@wave-ai-os/wave-cli 0.2.1 → 0.2.3

package/dist/index.cjs

@@ -2,11 +2,11 @@
 "use strict";
 
 // src/index.ts
-var import_commander8 = require("commander");
-var import_zod36 = require("zod");
+var import_commander9 = require("commander");
+var import_zod37 = require("zod");
 
 // src/cli.ts
-var import_commander7 = require("commander");
+var import_commander8 = require("commander");
 
 // src/authStorage.ts
 var import_node_child_process = require("child_process");
@@ -657,17 +657,17 @@ function inferStatusFromGraphqlErrors(errors) {
   if (codes.includes("INVALID_SCOPE") || codes.includes("UNSUPPORTED_BRANCH")) {
     return 400;
   }
-  const text5 = JSON.stringify(errors).toLowerCase();
-  if (text5.includes("unauthorized") || text5.includes("not authenticated")) {
+  const text6 = JSON.stringify(errors).toLowerCase();
+  if (text6.includes("unauthorized") || text6.includes("not authenticated")) {
     return 401;
   }
-  if (text5.includes("forbidden")) {
+  if (text6.includes("forbidden")) {
     return 403;
   }
-  if (text5.includes("not found")) {
+  if (text6.includes("not found")) {
     return 404;
   }
-  if (text5.includes("validation")) {
+  if (text6.includes("validation")) {
     return 422;
   }
   return 400;
@@ -820,9 +820,9 @@ async function requestGraphqlHttp(params) {
     signal: params.controller.signal
   });
   const responseRequestId = response.headers.get("x-request-id") ?? params.requestId;
-  const text5 = await response.text();
-  const payload = text5 ? parseJsonSafely(text5) : null;
-  const body3 = payload ?? (text5.length > 0 ? text5 : null);
+  const text6 = await response.text();
+  const payload = text6 ? parseJsonSafely(text6) : null;
+  const body3 = payload ?? (text6.length > 0 ? text6 : null);
   const graph = payload && typeof payload === "object" ? payload : {};
   return {
     status: response.status,
@@ -1140,9 +1140,9 @@ function sleepBriefly(ms) {
   const lock = new Int32Array(new SharedArrayBuffer(4));
   Atomics.wait(lock, 0, 0, ms);
 }
-function writeStdoutFully(text5) {
+function writeStdoutFully(text6) {
   const fd = typeof process.stdout.fd === "number" ? process.stdout.fd : 1;
-  const buffer = Buffer.from(text5, "utf8");
+  const buffer = Buffer.from(text6, "utf8");
   let offset = 0;
   while (offset < buffer.length) {
     try {
@@ -2029,8 +2029,8 @@ async function authGraphqlRequest(params) {
       signal: controller.signal
     });
     const responseRequestId = response.headers.get("x-request-id") ?? requestId;
-    const text5 = await response.text();
-    const payload = text5 ? parseJsonSafely2(text5) : null;
+    const text6 = await response.text();
+    const payload = text6 ? parseJsonSafely2(text6) : null;
     const graph = payload && typeof payload === "object" && !Array.isArray(payload) ? payload : {};
     const gqlError = graphqlErrors(graph, knownSecrets);
     if (gqlError) {
@@ -3722,7 +3722,7 @@ var BROADCAST_OPERATIONS = [
   mutation("newsletter.campaigns.create", "create_newsletter_campaign", "Create one approved Newsletter draft using the existing nested editor inputs", {}, newsletterPayloads.campaignCreate, "NewsletterCampaignCreateInput!"),
   mutation("newsletter.campaigns.update", "update_newsletter_campaign", "Update one approved Newsletter campaign at its saved revision", campaignId, newsletterPayloads.campaignUpdate, "NewsletterCampaignUpdateInput!"),
   mutation("newsletter.campaigns.duplicate", "duplicate_newsletter_campaign", "Duplicate one approved Newsletter campaign", campaignId, newsletterPayloads.duplicate, "NewsletterCampaignDuplicateInput"),
-  ...["archive", "restore", "delete"].map((action) => mutation(`newsletter.campaigns.${action}`, `${action === "delete" ? "destroy" : action}_newsletter_campaign`, action === "delete" ? "Delete one approved draft-only Newsletter campaign" : `${action} one approved Newsletter campaign; archive is not delivery cancellation`, campaignId, void 0, void 0, action !== "restore")),
+  ...["archive", "restore", "delete"].map((action2) => mutation(`newsletter.campaigns.${action2}`, `${action2 === "delete" ? "destroy" : action2}_newsletter_campaign`, action2 === "delete" ? "Delete one approved draft-only Newsletter campaign" : `${action2} one approved Newsletter campaign; archive is not delivery cancellation`, campaignId, void 0, void 0, action2 !== "restore")),
   mutation("newsletter.campaigns.schedule", "schedule_newsletter_campaign", "Schedule/send an approved Newsletter draft using supplied rendered HTML/text and managed audience", campaignId, newsletterPayloads.schedule, "NewsletterCampaignScheduleInput!"),
   mutation("newsletter.campaigns.send", "schedule_newsletter_campaign", "Send an approved Newsletter draft immediately; accepted/publishing is not delivered", campaignId, newsletterPayloads.send, "NewsletterCampaignScheduleInput!"),
   mutation("newsletter.campaigns.test-send", "test_send_newsletter_campaign", "Send a real approved revision-bound test email to one to five explicit recipients", campaignId, newsletterPayloads.testSend, "NewsletterCampaignTestSendInput!"),
@@ -4321,8 +4321,8 @@ function registerEntityCrudCommands(program, config) {
     });
   });
   const update = entityCommand.command("update").requiredOption("--id <id>").requiredOption("--data-json <dataJson>", updateHelp5);
-  for (const option2 of config.updatePreconditions?.options ?? []) {
-    update.option(option2.flags, option2.description);
+  for (const option3 of config.updatePreconditions?.options ?? []) {
+    update.option(option3.flags, option3.description);
   }
   update.action(async (opts, cmd) => {
     const preconditions = config.updatePreconditions?.parse(opts);
@@ -7778,9 +7778,9 @@ function parseToolFromGraphqlError(errorBody) {
   return null;
 }
 function toolHintFromPathLike(value) {
-  const text5 = toDisplay(value);
-  if (text5 === "") return null;
-  const [first] = text5.split("/");
+  const text6 = toDisplay(value);
+  if (text6 === "") return null;
+  const [first] = text6.split("/");
   return first ? first.trim() : null;
 }
 function unsupportedToolFromHints(params) {
@@ -8423,14 +8423,14 @@ function registerMutationCapabilityCommands(program) {
 // src/commands/osmd.ts
 var import_promises3 = require("fs/promises");
 var import_node_path3 = require("path");
-var import_zod27 = require("zod");
+var import_zod28 = require("zod");
 var import_commander = require("commander");
 
 // src/operationManifest.ts
 var import_node_crypto3 = require("crypto");
 
 // src/version.ts
-var CLI_VERSION = "0.2.1";
+var CLI_VERSION = "0.2.3";
 
 // src/commands/phoneOperationCatalog.ts
 var import_zod24 = require("zod");
@@ -8523,9 +8523,9 @@ var PHONE_OPERATIONS = [
   write("devices.rotate-credential", "rotate_phone_device_credential", [deviceId, key2], { sensitiveReceipt: true }),
   read("voice.availability", "phone_voice_availability", [], "{ available phoneNumberId }", { description: "Check browser voice calling availability for this member: eligible owned Phone line phoneNumberId. Does not issue tokens or place calls." })
 ];
-var phoneArgument = (option2) => option2.argument ?? option2.name.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
+var phoneArgument = (option3) => option3.argument ?? option3.name.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
 function parsePhoneInput(operation, value) {
-  const shape = Object.fromEntries(operation.options.map((option2) => [option2.name, option2.required ? option2.schema : option2.schema.optional()]));
+  const shape = Object.fromEntries(operation.options.map((option3) => [option3.name, option3.required ? option3.schema : option3.schema.optional()]));
   return import_zod24.z.object(shape).strict().superRefine((parsed, context) => {
     for (const [operationId2, first, second] of [
       ["phone.devices.show", "id", "slug"],
@@ -8556,7 +8556,7 @@ function phoneExampleInput(id6) {
   const operation = PHONE_OPERATIONS.find((operation2) => operation2.id === id6);
   if (!operation) return void 0;
   const examples = { e164: "+16235550123", number: "+16235550123", body: "Approved test message", idempotencyKey: "phone-example-1", approvedMonthlyPrice: "1.00", currency: "USD", term: "623", detailsJson: "{}", phoneNumberIds: "1", macAddress: "24:9A:D8:53:0F:7D", expectedRevision: "1", displayName: "Wave", status: "open" };
-  const input = Object.fromEntries(operation.options.filter((option2) => option2.required).map((option2) => [option2.name, examples[option2.name] ?? (option2.type === "ID" ? "1" : "Example")]));
+  const input = Object.fromEntries(operation.options.filter((option3) => option3.required).map((option3) => [option3.name, examples[option3.name] ?? (option3.type === "ID" ? "1" : "Example")]));
   if (id6 === "phone.devices.show") input.id = "1";
   if (id6 === "phone.conversations.create") input.number = "+16235550123";
   if (id6 === "phone.conversations.set-contact") input.contactId = "1";
@@ -8690,7 +8690,7 @@ var CHAT_OPERATIONS = [
     "search",
     "chats",
     listOptions.map(
-      (option2) => option2.name === "search" ? { ...option2, required: true } : option2
+      (option3) => option3.name === "search" ? { ...option3, required: true } : option3
     ),
     collection(metadata)
   ),
@@ -8808,12 +8808,12 @@ var CHAT_OPERATIONS = [
   ]),
   rest("huddles.thread", "POST", "huddle/thread", [chatId])
 ];
-var chatArgument = (option2) => option2.argument ?? option2.name.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
+var chatArgument = (option3) => option3.argument ?? option3.name.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
 function parseChatInput(operation, value) {
   const shape = Object.fromEntries(
-    operation.options.map((option2) => [
-      option2.name,
-      option2.required ? option2.schema : option2.schema.optional()
+    operation.options.map((option3) => [
+      option3.name,
+      option3.required ? option3.schema : option3.schema.optional()
     ])
   );
   return import_zod25.z.object(shape).strict().superRefine((input, context) => {
@@ -8829,7 +8829,7 @@ function parseChatInput(operation, value) {
         code: "custom",
         message: "New messages cannot remove an existing resource"
       });
-    if (operation.id === "chats.update" && !edits.some((option2) => input[option2.name] !== void 0))
+    if (operation.id === "chats.update" && !edits.some((option3) => input[option3.name] !== void 0))
       context.addIssue({ code: "custom", message: "At least one Chat edit is required" });
     if (input["starredOnly"] && input["excludeStarred"])
       context.addIssue({ code: "custom", message: "Star filters are mutually exclusive" });
@@ -8867,7 +8867,7 @@ function chatExampleInput(id6) {
     attachmentsJson: "[]"
   };
   const input = Object.fromEntries(
-    operation.options.filter((option2) => option2.required).map((option2) => [option2.name, values[option2.name] ?? "1"])
+    operation.options.filter((option3) => option3.required).map((option3) => [option3.name, values[option3.name] ?? "1"])
   );
   if (id6 === "chats.update") input["name"] = "Renamed test Chat";
   if (["chats.messages.send", "chats.messages.reply", "chats.messages.update"].includes(id6))
@@ -8976,7 +8976,9 @@ var write3 = (name, field, payload, target2 = false) => ({
 });
 var FLOW_OPERATIONS = [
   read3("workspace", "flow_workspace"),
-  read3("setup.show", "flow_workspace"),
+  read3("setup.show", "flow_workspace", [], {
+    description: "Read saved Flow settings: QuickBooks and Stripe connection status, recorded verification timestamps and capabilities; no Verify, Sync or reconnect."
+  }),
   ...FLOW_COLLECTIONS.flatMap((collection2) => {
     const name = collection2.replaceAll("_", "-");
     const filters = [
@@ -8992,7 +8994,9 @@ var FLOW_OPERATIONS = [
   read3("selectors", "flow_workspace", [choice2("collection", FLOW_COLLECTIONS, true), option("ids", import_zod26.z.string().transform((raw) => raw.split(",").map((value) => value.trim())).pipe(import_zod26.z.array(identifier3).min(1).max(50))), ...page2]),
   read3("approvals.review", "flow_approval_review", [id4]),
   read3("payments.details", "flow_payment_details", [id4]),
-  read3("invoicing.setup", "flow_invoicing_setup"),
+  read3("invoicing.setup", "flow_invoicing_setup", [], {
+    description: "Read QuickBooks company name and supported invoice items, with the selected invoice accounting item; provider reads only, no Verify, Sync or configuration writes."
+  }),
   read3("reports.show", "flow_report", [
     choice2("reportType", ["profit_and_loss", "cash_flow", "balance_sheet", "accounts_receivable", "accounts_payable"], true),
     option("startDate", date2),
@@ -9098,6 +9102,203 @@ function flowExampleInput(id6) {
   };
 }
 
