychainToken(token, baseUrl);
-      return {
-        kind: "keychain",
-        available: true,
-        service: KEYCHAIN_SERVICE,
-        account: accountForBaseUrl(baseUrl)
-      };
-    } catch {
-      await writeFileToken(token, baseUrl);
-      return { kind: "file", available: true, path: tokenPath() };
-    }
-  }
-  await writeFileToken(token, baseUrl);
-  return { kind: "file", available: true, path: tokenPath() };
-}
-async function persistBaseUrl(baseUrl, env = process.env) {
-  const path = configPath(env);
-  let existing = {};
-  if (existsSync(path)) {
-    const raw = await readFile(path, "utf8");
-    const parsed = JSON.parse(raw);
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-      throw new Error(`Wave config file must contain a JSON object: ${path}`);
-    }
-    existing = parsed;
-  }
-  await mkdir(dirname(path), { recursive: true, mode: 448 });
-  await writeFile(path, `${JSON.stringify({ ...existing, baseUrl }, null, 2)}
-`, {
-    mode: 384
-  });
-  await chmod(path, 384);
-  return path;
-}
-async function removeStoredToken(baseUrl) {
-  const removedKeychain = await deleteKeychainToken(baseUrl);
-  const removedFile = await deleteFileToken();
-  return removedKeychain || removedFile;
-}
-async function getAuthStorageInfo(baseUrl) {
-  const mode = await preferredStorage();
-  if (mode === "disabled") return { kind: "disabled", available: false };
-  if (mode === "keychain") {
-    return {
-      kind: "keychain",
-      available: true,
-      service: KEYCHAIN_SERVICE,
-      account: accountForBaseUrl(baseUrl)
-    };
-  }
-  const path = tokenPath();
-  let available = true;
-  if (existsSync(path)) {
-    try {
-      const modeBits = (await stat(path)).mode & 511;
-      available = modeBits === 384;
-    } catch {
-      available = false;
-    }
+    });
   }
-  return { kind: "file", available, path };
 }
 
+// src/commands/runtimeOptions.ts
+import { existsSync as existsSync2 } from "fs";
+import { readFile as readFile2 } from "fs/promises";
+import { join as join2 } from "path";
+
 // src/authClient.ts
 import { randomUUID as randomUUID2 } from "crypto";
 
@@ -2537,17 +2353,15 @@ async function resolveWithAuthenticatedOrganization(context) {
   if (organizationId) resolved.organizationId = organizationId;
   return resolved;
 }
-function defaultConfigPath(env) {
-  const explicitEnv = normalize3(env.WAVE_CONFIG_PATH);
-  if (explicitEnv) return explicitEnv;
-  const candidate = join2(authHome(env), "config.json");
+function defaultConfigPath() {
+  const candidate = join2(authHome(), "config.json");
   return existsSync2(candidate) ? candidate : void 0;
 }
 async function resolveConfigFileContext(options, env) {
   const path = firstDefined(
     normalize3(options.configPath),
     normalize3(options.config),
-    defaultConfigPath(env)
+    defaultConfigPath()
   );
   if (!path) return {};
   if (!existsSync2(path)) {
@@ -2692,13 +2506,13 @@ function parseRequiredOption(raw, flag) {
 function optionKey(flag) {
   return flag.replace(/-([a-z])/g, (_, char) => char.toUpperCase());
 }
-function asRecord2(value) {
+function asRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function visibleSearchText(row) {
-  const record = asRecord2(row);
+  const record = asRecord(row);
   if (!record) return "";
-  const attributes = asRecord2(record.attributes);
+  const attributes = asRecord(record.attributes);
   const values = [];
   for (const field of SEARCHABLE_VISIBLE_FIELDS) {
     const topLevelValue = record[field];
@@ -2712,7 +2526,7 @@ function matchesSearchQuery(row, query) {
   return visibleSearchText(row).includes(query.toLowerCase());
 }
 function filterListEnvelopeByQuery(payload, query) {
-  const record = asRecord2(payload);
+  const record = asRecord(payload);
   if (!record || !Array.isArray(record.data)) return payload;
   const filteredData = record.data.filter((row) => matchesSearchQuery(row, query));
   return {
@@ -3639,9 +3453,65 @@ var subitemUpdateContract = {
   rootKey: "subitem",
   fields: subitemFields
 };
+var reminderFields = {
+  title: { type: "string", example: "Follow up with customer" },
+  description: { type: "string" },
+  due_at: { type: "string" },
+  starts_at: { type: "string" },
+  timezone: { type: "string", example: "America/Phoenix" },
+  schedule: {
+    type: "object",
+    example: { type: "once", due_at: "2026-09-01T09:00:00-07:00" }
+  },
+  notification: {
+    type: "object",
+    example: { channels: ["in_app"], lead_minutes: 15 }
+  },
+  resources_attributes: { type: "array" },
+  reminder_delegates_attributes: { type: "array" }
+};
+var reminderCreateContract = {
+  rootKey: "reminder",
+  fields: reminderFields,
+  required: ["title", "schedule", "notification"],
+  additionalProperties: false
+};
+var reminderUpdateContract = {
+  rootKey: "reminder",
+  fields: reminderFields,
+  additionalProperties: false
+};
+var sketchFields = {
+  name: { type: "string" },
+  creation_key: { type: "string" },
+  member_id: { type: "string" },
+  teams_ids: { type: "array", items: { type: "string" } },
+  status: {
+    type: "string",
+    enum: ["backlog", "planned", "in_progress", "completed", "cancelled", "ready_for_qa", "blocked"]
+  },
+  priority: { type: "string", enum: PRIORITIES }
+};
+var sketchCreateContract = {
+  rootKey: "sketch",
+  fields: sketchFields,
+  required: ["name", "teams_ids", "creation_key"],
+  additionalProperties: false
+};
+var sketchMetadataUpdateContract = {
+  rootKey: "sketch",
+  fields: Object.fromEntries(
+    Object.entries(sketchFields).filter(([field]) => field !== "creation_key")
+  ),
+  additionalProperties: false
+};
 var CONTRACTS = {
   "list-items.create": listItemCreateContract,
   "list-items.update": listItemUpdateContract,
+  "reminders.create": reminderCreateContract,
+  "reminders.update": reminderUpdateContract,
+  "sketches.create": sketchCreateContract,
+  "sketches.update-metadata": sketchMetadataUpdateContract,
   "subitems.create": subitemCreateContract,
   "subitems.update": subitemUpdateContract
 };
@@ -3713,8 +3583,10 @@ function validateOperationDataJson(operationId2, value) {
   const missing = (contract.required ?? []).filter(
     (field) => entity[field] === void 0 || entity[field] === null || entity[field] === ""
   );
+  const unsupported = contract.additionalProperties === false ? Object.keys(entity).filter((field) => !Object.prototype.hasOwnProperty.call(contract.fields, field)) : [];
   return [
     ...missing.map((field) => `${contract.rootKey}.${field} is required.`),
+    ...unsupported.map((field) => `${contract.rootKey}.${field} is not permitted.`),
     ...validateFields(contract.fields, entity, [contract.rootKey])
   ].map(
     (error) => `Invalid input value for dataJson: ${error}`
@@ -3758,14 +3630,25 @@ function entitySchema(contract) {
       ])
     ),
     ...contract.required ? { required: [...contract.required] } : {},
-    additionalProperties: true
+    additionalProperties: contract.additionalProperties ?? true
   };
 }
+function exampleValue2(contract) {
+  if (contract.example !== void 0) return contract.example;
+  if (contract.type === "array") return [];
+  if (contract.type === "object") return {};
+  if (contract.type === "number") return 0;
+  if (contract.type === "boolean") return false;
+  return "example";
+}
 function exampleDataJsonForOperation(operationId2) {
   const contract = CONTRACTS[operationId2];
   if (!contract) return null;
   const entity = Object.fromEntries(
-    (contract.required ?? []).map((field) => [field, "example"])
+    (contract.required ?? []).map((field) => {
+      const fieldContract = contract.fields[field];
+      return [field, fieldContract ? exampleValue2(fieldContract) : "example"];
+    })
   );
   return { [contract.rootKey]: entity };
 }
@@ -3871,7 +3754,7 @@ function registerEntityCrudCommands(program, config) {
   const entityCommand = program.command(config.command).description(config.description);
   const createHelp4 = buildDataJsonHelp(config.rootKey, "create") ?? "JSON object, optionally wrapped with root key";
   const updateHelp5 = buildDataJsonHelp(config.rootKey, "update") ?? "JSON object, optionally wrapped with root key";
-  const listField2 = config.listField ?? (config.resourcePath === "feedback" ? "feedbacks" : config.resourcePath);
+  const listField2 = config.listField ?? config.resourcePath;
   const list = entityCommand.command("list").option("--page <page>").option("--per <per>");
   const listParams = config.listParams ?? [];
   const listParamHelp = config.listParamHelp ?? {};
@@ -3911,12 +3794,14 @@ function registerEntityCrudCommands(program, config) {
       isList: true
     });
   });
-  registerGraphqlSearchCommand(entityCommand, {
-    command: config.command,
-    field: listField2,
-    variableTypes: config.listVariableTypes,
-    selectionSet: config.listSelectionSet
-  });
+  if (config.registerSearch !== false) {
+    registerGraphqlSearchCommand(entityCommand, {
+      command: config.command,
+      field: listField2,
+      variableTypes: config.listVariableTypes,
+      selectionSet: config.listSelectionSet
+    });
+  }
   const show = entityCommand.command("show").requiredOption("--id <id>");
   showParams.forEach((param) => {
     const cliParam = param.replace(/_/g, "-");