+// src/commands/prospectingOperationCatalog.ts
+var import_zod27 = require("zod");
+var identifier4 = import_zod27.z.string().trim().regex(/^[A-Za-z0-9_-]{1,128}$/);
+var text5 = import_zod27.z.string().trim().min(1).max(4e3);
+var page3 = import_zod27.z.coerce.number().int().min(1).max(1e5);
+var jsonObject = import_zod27.z.string().max(256e3).transform((value, context) => {
+  try {
+    const parsed = JSON.parse(value);
+    return import_zod27.z.record(import_zod27.z.string(), import_zod27.z.unknown()).parse(parsed);
+  } catch {
+    context.addIssue({ code: "custom", message: "dataJson must be a JSON object" });
+    return import_zod27.z.NEVER;
+  }
+});
+var option2 = (name, type, schema = text5, required = false, choices) => ({ name, type, schema, required, ...choices ? { choices } : {} });
+var runIds = option2(
+  "runIds",
+  "[ID!]!",
+  import_zod27.z.string().transform((value) => value.split(",").map((id6) => id6.trim())).pipe(import_zod27.z.array(identifier4).min(1).max(100)),
+  true
+);
+var PROSPECTING_ACTIONS = [
+  "select_list_records",
+  "copy_list_members",
+  "move_list_members",
+  "promote_list_members",
+  "save_profile",
+  "create_list",
+  "update_list",
+  "load_prospect_sheet",
+  "preview_import",
+  "import_candidates",
+  "assess_members",
+  "remove_members",
+  "promote_candidate",
+  "configure_list_dropdown",
+  "add_list_column",
+  "edit_custom_list_field",
+  "update_list_column",
+  "duplicate_list_column",
+  "delete_list_column",
+  "edit_list_field",
+  "save_search",
+  "archive_search",
+  "build_search_filters",
+  "composer_leads",
+  "preview_email",
+  "send_test_email",
+  "check_email_deliverability",
+  "assist_email",
+  "list_email_templates",
+  "save_email_template",
+  "update_outreach_draft",
+  "send_outreach_draft",
+  "reply_to_outreach",
+  "set_unibox_status",
+  "restart_campaign_refill",
+  "campaign_audience_suggestions",
+  "add_campaign_lead_column",
+  "set_campaign_lead_status",
+  "campaign_lead_action",
+  "update_campaign_lead",
+  "create_campaign",
+  "update_campaign",
+  "save_campaign_draft",
+  "save_campaign_settings",
+  "delete_campaign",
+  "preview_campaign",
+  "prepare_campaign",
+  "launch_campaign",
+  "pause_campaign",
+  "save_campaign_report_access",
+  "save_campaign_lead_view",
+  "export_campaign_activity",
+  "manage_campaign_leads",
+  "save_analytics_preferences",
+  "stop_enrollment",
+  "classify_reply",
+  "create_opportunity",
+  "preview_campaign_enrichment",
+  "run_campaign_enrichment",
+  "cancel_campaign_enrichment",
+  "save_campaign_enrichment_template",
+  "preview_list_enrichment",
+  "run_list_enrichment",
+  "cancel_list_enrichment",
+  "search_companies",
+  "add_companies",
+  "search_people",
+  "add_people",
+  "enrich_members",
+  "verify_members",
+  "cancel_provider_run",
+  "resume_provider_run",
+  "retry_provider_run",
+  "create_workflow",
+  "update_workflow"
+];
+var action = option2(
+  "action",
+  "String",
+  import_zod27.z.enum(PROSPECTING_ACTIONS),
+  true,
+  PROSPECTING_ACTIONS
+);
+var idempotencyKey2 = option2(
+  "idempotencyKey",
+  "String",
+  import_zod27.z.string().regex(/^[\w-]{8,128}$/),
+  true
+);
+var read4 = (name, field, options) => ({
+  id: `prospecting.${name}`,
+  field,
+  options,
+  classification: "read",
+  description: `Read bounded authorized Prospecting ${name.replaceAll("-", " ")}; no provider run, campaign, outreach, or record write.`
+});
+var PROSPECTING_OPERATIONS = [
+  read4("workspace", "prospecting_workspace", [
+    option2("activityPage", "Int", page3),
+    option2("bouncePage", "Int", page3),
+    option2("activitySearch", "String"),
+    option2("activityKind", "String"),
+    option2("rangeStart", "String"),
+    option2("rangeEnd", "String"),
+    option2("leadStatus", "String"),
+    option2("period", "String"),
+    option2("listId", "ID", identifier4),
+    option2("campaignId", "ID", identifier4),
+    option2("page", "Int", page3),
+    option2("search", "String"),
+    option2("qualification", "String"),
+    option2("fieldFilters", "String"),
+    option2("sort", "String")
+  ]),
+  read4("people-search-runs", "prospecting_people_search_runs", [runIds]),
+  read4("company-search-runs", "prospecting_company_search_runs", [runIds]),
+  read4("campaign-report", "prospecting_campaign_report", [
+    option2("campaignId", "ID", identifier4, true),
+    option2("period", "String"),
+    option2("rangeStart", "String"),
+    option2("rangeEnd", "String")
+  ]),
+  read4("mail", "prospecting_mail", [
+    option2("campaignId", "ID", identifier4),
+    option2("folder", "String"),
+    option2("page", "Int", page3),
+    option2("search", "String")
+  ]),
+  {
+    id: "prospecting.command",
+    field: "execute_prospecting_command",
+    classification: "write",
+    description: "Apply one exact approved Prospecting action with validated JSON input and an idempotency key.",
+    options: [action, option2("dataJson", "JSON!", jsonObject, true), idempotencyKey2]
+  }
+];
+function parseProspectingInput(operation, raw) {
+  const shape = Object.fromEntries(
+    operation.options.map((definition) => [
+      definition.name,
+      definition.required ? definition.schema : definition.schema.optional()
+    ])
+  );
+  return import_zod27.z.object(shape).strict().parse(raw);
+}
+function validateProspectingInput(id6, input) {
+  const operation = PROSPECTING_OPERATIONS.find((candidate) => candidate.id === id6);
+  if (!operation) return [];
+  try {
+    parseProspectingInput(operation, input);
+    return [];
+  } catch (error) {
+    return [error instanceof Error ? error.message : "Invalid Prospecting input"];
+  }
+}
+function prospectingArgument(name) {
+  return name.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
+}
+function prospectingExampleInput(id6) {
+  const operation = PROSPECTING_OPERATIONS.find((candidate) => candidate.id === id6);
+  if (!operation) return void 0;
+  if (id6 === "prospecting.people-search-runs" || id6 === "prospecting.company-search-runs") {
+    return { runIds: "1" };
+  }
+  if (id6 === "prospecting.campaign-report") return { campaignId: "1" };
+  if (id6 === "prospecting.command") {
+    return {
+      action: "create_campaign",
+      dataJson: JSON.stringify({ name: "Draft campaign", list_id: "1" }),
+      idempotencyKey: "prospecting-example-1"
+    };
+  }
+  return {};
+}
+
 // src/operationMetadata.ts
 var DISCOVERY_OPERATION_IDS = [
   "flow.schema",
@@ -9222,6 +9423,7 @@ var DISCOVERY_OPERATION_IDS = [
 ];
 var READ_OPERATION_IDS = [
   ...FLOW_OPERATIONS.filter((operation) => operation.classification === "read").map((operation) => operation.id),
+  ...PROSPECTING_OPERATIONS.filter((operation) => operation.classification === "read").map((operation) => operation.id),
   ...CHAT_OPERATIONS.filter((operation) => operation.classification === "read").map((operation) => operation.id),
   ...PHONE_OPERATIONS.filter((operation) => operation.classification === "read").map((operation) => operation.id),
   "broadcast.channels.list",
@@ -9474,6 +9676,7 @@ var READ_OPERATION_IDS = [
 ];
 var WRITE_OPERATION_IDS = [
   ...FLOW_OPERATIONS.filter((operation) => operation.classification === "write").map((operation) => operation.id),
+  ...PROSPECTING_OPERATIONS.filter((operation) => operation.classification === "write").map((operation) => operation.id),
   ...CHAT_OPERATIONS.filter((operation) => operation.classification === "write").map((operation) => operation.id),
   ...PHONE_OPERATIONS.filter((operation) => operation.classification === "write").map((operation) => operation.id),
   "broadcast.drafts.create",
@@ -9759,13 +9962,13 @@ function registeredOperationMetadata(id6) {
 // src/operationManifest.ts
 var MANIFEST_ENUM_CHOICES = /* @__PURE__ */ Symbol("waveManifestEnumChoices");
 var MACHINE_PRESENTATION_OPTIONS = /* @__PURE__ */ new Set(["json", "readable"]);
-function withManifestEnumChoices(option2, choices) {
-  option2[MANIFEST_ENUM_CHOICES] = [...choices];
-  return option2;
+function withManifestEnumChoices(option3, choices) {
+  option3[MANIFEST_ENUM_CHOICES] = [...choices];
+  return option3;
 }
-function manifestEnumChoices(option2) {
+function manifestEnumChoices(option3) {
   return [
-    ...option2[MANIFEST_ENUM_CHOICES] ?? option2.argChoices ?? []
+    ...option3[MANIFEST_ENUM_CHOICES] ?? option3.argChoices ?? []
   ];
 }
 function isMachinePresentationOption(key3) {
@@ -9802,17 +10005,17 @@ function inputSchemaFor(command, id6) {
     };
     if (argument.required) required.push(key3);
   }
-  for (const option2 of command.options) {
-    const key3 = option2.attributeName();
+  for (const option3 of command.options) {
+    const key3 = option3.attributeName();
     if (isMachinePresentationOption(key3)) continue;
-    const payloadSchema = key3 === "dataJson" ? dataJsonSchemaPropertyForOperation(id6, option2.description) : null;
-    const enumChoices = manifestEnumChoices(option2);
+    const payloadSchema = key3 === "dataJson" ? dataJsonSchemaPropertyForOperation(id6, option3.description) : null;
+    const enumChoices = manifestEnumChoices(option3);
     properties[key3] = payloadSchema ?? {
-      type: option2.required ? "string" : option2.optional ? ["boolean", "string"] : "boolean",
-      ...option2.description ? { description: option2.description } : {},
+      type: option3.required ? "string" : option3.optional ? ["boolean", "string"] : "boolean",
+      ...option3.description ? { description: option3.description } : {},
       ...enumChoices.length ? { enum: enumChoices } : {}
     };
-    if (option2.mandatory) required.push(key3);
+    if (option3.mandatory) required.push(key3);
   }
   return {
     type: "object",
@@ -9828,6 +10031,8 @@ function exampleFor(inputSchema, id6) {
   if (phoneInput) return [{ name: "minimal valid Phone input", input: phoneInput }];
   const chatInput = chatExampleInput(id6);
   if (chatInput) return [{ name: "minimal valid member Chat input", input: chatInput }];
+  const prospectingInput = prospectingExampleInput(id6);
+  if (prospectingInput) return [{ name: "minimal valid Prospecting input", input: prospectingInput }];
   const input = {};
   for (const key3 of inputSchema.required) {
     const broadcastExample = broadcastArgumentExample(id6, key3);
@@ -9923,15 +10128,15 @@ function buildOperationManifest(program) {
 }
 