@@ -3927,7 +3812,7 @@ function registerEntityCrudCommands(program, config) {
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
     const defaultCommand = `${config.command}.show`;
-    const defaultField = config.showField ?? (config.resourcePath === "feedback" ? "feedback" : toSingularResourceName(config.resourcePath));
+    const defaultField = config.showField ?? toSingularResourceName(config.resourcePath);
     const mappedShowParams = Object.fromEntries(
       showParams.map((param) => {
         const optionKey2 = param.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
@@ -4011,6 +3896,22 @@ function registerEntityCrudCommands(program, config) {
       }
     });
   });
+  for (const mutation of config.idMutationCommands ?? []) {
+    entityCommand.command(mutation.command).description(mutation.description).requiredOption("--id <id>").action(async (opts, cmd) => {
+      const id = idSchema2.parse(opts.id);
+      const context = await resolveCommandContext(cmd.optsWithGlobals());
+      const organizationId = resolveOrganizationId(context.organizationId);
+      await runGraphqlMutationCommand({
+        command: `${config.command}.${mutation.command}`,
+        runtimeOptions: context.runtimeOptions,
+        field: mutation.field,
+        variables: {
+          organization_id: organizationId,
+          [mutation.idVariable]: id
+        }
+      });
+    });
+  }
 }
 var __testables = {
   toSingularResourceName,
@@ -4047,7 +3948,7 @@ var displayPreferenceAttributesSelectionSet = "attributes { id viewType favorite
 var filterPreferenceAttributesSelectionSet = "attributes { id filterType filter memberId focusMemberId focusTeamId filterableId filterableType preferenceType agendaItemId }";
 var healthUpdateSummarySelectionSet = "id type value memberId status createdAt updatedAt updatableType updatableId parentUpdateId emojis { id name memberId } resources { ...ResourceSummaryFull }";
 var projectShowFullSelectionSet = `{ id type name slug description status priority createdAt updatedAt startDate targetDate archivedAt memberId organizationId teamIds emoji { id name memberId } backgroundImage { backgroundType gradientStart gradientEnd gradientDegrees color imageUrl image { url lowUrl } } favorites { id memberId } resources { ...ResourceSummaryFull } displayPreference { id type ${displayPreferenceAttributesSelectionSet} viewType favorite groupingField groupToggleState memberId focusMemberId focusTeamId displayableId displayableType preferenceType agendaItemId } filterPreferences { id type ${filterPreferenceAttributesSelectionSet} filterType filter memberId focusMemberId focusTeamId filterableId filterableType preferenceType agendaItemId } healthUpdates { ${healthUpdateSummarySelectionSet} replies { ${healthUpdateSummarySelectionSet} replies { id type } } } } fragment ResourceSummaryFull on ResourceSummary { id resourceType slug url skillId skill { id name slug emoji scope description } metadata { urlName imageUrl siteName providerName mediaType skillId skillName skillSlug skillScope skillEmoji skillDescription } attachment { id fileKey filename url } content { id name slug type firstChildSlug childCount } }`;
-function asRecord3(value) {
+function asRecord2(value) {
   return value && typeof value === "object" ? value : null;
 }
 function toNonEmptyString(value) {
@@ -4080,9 +3981,9 @@ function parseProjectPriority(value) {
   return parsed.data.toUpperCase();
 }
 function normalizeProjectRowForDisplay(row) {
-  const record = asRecord3(row);
+  const record = asRecord2(row);
   if (!record) return row;
-  const attributes = asRecord3(record.attributes);
+  const attributes = asRecord2(record.attributes);
   const topLevelName = toNonEmptyString(record.name);
   const topLevelTitle = toNonEmptyString(record.title);
   const attributeName = toNonEmptyString(attributes?.name);
@@ -4097,7 +3998,7 @@ function normalizeProjectRowForDisplay(row) {
   };
 }
 function normalizeProjectsListForDisplay(payload) {
-  const record = asRecord3(payload);
+  const record = asRecord2(payload);
   if (!record || !Array.isArray(record.data)) return payload;
   return {
     ...record,
@@ -4315,7 +4216,7 @@ var MEETING_STATUSES = /* @__PURE__ */ new Set(["upcoming", "active", "completed
 var MEETING_REPEATS = /* @__PURE__ */ new Set(["never", "weekly", "biweekly", "monthly", "quarterly"]);
 var createHelp2 = buildDataJsonHelp("meeting", "create") ?? 'JSON object for meeting or {"meeting": {...}}';
 var updateHelp2 = buildDataJsonHelp("meeting", "update") ?? 'JSON object for meeting or {"meeting": {...}}';
-function asNonEmptyString2(value) {
+function asNonEmptyString(value) {
   if (typeof value !== "string") {
     return void 0;
   }
@@ -4373,7 +4274,7 @@ function normalizeMeetingCreateBody(body) {
     });
   }
   const meeting = { ...entity };
-  const type = asNonEmptyString2(meeting.type);
+  const type = asNonEmptyString(meeting.type);
   if (!type || !MEETING_TYPES.has(type)) {
     throw new CliError({
       message: "Invalid meeting.type. Use one of: TeamMeeting, OneOnOneMeeting.",
@@ -4383,8 +4284,8 @@ function normalizeMeetingCreateBody(body) {
       details: { field: "meeting.type", allowed: Array.from(MEETING_TYPES) }
     });
   }
-  const memberId = asNonEmptyString2(meeting.member_id);
-  const date = asNonEmptyString2(meeting.date);
+  const memberId = asNonEmptyString(meeting.member_id);
+  const date = asNonEmptyString(meeting.date);
   const startTime = toFiniteNumber(meeting.start_time, "meeting.start_time");
   const missingRequired = [];
   if (!memberId) missingRequired.push("member_id");
@@ -4399,7 +4300,7 @@ function normalizeMeetingCreateBody(body) {
       details: { requiredFields: ["member_id", "date", "start_time"], rootKey: "meeting" }
     });
   }
-  const status = asNonEmptyString2(meeting.status);
+  const status = asNonEmptyString(meeting.status);
   if (status && !MEETING_STATUSES.has(status)) {
     throw new CliError({
       message: "Invalid meeting.status. Use one of: upcoming, active, completed.",
@@ -4409,7 +4310,7 @@ function normalizeMeetingCreateBody(body) {
       details: { field: "meeting.status", allowed: Array.from(MEETING_STATUSES) }
     });
   }
-  const repeats = asNonEmptyString2(meeting.repeats) ?? "never";
+  const repeats = asNonEmptyString(meeting.repeats) ?? "never";
   if (!MEETING_REPEATS.has(repeats)) {
     throw new CliError({
       message: "Invalid meeting.repeats. Use one of: never, weekly, biweekly, monthly, quarterly.",
@@ -5138,13 +5039,35 @@ var SMART_KPI_NAMES = [
 var SMART_KPI_NAME_SET = new Set(SMART_KPI_NAMES);
 
 // src/commands/systemTools.ts
+var REMINDER_ATTRIBUTES_SELECTION = `
+  id
+  organizationId
+  creatorId
+  title
+  description
+  dueAt
+  startsAt
+  timezone
+  schedule
+  notification
+  status
+  nextTriggerAt
+  lastTriggeredAt
+  clearedAt
+  reminderDelegates { id memberId organizationId }
+  delegateMembers { id email firstName lastName organizationId }
+  resources { id resourceType url creatorId attachment { id fileKey filename } }
+  createdAt
+  updatedAt
+`;
+var REMINDER_LIST_SELECTION = `{ data { id type attributes { ${REMINDER_ATTRIBUTES_SELECTION} } } count currentPage totalPages }`;
+var REMINDER_SHOW_SELECTION = `{ id type attributes { ${REMINDER_ATTRIBUTES_SELECTION} } }`;
 var TODO_STATUSES = /* @__PURE__ */ new Set(["open", "completed"]);
 var KNOWLEDGE_CONTENT_TYPES = /* @__PURE__ */ new Set(["company", "policy", "process"]);
 var KNOWLEDGE_STATUSES = /* @__PURE__ */ new Set(["draft", "published"]);
 var NEWS_STATUSES = /* @__PURE__ */ new Set(["active", "completed"]);
 var NEWS_HEADLINE_TYPES = /* @__PURE__ */ new Set(["team", "org_wide"]);
 var QUESTION_STATUSES = /* @__PURE__ */ new Set(["asked", "answered"]);
-var PULSE_STATUSES = /* @__PURE__ */ new Set(["on_track", "at_risk", "off_track"]);
 var SURVEY_RECIPIENT_TYPES = /* @__PURE__ */ new Set(["member", "team", "org_wide"]);
 var SURVEY_NAMES = /* @__PURE__ */ new Set([
   "employee_net_promoter_score",
@@ -5157,21 +5080,6 @@ var SURVEY_NAMES = /* @__PURE__ */ new Set([
   "manager_review",
   "onboarding"
 ]);
-var FEEDBACK_QUARTERS = /* @__PURE__ */ new Set(["q1", "q2", "q3", "q4"]);
-var FEEDBACK_NAMES = /* @__PURE__ */ new Set([
-  "productivity_and_focus",
-  "company_collaboration",
-  "project_management",
-  "employee_engagement",
-  "training_and_development",
-  "innovation_and_creativity",
-  "customer_insights",
-  "process_improvement",
-  "leadership_and_management",
-  "company_culture",
-  "roadmap_and_strategy",
-  "customer_testing_and_feedback"
-]);
 var SCORECARD_INTERVALS = /* @__PURE__ */ new Set([
   "daily",
   "weekly",
@@ -5222,7 +5130,7 @@ function normalizeTodosCreateBody(body) {
   }
   return { ...body, todo };
 }
-function asNonEmptyString3(value) {
+function asNonEmptyString2(value) {
   if (typeof value !== "string") {
     return void 0;
   }
@@ -5230,7 +5138,7 @@ function asNonEmptyString3(value) {
   return trimmed.length > 0 ? trimmed : void 0;
 }
 function validateEnumField(params) {
-  const value = asNonEmptyString3(params.rawValue);
+  const value = asNonEmptyString2(params.rawValue);
   if (!value) {
     return void 0;
   }
@@ -5264,7 +5172,7 @@ function normalizeKnowledgeCreateBody(body) {
     message: "Invalid content.status. Use one of: draft, published."
   });
   content.status = status ?? "draft";
-  const memberId = asNonEmptyString3(content.member_id);
+  const memberId = asNonEmptyString2(content.member_id);
   if (!memberId) {
     throwMissingRequiredCreateFields("content", ["member_id"]);
   }
@@ -5273,7 +5181,7 @@ function normalizeKnowledgeCreateBody(body) {
 }
 function normalizeNewsCreateBody(body) {
   const headline = ensureEntityObject(body, "headline");
-  const memberId = asNonEmptyString3(headline.member_id);
+  const memberId = asNonEmptyString2(headline.member_id);
   if (!memberId) {
     throwMissingRequiredCreateFields("headline", ["member_id"]);
   }
@@ -5302,14 +5210,14 @@ function normalizeNewsCreateBody(body) {
 }
 function normalizeQuestionsCreateBody(body) {
   const question = ensureEntityObject(body, "question");
-  const summary = asNonEmptyString3(question.summary);
-  const currentName = asNonEmptyString3(question.name);
+  const summary = asNonEmptyString2(question.summary);
+  const currentName = asNonEmptyString2(question.name);
   if (!currentName && summary) {
     question.name = summary;
   }
   delete question.summary;
-  const name = asNonEmptyString3(question.name);
-  const memberId = asNonEmptyString3(question.member_id);
+  const name = asNonEmptyString2(question.name);
+  const memberId = asNonEmptyString2(question.member_id);
   const missing = [];
   if (!name) missing.push("name");
   if (!memberId) missing.push("member_id");
@@ -5331,13 +5239,13 @@ function normalizeQuestionsCreateBody(body) {
 }
 function normalizeQuestionsUpdateBody(body) {
   const question = ensureEntityObject(body, "question");
-  const summary = asNonEmptyString3(question.summary);
-  const currentName = asNonEmptyString3(question.name);
+  const summary = asNonEmptyString2(question.summary);
+  const currentName = asNonEmptyString2(question.name);
   if (!currentName && summary) {
     question.name = summary;
   }
   delete question.summary;
-  const name = asNonEmptyString3(question.name);
+  const name = asNonEmptyString2(question.name);
   if (name) {
     question.name = name;
   }
@@ -5352,37 +5260,10 @@ function normalizeQuestionsUpdateBody(body) {
   }
   return { ...body, question };
 }
-function normalizePulseCreateBody(body) {
-  const healthUpdate = ensureEntityObject(body, "health_update");
-  const healthUpdatableId = asNonEmptyString3(healthUpdate.health_updatable_id) ?? asNonEmptyString3(healthUpdate.updatable_id);
-  const healthUpdatableType = asNonEmptyString3(healthUpdate.health_updatable_type) ?? asNonEmptyString3(healthUpdate.updatable_type);
-  const memberId = asNonEmptyString3(healthUpdate.member_id);
-  const status = validateEnumField({
-    rawValue: healthUpdate.status,
-    field: "health_update.status",
-    allowed: PULSE_STATUSES,
-    message: "Invalid health_update.status. Use one of: on_track, at_risk, off_track."
-  });
-  const missing = [];
-  if (!healthUpdatableId) missing.push("health_updatable_id");
-  if (!healthUpdatableType) missing.push("health_updatable_type");
-  if (!memberId) missing.push("member_id");
-  if (!status) missing.push("status");
-  if (missing.length > 0) {
-    throwMissingRequiredCreateFields("health_update", missing);
-  }
-  healthUpdate.health_updatable_id = healthUpdatableId;
-  healthUpdate.health_updatable_type = healthUpdatableType;
-  healthUpdate.member_id = memberId;
-  healthUpdate.status = status;
-  delete healthUpdate.updatable_id;
-  delete healthUpdate.updatable_type;
-  return { ...body, health_update: healthUpdate };
-}
 function normalizeSurveysCreateBody(body) {
   const survey = ensureEntityObject(body, "survey");
-  const title = asNonEmptyString3(survey.title);
-  const currentName = asNonEmptyString3(survey.name);
+  const title = asNonEmptyString2(survey.title);
+  const currentName = asNonEmptyString2(survey.name);
   if (!currentName && title) {
     survey.name = title;
   }
@@ -5411,8 +5292,8 @@ function normalizeSurveysCreateBody(body) {
 }
 function normalizeSurveysUpdateBody(body) {
   const survey = ensureEntityObject(body, "survey");
-  const title = asNonEmptyString3(survey.title);
-  const currentName = asNonEmptyString3(survey.name);
+  const title = asNonEmptyString2(survey.title);
+  const currentName = asNonEmptyString2(survey.name);
   if (!currentName && title) {
     survey.name = title;
   }
@@ -5437,77 +5318,16 @@ function normalizeSurveysUpdateBody(body) {
   }
   return { ...body, survey };
 }
-function normalizeFeedbacksCreateBody(body) {
-  const feedback = ensureEntityObject(body, "feedback");
-  const title = asNonEmptyString3(feedback.title);
-  const currentName = asNonEmptyString3(feedback.name);
-  if (!currentName && title) {
-    feedback.name = title;
-  }
-  delete feedback.title;
-  const name = validateEnumField({
-    rawValue: feedback.name,
-    field: "feedback.name",
-    allowed: FEEDBACK_NAMES,
-    message: "Invalid feedback.name. Use one of: productivity_and_focus, company_collaboration, project_management, employee_engagement, training_and_development, innovation_and_creativity, customer_insights, process_improvement, leadership_and_management, company_culture, roadmap_and_strategy, customer_testing_and_feedback."
-  });
-  const quarter = validateEnumField({
-    rawValue: feedback.quarter,
-    field: "feedback.quarter",
-    allowed: FEEDBACK_QUARTERS,
-    message: "Invalid feedback.quarter. Use one of: q1, q2, q3, q4."
-  });
-  const year = asNonEmptyString3(feedback.year);
-  const missing = [];
-  if (!name) missing.push("name");
-  if (!quarter) missing.push("quarter");
-  if (!year) missing.push("year");
-  if (missing.length > 0) {
-    throwMissingRequiredCreateFields("feedback", missing);
-  }
-  feedback.name = name;
-  feedback.quarter = quarter;
-  feedback.year = year;
-  return { ...body, feedback };
-}
-function normalizeFeedbacksUpdateBody(body) {
-  const feedback = ensureEntityObject(body, "feedback");
-  const title = asNonEmptyString3(feedback.title);
-  const currentName = asNonEmptyString3(feedback.name);
-  if (!currentName && title) {
-    feedback.name = title;
-  }
-  delete feedback.title;
-  const name = validateEnumField({
-    rawValue: feedback.name,
-    field: "feedback.name",
-    allowed: FEEDBACK_NAMES,
-    message: "Invalid feedback.name. Use one of: productivity_and_focus, company_collaboration, project_management, employee_engagement, training_and_development, innovation_and_creativity, customer_insights, process_improvement, leadership_and_management, company_culture, roadmap_and_strategy, customer_testing_and_feedback."
-  });
-  if (name) {
-    feedback.name = name;
-  }
-  const quarter = validateEnumField({
-    rawValue: feedback.quarter,
-    field: "feedback.quarter",
-    allowed: FEEDBACK_QUARTERS,
-    message: "Invalid feedback.quarter. Use one of: q1, q2, q3, q4."