 // src/commands/osmd.ts
-var sourceSchema = import_zod27.z.enum([
+var sourceSchema = import_zod28.z.enum([
   "canonical_osmd",
   "agent_overlay",
   "agent_wiki",
   "thread_workspace"
 ]);
-var accessSchema = import_zod27.z.enum(["read_only", "read_write", "append_only"]).catch("read_write");
-var ownerSchema = import_zod27.z.enum(["system", "atlas"]);
-var suggestedActionSchema = import_zod27.z.enum([
+var accessSchema = import_zod28.z.enum(["read_only", "read_write", "append_only"]).catch("read_write");
+var ownerSchema = import_zod28.z.enum(["system", "atlas"]);
+var suggestedActionSchema = import_zod28.z.enum([
   "read",
   "create",
   "init",
@@ -9940,7 +10145,7 @@ var suggestedActionSchema = import_zod27.z.enum([
   "forbidden",
   "invalid_parent"
 ]).catch("update");
-var agentMarkdownErrorCodeSchema = import_zod27.z.enum([
+var agentMarkdownErrorCodeSchema = import_zod28.z.enum([
   "canonical_osmd_read_only",
   "agent_parent_not_found",
   "agent_file_not_found",
@@ -9951,9 +10156,9 @@ var agentMarkdownErrorCodeSchema = import_zod27.z.enum([
   "invalid_agent_wiki_path"
 ]);
 var agentMarkdownErrorCodeFieldSchema = agentMarkdownErrorCodeSchema.nullable().catch(null);
-var nonEmptyString3 = import_zod27.z.string().min(1);
-var nonNegativeInt3 = import_zod27.z.coerce.number().int().min(0);
-var positiveInt = import_zod27.z.coerce.number().int().min(1);
+var nonEmptyString3 = import_zod28.z.string().min(1);
+var nonNegativeInt3 = import_zod28.z.coerce.number().int().min(0);
+var positiveInt = import_zod28.z.coerce.number().int().min(1);
 var supportedAgentOverlaySystemFiles = ["notes.md", "summary.md"];
 var supportedWikiIndexFile = "index.md";
 var supportedWikiLogFile = "log.md";
@@ -9969,20 +10174,20 @@ var supportedWikiControlledPatterns = supportedWikiControlledFolders.map(
 );
 var controlledWikiSlugPattern = /^[a-z0-9][a-z0-9-]*$/;
 var agentMarkdownSlugPattern = /^[a-z0-9][a-z0-9-]*$/;
-var osmdSearchScopeSchema = import_zod27.z.enum([
+var osmdSearchScopeSchema = import_zod28.z.enum([
   "os-only",
   "agent-overlay-only",
   "agent-wiki-only",
   "combined"
 ]);
-var osmdLintScopeSchema = import_zod27.z.enum([
+var osmdLintScopeSchema = import_zod28.z.enum([
   "combined",
   "agent-overlay-only",
   "agent-wiki-only"
 ]);
-var osmdMemoryQualityScopeSchema = import_zod27.z.enum(["agent-overlay-only"]);
-var osmdIngestKindSchema = import_zod27.z.enum(["text", "file", "url", "transcript"]);
-var osmdRawSourceTypeSchema = import_zod27.z.enum([
+var osmdMemoryQualityScopeSchema = import_zod28.z.enum(["agent-overlay-only"]);
+var osmdIngestKindSchema = import_zod28.z.enum(["text", "file", "url", "transcript"]);
+var osmdRawSourceTypeSchema = import_zod28.z.enum([
   "pasted_text",
   "uploaded_markdown",
   "uploaded_text",
@@ -9991,37 +10196,37 @@ var osmdRawSourceTypeSchema = import_zod27.z.enum([
   "meeting_transcript",
   "url"
 ]);
-var agentMarkdownFileSchema = import_zod27.z.preprocess(
+var agentMarkdownFileSchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    path: import_zod27.z.string(),
+  import_zod28.z.object({
+    path: import_zod28.z.string(),
     source: sourceSchema,
     access: accessSchema,
     owner: ownerSchema,
-    exists: import_zod27.z.boolean(),
-    canCreate: import_zod27.z.boolean(),
-    canUpdate: import_zod27.z.boolean(),
-    canAppend: import_zod27.z.boolean(),
-    wikiRole: import_zod27.z.string().nullable().optional(),
-    formatVersion: import_zod27.z.string().nullable().optional(),
-    createdAt: import_zod27.z.string().nullable().optional(),
-    updatedAt: import_zod27.z.string().nullable().optional(),
-    ingestedAt: import_zod27.z.string().nullable().optional(),
-    lastSeenAt: import_zod27.z.string().nullable().optional(),
-    canonicalParentUpdatedAt: import_zod27.z.string().nullable().optional(),
-    parentRef: import_zod27.z.string().nullable().optional(),
-    agentChildrenAllowed: import_zod27.z.boolean(),
+    exists: import_zod28.z.boolean(),
+    canCreate: import_zod28.z.boolean(),
+    canUpdate: import_zod28.z.boolean(),
+    canAppend: import_zod28.z.boolean(),
+    wikiRole: import_zod28.z.string().nullable().optional(),
+    formatVersion: import_zod28.z.string().nullable().optional(),
+    createdAt: import_zod28.z.string().nullable().optional(),
+    updatedAt: import_zod28.z.string().nullable().optional(),
+    ingestedAt: import_zod28.z.string().nullable().optional(),
+    lastSeenAt: import_zod28.z.string().nullable().optional(),
+    canonicalParentUpdatedAt: import_zod28.z.string().nullable().optional(),
+    parentRef: import_zod28.z.string().nullable().optional(),
+    agentChildrenAllowed: import_zod28.z.boolean(),
     suggestedAction: suggestedActionSchema,
     errorCode: agentMarkdownErrorCodeFieldSchema.optional(),
-    content: import_zod27.z.string().nullable().optional(),
-    url: import_zod27.z.string().nullable().optional(),
-    workspaceId: import_zod27.z.string().nullable().optional(),
-    fileId: import_zod27.z.string().nullable().optional(),
-    name: import_zod27.z.string().nullable().optional(),
-    displayName: import_zod27.z.string().nullable().optional(),
-    contentSha: import_zod27.z.string().nullable().optional(),
-    versionSha: import_zod27.z.string().nullable().optional(),
-    mediaType: import_zod27.z.string().nullable().optional()
+    content: import_zod28.z.string().nullable().optional(),
+    url: import_zod28.z.string().nullable().optional(),
+    workspaceId: import_zod28.z.string().nullable().optional(),
+    fileId: import_zod28.z.string().nullable().optional(),
+    name: import_zod28.z.string().nullable().optional(),
+    displayName: import_zod28.z.string().nullable().optional(),
+    contentSha: import_zod28.z.string().nullable().optional(),
+    versionSha: import_zod28.z.string().nullable().optional(),
+    mediaType: import_zod28.z.string().nullable().optional()
   }).transform((value) => ({
     ...value,
     wikiRole: value.wikiRole ?? null,
@@ -10044,31 +10249,31 @@ var agentMarkdownFileSchema = import_zod27.z.preprocess(
     mediaType: value.mediaType ?? null
   }))
 );
-var agentMarkdownFilesSchema = import_zod27.z.array(agentMarkdownFileSchema);
-var agentMarkdownMutationDataSchema = import_zod27.z.union([
+var agentMarkdownFilesSchema = import_zod28.z.array(agentMarkdownFileSchema);
+var agentMarkdownMutationDataSchema = import_zod28.z.union([
   agentMarkdownFileSchema,
-  import_zod27.z.object({ files: agentMarkdownFilesSchema })
+  import_zod28.z.object({ files: agentMarkdownFilesSchema })
 ]);
-var osmdSearchCandidateSchema = import_zod27.z.preprocess(
+var osmdSearchCandidateSchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    path: import_zod27.z.string(),
+  import_zod28.z.object({
+    path: import_zod28.z.string(),
     source: sourceSchema,
     access: accessSchema,
     owner: ownerSchema,
-    wikiRole: import_zod27.z.string().nullable().optional(),
-    formatVersion: import_zod27.z.string().nullable().optional(),
-    parentRef: import_zod27.z.string().nullable().optional(),
-    exists: import_zod27.z.boolean(),
-    agentChildrenAllowed: import_zod27.z.boolean(),
-    title: import_zod27.z.string(),
-    label: import_zod27.z.string(),
-    snippet: import_zod27.z.string().nullable().optional(),
-    rank: import_zod27.z.number().int(),
-    matchReason: import_zod27.z.string().nullable().optional(),
-    toolKey: import_zod27.z.string().nullable().optional(),
-    nodeKey: import_zod27.z.string().nullable().optional(),
-    nodeKind: import_zod27.z.string().nullable().optional()
+    wikiRole: import_zod28.z.string().nullable().optional(),
+    formatVersion: import_zod28.z.string().nullable().optional(),
+    parentRef: import_zod28.z.string().nullable().optional(),
+    exists: import_zod28.z.boolean(),
+    agentChildrenAllowed: import_zod28.z.boolean(),
+    title: import_zod28.z.string(),
+    label: import_zod28.z.string(),
+    snippet: import_zod28.z.string().nullable().optional(),
+    rank: import_zod28.z.number().int(),
+    matchReason: import_zod28.z.string().nullable().optional(),
+    toolKey: import_zod28.z.string().nullable().optional(),
+    nodeKey: import_zod28.z.string().nullable().optional(),
+    nodeKind: import_zod28.z.string().nullable().optional()
   }).transform((value) => ({
     ...value,
     wikiRole: value.wikiRole ?? null,
@@ -10081,26 +10286,26 @@ var osmdSearchCandidateSchema = import_zod27.z.preprocess(
     nodeKind: value.nodeKind ?? null
   }))
 );
-var osmdSearchResultSchema = import_zod27.z.preprocess(
+var osmdSearchResultSchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    query: import_zod27.z.string(),
-    scope: import_zod27.z.string(),
-    count: import_zod27.z.number().int().min(0),
-    candidates: import_zod27.z.array(osmdSearchCandidateSchema)
+  import_zod28.z.object({
+    query: import_zod28.z.string(),
+    scope: import_zod28.z.string(),
+    count: import_zod28.z.number().int().min(0),
+    candidates: import_zod28.z.array(osmdSearchCandidateSchema)
   })
 );
-var osmdWikiLintIssueSchema = import_zod27.z.preprocess(
+var osmdWikiLintIssueSchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    code: import_zod27.z.string(),
-    severity: import_zod27.z.string(),
-    path: import_zod27.z.string(),
-    source: import_zod27.z.string().nullable().optional(),
-    parentRef: import_zod27.z.string().nullable().optional(),
-    message: import_zod27.z.string(),
-    suggestedAction: import_zod27.z.string().nullable().optional(),
-    canAutoFix: import_zod27.z.boolean()
+  import_zod28.z.object({
+    code: import_zod28.z.string(),
+    severity: import_zod28.z.string(),
+    path: import_zod28.z.string(),
+    source: import_zod28.z.string().nullable().optional(),
+    parentRef: import_zod28.z.string().nullable().optional(),
+    message: import_zod28.z.string(),
+    suggestedAction: import_zod28.z.string().nullable().optional(),
+    canAutoFix: import_zod28.z.boolean()
   }).transform((value) => ({
     ...value,
     source: value.source ?? null,
@@ -10108,37 +10313,37 @@ var osmdWikiLintIssueSchema = import_zod27.z.preprocess(
     suggestedAction: value.suggestedAction ?? null
   }))
 );
-var osmdWikiLintResultSchema = import_zod27.z.preprocess(
+var osmdWikiLintResultSchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    status: import_zod27.z.string(),
-    summary: import_zod27.z.object({
-      totalIssues: import_zod27.z.number().int().min(0),
-      errors: import_zod27.z.number().int().min(0),
-      warnings: import_zod27.z.number().int().min(0),
-      suggestions: import_zod27.z.number().int().min(0)
+  import_zod28.z.object({
+    status: import_zod28.z.string(),
+    summary: import_zod28.z.object({
+      totalIssues: import_zod28.z.number().int().min(0),
+      errors: import_zod28.z.number().int().min(0),
+      warnings: import_zod28.z.number().int().min(0),
+      suggestions: import_zod28.z.number().int().min(0)
     }),
-    issues: import_zod27.z.array(osmdWikiLintIssueSchema)
+    issues: import_zod28.z.array(osmdWikiLintIssueSchema)
   })
 );
-var nullableCountSchema = import_zod27.z.preprocess(
+var nullableCountSchema = import_zod28.z.preprocess(
   (value) => value === void 0 || value === null || value === "" ? null : value,
-  import_zod27.z.coerce.number().int().min(0).nullable()
+  import_zod28.z.coerce.number().int().min(0).nullable()
 ).catch(null);
-var osmdMemoryQualityIssueSchema = import_zod27.z.preprocess(
+var osmdMemoryQualityIssueSchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    code: import_zod27.z.string().nullable().optional(),
-    issueCode: import_zod27.z.string().nullable().optional(),
-    path: import_zod27.z.string().nullable().optional(),
-    parentRef: import_zod27.z.string().nullable().optional(),
-    dimension: import_zod27.z.string().nullable().optional(),
-    evidence: import_zod27.z.string().nullable().optional(),
-    evidenceSnippet: import_zod27.z.string().nullable().optional(),
-    message: import_zod27.z.string().nullable().optional(),
-    severity: import_zod27.z.string().nullable().optional(),
-    suggestedAction: import_zod27.z.string().nullable().optional(),
-    canAutoFix: import_zod27.z.boolean().nullable().optional()
+  import_zod28.z.object({
+    code: import_zod28.z.string().nullable().optional(),
+    issueCode: import_zod28.z.string().nullable().optional(),
+    path: import_zod28.z.string().nullable().optional(),
+    parentRef: import_zod28.z.string().nullable().optional(),
+    dimension: import_zod28.z.string().nullable().optional(),
+    evidence: import_zod28.z.string().nullable().optional(),
+    evidenceSnippet: import_zod28.z.string().nullable().optional(),
+    message: import_zod28.z.string().nullable().optional(),
+    severity: import_zod28.z.string().nullable().optional(),
+    suggestedAction: import_zod28.z.string().nullable().optional(),
+    canAutoFix: import_zod28.z.boolean().nullable().optional()
   }).passthrough().transform((value) => ({
     ...value,
     code: value.code ?? value.issueCode ?? "unknown_issue",
@@ -10153,16 +10358,16 @@ var osmdMemoryQualityIssueSchema = import_zod27.z.preprocess(
     canAutoFix: value.canAutoFix === true ? true : false
   }))
 );
-var osmdMemoryQualityOverlaySchema = import_zod27.z.preprocess(
+var osmdMemoryQualityOverlaySchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    path: import_zod27.z.string().nullable().optional(),
-    parentRef: import_zod27.z.string().nullable().optional(),
-    status: import_zod27.z.string().nullable().optional(),
-    score: import_zod27.z.union([import_zod27.z.number(), import_zod27.z.string()]).nullable().optional(),
-    overallScore: import_zod27.z.union([import_zod27.z.number(), import_zod27.z.string()]).nullable().optional(),
-    dimensions: import_zod27.z.unknown().nullable().optional(),
-    issues: import_zod27.z.array(osmdMemoryQualityIssueSchema).optional()
+  import_zod28.z.object({
+    path: import_zod28.z.string().nullable().optional(),
+    parentRef: import_zod28.z.string().nullable().optional(),
+    status: import_zod28.z.string().nullable().optional(),
+    score: import_zod28.z.union([import_zod28.z.number(), import_zod28.z.string()]).nullable().optional(),
+    overallScore: import_zod28.z.union([import_zod28.z.number(), import_zod28.z.string()]).nullable().optional(),
+    dimensions: import_zod28.z.unknown().nullable().optional(),
+    issues: import_zod28.z.array(osmdMemoryQualityIssueSchema).optional()
   }).passthrough().transform((value) => ({
     ...value,
     path: value.path ?? null,
@@ -10174,9 +10379,9 @@ var osmdMemoryQualityOverlaySchema = import_zod27.z.preprocess(
     issues: value.issues ?? []
   }))
 );
-var osmdMemoryQualitySummarySchema = import_zod27.z.preprocess(
+var osmdMemoryQualitySummarySchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
+  import_zod28.z.object({
     evaluatedCount: nullableCountSchema.optional(),
     passCount: nullableCountSchema.optional(),
     warnCount: nullableCountSchema.optional(),
@@ -10194,19 +10399,19 @@ var osmdMemoryQualitySummarySchema = import_zod27.z.preprocess(
     failCount: value.failCount ?? value.failures ?? null
   }))
 );
-var osmdMemoryQualityResultSchema = import_zod27.z.preprocess(
+var osmdMemoryQualityResultSchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    status: import_zod27.z.string(),
-    scope: import_zod27.z.string().nullable().optional(),
+  import_zod28.z.object({
+    status: import_zod28.z.string(),
+    scope: import_zod28.z.string().nullable().optional(),
     evaluatedCount: nullableCountSchema.optional(),
     passCount: nullableCountSchema.optional(),
     warnCount: nullableCountSchema.optional(),
     failCount: nullableCountSchema.optional(),
     summary: osmdMemoryQualitySummarySchema.optional(),
-    weakestOverlays: import_zod27.z.array(osmdMemoryQualityOverlaySchema).optional(),
-    issues: import_zod27.z.array(osmdMemoryQualityIssueSchema).optional(),
-    scores: import_zod27.z.array(osmdMemoryQualityOverlaySchema).optional()
+    weakestOverlays: import_zod28.z.array(osmdMemoryQualityOverlaySchema).optional(),
+    issues: import_zod28.z.array(osmdMemoryQualityIssueSchema).optional(),
+    scores: import_zod28.z.array(osmdMemoryQualityOverlaySchema).optional()
   }).passthrough().transform((value) => {
     const summary = isRecord5(value.summary) ? value.summary : null;
     return {
@@ -10230,24 +10435,24 @@ function normalizeOsmdIngestFileRecordInput(value) {
   }
   return normalized;
 }
-var osmdIngestFileRecordSchema = import_zod27.z.preprocess(
+var osmdIngestFileRecordSchema = import_zod28.z.preprocess(
   normalizeOsmdIngestFileRecordInput,
-  import_zod27.z.object({
-    path: import_zod27.z.string(),
-    source: import_zod27.z.string().nullable().optional(),
-    access: import_zod27.z.string().nullable().optional(),
-    owner: import_zod27.z.string().nullable().optional(),
-    parentRef: import_zod27.z.string().nullable().optional(),
-    exists: import_zod27.z.boolean().nullable().optional(),
-    canCreate: import_zod27.z.boolean().nullable().optional(),
-    canUpdate: import_zod27.z.boolean().nullable().optional(),
-    canAppend: import_zod27.z.boolean().nullable().optional(),
-    wikiRole: import_zod27.z.string().nullable().optional(),
-    formatVersion: import_zod27.z.string().nullable().optional(),
-    createdAt: import_zod27.z.string().nullable().optional(),
-    updatedAt: import_zod27.z.string().nullable().optional(),
-    suggestedAction: import_zod27.z.string().nullable().optional(),
-    errorCode: import_zod27.z.string().nullable().optional()
+  import_zod28.z.object({
+    path: import_zod28.z.string(),
+    source: import_zod28.z.string().nullable().optional(),
+    access: import_zod28.z.string().nullable().optional(),
+    owner: import_zod28.z.string().nullable().optional(),
+    parentRef: import_zod28.z.string().nullable().optional(),
+    exists: import_zod28.z.boolean().nullable().optional(),
+    canCreate: import_zod28.z.boolean().nullable().optional(),
+    canUpdate: import_zod28.z.boolean().nullable().optional(),
+    canAppend: import_zod28.z.boolean().nullable().optional(),
+    wikiRole: import_zod28.z.string().nullable().optional(),
+    formatVersion: import_zod28.z.string().nullable().optional(),
+    createdAt: import_zod28.z.string().nullable().optional(),
+    updatedAt: import_zod28.z.string().nullable().optional(),
+    suggestedAction: import_zod28.z.string().nullable().optional(),
+    errorCode: import_zod28.z.string().nullable().optional()
   }).passthrough().transform((value) => ({
     ...value,
     source: value.source ?? null,
@@ -10266,17 +10471,17 @@ var osmdIngestFileRecordSchema = import_zod27.z.preprocess(
     errorCode: value.errorCode ?? null
   }))
 );
-var osmdIngestResultSchema = import_zod27.z.preprocess(
+var osmdIngestResultSchema = import_zod28.z.preprocess(
   normalizeAgentMarkdownJsonKeys,
-  import_zod27.z.object({
-    rawSourceId: import_zod27.z.union([import_zod27.z.string(), import_zod27.z.number()]).nullable().optional(),
-    sourceSummaryPath: import_zod27.z.string().nullable().optional(),
+  import_zod28.z.object({
+    rawSourceId: import_zod28.z.union([import_zod28.z.string(), import_zod28.z.number()]).nullable().optional(),
+    sourceSummaryPath: import_zod28.z.string().nullable().optional(),
     sourceSummaryFile: osmdIngestFileRecordSchema.nullable().optional(),
-    slug: import_zod27.z.string().nullable().optional(),
-    runLint: import_zod27.z.boolean().nullable().optional(),
-    createdFiles: import_zod27.z.array(osmdIngestFileRecordSchema).optional(),
-    updatedFiles: import_zod27.z.array(osmdIngestFileRecordSchema).optional(),
-    skippedUpdates: import_zod27.z.array(import_zod27.z.unknown()).optional(),
+    slug: import_zod28.z.string().nullable().optional(),
+    runLint: import_zod28.z.boolean().nullable().optional(),
+    createdFiles: import_zod28.z.array(osmdIngestFileRecordSchema).optional(),
+    updatedFiles: import_zod28.z.array(osmdIngestFileRecordSchema).optional(),
+    skippedUpdates: import_zod28.z.array(import_zod28.z.unknown()).optional(),
     lintResult: osmdWikiLintResultSchema.nullable().optional()
   }).passthrough().transform((value) => ({
     ...value,
@@ -10291,37 +10496,37 @@ var osmdIngestResultSchema = import_zod27.z.preprocess(
     lintResult: value.lintResult ?? null
   }))
 );
-var mutationPayloadSchema = import_zod27.z.object({
-  ok: import_zod27.z.boolean(),
-  status: import_zod27.z.number(),
-  errorCode: import_zod27.z.string().nullable().optional(),
-  data: import_zod27.z.unknown().nullable().optional(),
-  errors: import_zod27.z.unknown().nullable().optional()
+var mutationPayloadSchema = import_zod28.z.object({
+  ok: import_zod28.z.boolean(),
+  status: import_zod28.z.number(),
+  errorCode: import_zod28.z.string().nullable().optional(),
+  data: import_zod28.z.unknown().nullable().optional(),
+  errors: import_zod28.z.unknown().nullable().optional()
 });
-var markdownTreeNodeSchema = import_zod27.z.lazy(
-  () => import_zod27.z.object({
-    toolKey: import_zod27.z.string(),
-    nodeKey: import_zod27.z.string(),
-    nodeKind: import_zod27.z.string(),
-    runtimeLabel: import_zod27.z.string(),
-    path: import_zod27.z.string().nullable().optional().transform((value) => value ?? null),
+var markdownTreeNodeSchema = import_zod28.z.lazy(
+  () => import_zod28.z.object({
+    toolKey: import_zod28.z.string(),
+    nodeKey: import_zod28.z.string(),
+    nodeKind: import_zod28.z.string(),
+    runtimeLabel: import_zod28.z.string(),
+    path: import_zod28.z.string().nullable().optional().transform((value) => value ?? null),
     source: sourceSchema,
     access: accessSchema,
     owner: ownerSchema,
-    parentRef: import_zod27.z.string().nullable().optional().transform((value) => value ?? null),
-    agentChildrenAllowed: import_zod27.z.boolean(),
-    exists: import_zod27.z.boolean(),
-    resolvedScope: import_zod27.z.object({
-      parentId: import_zod27.z.string().nullable().optional().transform((value) => value ?? null),
-      recordId: import_zod27.z.string().nullable().optional().transform((value) => value ?? null),
-      memberId: import_zod27.z.string().nullable().optional().transform((value) => value ?? null),
-      teamId: import_zod27.z.string().nullable().optional().transform((value) => value ?? null),
-      contentType: import_zod27.z.string().nullable().optional().transform((value) => value ?? null)
+    parentRef: import_zod28.z.string().nullable().optional().transform((value) => value ?? null),
+    agentChildrenAllowed: import_zod28.z.boolean(),
+    exists: import_zod28.z.boolean(),
+    resolvedScope: import_zod28.z.object({
+      parentId: import_zod28.z.string().nullable().optional().transform((value) => value ?? null),
+      recordId: import_zod28.z.string().nullable().optional().transform((value) => value ?? null),
+      memberId: import_zod28.z.string().nullable().optional().transform((value) => value ?? null),
+      teamId: import_zod28.z.string().nullable().optional().transform((value) => value ?? null),
+      contentType: import_zod28.z.string().nullable().optional().transform((value) => value ?? null)
     }),
-    isLeaf: import_zod27.z.boolean(),
-    treeView: import_zod27.z.boolean(),
-    details: import_zod27.z.unknown().nullable(),
-    children: import_zod27.z.array(markdownTreeNodeSchema).optional().transform((value) => value ?? [])
+    isLeaf: import_zod28.z.boolean(),
+    treeView: import_zod28.z.boolean(),
+    details: import_zod28.z.unknown().nullable(),
+    children: import_zod28.z.array(markdownTreeNodeSchema).optional().transform((value) => value ?? [])
   })
 );
 var AGENT_MARKDOWN_FILE_SELECTION = `{
@@ -11423,8 +11628,8 @@ function formatIngestFileList(files) {
   }
   return files.map((file) => {
     const path = typeof file.path === "string" ? file.path : "-";
-    const action = typeof file.suggestedAction === "string" && file.suggestedAction.trim() !== "" ? ` (${file.suggestedAction})` : "";
-    return `- ${path}${action}`;
+    const action2 = typeof file.suggestedAction === "string" && file.suggestedAction.trim() !== "" ? ` (${file.suggestedAction})` : "";
+    return `- ${path}${action2}`;
   });
 }
 function formatSkippedUpdateList(skippedUpdates) {
@@ -11551,7 +11756,7 @@ async function resolveContentInput(opts, globals) {
   }
   return stdin;
 }
-function writePreflightError(status2, action) {
+function writePreflightError(status2, action2) {
   if (status2.errorCode) {
     return {
       code: status2.errorCode,
@@ -11568,7 +11773,7 @@ function writePreflightError(status2, action) {
       status: 403
     };
   }
-  if (status2.access === "append_only" && action !== "append") {
+  if (status2.access === "append_only" && action2 !== "append") {
     return {
       code: "append_only_violation",
       message: `Agent markdown file is append-only and cannot be overwritten: ${status2.path}`,
@@ -11576,7 +11781,7 @@ function writePreflightError(status2, action) {
       status: 403
     };
   }
-  if (action === "create") {
+  if (action2 === "create") {
     if (status2.exists) {
       return {
         code: "agent_file_already_exists",
@@ -11594,7 +11799,7 @@ function writePreflightError(status2, action) {
       };
     }
   }
-  if (action === "update") {
+  if (action2 === "update") {
     if (!status2.exists) {
       return {
         code: "agent_file_not_found",
@@ -11612,7 +11817,7 @@ function writePreflightError(status2, action) {
       };
     }
   }
-  if (action === "append") {
+  if (action2 === "append") {
     if (!status2.exists) {
       return {
         code: "agent_file_not_found",
@@ -11644,7 +11849,7 @@ function statusCodeForAgentError(code) {
   }
   return 403;
 }
-function suggestedCommandsForWritePreflight(status2, action, suggestedAction) {
+function suggestedCommandsForWritePreflight(status2, action2, suggestedAction) {
   const parentRef = status2.parentRef ?? status2.path;
   const file = (0, import_node_path3.basename)(status2.path);
   if (status2.source === "canonical_osmd" || status2.access === "read_only") {
@@ -11653,7 +11858,7 @@ function suggestedCommandsForWritePreflight(status2, action, suggestedAction) {
       `wave osmd agent create "${status2.path}" notes.md --content "# Notes"`
     ];
   }
-  if (status2.access === "append_only" || action === "append") {
+  if (status2.access === "append_only" || action2 === "append") {
     return [
       "wave osmd wiki status log.md",
       'wave osmd wiki append-log --content "<markdown>"'
@@ -11745,7 +11950,7 @@ function addContentOptions(command) {
   return command.option("--content <content>", "Markdown content").option("--file <file>", "Read markdown content from a local file");
 }
 function parseExpectedWorkspaceContentSha(options) {
-  const value = import_zod27.z.object({ expectedContentSha: import_zod27.z.unknown().optional() }).parse(options).expectedContentSha;
+  const value = import_zod28.z.object({ expectedContentSha: import_zod28.z.unknown().optional() }).parse(options).expectedContentSha;
   if (value === void 0) return void 0;
   if (typeof value === "string" && /^[a-f0-9]{64}$/.test(value)) return value;
   return printLocalError({
@@ -12146,14 +12351,14 @@ function registerOsmdCommands(program) {
     addIngestOptions(
       ingest.command("text [text]").description("Ingest raw text through the backend source ingestion planner")
     )
-  ).action(async (text5, opts, cmd) => {
+  ).action(async (text6, opts, cmd) => {
     const command = "osmd.ingest.text";
     try {
       rejectUnsupportedIngestOptions(command, opts);
       const globals = cmd.optsWithGlobals();
       const content = await resolveInlineIngestContent({
         command,
-        positional: text5,
+        positional: text6,
         opts,
         globals
       });
@@ -13562,7 +13767,7 @@ function getRecentToolSupport(input) {
 
 // src/commands/broadcastOperations.ts
 var import_commander2 = require("commander");
-var import_zod28 = require("zod");
+var import_zod29 = require("zod");
 var FLAT_INPUT_TYPES = {
   text: "String!",
   community_post_id: "ID",
@@ -13595,11 +13800,11 @@ function registerBroadcastOperations(broadcast) {
     const command = parent2.command(leaf).description(operation.summary).option("--json", "Emit the stable JSON envelope");
     for (const [name, definition] of Object.entries(operation.arguments)) {
       const flag2 = `--${kebab(name)}${definition.type === "Boolean" ? "" : ` <${name}>`}`;
-      const option2 = new import_commander2.Option(flag2, definition.variable);
-      if (definition.required) option2.makeOptionMandatory();
-      if (definition.default) option2.default(definition.default);
-      if (definition.choices) option2.choices([...definition.choices]);
-      command.addOption(option2);
+      const option3 = new import_commander2.Option(flag2, definition.variable);
+      if (definition.required) option3.makeOptionMandatory();
+      if (definition.default) option3.default(definition.default);
+      if (definition.choices) option3.choices([...definition.choices]);
+      command.addOption(option3);
     }
     if (operation.payload) command.requiredOption("--data-json <dataJson>", "Exact existing GraphQL input object with snake_case fields; see schema");
     command.action(async (opts, cmd) => {
@@ -13638,7 +13843,7 @@ function registerBroadcastOperations(broadcast) {
         selectionSet: operation.selection ?? "",
         ...operation.path.startsWith("community.") && operation.path !== "community.posts.list" ? {
           transformData: (value) => {
-            const record3 = import_zod28.z.record(import_zod28.z.string(), import_zod28.z.unknown()).parse(value);
+            const record3 = import_zod29.z.record(import_zod29.z.string(), import_zod29.z.unknown()).parse(value);
             if (!record3["selectedPost"]) throw new CliError({ message: "Requested community post is unavailable", kind: "not_found", status: 404, exitCode: EXIT_CODES.notFound });
             return value;
           }
@@ -13759,15 +13964,15 @@ function registerBroadcastCommands(program) {
 