-  });
-  if (quarter) {
-    feedback.quarter = quarter;
-  }
-  return { ...body, feedback };
-}
 function normalizeAccountabilityCreateBody(body) {
   const responsibility = ensureEntityObject(body, "responsibility");
-  const summary = asNonEmptyString3(responsibility.summary);
-  const currentName = asNonEmptyString3(responsibility.name);
+  const summary = asNonEmptyString2(responsibility.summary);
+  const currentName = asNonEmptyString2(responsibility.name);
   if (!currentName && summary) {
     responsibility.name = summary;
   }
   delete responsibility.summary;
-  const name = asNonEmptyString3(responsibility.name);
-  const memberId = asNonEmptyString3(responsibility.member_id);
+  const name = asNonEmptyString2(responsibility.name);
+  const memberId = asNonEmptyString2(responsibility.member_id);
   const missing = [];
   if (!name) missing.push("name");
   if (!memberId) missing.push("member_id");
@@ -5522,8 +5342,8 @@ function normalizeAccountabilityCreateBody(body) {
 }
 function normalizeAccountabilityUpdateBody(body) {
   const responsibility = ensureEntityObject(body, "responsibility");
-  const summary = asNonEmptyString3(responsibility.summary);
-  const currentName = asNonEmptyString3(responsibility.name);
+  const summary = asNonEmptyString2(responsibility.summary);
+  const currentName = asNonEmptyString2(responsibility.name);
   if (!currentName && summary) {
     responsibility.name = summary;
   }
@@ -5555,7 +5375,7 @@ function parseSmartKpiViewCreateBody(raw) {
 }
 function normalizeSmartKpiViewCreateBody(body) {
   const smartKpiView = ensureEntityObject(body, "smart_kpi_view");
-  const name = asNonEmptyString3(smartKpiView.name);
+  const name = asNonEmptyString2(smartKpiView.name);
   if (!name) {
     throwMissingRequiredCreateFields("smart_kpi_view", ["name"]);
   }
@@ -5593,9 +5413,9 @@ function buildKpisCreateMutation(params) {
     });
   }
   const smartKpi = { ...entity };
-  const name = asNonEmptyString3(smartKpi.name);
-  const smartKpiViewId = asNonEmptyString3(smartKpi.smart_kpi_view_id);
-  const measurableGroupId = asNonEmptyString3(smartKpi.measurable_group_id);
+  const name = asNonEmptyString2(smartKpi.name);
+  const smartKpiViewId = asNonEmptyString2(smartKpi.smart_kpi_view_id);
+  const measurableGroupId = asNonEmptyString2(smartKpi.measurable_group_id);
   const hasAllowedName = typeof name === "string" && SMART_KPI_NAME_SET.has(name);
   if (!name) {
     throw new CliError({
@@ -5615,7 +5435,7 @@ function buildKpisCreateMutation(params) {
       measurable_type: "number",
       condition: "greater_than_or_equal_to"
     };
-    const notes = asNonEmptyString3(smartKpi.notes);
+    const notes = asNonEmptyString2(smartKpi.notes);
     if (notes) {
       measurable.notes = notes;
     }
@@ -5684,6 +5504,32 @@ function registerSmartKpiViewCommands(program) {
   });
 }
 function registerSystemToolCommands(program) {
+  registerEntityCrudCommands(program, {
+    command: "reminders",
+    description: "Reminder operations",
+    resourcePath: "reminders",
+    rootKey: "reminder",
+    requiredCreateFields: ["title"],
+    listParams: ["status", "sort"],
+    allowQueryJson: false,
+    registerSearch: false,
+    listSelectionSet: REMINDER_LIST_SELECTION,
+    showSelectionSet: REMINDER_SHOW_SELECTION,
+    idMutationCommands: [
+      {
+        command: "clear",
+        description: "Clear a reminder while retaining its history",
+        field: "clear_reminder",
+        idVariable: "reminder_id"
+      },
+      {
+        command: "destroy",
+        description: "Cancel a reminder while retaining its history",
+        field: "destroy_reminder",
+        idVariable: "reminder_id"
+      }
+    ]
+  });
   registerEntityCrudCommands(program, {
     command: "lists",
     description: "List operations",
@@ -5828,18 +5674,6 @@ function registerSystemToolCommands(program) {
     listParams: ["answered", "asked"],
     allowQueryJson: false
   });
-  registerEntityCrudCommands(program, {
-    command: "pulse",
-    description: "Pulse operations",
-    resourcePath: "health_updates",
-    rootKey: "health_update",
-    listField: "feedbacks",
-    showField: "feedback",
-    requiredCreateFields: ["health_updatable_id", "health_updatable_type", "member_id", "status"],
-    normalizeCreateBody: normalizePulseCreateBody,
-    listParams: ["last", "latest", "start_date", "name", "quarter", "year"],
-    allowQueryJson: false
-  });
   registerEntityCrudCommands(program, {
     command: "surveys",
     description: "Survey operations",
@@ -5851,17 +5685,6 @@ function registerSystemToolCommands(program) {
     listParams: ["completed", "current_member", "due", "exclude_completed", "sent"],
     allowQueryJson: false
   });
-  registerEntityCrudCommands(program, {
-    command: "feedbacks",
-    description: "Feedback operations",
-    resourcePath: "feedback",
-    rootKey: "feedback",
-    requiredCreateFields: ["name", "quarter", "year"],
-    normalizeCreateBody: normalizeFeedbacksCreateBody,
-    normalizeUpdateBody: normalizeFeedbacksUpdateBody,
-    listParams: ["last", "latest", "start_date"],
-    allowQueryJson: false
-  });
   registerEntityCrudCommands(program, {
     command: "accountability",
     description: "Accountability operations",
@@ -6018,7 +5841,7 @@ function ensureRootObject(body, rootKey) {
   }
   return { ...root };
 }
-function asNonEmptyString4(value) {
+function asNonEmptyString3(value) {
   if (typeof value !== "string") {
     return void 0;
   }
@@ -6028,7 +5851,7 @@ function asNonEmptyString4(value) {
 function normalizeOrganizationUpdateBody(body) {
   const organization = ensureRootObject(body, "organization");
   const detail = isRecord3(organization.organization_detail_attributes) ? { ...organization.organization_detail_attributes } : {};
-  const workspaceName = asNonEmptyString4(organization.workspace_name);
+  const workspaceName = asNonEmptyString3(organization.workspace_name);
   if (workspaceName) {
     detail.workspace_name = workspaceName;
   }
@@ -6041,7 +5864,7 @@ function normalizeOrganizationUpdateBody(body) {
 function normalizeOrganizationMetaProfileUpdateBody(body) {
   const root = ensureRootObject(body, "organization_meta_profile");
   const profile = isRecord3(root.profile) ? { ...root.profile } : {};
-  const title = asNonEmptyString4(root.title);
+  const title = asNonEmptyString3(root.title);
   if (title) {
     const companyIdentity = isRecord3(profile.company_identity) ? { ...profile.company_identity } : {};
     companyIdentity.one_sentence_summary = title;
@@ -6071,7 +5894,7 @@ function normalizeOrganizationMetaProfileUpdateBody(body) {
 function normalizeKeyMetricMetaProfileUpdateBody(body) {
   const root = ensureRootObject(body, "key_metric_meta_profile");
   const profile = isRecord3(root.profile) ? { ...root.profile } : {};
-  const annualRevenue = asNonEmptyString4(root.annual_revenue);
+  const annualRevenue = asNonEmptyString3(root.annual_revenue);
   if (annualRevenue) {
     const financial = isRecord3(profile.financial) ? { ...profile.financial } : {};
     financial.revenue = annualRevenue;
@@ -6255,7 +6078,7 @@ function ensureRootObject2(body, rootKey) {
   }
   return { ...root };
 }
-function asNonEmptyString5(value) {
+function asNonEmptyString4(value) {
   if (typeof value !== "string") {
     return void 0;
   }
@@ -6283,8 +6106,8 @@ function normalizeStrategicPlanUpdateBody(body) {
 }
 function normalizeStrategicObjectiveUpdateBody(body) {
   const strategicObjective = ensureRootObject2(body, "strategic_objective");
-  const title = asNonEmptyString5(strategicObjective.title);
-  if (!asNonEmptyString5(strategicObjective.summary) && title) {
+  const title = asNonEmptyString4(strategicObjective.title);
+  if (!asNonEmptyString4(strategicObjective.summary) && title) {
     strategicObjective.summary = title;
   }
   delete strategicObjective.title;
@@ -6307,8 +6130,8 @@ function normalizeStrategicObjectiveUpdateBody(body) {
 }
 function normalizeAnnualObjectiveCreateBody(body) {
   const annualObjective = ensureRootObject2(body, "annual_objective");
-  const title = asNonEmptyString5(annualObjective.title);
-  if (!asNonEmptyString5(annualObjective.name) && title) {
+  const title = asNonEmptyString4(annualObjective.title);
+  if (!asNonEmptyString4(annualObjective.name) && title) {
     annualObjective.name = title;
   }
   delete annualObjective.title;
@@ -6316,8 +6139,8 @@ function normalizeAnnualObjectiveCreateBody(body) {
 }
 function normalizeQuarterlyObjectiveCreateBody(body) {
   const quarterlyObjective = ensureRootObject2(body, "quarterly_objective");
-  const title = asNonEmptyString5(quarterlyObjective.title);
-  if (!asNonEmptyString5(quarterlyObjective.name) && title) {
+  const title = asNonEmptyString4(quarterlyObjective.title);
+  if (!asNonEmptyString4(quarterlyObjective.name) && title) {
     quarterlyObjective.name = title;
   }
   delete quarterlyObjective.title;
@@ -6460,7 +6283,18 @@ function requiredParentSearchOption(parentFlag, parentKind) {
 }
 function buildChildResourceSelectionSet(parentField, extraFields = []) {
   const fields = Array.from(
-    /* @__PURE__ */ new Set(["id", "type", "name", "status", "priority", "rank", "dueDate", "memberId", parentField, ...extraFields])
+    /* @__PURE__ */ new Set([
+      "id",
+      "type",
+      "name",
+      "status",
+      "priority",
+      "rank",
+      "dueDate",
+      "memberId",
+      parentField,
+      ...extraFields
+    ])
   );
   const attributeFields = fields.filter((field) => field !== "type");
   return `{ ${fields.join(" ")} attributes { ${attributeFields.join(" ")} } }`;
@@ -6468,6 +6302,30 @@ function buildChildResourceSelectionSet(parentField, extraFields = []) {
 function buildChildListSelectionSet(parentField, extraFields = []) {
   return `{ data ${buildChildResourceSelectionSet(parentField, extraFields)} count currentPage totalPages }`;
 }
+function buildChildShowSelectionSet(parentField, extraFields = []) {
+  const fields = Array.from(
+    /* @__PURE__ */ new Set([
+      "id",
+      "type",
+      "name",
+      "status",
+      "priority",
+      "rank",
+      "dueDate",
+      "memberId",
+      parentField,
+      "notes",
+      "hasNotes",
+      "hasUnreadNotes",