 // src/commands/supportOperations.ts
 var import_commander3 = require("commander");
-var import_zod29 = require("zod");
+var import_zod30 = require("zod");
 var SUPPORT_OPERATION_COMMANDS = ["conversation", "messages", "ticket", "article", "reply", "note", "triage"];
 var SUPPORT_TRIAGE_ACTIONS = ["assign", "unassign", "close", "reopen", "snooze", "unsnooze", "star", "unstar", "add-label", "remove-label"];
-var id5 = import_zod29.z.string().trim().regex(/^[A-Za-z0-9_-]+$/);
-var body2 = import_zod29.z.string().trim().min(1).max(64e3);
-var page3 = import_zod29.z.coerce.number().int().min(1);
-var per = page3.max(100);
-var record = import_zod29.z.record(import_zod29.z.string(), import_zod29.z.unknown());
-var triageSchema = import_zod29.z.object({ conversationId: id5, action: import_zod29.z.enum(SUPPORT_TRIAGE_ACTIONS), memberId: id5.optional(), labelId: id5.optional(), snoozedUntil: import_zod29.z.string().datetime({ offset: true }).optional() }).superRefine((value, context) => {
+var id5 = import_zod30.z.string().trim().regex(/^[A-Za-z0-9_-]+$/);
+var body2 = import_zod30.z.string().trim().min(1).max(64e3);
+var page4 = import_zod30.z.coerce.number().int().min(1);
+var per = page4.max(100);
+var record = import_zod30.z.record(import_zod30.z.string(), import_zod30.z.unknown());
+var triageSchema = import_zod30.z.object({ conversationId: id5, action: import_zod30.z.enum(SUPPORT_TRIAGE_ACTIONS), memberId: id5.optional(), labelId: id5.optional(), snoozedUntil: import_zod30.z.string().datetime({ offset: true }).optional() }).superRefine((value, context) => {
   for (const [name, required] of Object.entries({ memberId: value.action === "assign", labelId: value.action === "add-label" || value.action === "remove-label", snoozedUntil: value.action === "snooze" })) {
     if (value[name] !== void 0 !== required)
       context.addIssue({ code: "custom", message: `${name} ${required ? "is required" : "is not allowed"} for ${value.action}` });
@@ -13793,7 +13998,7 @@ function registerSupportOperationCommands(support) {
       runtimeOptions: context.runtimeOptions,
       field: "support_conversation_messages",
       variableTypes: { organization_id: "ID!", conversation_id: "ID!", page: "Int", per: "Int" },
-      variables: { organization_id: resolveOrganizationId(context.organizationId), conversation_id: id5.parse(opts.conversationId), page: page3.parse(opts.page), per: per.parse(opts.per) },
+      variables: { organization_id: resolveOrganizationId(context.organizationId), conversation_id: id5.parse(opts.conversationId), page: page4.parse(opts.page), per: per.parse(opts.per) },
       isList: true,
       selectionSet: "{ count currentPage totalPages nextPage totalCount data { id supportConversationId direction senderMemberId senderIdentity emailSubject body sentAt receivedAt createdAt } }"
     });
@@ -14167,21 +14372,21 @@ function registerPhoneCommands(program) {
   const phone = program.command("phone").description("Authorized Phone workspace reads and exact approved subactions");
   const groups = /* @__PURE__ */ new Map();
   for (const operation of PHONE_OPERATIONS) {
-    const [, groupName, action] = operation.id.split(".");
-    if (!groupName || !action) throw new Error(`Invalid Phone operation ${operation.id}`);
+    const [, groupName, action2] = operation.id.split(".");
+    if (!groupName || !action2) throw new Error(`Invalid Phone operation ${operation.id}`);
     let group = groups.get(groupName);
     if (!group) {
       group = phone.command(groupName);
       groups.set(groupName, group);
     }
-    const command = group.command(action).description(operation.description ?? `${operation.classification === "read" ? "Read" : "Apply one approved"} Phone ${groupName} ${action}${operation.sensitiveReceipt ? "; human-owned credential flow, non-secret receipt only" : ""}`);
+    const command = group.command(action2).description(operation.description ?? `${operation.classification === "read" ? "Read" : "Apply one approved"} Phone ${groupName} ${action2}${operation.sensitiveReceipt ? "; human-owned credential flow, non-secret receipt only" : ""}`);
     for (const definition of operation.options) {
       const kebab2 = definition.name.replace(/[A-Z]/g, (value) => `-${value.toLowerCase()}`);
-      const option2 = new import_commander4.Option(`--${kebab2}${definition.flag ? " [boolean]" : ` <${definition.name}>`}`, `Phone ${definition.name}`);
-      if (definition.required) option2.makeOptionMandatory();
-      if (definition.choices) option2.choices([...definition.choices]);
-      if (definition.defaultValue) option2.default(definition.defaultValue);
-      command.addOption(option2);
+      const option3 = new import_commander4.Option(`--${kebab2}${definition.flag ? " [boolean]" : ` <${definition.name}>`}`, `Phone ${definition.name}`);
+      if (definition.required) option3.makeOptionMandatory();
+      if (definition.choices) option3.choices([...definition.choices]);
+      if (definition.defaultValue) option3.default(definition.defaultValue);
+      command.addOption(option3);
     }
     command.option("--json", "Emit the JSON envelope").action(async (raw, cmd) => {
       const { json: _json, ...values } = raw;
@@ -14215,9 +14420,9 @@ function registerPhoneCommands(program) {
           ...operation.show !== void 0 ? { isShow: operation.show } : {},
           ...operation.id === "phone.voicemail.list" ? { transformData: (value) => {
             if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Malformed Phone call page");
-            const page4 = value;
-            if (!Array.isArray(page4.data)) throw new Error("Malformed Phone call page");
-            return { ...page4, data: page4.data.filter((row) => row && typeof row === "object" && !Array.isArray(row) && (row.voicemailRecordingStatus ?? row.attributes?.voicemailRecordingStatus)) };
+            const page5 = value;
+            if (!Array.isArray(page5.data)) throw new Error("Malformed Phone call page");
+            return { ...page5, data: page5.data.filter((row) => row && typeof row === "object" && !Array.isArray(row) && (row.voicemailRecordingStatus ?? row.attributes?.voicemailRecordingStatus)) };
           } } : {}
         });
       }
@@ -14229,24 +14434,24 @@ function registerPhoneCommands(program) {
 var import_commander5 = require("commander");
 
 // src/commands/flowProjection.ts
-var import_zod30 = require("zod");
+var import_zod31 = require("zod");
 function fieldSchema2(key3) {
-  if (key3.endsWith("_cents") || key3.endsWith("_count") || ["quantity", "tax_rate_bps", "approval_round", "sequence", "tax_year", "depth"].includes(key3)) return import_zod30.z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).nullable();
-  if (["available", "authorized", "configured", "connected", "can_decide", "has_file", "publish_requested", "collection_paused", "cancel_at_period_end", "is_current", "empty"].includes(key3)) return import_zod30.z.boolean().nullable();
-  return import_zod30.z.string().nullable();
+  if (key3.endsWith("_cents") || key3.endsWith("_count") || ["quantity", "tax_rate_bps", "approval_round", "sequence", "tax_year", "depth"].includes(key3)) return import_zod31.z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).nullable();
+  if (["available", "authorized", "configured", "connected", "can_decide", "has_file", "publish_requested", "collection_paused", "cancel_at_period_end", "is_current", "empty"].includes(key3)) return import_zod31.z.boolean().nullable();
+  return import_zod31.z.string().nullable();
 }
 function fields(names) {
-  return import_zod30.z.object(Object.fromEntries(names.split(" ").map((key3) => [key3, fieldSchema2(key3).optional()])));
+  return import_zod31.z.object(Object.fromEntries(names.split(" ").map((key3) => [key3, fieldSchema2(key3).optional()])));
 }
 var connection2 = fields("provider configured connected status action_required configured_at last_verified_at").extend({
-  provider: import_zod30.z.string(),
-  configured: import_zod30.z.boolean(),
-  connected: import_zod30.z.boolean(),
-  status: import_zod30.z.string()
+  provider: import_zod31.z.string(),
+  configured: import_zod31.z.boolean(),
+  connected: import_zod31.z.boolean(),
+  status: import_zod31.z.string()
 });
-var capability = fields("available authorized reason").extend({ methods: import_zod30.z.array(import_zod30.z.string()).optional() });
-var capabilities = import_zod30.z.object({
-  permissions: import_zod30.z.object({ can_view: import_zod30.z.boolean(), can_view_financials: import_zod30.z.boolean(), can_manage: import_zod30.z.boolean(), can_decide_approvals: import_zod30.z.boolean() }),
+var capability = fields("available authorized reason").extend({ methods: import_zod31.z.array(import_zod31.z.string()).optional() });
+var capabilities = import_zod31.z.object({
+  permissions: import_zod31.z.object({ can_view: import_zod31.z.boolean(), can_view_financials: import_zod31.z.boolean(), can_manage: import_zod31.z.boolean(), can_decide_approvals: import_zod31.z.boolean() }),
   vendor_management: capability,
   bill_management: capability,
   expense_submission: capability,
@@ -14254,34 +14459,34 @@ var capabilities = import_zod30.z.object({
   accounting_sync: capability,
   stripe_invoicing: capability,
   subscription_sync: capability,
-  connection_verification: capability.extend({ providers: import_zod30.z.array(import_zod30.z.enum(["quickbooks", "stripe"])) }),
+  connection_verification: capability.extend({ providers: import_zod31.z.array(import_zod31.z.enum(["quickbooks", "stripe"])) }),
   bill_payments: capability
 });
 var line = fields("description amount_cents quantity unit_amount_cents tax_rate_bps tax_cents");
 var core = "id public_id status created_at updated_at";
-var record2 = (extra) => fields(`${core} ${extra}`).extend({ id: import_zod30.z.string(), status: import_zod30.z.string() });
+var record2 = (extra) => fields(`${core} ${extra}`).extend({ id: import_zod31.z.string(), status: import_zod31.z.string() });
 var approval = record2("bill_id bill_invoice_number vendor_name amount_cents currency resource_type resource_id resource_public_id resource_name expense_id submitter_member_id submitter_name merchant_name expense_date expense_category spend_method approval_round sequence requested_by_member_id approver_member_id note can_decide decided_at");
 var rows = {
   vendors: record2("name email phone"),
-  bills: record2("source_kind vendor_id vendor_name amount_cents currency invoice_number payment_frequency invoice_date due_date note attachment_count sync_status").extend({ line_items: import_zod30.z.array(line).optional() }),
+  bills: record2("source_kind vendor_id vendor_name amount_cents currency invoice_number payment_frequency invoice_date due_date note attachment_count sync_status").extend({ line_items: import_zod31.z.array(line).optional() }),
   expenses: record2("source_kind approval_status latest_approval_id merchant_name expense_date expense_category spend_method amount_cents currency receipt_number description attachment_count sync_status submitted_by_member_id submitted_by_name"),
   approvals: approval,
-  invoices: record2("customer_id customer_name customer_email invoice_number invoice_frequency due_terms issue_date due_date note subtotal_cents discount_cents service_charge_cents tax_cents total_cents currency attachment_count publish_requested sync_status").extend({ line_items: import_zod30.z.array(line).optional() }),
+  invoices: record2("customer_id customer_name customer_email invoice_number invoice_frequency due_terms issue_date due_date note subtotal_cents discount_cents service_charge_cents tax_cents total_cents currency attachment_count publish_requested sync_status").extend({ line_items: import_zod31.z.array(line).optional() }),
   payments: record2("direction provider payment_method amount_cents currency bill_id invoice_id counterparty_name scheduled_at processed_at failure_code"),
   tax_documents: record2("vendor_id vendor_name document_type tax_year has_file"),
   subscriptions: record2("customer_name customer_email description amount_cents currency interval current_period_end collection_paused cancel_at_period_end"),
-  customers: fields("id name email").extend({ id: import_zod30.z.string() }),
-  eligible_approvers: fields("id name email is_current").extend({ id: import_zod30.z.string() })
+  customers: fields("id name email").extend({ id: import_zod31.z.string() }),
+  eligible_approvers: fields("id name email is_current").extend({ id: import_zod31.z.string() })
 };
-var pagination4 = import_zod30.z.object({ loaded: import_zod30.z.boolean(), count: import_zod30.z.number().int().nonnegative(), current_page: import_zod30.z.number().int().positive(), per_page: import_zod30.z.number().int().min(1).max(100), total_count: import_zod30.z.number().int().nonnegative(), total_pages: import_zod30.z.number().int().positive(), next_page: import_zod30.z.number().nullable(), previous_page: import_zod30.z.number().nullable(), query: import_zod30.z.string() });
+var pagination4 = import_zod31.z.object({ loaded: import_zod31.z.boolean(), count: import_zod31.z.number().int().nonnegative(), current_page: import_zod31.z.number().int().positive(), per_page: import_zod31.z.number().int().min(1).max(100), total_count: import_zod31.z.number().int().nonnegative(), total_pages: import_zod31.z.number().int().positive(), next_page: import_zod31.z.number().nullable(), previous_page: import_zod31.z.number().nullable(), query: import_zod31.z.string() });
 var report = fields("report_type title source currency accounting_method start_date end_date generated_at empty").extend({
-  report_type: import_zod30.z.string(),
-  empty: import_zod30.z.boolean(),
-  columns: import_zod30.z.array(fields("key label type")),
-  rows: import_zod30.z.array(fields("id kind depth").extend({ values: import_zod30.z.array(import_zod30.z.string()) }))
+  report_type: import_zod31.z.string(),
+  empty: import_zod31.z.boolean(),
+  columns: import_zod31.z.array(fields("key label type")),
+  rows: import_zod31.z.array(fields("id kind depth").extend({ values: import_zod31.z.array(import_zod31.z.string()) }))
 });
-var setup = import_zod30.z.object({ items: import_zod30.z.array(import_zod30.z.object({ id: import_zod30.z.string(), name: import_zod30.z.string() })), sales_item_id: import_zod30.z.string().nullable() });
-var syncReceipt = import_zod30.z.object({ accepted: import_zod30.z.literal(true), provider: import_zod30.z.enum(["stripe", "quickbooks"]) });
+var setup = import_zod31.z.object({ items: import_zod31.z.array(import_zod31.z.object({ id: import_zod31.z.string(), name: import_zod31.z.string() })), sales_item_id: import_zod31.z.string().nullable(), company_name: import_zod31.z.string().nullable().optional() });
+var syncReceipt = import_zod31.z.object({ accepted: import_zod31.z.literal(true), provider: import_zod31.z.enum(["stripe", "quickbooks"]) });
 function parse(schema, value) {
   const result = schema.safeParse(value);
   if (!result.success) throw new CliError({ message: "Malformed Flow response; no authoritative result available.", kind: "malformed_response", status: 502, exitCode: EXIT_CODES.networkOrUpstream });
@@ -14289,15 +14494,15 @@ function parse(schema, value) {
 }
 function projectFlowRead(operation, input, value) {
   if (operation.field === "flow_workspace") {
-    const root = parse(import_zod30.z.object({ connections: import_zod30.z.object({ quickbooks: connection2, stripe: connection2 }), capabilities }), value);
+    const root = parse(import_zod31.z.object({ connections: import_zod31.z.object({ quickbooks: connection2, stripe: connection2 }), capabilities }), value);
     const collection2 = operation.collection ?? input.collection;
     if (!collection2) return root;
     const key3 = String(collection2);
     const schema = rows[key3];
     if (!schema) throw new Error("Unknown Flow collection");
-    const page4 = parse(import_zod30.z.object({ pagination: import_zod30.z.object({ [key3]: pagination4 }), [key3]: import_zod30.z.array(schema).max(100) }), value);
-    const meta = parse(pagination4, page4.pagination[key3]);
-    const data = page4[key3];
+    const page5 = parse(import_zod31.z.object({ pagination: import_zod31.z.object({ [key3]: pagination4 }), [key3]: import_zod31.z.array(schema).max(100) }), value);
+    const meta = parse(pagination4, page5.pagination[key3]);
+    const data = page5[key3];
     if (data.length > Number(input.per ?? (operation.show ? 1 : 25)) || !meta.loaded && data.length > 0) throw new CliError({ message: "Flow page exceeded its requested bounds.", kind: "malformed_response", status: 502, exitCode: EXIT_CODES.networkOrUpstream });
     if (meta.count !== data.length) throw new CliError({ message: "Inconsistent Flow page count.", kind: "malformed_response", status: 502, exitCode: EXIT_CODES.networkOrUpstream });
     if (operation.show) {
@@ -14309,13 +14514,13 @@ function projectFlowRead(operation, input, value) {
   }
   if (operation.field === "flow_report") return parse(report, value);
   if (operation.field === "flow_invoicing_setup") return parse(setup, value);
-  if (operation.field === "flow_approval_review") return parse(import_zod30.z.object({ approval, resource_version: import_zod30.z.string(), description: import_zod30.z.string().nullable(), due_date: import_zod30.z.string().nullable(), line_items: import_zod30.z.array(line), decisions: import_zod30.z.array(approval) }), value);
-  return parse(rows.payments.extend({ refundable_amount_cents: import_zod30.z.number().nullable(), provider_details_status: import_zod30.z.string(), can_retry: import_zod30.z.boolean().optional(), can_confirm_payout: import_zod30.z.boolean().optional(), payout_status: import_zod30.z.string().optional() }), value);
+  if (operation.field === "flow_approval_review") return parse(import_zod31.z.object({ approval, resource_version: import_zod31.z.string(), description: import_zod31.z.string().nullable(), due_date: import_zod31.z.string().nullable(), line_items: import_zod31.z.array(line), decisions: import_zod31.z.array(approval) }), value);
+  return parse(rows.payments.extend({ refundable_amount_cents: import_zod31.z.number().nullable(), provider_details_status: import_zod31.z.string(), can_retry: import_zod31.z.boolean().optional(), can_confirm_payout: import_zod31.z.boolean().optional(), payout_status: import_zod31.z.string().optional() }), value);
 }
 function projectFlowMutation(operation, value) {
-  const envelope2 = parse(import_zod30.z.object({ ok: import_zod30.z.literal(true), status: import_zod30.z.number(), data: import_zod30.z.unknown(), errorCode: import_zod30.z.string().nullable().optional(), errors: import_zod30.z.unknown().optional() }), value);
+  const envelope2 = parse(import_zod31.z.object({ ok: import_zod31.z.literal(true), status: import_zod31.z.number(), data: import_zod31.z.unknown(), errorCode: import_zod31.z.string().nullable().optional(), errors: import_zod31.z.unknown().optional() }), value);
   const group = operation.id.split(".")[1];
-  const schema = operation.id === "flow.sync.request" ? syncReceipt : (group ? rows[group] : void 0) ?? (operation.id === "flow.connections.verify" ? import_zod30.z.object({ provider: import_zod30.z.string(), connection: connection2 }) : fields("accepted provider sales_item_id"));
+  const schema = operation.id === "flow.sync.request" ? syncReceipt : (group ? rows[group] : void 0) ?? (operation.id === "flow.connections.verify" ? import_zod31.z.object({ provider: import_zod31.z.string(), connection: connection2 }) : fields("accepted provider sales_item_id"));
   return { ok: true, status: envelope2.status, data: parse(schema, envelope2.data) };
 }
 