+      "notesUpdatedAt",
+      "notesLastReadAt",
+      "estimateIds",
+      ...extraFields
+    ])
+  );
+  const attributeFields = fields.filter((field) => field !== "type");
+  return `{ ${fields.join(" ")} attributes { ${attributeFields.join(" ")} } }`;
+}
 function parseJsonObject2(raw) {
   try {
     const parsed = JSON.parse(raw);
@@ -6845,11 +6703,14 @@ function registerChildEntityCommands(program) {
     updateField: "update_talking_point",
     destroyField: "destroy_talking_point",
     idVariable: "talking_point_id",
+    showField: "talking_point",
     listOperationName: "TalkingPointsList",
+    showOperationName: "TalkingPointsShow",
     createOperationName: "TalkingPointsCreate",
     updateOperationName: "TalkingPointsUpdate",
     destroyOperationName: "TalkingPointsDestroy",
     listSelectionSet: buildChildListSelectionSet("meetingId", ["description", "creatorId", "slug"]),
+    showSelectionSet: buildChildShowSelectionSet("meetingId", ["description", "creatorId", "slug"]),
     listParentTypedField: "meetingId"
   });
 }
@@ -7216,7 +7077,7 @@ import { z as z18 } from "zod";
 
 // src/internalOptions.ts
 var INTERNAL_OPTIONS_KEY = "__waveInternalOptions";
-function asRecord4(value) {
+function asRecord3(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     return null;
   }
@@ -7230,7 +7091,7 @@ function setInternalCliOptions(program, options) {
 function getInternalCliOptions(command) {
   let current = command;
   while (current) {
-    const record = asRecord4(current[INTERNAL_OPTIONS_KEY]);
+    const record = asRecord3(current[INTERNAL_OPTIONS_KEY]);
     if (record) {
       return {
         enableRetryOnEmptyPhrase: record.enableRetryOnEmptyPhrase === true
@@ -8033,7 +7894,7 @@ import { Option } from "commander";
 import { createHash } from "crypto";
 
 // src/version.ts
-var CLI_VERSION = "0.1.87";
+var CLI_VERSION = "0.1.88";
 
 // src/operationMetadata.ts
 var DISCOVERY_OPERATION_IDS = [
@@ -8069,8 +7930,6 @@ var DISCOVERY_OPERATION_IDS = [
   "doctor",
   "doctor.examples",
   "doctor.schema",
-  "feedbacks.examples",
-  "feedbacks.schema",
   "foundation.examples",
   "foundation.schema",
   "issue-groups.examples",
@@ -8107,8 +7966,6 @@ var DISCOVERY_OPERATION_IDS = [
   "project-content.schema",
   "projects.examples",
   "projects.schema",
-  "pulse.examples",
-  "pulse.schema",
   "questions.examples",
   "questions.schema",
   "recognition.examples",
@@ -8150,7 +8007,9 @@ var DISCOVERY_OPERATION_IDS = [
   "todos.examples",
   "todos.schema",
   "whiteboards.examples",
-  "whiteboards.schema"
+  "whiteboards.schema",
+  "sketches.examples",
+  "sketches.schema"
 ];
 var READ_OPERATION_IDS = [
   "accountability.list",
@@ -8187,9 +8046,6 @@ var READ_OPERATION_IDS = [
   "desktop-context.member-statuses",
   "desktop-context.recent",
   "desktop-context.status",
-  "feedbacks.list",
-  "feedbacks.search",
-  "feedbacks.show",
   "find",
   "foundation.annual-objectives.list",
   "foundation.annual-objectives.search",
@@ -8225,6 +8081,7 @@ var READ_OPERATION_IDS = [
   "mail.message",
   "mail.messages",
   "mail.open",
+  "mail.relay-evidence",
   "mail.settings",
   "mail.snippets",
   "mail.sync-status",
@@ -8289,9 +8146,6 @@ var READ_OPERATION_IDS = [
   "projects.list",
   "projects.search",
   "projects.show",
-  "pulse.list",
-  "pulse.search",
-  "pulse.show",
   "questions.list",
   "questions.search",
   "questions.show",
@@ -8303,6 +8157,8 @@ var READ_OPERATION_IDS = [
   "rock-collections.list",
   "rock-collections.search",
   "rock-collections.show",
+  "reminders.list",
+  "reminders.show",
   "rocks.list",
   "rocks.search",
   "rocks.show",
@@ -8315,6 +8171,8 @@ var READ_OPERATION_IDS = [
   "skills.list",
   "skills.show",
   "stand-ups.list",
+  "signatures.list",
+  "signatures.show",
   "stand-ups.search",
   "stand-ups.show",
   "subissues.list",
@@ -8338,13 +8196,12 @@ var READ_OPERATION_IDS = [
   "support.settings",
   "support.ticket-counts",
   "support.tickets",
-  "signatures.list",
-  "signatures.show",
   "surveys.list",
   "surveys.search",
   "surveys.show",
   "talking-points.list",
   "talking-points.search",
+  "talking-points.show",
   "tasks.list",
   "tasks.search",
   "tasks.show",
@@ -8366,7 +8223,10 @@ var READ_OPERATION_IDS = [
   "tree",
   "whiteboards.list",
   "whiteboards.open",
-  "whiteboards.show"
+  "whiteboards.show",
+  "sketches.list",
+  "sketches.open",
+  "sketches.show"
 ];
 var WRITE_OPERATION_IDS = [
   "accountability.create",
@@ -8417,8 +8277,6 @@ var WRITE_OPERATION_IDS = [
   "datasheets.view.delete",
   "datasheets.view.reorder",
   "datasheets.view.update",
-  "feedbacks.create",
-  "feedbacks.update",
   "foundation.annual-objectives.create",
   "foundation.annual-objectives.update",
   "foundation.quarterly-objectives.create",
@@ -8466,8 +8324,6 @@ var WRITE_OPERATION_IDS = [
   "project-content.update",
   "projects.create",
   "projects.update",
-  "pulse.create",
-  "pulse.update",
   "questions.create",
   "questions.update",
   "rock-collections.create",
@@ -8475,6 +8331,10 @@ var WRITE_OPERATION_IDS = [
   "rocks.create",
   "rocks.update",
   "rocks.update-status",
+  "reminders.clear",
+  "reminders.create",
+  "reminders.destroy",
+  "reminders.update",
   "scorecard-groups.create",
   "scorecard-groups.update",
   "scorecards.create",
@@ -8516,7 +8376,9 @@ var WRITE_OPERATION_IDS = [
   "todo-groups.create",
   "todo-groups.update",
   "todos.create",
-  "todos.update"
+  "todos.update",
+  "sketches.create",
+  "sketches.update-metadata"
 ];
 var DIRECT_MACHINE_WRITE_OPERATION_IDS = /* @__PURE__ */ new Set(["automations.create"]);
 var AUTH_OPERATION_IDS = ["login", "logout"];
@@ -8537,6 +8399,8 @@ var DESTRUCTIVE_OPERATION_IDS = /* @__PURE__ */ new Set([
   "datasheets.view.delete",
   "milestones.destroy",
   "project-content.destroy",
+  "reminders.clear",
+  "reminders.destroy",
   "signatures.destroy",
   "signatures.void",
   "subissues.destroy",
@@ -9834,15 +9698,15 @@ function normalizeAgentFilePath(file, parentRef) {
   const trimmed = nonEmptyString3.parse(file).trim().replace(/^\/+|\/+$/g, "");
   const fileName = trimmed.startsWith(".agent/") ? trimmed.slice(".agent/".length) : trimmed;
   const isThreadWorkspace = atlasThreadWorkspaceParentRefPattern.test(parentRef);
-  const isSupportedFile = isThreadWorkspace ? /^[a-z0-9][a-z0-9-]*\.(?:md|txt)$/.test(fileName) : isSupportedAgentOverlayFileName(fileName);
+  const isSupportedFile = isThreadWorkspace ? /^[a-z0-9][a-z0-9-]*\.(?:md|txt|csv)$/.test(fileName) : isSupportedAgentOverlayFileName(fileName);
   if (fileName.includes("\\") || fileName.includes("/") || fileName === "." || fileName === ".." || !isSupportedFile) {
     throw new CliError({
-      message: isThreadWorkspace ? "Atlas task workspaces support only lowercase kebab-case .md or .txt basenames." : ".agent supports only notes.md, summary.md, or <lowercase-kebab-slug>.md.",
+      message: isThreadWorkspace ? "Atlas task workspaces support only lowercase kebab-case .md, .txt, or .csv basenames." : ".agent supports only notes.md, summary.md, or <lowercase-kebab-slug>.md.",
       kind: "invalid_args",
       status: 400,
       exitCode: EXIT_CODES.invalidArgs,
       details: {
-        supportedFiles: isThreadWorkspace ? ["<lowercase-kebab-slug>.md", "<lowercase-kebab-slug>.txt"] : [...supportedAgentOverlaySystemFiles, "<lowercase-kebab-slug>.md"]
+        supportedFiles: isThreadWorkspace ? ["<lowercase-kebab-slug>.md", "<lowercase-kebab-slug>.txt", "<lowercase-kebab-slug>.csv"] : [...supportedAgentOverlaySystemFiles, "<lowercase-kebab-slug>.md"]
       }
     });
   }
@@ -11325,7 +11189,7 @@ function positiveInt2(raw, fallback) {
 function requestTimeoutMs(totalTimeoutMs) {
   return Math.max(1e3, Math.min(totalTimeoutMs, 1e4));
 }
-function asRecord5(value) {
+function asRecord4(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function asString(value) {
@@ -11375,9 +11239,9 @@ function cliTokenFromPoll(payload) {
   return asString(payload.cliToken) ?? asString(payload.cli_token) ?? asString(payload.token);
 }
 function unwrapMutationResult(value) {
-  const record = asRecord5(value);
+  const record = asRecord4(value);
   if (!record) return null;
-  const data = asRecord5(record.data);
+  const data = asRecord4(record.data);
   if (data && (Object.prototype.hasOwnProperty.call(record, "ok") || Object.prototype.hasOwnProperty.call(record, "errors") || Object.prototype.hasOwnProperty.call(record, "errorCode") || Object.prototype.hasOwnProperty.call(record, "error_code"))) {
     return data;
   }
@@ -11442,7 +11306,7 @@ async function runTokenLogin(cmd, opts) {
       exitCode: mapStatusToExitCode(status.error.status)
     });
   }
-  const statusData = asRecord5(status.result.data.cliAuthStatus) ?? {};
+  const statusData = asRecord4(status.result.data.cliAuthStatus) ?? {};
   const storage = await writeStoredToken(token, baseUrl);
   const configPath2 = opts.saveBaseUrl ? await persistBaseUrl(baseUrl) : void 0;
   return printEnvelopeAndExit({
@@ -11659,7 +11523,7 @@ async function runLogout(cmd) {
     });
     if (result.ok) {
       requestId = result.result.requestId;
-      const payload = asRecord5(result.result.data.revokeCliToken) ?? {};
+      const payload = asRecord4(result.result.data.revokeCliToken) ?? {};
       revokedRemote = payload.ok !== false;
     } else {
       requestId = result.requestId;
@@ -11722,7 +11586,7 @@ async function runAuthStatus(cmd) {
       exitCode: mapStatusToExitCode(result.error.status)
     });
   }
-  const status = asRecord5(result.result.data.cliAuthStatus) ?? {};
+  const status = asRecord4(result.result.data.cliAuthStatus) ?? {};
   const baseAuthStatus = status.baseAuthStatus;
   return printEnvelopeAndExit({
     envelope: envelope({
@@ -11989,6 +11853,26 @@ var RECENT_TOOL_SUPPORT_REGISTRY = [
       ]
     }
   }),
+  entry({
+    cliKey: "sketches",
+    displayName: "Sketches",
+    backend: backendToolKey("sketches"),
+    routes: ["/sketches", "/sketches/[sketchId]"],
+    capabilityCategories: ["collaboration", "design", "metadata", "read_only_discovery"],
+    sensitiveOutputNotes: [
+      "Sketch commands must not print document bytes, collaboration updates, embedded files, comments, or auth material."