@@ -14340,11 +14545,11 @@ function registerFlowCommands(program) {
     const command = parent2.command(parts.at(-1)).description(operation.description);
     for (const definition of operation.options) {
       const flag2 = definition.name.replace(/[A-Z]/g, (letter) => `-${letter.toLowerCase()}`);
-      const option2 = new import_commander5.Option(`--${flag2} <${definition.name}>`, `Flow ${definition.name}`);
-      if (definition.required) option2.makeOptionMandatory();
-      if (definition.choices) option2.choices([...definition.choices]);
-      if (definition.defaultValue) option2.default(definition.defaultValue);
-      command.addOption(option2);
+      const option3 = new import_commander5.Option(`--${flag2} <${definition.name}>`, `Flow ${definition.name}`);
+      if (definition.required) option3.makeOptionMandatory();
+      if (definition.choices) option3.choices([...definition.choices]);
+      if (definition.defaultValue) option3.default(definition.defaultValue);
+      command.addOption(option3);
     }
     command.option("--json").action(async (raw, cmd) => {
       const { json: _json, ...values } = raw;
@@ -14367,11 +14572,11 @@ function registerFlowCommands(program) {
 
 // src/commands/chats.ts
 var import_commander6 = require("commander");
-var import_zod32 = require("zod");
+var import_zod33 = require("zod");
 
 // src/commands/chatCollaboration.ts
 var import_node_crypto4 = require("crypto");
-var import_zod31 = require("zod");
+var import_zod32 = require("zod");
 function redactCredential(value, credential) {
   if (typeof value === "string")
     return credential ? value.replaceAll(credential, "[redacted]") : value;
@@ -14382,17 +14587,17 @@ function redactCredential(value, credential) {
     );
   return value;
 }
-var target = import_zod31.z.object({
-  id: import_zod31.z.string().regex(/^[1-9]\d*$/),
-  organizationId: import_zod31.z.string(),
-  chatType: import_zod31.z.string()
+var target = import_zod32.z.object({
+  id: import_zod32.z.string().regex(/^[1-9]\d*$/),
+  organizationId: import_zod32.z.string(),
+  chatType: import_zod32.z.string()
 });
-var note = import_zod31.z.object({
-  attributes: import_zod31.z.object({
-    id: import_zod31.z.string(),
-    organizationId: import_zod31.z.string(),
-    contentableId: import_zod31.z.string(),
-    contentableType: import_zod31.z.literal("Chat")
+var note = import_zod32.z.object({
+  attributes: import_zod32.z.object({
+    id: import_zod32.z.string(),
+    organizationId: import_zod32.z.string(),
+    contentableId: import_zod32.z.string(),
+    contentableType: import_zod32.z.literal("Chat")
   })
 });
 async function resolveChatCollaborationTarget(options, organizationId, chatId2, contentId) {
@@ -14408,7 +14613,7 @@ async function resolveChatCollaborationTarget(options, organizationId, chatId2,
     variables: { organizationId, chatId: chatId2, ...contentId === void 0 ? {} : { contentId } }
   });
   if (!response.ok) {
-    const codes = import_zod31.z.array(import_zod31.z.object({ extensions: import_zod31.z.object({ code: import_zod31.z.string() }).optional() })).safeParse(response.error.details["errors"]);
+    const codes = import_zod32.z.array(import_zod32.z.object({ extensions: import_zod32.z.object({ code: import_zod32.z.string() }).optional() })).safeParse(response.error.details["errors"]);
     const code = codes.success ? codes.data.map((error) => error.extensions?.code).find((code2) => ["UNAUTHORIZED", "FORBIDDEN", "NOT_FOUND"].includes(code2 ?? "")) : void 0;
     const status2 = code === "UNAUTHORIZED" ? 401 : code === "FORBIDDEN" ? 403 : code === "NOT_FOUND" ? 404 : response.error.status;
     throw new CliError({
@@ -14418,7 +14623,7 @@ async function resolveChatCollaborationTarget(options, organizationId, chatId2,
       exitCode: mapStatusToExitCode(status2)
     });
   }
-  const parsed = import_zod31.z.object({ chat: target, content: note.optional() }).safeParse(response.result.data);
+  const parsed = import_zod32.z.object({ chat: target, content: note.optional() }).safeParse(response.result.data);
   if (!parsed.success)
     throw new CliError({
       message: "Chat target lookup returned invalid evidence",
@@ -14449,63 +14654,63 @@ async function resolveChatCollaborationTarget(options, organizationId, chatId2,
     });
   return parsed.data.chat.id;
 }
-var attachment = import_zod31.z.object({
-  id: import_zod31.z.string().optional(),
-  name: import_zod31.z.string().optional(),
-  filename: import_zod31.z.string().optional(),
-  size: import_zod31.z.number().optional(),
-  type: import_zod31.z.string().optional()
+var attachment = import_zod32.z.object({
+  id: import_zod32.z.string().optional(),
+  name: import_zod32.z.string().optional(),
+  filename: import_zod32.z.string().optional(),
+  size: import_zod32.z.number().optional(),
+  type: import_zod32.z.string().optional()
 });
 var projections = {
-  draft: import_zod31.z.object({
-    payload: import_zod31.z.object({
-      message: import_zod31.z.string().max(256e3).optional(),
-      attachments: import_zod31.z.array(attachment).max(20).optional()
+  draft: import_zod32.z.object({
+    payload: import_zod32.z.object({
+      message: import_zod32.z.string().max(256e3).optional(),
+      attachments: import_zod32.z.array(attachment).max(20).optional()
     }),
-    version: import_zod31.z.number().int().min(0),
-    updatedAt: import_zod31.z.string().nullable()
+    version: import_zod32.z.number().int().min(0),
+    updatedAt: import_zod32.z.string().nullable()
   }),
-  huddle: import_zod31.z.object({
-    enabled: import_zod31.z.boolean(),
-    provider: import_zod31.z.string(),
-    id: import_zod31.z.string().nullable(),
-    participants: import_zod31.z.array(import_zod31.z.object({ memberId: import_zod31.z.string(), name: import_zod31.z.string(), mode: import_zod31.z.string() })).max(50)
+  huddle: import_zod32.z.object({
+    enabled: import_zod32.z.boolean(),
+    provider: import_zod32.z.string(),
+    id: import_zod32.z.string().nullable(),
+    participants: import_zod32.z.array(import_zod32.z.object({ memberId: import_zod32.z.string(), name: import_zod32.z.string(), mode: import_zod32.z.string() })).max(50)
   }),
-  "huddle/workspace": import_zod31.z.object({
-    title: import_zod31.z.string(),
-    content: import_zod31.z.string().max(256e3),
-    version: import_zod31.z.number().int().min(0),
-    threadId: import_zod31.z.string().nullable(),
-    updatedAt: import_zod31.z.string().nullable()
+  "huddle/workspace": import_zod32.z.object({
+    title: import_zod32.z.string(),
+    content: import_zod32.z.string().max(256e3),
+    version: import_zod32.z.number().int().min(0),
+    threadId: import_zod32.z.string().nullable(),
+    updatedAt: import_zod32.z.string().nullable()
   }),
-  "huddle/thread": import_zod31.z.object({ threadId: import_zod31.z.string() }),
-  "huddle/messages": import_zod31.z.object({
-    messages: import_zod31.z.array(
-      import_zod31.z.object({
-        id: import_zod31.z.string(),
-        memberId: import_zod31.z.string().nullable(),
-        name: import_zod31.z.string(),
-        text: import_zod31.z.string().max(256e3),
-        createdAt: import_zod31.z.string(),
-        attachments: import_zod31.z.array(attachment)
+  "huddle/thread": import_zod32.z.object({ threadId: import_zod32.z.string() }),
+  "huddle/messages": import_zod32.z.object({
+    messages: import_zod32.z.array(
+      import_zod32.z.object({
+        id: import_zod32.z.string(),
+        memberId: import_zod32.z.string().nullable(),
+        name: import_zod32.z.string(),
+        text: import_zod32.z.string().max(256e3),
+        createdAt: import_zod32.z.string(),
+        attachments: import_zod32.z.array(attachment)
       })
     ).max(50),
-    hasMore: import_zod31.z.boolean()
+    hasMore: import_zod32.z.boolean()
   }),
-  "huddle/artifacts": import_zod31.z.object({
-    huddleId: import_zod31.z.string().nullable(),
-    contentId: import_zod31.z.string().nullable(),
-    contentSlug: import_zod31.z.string().nullable(),
-    huddleStatus: import_zod31.z.string().nullable(),
-    summaryStatus: import_zod31.z.string(),
-    traceId: import_zod31.z.string().nullable(),
-    transcripts: import_zod31.z.array(import_zod31.z.object({ id: import_zod31.z.string().optional(), status: import_zod31.z.string().optional() })).max(100),
-    sessions: import_zod31.z.array(
-      import_zod31.z.object({
-        id: import_zod31.z.string(),
-        status: import_zod31.z.string(),
-        startedAt: import_zod31.z.string(),
-        endedAt: import_zod31.z.string().nullable()
+  "huddle/artifacts": import_zod32.z.object({
+    huddleId: import_zod32.z.string().nullable(),
+    contentId: import_zod32.z.string().nullable(),
+    contentSlug: import_zod32.z.string().nullable(),
+    huddleStatus: import_zod32.z.string().nullable(),
+    summaryStatus: import_zod32.z.string(),
+    traceId: import_zod32.z.string().nullable(),
+    transcripts: import_zod32.z.array(import_zod32.z.object({ id: import_zod32.z.string().optional(), status: import_zod32.z.string().optional() })).max(100),
+    sessions: import_zod32.z.array(
+      import_zod32.z.object({
+        id: import_zod32.z.string(),
+        status: import_zod32.z.string(),
+        startedAt: import_zod32.z.string(),
+        endedAt: import_zod32.z.string().nullable()
       })
     ).max(20)
   })
@@ -14555,7 +14760,7 @@ async function runChatRestCommand(operation, input, options, organizationId, mem
     });
     const identity = response.headers.get("x-request-id") ?? requestId;
     const raw = await response.json();
-    const errorBody = import_zod31.z.object({ error: import_zod31.z.object({ code: import_zod31.z.string(), message: import_zod31.z.string() }).optional() }).safeParse(raw);
+    const errorBody = import_zod32.z.object({ error: import_zod32.z.object({ code: import_zod32.z.string(), message: import_zod32.z.string() }).optional() }).safeParse(raw);
     if (!response.ok)
       return printEnvelopeAndExit({
         envelope: {
@@ -14572,7 +14777,7 @@ async function runChatRestCommand(operation, input, options, organizationId, mem
         },
         exitCode: mapStatusToExitCode(response.status)
       });
-    const envelope2 = import_zod31.z.object({ data: import_zod31.z.unknown() }).parse(raw);
+    const envelope2 = import_zod32.z.object({ data: import_zod32.z.unknown() }).parse(raw);
     const projector = projections[rest2.section];
     if (!projector) throw new Error("Missing saved Chat projection");
     const data = redactCredential(projector.parse(envelope2.data), config.token);
@@ -14600,20 +14805,20 @@ async function runChatRestCommand(operation, input, options, organizationId, mem
 }
 