+    ],
+    implementation: {
+      milestone: "WAVE-12",
+      status: "implemented_command_surface",
+      enabledCommands: ["open", "list", "show", "create", "update-metadata"],
+      forbiddenCommands: ["save-document", "render", "export", "import"],
+      notes: [
+        "The Sketch surface is limited to metadata and does not provide an editor, renderer, binary transport, or provider connector.",
+        "Create and metadata update use the existing typed GraphQL mutations."
+      ]
+    }
+  }),
   entry({
     cliKey: "time-tracking",
     displayName: "Time Tracking",
@@ -13026,6 +12910,158 @@ function registerWhiteboardsCommands(program) {
   });
 }
 
+// src/commands/sketches.ts
+var SKETCH_METADATA_SELECTION = "id name slug status priority archivedAt organizationId memberId teamIds documentGeneration documentVersion partytimeRoomId partytimeRoomVersion createdAt updatedAt";
+var SKETCHES_SELECTION = `{ count currentPage totalPages data { ${SKETCH_METADATA_SELECTION} } }`;
+var SKETCH_SELECTION = `{ ${SKETCH_METADATA_SELECTION} }`;
+function baseVariables4(contextOrganizationId) {
+  return { organization_id: resolveOrganizationId(contextOrganizationId) };
+}
+function listFilters3(opts) {
+  return {
+    page: opts.page,
+    per: opts.per,
+    team_id: opts.teamId,
+    member_id: opts.memberId,
+    include_archived: opts.includeArchived
+  };
+}
+function listVariableTypes3() {
+  return {
+    organization_id: "ID!",
+    page: "Int",
+    per: "Int",
+    team_id: "ID",
+    member_id: "ID",
+    include_archived: "Boolean"
+  };
+}
+async function runSketchQuery(cmd, config) {
+  const context = await resolveCommandContext(cmd.optsWithGlobals());
+  await runGraphqlQueryCommand({
+    command: config.command,
+    operationName: config.operationName,
+    runtimeOptions: context.runtimeOptions,
+    field: config.field,
+    variables: normalizeGraphqlVariables2({
+      ...baseVariables4(context.organizationId),
+      ...config.variables
+    }),
+    ...config.variableTypes ? { variableTypes: config.variableTypes } : {},
+    ...config.isList ? { isList: true } : {},
+    ...config.isShow ? { isShow: true } : {},
+    selectionSet: config.selectionSet
+  });
+}
+function addListFilterOptions3(command) {
+  return command.option("--page <page>").option("--per <per>").option("--team-id <teamId>").option("--member-id <memberId>").option("--include-archived <includeArchived>");
+}
+function sketchOpenData() {
+  const tool = getRecentToolSupport("sketches");
+  return {
+    cliKey: "sketches",
+    displayName: "Sketches",
+    backend: {
+      toolKey: tool?.backend.toolKey ?? "sketches",
+      status: tool?.backend.status ?? "verified_wave_02",
+      sourceMilestone: tool?.backend.sourceMilestone ?? "WAVE-02"
+    },
+    route: tool?.safeRouteTargets.primaryRoute ?? "/sketches",
+    safeRouteTargets: tool?.safeRouteTargets ?? {
+      primaryRoute: "/sketches",
+      deepLinkTemplates: ["/sketches", "/sketches/[sketchId]"],
+      status: "verified_wave_03",
+      sourceMilestone: "WAVE-03"
+    },
+    implementation: {
+      enabledCommands: ["open", "list", "show", "create", "update-metadata"],
+      excludedCommands: ["save-document", "render", "export", "import"]
+    },
+    sensitiveOutputNotes: tool?.sensitiveOutputNotes ?? [
+      "Sketch commands return metadata only and never return document bytes, collaboration updates, embedded files, comments, or tokens."
+    ]
+  };
+}
+function registerSketchCommands(program) {
+  const sketches = program.command("sketches").description("Sketch metadata operations with bounded create and update support");
+  sketches.command("open").description("Return verified Sketches app routes without opening a browser").option("--readable", "Print the primary route path only").option("--json", "Emit the stable JSON envelope").action((opts) => {
+    const data = sketchOpenData();
+    if (opts.readable && !opts.json) return printTextAndExit({ text: String(data.route) });
+    return printEnvelopeAndExit({
+      envelope: {
+        ok: true,
+        command: "sketches.open",
+        status: 200,
+        data,
+        error: null,
+        meta: { requestId: "local_sketches" }
+      }
+    });
+  });
+  addListFilterOptions3(sketches.command("list").description("Read safe Sketch metadata")).action(
+    async (opts, cmd) => {
+      await runSketchQuery(cmd, {
+        command: "sketches.list",
+        operationName: "Sketches",
+        field: "sketches",
+        variables: listFilters3(opts),
+        variableTypes: listVariableTypes3(),
+        isList: true,
+        selectionSet: SKETCHES_SELECTION
+      });
+    }
+  );
+  sketches.command("show").description("Read safe Sketch detail metadata").requiredOption("--slug <slug>").action(async (opts, cmd) => {
+    await runSketchQuery(cmd, {
+      command: "sketches.show",
+      operationName: "Sketch",
+      field: "sketch",
+      variables: { slug: opts.slug },
+      variableTypes: { organization_id: "ID!", slug: "ID!" },
+      isShow: true,
+      selectionSet: SKETCH_SELECTION
+    });
+  });
+  sketches.command("create").description("Create a Sketch with a required team and idempotency key").requiredOption("--data-json <dataJson>", 'Sketch JSON or {"sketch": {...}}').action(async (opts, cmd) => {
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const body = __testables.normalizeBody(String(opts.dataJson), "sketch");
+    assertOperationPayload("sketches.create", body);
+    await runGraphqlMutationCommand({
+      command: "sketches.create",
+      runtimeOptions: context.runtimeOptions,
+      field: "create_sketch",
+      variables: {
+        organization_id: resolveOrganizationId(context.organizationId),
+        params: body
+      },
+      variableTypes: {
+        organization_id: "ID!",
+        params: "CreateSketchParamsInput!"
+      }
+    });
+  });
+  sketches.command("update-metadata").description("Update bounded Sketch metadata; document content is never accepted").requiredOption("--id <id>").requiredOption("--data-json <dataJson>", 'Sketch metadata JSON or {"sketch": {...}}').action(async (opts, cmd) => {
+    const context = await resolveCommandContext(cmd.optsWithGlobals());
+    const body = __testables.normalizeBody(String(opts.dataJson), "sketch");
+    assertOperationPayload("sketches.update-metadata", body);
+    await runGraphqlMutationCommand({
+      command: "sketches.update-metadata",
+      runtimeOptions: context.runtimeOptions,
+      field: "update_sketch",
+      variables: {
+        organization_id: resolveOrganizationId(context.organizationId),
+        sketch_id: String(opts.id),
+        params: body
+      },
+      variableTypes: {
+        organization_id: "ID!",
+        sketch_id: "ID!",
+        params: "UpdateSketchParamsInput!"
+      }
+    });
+  });
+}
+
 // src/commands/timeTracking.ts
 var TIME_TRACKING_ENTRY_SELECTION = "id organizationId memberId memberName taskId projectId projectName labelId createdByMemberId localDate durationMinutes startMinute endMinute startedAt endedAt status source createdAt updatedAt";
 var TIME_TRACKING_ENTRIES_SELECTION = `{ count currentPage totalPages data { ${TIME_TRACKING_ENTRY_SELECTION} } }`;
@@ -13056,7 +13092,7 @@ var TIME_TRACKING_FORBIDDEN_COMMANDS = [
   "payroll",
   "billing"
 ];
-function baseVariables4(contextOrganizationId) {
+function baseVariables5(contextOrganizationId) {
   return {
     organization_id: resolveOrganizationId(contextOrganizationId)
   };
@@ -13111,7 +13147,7 @@ async function runTimeTrackingQuery(cmd, config) {
     runtimeOptions: context.runtimeOptions,
     field: config.field,
     variables: normalizeGraphqlVariables2({
-      ...baseVariables4(context.organizationId),
+      ...baseVariables5(context.organizationId),
       ...config.variables
     }),
     variableTypes: config.variableTypes,
@@ -13373,11 +13409,11 @@ function sanitizePlannerJson(value) {
   }
   return output;
 }
-function asRecord6(value) {
+function asRecord5(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function readPlannerStateKey(value, keys) {
-  const record = asRecord6(value);
+  const record = asRecord5(value);
   if (!record) {
     return null;
   }
@@ -13572,6 +13608,7 @@ var MAIL_ENABLED_COMMANDS = [
   "open",
   "validate-provider",
   "workspace",
+  "relay-evidence",
   "accounts",
   "messages",
   "conversations",
@@ -13637,6 +13674,9 @@ var MAIL_SETTINGS_SELECTION = "{ id organizationId memberId defaultMailAccountId
 var MAIL_UNREAD_COUNT_SELECTION = "{ total byAccount byLabel }";
 var MAIL_SYNC_STATUS_SELECTION = "{ id status operationStatus operationToolKey accountId accountIds page per view importedCount updatedCount providerCount counts errorCode statusCode queuedAt startedAt completedAt createdAt updatedAt }";
 var MAIL_WORKSPACE_SELECTION = `{ accounts ${MAIL_ACCOUNT_SELECTION} messages ${MAIL_MESSAGES_SELECTION} labels ${MAIL_LABEL_SELECTION} snippets ${MAIL_SNIPPET_SELECTION} settings ${MAIL_SETTINGS_SELECTION} unreadCount ${MAIL_UNREAD_COUNT_SELECTION} }`;
+var MAIL_RELAY_EVIDENCE_ACCOUNT_SELECTION = "{ id provider service status connectionState syncStatus emailAddress displayName lastSyncedAt }";
+var MAIL_RELAY_EVIDENCE_MESSAGE_SELECTION = "{ id mailAccountId subject from status direction sentAt receivedAt snippet createdAt updatedAt }";
+var MAIL_RELAY_EVIDENCE_SELECTION = `{ accounts ${MAIL_RELAY_EVIDENCE_ACCOUNT_SELECTION} messages { count currentPage totalPages data ${MAIL_RELAY_EVIDENCE_MESSAGE_SELECTION} } }`;
 var OUTLOOK_PROVIDER_VALIDATION_EVIDENCE = {
   provider: "microsoft",
   oauthProviderId: "wave-microsoft-outlook",
@@ -13801,7 +13841,8 @@ function buildMailOpenData() {
       forbiddenCommands: [...MAIL_FORBIDDEN_COMMANDS]
     },
     sensitiveOutputNotes: tool?.sensitiveOutputNotes ?? [
-      "Mail commands are metadata-only and must not print message bodies, subjects, snippets, contacts, attachments, provider payloads, token material, account addresses/display names, label names/colors, snippet content, preferences, signatures, sync search text, sync error bodies, or user-authored mail content."
+      "Default Mail commands are metadata-only and must not print message bodies, subjects, snippets, contacts, attachments, provider payloads, token material, account addresses/display names, label names/colors, snippet content, preferences, signatures, sync search text, sync error bodies, or user-authored mail content.",
+      "mail relay-evidence is the explicit bounded exception for an authenticated, user-authorized relay: it exposes mailbox identity plus sender, subject, date, and snippet metadata, but never bodies, recipients, attachments, provider IDs, or token material."
     ]
   };
 }
@@ -13914,6 +13955,26 @@ function registerMailCommands(program) {
       isShow: true
     });
   });
+  addPaginationOptions(
+    mail.command("relay-evidence").description(
+      "Read bounded mailbox identity and recent message metadata for an explicitly authorized relay"
+    ).option("--account-id <accountId>")
+  ).action(async (opts, cmd) => {
+    await runMailQuery(cmd, opts, {
+      command: "mail.relay-evidence",
+      operationName: "MailRelayEvidence",
+      field: "mail_workspace",
+      variables: mailWorkspaceVariables,
+      variableTypes: {
+        organization_id: "ID!",
+        account_id: "ID",
+        page: "Int",
+        per: "Int"
+      },
+      selectionSet: MAIL_RELAY_EVIDENCE_SELECTION,
+      isShow: true
+    });
+  });
   mail.command("accounts").description("Read safe Mail account metadata").action(async (opts, cmd) => {
     await runMailQuery(cmd, opts, {
       command: "mail.accounts",
@@ -15955,7 +16016,7 @@ var URL_OR_TRANSPORT_KEY = /(?:^|_)(?:url|uri|token|nonce|post_fields|postfields
 function isRecord7(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function asNonEmptyString6(value) {
+function asNonEmptyString5(value) {
   if (typeof value !== "string") return null;
   const trimmed = value.trim();
   return trimmed.length > 0 ? trimmed : null;
@@ -16000,7 +16061,7 @@ function parseCreatePayload(raw, mode) {
     ["name", "subject", "message", "expires_at", "visibility", "metadata", "recipients"],
     "--data-json"
   );
-  const parsedMode = asNonEmptyString6(mode);
+  const parsedMode = asNonEmptyString5(mode);
   if (parsedMode !== "request" && parsedMode !== "self_sign") {
     throw new CliError({
       message: "signatures create requires --mode request or --mode self_sign.",
@@ -16018,9 +16079,9 @@ function parseUpdatePayload(raw, options) {
     ["name", "subject", "message", "expires_at", "visibility", "recipients", "fields"],
     "--data-json"
   );
-  const name = asNonEmptyString6(options.name);
-  const subject = asNonEmptyString6(options.subject);
-  const message = asNonEmptyString6(options.message);
+  const name = asNonEmptyString5(options.name);
+  const subject = asNonEmptyString5(options.subject);
+  const message = asNonEmptyString5(options.message);
   const patch = {
     ...data,
     ...name ? { name } : {},
@@ -16155,8 +16216,8 @@ function requireUploadTarget(payload) {
       exitCode: EXIT_CODES.networkOrUpstream
     });
   }
-  const postUrl = asNonEmptyString6(attributes.postUrl);
-  const fileKey = asNonEmptyString6(attributes.getUrl);
+  const postUrl = asNonEmptyString5(attributes.postUrl);
+  const fileKey = asNonEmptyString5(attributes.getUrl);
   const rawPostFields = attributes.postFields;
   if (!postUrl || !fileKey || !isRecord7(rawPostFields) || !fileKey.startsWith("uploads/signatures/")) {
     throw new CliError({
@@ -16627,7 +16688,7 @@ var AUTOMATION_RUN_STATUS_SELECTION = `{
   queuedAt
   completedAt
 }`;
-function asRecord7(value) {
+function asRecord6(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function asRequiredString(value) {
@@ -16658,7 +16719,7 @@ function requirePaginationInteger(value, key, minimum) {
   });
 }
 function normalizeAutomationList(payload) {
-  const page = asRecord7(payload);
+  const page = asRecord6(payload);
   if (!page || !Array.isArray(page.data)) {
     throw new CliError({
       message: "Automation list response did not include a paginated data collection.",
@@ -16669,8 +16730,8 @@ function normalizeAutomationList(payload) {
   }
   const rows = page.data;
   const data = rows.map((value) => {
-    const row = asRecord7(value);
-    const attributes = asRecord7(row?.attributes);
+    const row = asRecord6(value);
+    const attributes = asRecord6(row?.attributes);
     if (!row || !attributes) {
       throw new CliError({
         message: "Automation list response included a malformed automation record.",
@@ -16755,13 +16816,13 @@ function parseJsonOption(value, optionName, schema) {
   return schema.parse(parseJson(String(value), optionName));
 }
 function normalizePersistedCreatePayload(payload) {
-  const mutation = asRecord7(payload);
-  const mutationData = asRecord7(mutation?.data);
-  const persisted = asRecord7(mutationData?.data) ?? mutationData;
-  const attributes = asRecord7(persisted?.attributes);
-  const automationExecution = asRecord7(attributes?.automation_execution) ?? asRecord7(attributes?.automationExecution);
-  const meta = asRecord7(mutationData?.meta);
-  const idempotency = asRecord7(meta?.atlas_idempotency);
+  const mutation = asRecord6(payload);
+  const mutationData = asRecord6(mutation?.data);
+  const persisted = asRecord6(mutationData?.data) ?? mutationData;
+  const attributes = asRecord6(persisted?.attributes);
+  const automationExecution = asRecord6(attributes?.automation_execution) ?? asRecord6(attributes?.automationExecution);
+  const meta = asRecord6(mutationData?.meta);
+  const idempotency = asRecord6(meta?.atlas_idempotency);
   const id = asRequiredString(persisted?.id);
   const slug = asRequiredString(persisted?.slug) ?? asRequiredString(attributes?.slug);