 // src/commands/chats.ts
-var tabWorkspace = import_zod32.z.object({
-  toolTabs: import_zod32.z.array(import_zod32.z.object({ id: import_zod32.z.uuid(), toolKey: import_zod32.z.string() })),
-  activeTab: import_zod32.z.string(),
-  tabOrder: import_zod32.z.array(import_zod32.z.string()),
-  toolLocations: import_zod32.z.array(
-    import_zod32.z.object({
-      tabId: import_zod32.z.uuid(),
-      location: import_zod32.z.string(),
-      title: import_zod32.z.string().nullable().optional(),
-      emoji: import_zod32.z.string().nullable().optional()
+var tabWorkspace = import_zod33.z.object({
+  toolTabs: import_zod33.z.array(import_zod33.z.object({ id: import_zod33.z.uuid(), toolKey: import_zod33.z.string() })),
+  activeTab: import_zod33.z.string(),
+  tabOrder: import_zod33.z.array(import_zod33.z.string()),
+  toolLocations: import_zod33.z.array(
+    import_zod33.z.object({
+      tabId: import_zod33.z.uuid(),
+      location: import_zod33.z.string(),
+      title: import_zod33.z.string().nullable().optional(),
+      emoji: import_zod33.z.string().nullable().optional()
     })
   ),
-  version: import_zod32.z.number().int().min(0),
-  canEdit: import_zod32.z.boolean()
+  version: import_zod33.z.number().int().min(0),
+  canEdit: import_zod33.z.boolean()
 });
 var tabSelection = "{ toolTabs { id toolKey } activeTab tabOrder toolLocations { tabId location title emoji } version canEdit }";
 function normalizeChatTabMutation(payload) {
@@ -14636,11 +14841,11 @@ async function actorId(options, organizationId) {
     query: "query ChatActor($organizationId: ID!) { cliAuthStatus(organizationId: $organizationId) { authenticated member { id } organization { id } } }",
     variables: { organizationId }
   });
-  const identity = import_zod32.z.object({
-    cliAuthStatus: import_zod32.z.object({
-      authenticated: import_zod32.z.literal(true),
-      member: import_zod32.z.object({ id: import_zod32.z.string().regex(/^[1-9]\d*$/) }),
-      organization: import_zod32.z.object({ id: import_zod32.z.literal(organizationId) })
+  const identity = import_zod33.z.object({
+    cliAuthStatus: import_zod33.z.object({
+      authenticated: import_zod33.z.literal(true),
+      member: import_zod33.z.object({ id: import_zod33.z.string().regex(/^[1-9]\d*$/) }),
+      organization: import_zod33.z.object({ id: import_zod33.z.literal(organizationId) })
     })
   }).safeParse(result.ok ? result.result.data : void 0);
   if (!identity.success)
@@ -14666,15 +14871,15 @@ function registerChatCommands(program) {
     const command = group.command(leaf).description(
       operation.description ?? `${operation.classification === "read" ? "Read" : "Apply one approved"} member Chat ${parts.join(" ")} ${leaf}`
     ).option("--json", "Emit the stable JSON envelope");
-    for (const option2 of operation.options) {
-      const kebab2 = option2.name.replace(/[A-Z]/g, (letter) => `-${letter.toLowerCase()}`);
+    for (const option3 of operation.options) {
+      const kebab2 = option3.name.replace(/[A-Z]/g, (letter) => `-${letter.toLowerCase()}`);
       const flag2 = new import_commander6.Option(
-        `--${kebab2}${option2.flag ? "" : ` <${option2.name}>`}`,
-        `Chat ${option2.name}`
+        `--${kebab2}${option3.flag ? "" : ` <${option3.name}>`}`,
+        `Chat ${option3.name}`
       );
-      if (option2.required) flag2.makeOptionMandatory();
-      if (option2.choices) flag2.choices([...option2.choices]);
-      if (option2.defaultValue) flag2.default(option2.defaultValue);
+      if (option3.required) flag2.makeOptionMandatory();
+      if (option3.choices) flag2.choices([...option3.choices]);
+      if (option3.defaultValue) flag2.default(option3.defaultValue);
       command.addOption(flag2);
     }
     command.action(async (raw, cmd) => {
@@ -14699,11 +14904,11 @@ function registerChatCommands(program) {
         );
       const variables = { organization_id: organizationId };
       const variableTypes = { organization_id: "ID!" };
-      for (const option2 of operation.options) {
-        if (input[option2.name] === void 0) continue;
-        const name = chatArgument(option2);
-        variables[name] = input[option2.name];
-        variableTypes[name] = `${option2.type}${option2.required ? "!" : ""}`;
+      for (const option3 of operation.options) {
+        if (input[option3.name] === void 0) continue;
+        const name = chatArgument(option3);
+        variables[name] = input[option3.name];
+        variableTypes[name] = `${option3.type}${option3.required ? "!" : ""}`;
       }
       if (targetId) variables[operation.field === "chat" ? "id" : "chat_id"] = targetId;
       if (operation.id.startsWith("chats.notes.")) {
@@ -14743,7 +14948,7 @@ function registerChatCommands(program) {
           variableTypes["open"] = "Boolean!";
         }
         if (operation.id === "chats.tabs.save-state") {
-          const patch = import_zod32.z.record(import_zod32.z.string(), import_zod32.z.unknown()).parse(input["payloadJson"]);
+          const patch = import_zod33.z.record(import_zod33.z.string(), import_zod33.z.unknown()).parse(input["payloadJson"]);
           const types = {
             active_tab: "String",
             tab_order: "[String!]",
@@ -14766,10 +14971,10 @@ function registerChatCommands(program) {
       }
       if (["chats.create", "chats.update"].includes(operation.id)) {
         const payload = {};
-        for (const option2 of operation.options) {
-          if (option2.name === "chatId" || input[option2.name] === void 0) continue;
-          const name = chatArgument(option2);
-          payload[name] = input[option2.name];
+        for (const option3 of operation.options) {
+          if (option3.name === "chatId" || input[option3.name] === void 0) continue;
+          const name = chatArgument(option3);
+          payload[name] = input[option3.name];
           delete variables[name];
           delete variableTypes[name];
         }
@@ -14835,11 +15040,11 @@ function registerChatCommands(program) {
           isShow: true,
           ...operation.id === "chats.open" ? {
             transformData: (raw2) => {
-              const record3 = import_zod32.z.object({
-                id: import_zod32.z.string(),
-                slug: import_zod32.z.string().regex(/^CHT-[0-9A-F-]{36}$/),
-                organizationId: import_zod32.z.literal(organizationId),
-                chatType: import_zod32.z.enum(["default", "direct", "team"])
+              const record3 = import_zod33.z.object({
+                id: import_zod33.z.string(),
+                slug: import_zod33.z.string().regex(/^CHT-[0-9A-F-]{36}$/),
+                organizationId: import_zod33.z.literal(organizationId),
+                chatType: import_zod33.z.enum(["default", "direct", "team"])
               }).parse(raw2);
               return { id: record3.id, slug: record3.slug, route: `/chat/${record3.slug}` };
             }
@@ -16401,14 +16606,14 @@ function registerMailCommands(program) {
 }
 