   const replay = idempotency?.replay;
@@ -16792,10 +16853,10 @@ function normalizePersistedCreatePayload(payload) {
   };
 }
 function normalizePersistedUpdatePayload(payload) {
-  const mutation = asRecord7(payload);
-  const mutationData = asRecord7(mutation?.data);
-  const persisted = asRecord7(mutationData?.data) ?? mutationData;
-  const attributes = asRecord7(persisted?.attributes);
+  const mutation = asRecord6(payload);
+  const mutationData = asRecord6(mutation?.data);
+  const persisted = asRecord6(mutationData?.data) ?? mutationData;
+  const attributes = asRecord6(persisted?.attributes);
   const id = asRequiredString(persisted?.id);
   const slug = asRequiredString(persisted?.slug) ?? asRequiredString(attributes?.slug);
   const updateVersion = asRequiredString(persisted?.updateVersion) ?? asRequiredString(attributes?.updateVersion) ?? asRequiredString(attributes?.update_version);
@@ -16816,7 +16877,7 @@ function normalizePersistedUpdatePayload(payload) {
   };
 }
 function normalizeAutomationRunPayload(payload) {
-  const mutation = asRecord7(payload);
+  const mutation = asRecord6(payload);
   if (!mutation) {
     throw new CliError({
       message: "Automation run response did not include a mutation payload.",
@@ -16834,7 +16895,7 @@ function normalizeAutomationRunPayload(payload) {
       data: mutation.data ?? null
     };
   }
-  const data = asRecord7(mutation.data);
+  const data = asRecord6(mutation.data);
   const automationTaskId = asRequiredString(data?.automation_task_id);
   const automationTaskSlug = asRequiredString(data?.automation_task_slug);
   const agentId = asRequiredString(data?.agent_id);
@@ -17573,8 +17634,8 @@ name
 categories
 availability
 integrationKey
-arcadeProvider
-arcadeService
+connectorProvider
+connectorService
 logoAssetPath
 `.trim();
 var OVERVIEW_SELECTION = `
@@ -17908,6 +17969,7 @@ var PRIMARY_NAMESPACES = [
   "support",
   "recognition",
   "whiteboards",
+  "sketches",
   "time-tracking",
   "planner",
   "mail",
@@ -17939,9 +18001,7 @@ var ADVANCED_NAMESPACES = [
   "stand-ups",
   "news",
   "questions",
-  "pulse",
   "surveys",
-  "feedbacks",
   "accountability",
   "kpis",
   "scorecard-groups",
@@ -18255,6 +18315,28 @@ var NAMESPACE_DOCS = {
       commands: ["open", "list", "show"]
     }
   },
+  sketches: {
+    name: "sketches",
+    tier: "primary",
+    description: "Sketch metadata, bounded create/update operations, and verified app-route metadata.",
+    examples: [
+      "wave sketches list --page 1 --per 20",
+      "wave sketches show --slug SKT-02",
+      `wave sketches create --data-json '{"name":"Design review","teams_ids":["team-1"],"creation_key":"design-review-1"}'`,
+      `wave sketches update-metadata --id 123 --data-json '{"name":"Design review"}'`,
+      "wave sketches open"
+    ],
+    schema: {
+      output: "json-envelope-default",
+      mutates: true,
+      safety: [
+        "Uses verified GraphQL fields sketches, sketch, createSketch, and updateSketch.",
+        "Create requires a team and an idempotency creation key; update accepts only bounded metadata fields.",
+        "Never accepts or emits native document bytes, collaboration updates, render/export data, embedded files, comments, or tokens."
+      ],
+      commands: ["open", "list", "show", "create", "update-metadata"]
+    }
+  },
   "time-tracking": {
     name: "time-tracking",
     tier: "primary",
@@ -18315,9 +18397,10 @@ var NAMESPACE_DOCS = {
   mail: {
     name: "mail",
     tier: "primary",
-    description: "Mail read-only metadata for workspace, accounts, messages, conversations, labels, snippets, settings, sync status, and verified app route metadata.",
+    description: "Mail read-only metadata for workspace, explicitly authorized relay evidence, accounts, messages, conversations, labels, snippets, settings, sync status, and verified app route metadata.",
     examples: [
       "wave mail workspace --page 1 --per 20",
+      "wave mail relay-evidence --account-id 123 --page 1 --per 20",
       "wave mail accounts",
       "wave mail messages --account-id 123 --view inbox --page 1 --per 20",
       "wave mail conversations --account-id 123 --view inbox --page 1 --per 20",
@@ -18339,7 +18422,8 @@ var NAMESPACE_DOCS = {
         "Microsoft Outlook Mail maps to service outlook_mail and Outlook Calendar maps to service outlook_calendar with custom OAuth provider wave-microsoft-outlook.",
         "Uses the verified WAVE-03 safe app route /mail.",
         "Account output is limited to ids, provider/service, status, connection state, sync status, and timestamps.",
-        "Message and conversation output omits bodies, subjects, snippets, contacts, attachments, provider payloads, provider ids, raw thread ids, and user-authored mail content.",
+        "Default message and conversation output omits bodies, subjects, snippets, contacts, attachments, provider payloads, provider ids, raw thread ids, and user-authored mail content.",
+        "relay-evidence is an explicit authenticated relay surface limited to mailbox identity plus sender, subject, date, and snippet metadata; it still omits bodies, recipients, attachments, provider ids, and token material.",
         "Label, snippet, settings, and sync-status output omits user label names/colors, snippet title/shortcut/body, signatures, preferences, sync search text, operation reasons, error bodies, and token material.",
         "Does not expose send, reply, reply-all, forward, draft, provider-action, sync/connect/disconnect, mark, archive, trash, star, label/snippet CRUD, export, print, or write commands."
       ],
@@ -18347,6 +18431,7 @@ var NAMESPACE_DOCS = {
         "open",
         "validate-provider",
         "workspace",
+        "relay-evidence",
         "accounts",
         "messages",
         "conversations",
@@ -18943,7 +19028,11 @@ function buildCli(options) {
     "Explicit organization ID override"
   ).option(
     "--config <configPath>",
-    "Optional JSON config file (default: WAVE_CONFIG_PATH or ~/.wave/config.json when present)"
+    "Optional JSON config file (default: ~/.wave/config.json when present)"
+  ).addOption(
+    new Option2("--auth-home <path>", "Credential storage directory (default: ~/.wave)")
+  ).addOption(
+    new Option2("--auth-storage <mode>", "Credential storage mode").choices(["auto", "keychain", "file", "disabled"]).default("auto")
   ).option("--timeout-ms <timeoutMs>", "HTTP timeout in milliseconds").option("--agent-name <agentName>", "Agent name for tracing").option("--agent-run-id <agentRunId>", "Agent run identifier for tracing").option("--request-id <requestId>", "Request identifier").option(
     "--atlas-member-id <memberId>",
     "Atlas ledger member ID (prefer WAVE_ATLAS_MEMBER_ID env var)"
@@ -18975,6 +19064,14 @@ function buildCli(options) {
     "--openapi-version <openapiVersion>",
     "Optional pinned OpenAPI version/hash"
   ).exitOverride();
+  program.hook("preAction", (_thisCommand, actionCommand) => {
+    const runtimeOptions = actionCommand.optsWithGlobals();
+    configureAuthStorage({
+      ...runtimeOptions.authHome ? { home: runtimeOptions.authHome } : {},
+      ...runtimeOptions.config ? { configPath: runtimeOptions.config } : {},
+      ...runtimeOptions.authStorage ? { mode: runtimeOptions.authStorage } : {}
+    });
+  });
   setInternalCliOptions(program, options?.internal);
   registerTaskCommands(program);
   registerProjectCommands(program);
@@ -18999,6 +19096,7 @@ function buildCli(options) {
   registerSupportCommands(program);
   registerRecognitionCommands(program);
   registerWhiteboardsCommands(program);
+  registerSketchCommands(program);
   registerTimeTrackingCommands(program);
   registerPlannerCommands(program);
   registerMailCommands(program);
@@ -19263,9 +19361,10 @@ function withTrustedMachineAuth(auth, callback) {
   for (const key of Object.keys(process.env)) {
     if (key.startsWith("WAVE_")) delete process.env[key];
   }
-  process.env.WAVE_CLI_AUTH_STORAGE = "disabled";
-  process.env.WAVE_CLI_HOME = "/dev/null";
-  return withMachineRuntimeAuth(auth, callback).finally(() => {
+  return withAuthStorageOptions(
+    { home: "/dev/null", mode: "disabled" },
+    () => withMachineRuntimeAuth(auth, callback)
+  ).finally(() => {
     for (const key of Object.keys(process.env)) {
       if (key.startsWith("WAVE_")) delete process.env[key];
     }
@@ -19472,7 +19571,15 @@ async function maybeRunMachineExecute(argv, program) {
   }
   try {
     await withTrustedMachineAuth(auth, async () => {
-      await program.parseAsync([process.execPath, "wave", ...commandArgs(resolved.command, normalizedInput)]);
+      await program.parseAsync([
+        process.execPath,
+        "wave",
+        "--auth-storage",
+        "disabled",
+        "--auth-home",
+        "/dev/null",
+        ...commandArgs(resolved.command, normalizedInput)
+      ]);
     });
   } catch (error) {
     if (isEnvelopeEmittedSignal(error)) return true;