 // src/commands/phantom.ts
-var import_zod33 = require("zod");
-var nonNegativeInt4 = import_zod33.z.coerce.number().int().min(0);
-var nullableString = import_zod33.z.string().nullable().optional().transform((value) => value ?? null);
-var idString = import_zod33.z.union([import_zod33.z.string(), import_zod33.z.number()]).transform((value) => String(value));
-var nullableIdString = import_zod33.z.union([import_zod33.z.string(), import_zod33.z.number()]).nullable().optional().transform(
+var import_zod34 = require("zod");
+var nonNegativeInt4 = import_zod34.z.coerce.number().int().min(0);
+var nullableString = import_zod34.z.string().nullable().optional().transform((value) => value ?? null);
+var idString = import_zod34.z.union([import_zod34.z.string(), import_zod34.z.number()]).transform((value) => String(value));
+var nullableIdString = import_zod34.z.union([import_zod34.z.string(), import_zod34.z.number()]).nullable().optional().transform(
   (value) => value === void 0 || value === null ? null : String(value)
 );
-var jsonObject = import_zod33.z.record(import_zod33.z.string(), import_zod33.z.unknown());
+var jsonObject2 = import_zod34.z.record(import_zod34.z.string(), import_zod34.z.unknown());
 var PHANTOM_LEDGER_INVENTORY_SELECTION = `{
   schemaVersion
   runsCount
@@ -16621,10 +16826,10 @@ var PHANTOM_LEDGER_KEY_ALIASES = {
   content_hash: "contentHash",
   observed_at: "observedAt"
 };
-var phantomLedgerInventorySchema = import_zod33.z.preprocess(
+var phantomLedgerInventorySchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
-    schemaVersion: import_zod33.z.string(),
+  import_zod34.z.object({
+    schemaVersion: import_zod34.z.string(),
     runsCount: nonNegativeInt4,
     observationsCount: nonNegativeInt4,
     candidatesCount: nonNegativeInt4,
@@ -16634,16 +16839,16 @@ var phantomLedgerInventorySchema = import_zod33.z.preprocess(
     reportsCount: nonNegativeInt4
   })
 );
-var phantomRunSchema = import_zod33.z.preprocess(
+var phantomRunSchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
+  import_zod34.z.object({
     id: idString,
     organizationId: idString,
-    notificationId: import_zod33.z.union([import_zod33.z.string(), import_zod33.z.number()]).nullable().optional().transform(
+    notificationId: import_zod34.z.union([import_zod34.z.string(), import_zod34.z.number()]).nullable().optional().transform(
       (value) => value === void 0 || value === null ? null : String(value)
     ),
-    status: import_zod33.z.string(),
-    triggerType: import_zod33.z.string(),
+    status: import_zod34.z.string(),
+    triggerType: import_zod34.z.string(),
     startedAt: nullableString,
     completedAt: nullableString,
     scannedFileCount: nonNegativeInt4,
@@ -16653,163 +16858,163 @@ var phantomRunSchema = import_zod33.z.preprocess(
     errorCount: nonNegativeInt4,
     warningCount: nonNegativeInt4,
     errorMessage: nullableString,
-    dryRun: import_zod33.z.boolean(),
-    schemaVersion: import_zod33.z.string(),
+    dryRun: import_zod34.z.boolean(),
+    schemaVersion: import_zod34.z.string(),
     testRunId: nullableString,
     idempotencyKey: nullableString,
-    ledgerMetadata: jsonObject.catch({}),
-    createdAt: import_zod33.z.string(),
-    updatedAt: import_zod33.z.string()
+    ledgerMetadata: jsonObject2.catch({}),
+    createdAt: import_zod34.z.string(),
+    updatedAt: import_zod34.z.string()
   })
 );
-var phantomRunListItemSchema = import_zod33.z.preprocess(
+var phantomRunListItemSchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
+  import_zod34.z.object({
     id: idString,
     organizationId: idString,
-    status: import_zod33.z.string(),
-    triggerType: import_zod33.z.string(),
-    dryRun: import_zod33.z.boolean(),
-    schemaVersion: import_zod33.z.string(),
+    status: import_zod34.z.string(),
+    triggerType: import_zod34.z.string(),
+    dryRun: import_zod34.z.boolean(),
+    schemaVersion: import_zod34.z.string(),
     testRunId: nullableString,
-    createdAt: import_zod33.z.string(),
-    updatedAt: import_zod33.z.string()
+    createdAt: import_zod34.z.string(),
+    updatedAt: import_zod34.z.string()
   })
 );
-var phantomReportSchema = import_zod33.z.preprocess(
+var phantomReportSchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
+  import_zod34.z.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
-    status: import_zod33.z.string(),
-    reportType: import_zod33.z.string(),
-    schemaVersion: import_zod33.z.string(),
+    status: import_zod34.z.string(),
+    reportType: import_zod34.z.string(),
+    schemaVersion: import_zod34.z.string(),
     markdownPath: nullableString,
-    payload: jsonObject.catch({}),
+    payload: jsonObject2.catch({}),
     testRunId: nullableString,
-    idempotencyKey: import_zod33.z.string(),
-    createdAt: import_zod33.z.string(),
-    updatedAt: import_zod33.z.string()
+    idempotencyKey: import_zod34.z.string(),
+    createdAt: import_zod34.z.string(),
+    updatedAt: import_zod34.z.string()
   })
 );
-var phantomObservationSchema = import_zod33.z.preprocess(
+var phantomObservationSchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
+  import_zod34.z.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
-    status: import_zod33.z.string(),
-    observationType: import_zod33.z.string(),
+    status: import_zod34.z.string(),
+    observationType: import_zod34.z.string(),
     targetType: nullableString,
     targetId: nullableString,
     sourceTable: nullableString,
     sourceRecordId: nullableString,
     sourceEventId: nullableString,
     contentHash: nullableString,
-    observedAt: import_zod33.z.string(),
-    confidence: import_zod33.z.coerce.number(),
-    payload: jsonObject.catch({}),
-    schemaVersion: import_zod33.z.string(),
+    observedAt: import_zod34.z.string(),
+    confidence: import_zod34.z.coerce.number(),
+    payload: jsonObject2.catch({}),
+    schemaVersion: import_zod34.z.string(),
     testRunId: nullableString,
-    idempotencyKey: import_zod33.z.string(),
-    createdAt: import_zod33.z.string(),
-    updatedAt: import_zod33.z.string()
+    idempotencyKey: import_zod34.z.string(),
+    createdAt: import_zod34.z.string(),
+    updatedAt: import_zod34.z.string()
   })
 );
-var phantomCandidateSchema = import_zod33.z.preprocess(
+var phantomCandidateSchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
+  import_zod34.z.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
     phantomObservationId: nullableString,
-    status: import_zod33.z.string(),
-    candidateType: import_zod33.z.string(),
+    status: import_zod34.z.string(),
+    candidateType: import_zod34.z.string(),
     targetType: nullableString,
     targetId: nullableString,
     title: nullableString,
-    dryRun: import_zod33.z.boolean(),
-    payload: jsonObject.catch({}),
-    approvalStatus: import_zod33.z.string(),
+    dryRun: import_zod34.z.boolean(),
+    payload: jsonObject2.catch({}),
+    approvalStatus: import_zod34.z.string(),
     approvedById: nullableIdString,
     approvedAt: nullableString,
     approvalSource: nullableString,
     approvalReason: nullableString,
-    approvalMetadata: jsonObject.catch({}),
-    schemaVersion: import_zod33.z.string(),
+    approvalMetadata: jsonObject2.catch({}),
+    schemaVersion: import_zod34.z.string(),
     testRunId: nullableString,
-    idempotencyKey: import_zod33.z.string(),
-    createdAt: import_zod33.z.string(),
-    updatedAt: import_zod33.z.string()
+    idempotencyKey: import_zod34.z.string(),
+    createdAt: import_zod34.z.string(),
+    updatedAt: import_zod34.z.string()
   })
 );
-var phantomCandidateEvidenceSchema = import_zod33.z.preprocess(
+var phantomCandidateEvidenceSchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
+  import_zod34.z.object({
     id: idString,
     organizationId: idString,
     phantomCandidateId: idString,
     phantomObservationId: nullableString,
-    evidenceType: import_zod33.z.string(),
+    evidenceType: import_zod34.z.string(),
     sourceType: nullableString,
     sourceId: nullableString,
     contentHash: nullableString,
-    payload: jsonObject.catch({}),
-    schemaVersion: import_zod33.z.string(),
+    payload: jsonObject2.catch({}),
+    schemaVersion: import_zod34.z.string(),
     testRunId: nullableString,
-    idempotencyKey: import_zod33.z.string(),
-    createdAt: import_zod33.z.string(),
-    updatedAt: import_zod33.z.string()
+    idempotencyKey: import_zod34.z.string(),
+    createdAt: import_zod34.z.string(),
+    updatedAt: import_zod34.z.string()
   })
 );
-var phantomValidationSchema = import_zod33.z.preprocess(
+var phantomValidationSchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
+  import_zod34.z.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
     phantomCandidateId: idString,
-    status: import_zod33.z.string(),
-    validationType: import_zod33.z.string(),
-    dryRun: import_zod33.z.boolean(),
-    payload: jsonObject.catch({}),
-    resultPayload: jsonObject.catch({}),
-    schemaVersion: import_zod33.z.string(),
+    status: import_zod34.z.string(),
+    validationType: import_zod34.z.string(),
+    dryRun: import_zod34.z.boolean(),
+    payload: jsonObject2.catch({}),
+    resultPayload: jsonObject2.catch({}),
+    schemaVersion: import_zod34.z.string(),
     testRunId: nullableString,
-    idempotencyKey: import_zod33.z.string(),
-    createdAt: import_zod33.z.string(),
-    updatedAt: import_zod33.z.string()
+    idempotencyKey: import_zod34.z.string(),
+    createdAt: import_zod34.z.string(),
+    updatedAt: import_zod34.z.string()
   })
 );
-var phantomApplyOperationSchema = import_zod33.z.preprocess(
+var phantomApplyOperationSchema = import_zod34.z.preprocess(
   normalizePhantomLedgerKeys,
-  import_zod33.z.object({
+  import_zod34.z.object({
     id: idString,
     organizationId: idString,
     phantomRunId: idString,
     phantomCandidateId: idString,
-    status: import_zod33.z.string(),
-    operationType: import_zod33.z.string(),
-    dryRun: import_zod33.z.boolean(),
+    status: import_zod34.z.string(),
+    operationType: import_zod34.z.string(),
+    dryRun: import_zod34.z.boolean(),
     targetType: nullableString,
     targetId: nullableString,
-    payload: jsonObject.catch({}),
-    resultPayload: jsonObject.catch({}),
-    schemaVersion: import_zod33.z.string(),
+    payload: jsonObject2.catch({}),
+    resultPayload: jsonObject2.catch({}),
+    schemaVersion: import_zod34.z.string(),
     testRunId: nullableString,
-    idempotencyKey: import_zod33.z.string(),
-    createdAt: import_zod33.z.string(),
-    updatedAt: import_zod33.z.string()
+    idempotencyKey: import_zod34.z.string(),
+    createdAt: import_zod34.z.string(),
+    updatedAt: import_zod34.z.string()
   })
 );
-var phantomRunsSchema = import_zod33.z.array(phantomRunListItemSchema);
-var phantomReportsSchema = import_zod33.z.array(phantomReportSchema);
-var phantomObservationsSchema = import_zod33.z.array(phantomObservationSchema);
-var phantomCandidatesSchema = import_zod33.z.array(phantomCandidateSchema);
-var phantomCandidateEvidencesSchema = import_zod33.z.array(phantomCandidateEvidenceSchema);
-var phantomValidationsSchema = import_zod33.z.array(phantomValidationSchema);
-var phantomApplyOperationsSchema = import_zod33.z.array(phantomApplyOperationSchema);
+var phantomRunsSchema = import_zod34.z.array(phantomRunListItemSchema);
+var phantomReportsSchema = import_zod34.z.array(phantomReportSchema);
+var phantomObservationsSchema = import_zod34.z.array(phantomObservationSchema);
+var phantomCandidatesSchema = import_zod34.z.array(phantomCandidateSchema);
+var phantomCandidateEvidencesSchema = import_zod34.z.array(phantomCandidateEvidenceSchema);
+var phantomValidationsSchema = import_zod34.z.array(phantomValidationSchema);
+var phantomApplyOperationsSchema = import_zod34.z.array(phantomApplyOperationSchema);
 function isRecord6(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -18104,12 +18309,12 @@ function registerDatasheetsCommands(program) {
       dataJson: "required"
     }
   );
-  for (const action of ["archive", "delete"]) {
+  for (const action2 of ["archive", "delete"]) {
     registerMutation(
-      column.command(action).requiredOption("--id <id>").requiredOption("--datasheet-id <datasheetId>"),
+      column.command(action2).requiredOption("--id <id>").requiredOption("--datasheet-id <datasheetId>"),
       {
-        command: `datasheets.column.${action}`,
-        field: `${action}_datasheet_column`,
+        command: `datasheets.column.${action2}`,
+        field: `${action2}_datasheet_column`,
         requiredIds: [
           { option: "datasheetId", variable: "datasheet_id", label: "--datasheet-id" },
           { option: "id", variable: "id", label: "--id" }
@@ -18143,12 +18348,12 @@ function registerDatasheetsCommands(program) {
       dataJson: "required"
     }
   );
-  for (const action of ["archive", "delete"]) {
+  for (const action2 of ["archive", "delete"]) {
     registerMutation(
-      row.command(action).requiredOption("--id <id>").requiredOption("--datasheet-id <datasheetId>"),
+      row.command(action2).requiredOption("--id <id>").requiredOption("--datasheet-id <datasheetId>"),
       {
-        command: `datasheets.row.${action}`,
-        field: `${action}_datasheet_row`,
+        command: `datasheets.row.${action2}`,
+        field: `${action2}_datasheet_row`,
         requiredIds: [
           { option: "datasheetId", variable: "datasheet_id", label: "--datasheet-id" },
           { option: "id", variable: "id", label: "--id" }
@@ -18189,12 +18394,12 @@ function registerDatasheetsCommands(program) {
       dataJson: "required"
     }
   );
-  for (const action of ["archive", "delete"]) {
+  for (const action2 of ["archive", "delete"]) {
     registerMutation(
-      view.command(action).requiredOption("--id <id>").requiredOption("--datasheet-id <datasheetId>"),
+      view.command(action2).requiredOption("--id <id>").requiredOption("--datasheet-id <datasheetId>"),
       {
-        command: `datasheets.view.${action}`,
-        field: `${action}_datasheet_view`,
+        command: `datasheets.view.${action2}`,
+        field: `${action2}_datasheet_view`,
         requiredIds: [
           { option: "datasheetId", variable: "datasheet_id", label: "--datasheet-id" },
           { option: "id", variable: "id", label: "--id" }
@@ -18228,12 +18433,12 @@ function registerDatasheetsCommands(program) {
       dataJson: "required"
     }
   );
-  for (const action of ["publish", "close", "archive", "delete"]) {
+  for (const action2 of ["publish", "close", "archive", "delete"]) {
     registerMutation(
-      form.command(action).requiredOption("--id <id>").requiredOption("--datasheet-id <datasheetId>"),
+      form.command(action2).requiredOption("--id <id>").requiredOption("--datasheet-id <datasheetId>"),
       {
-        command: `datasheets.form.${action}`,
-        field: `${action}_datasheet_form`,
+        command: `datasheets.form.${action2}`,
+        field: `${action2}_datasheet_form`,
         requiredIds: [
           { option: "datasheetId", variable: "datasheet_id", label: "--datasheet-id" },
           { option: "id", variable: "id", label: "--id" }
@@ -18768,7 +18973,7 @@ function registerSignatureCommands(program) {
 }
 
 // src/commands/atlasAuthoring.ts
-var import_zod34 = require("zod");
+var import_zod35 = require("zod");
 
 // src/commands/atlasAuthoringAgentSelection.ts
 var ATLAS_AUTHORING_AGENT_SELECTION = `{
@@ -18823,71 +19028,71 @@ var ATLAS_AUTHORING_AGENT_SELECTION = `{
 }`;
 
 // src/commands/atlasAuthoring.ts
-var idSchema15 = import_zod34.z.string().trim().min(1);
-var idempotencyKeySchema = import_zod34.z.string().min(1).refine((value) => value.trim() === value, "Idempotency key must not have leading or trailing whitespace.");
-var skillScopeSchema = import_zod34.z.enum(["ADMIN_GLOBAL", "MEMBER_PERSONAL"]);
-var isoDateSchema = import_zod34.z.iso.date();
-var nonEmptyStringSchema = import_zod34.z.string().trim().min(1);
+var idSchema15 = import_zod35.z.string().trim().min(1);
+var idempotencyKeySchema = import_zod35.z.string().min(1).refine((value) => value.trim() === value, "Idempotency key must not have leading or trailing whitespace.");
+var skillScopeSchema = import_zod35.z.enum(["ADMIN_GLOBAL", "MEMBER_PERSONAL"]);
+var isoDateSchema = import_zod35.z.iso.date();
+var nonEmptyStringSchema = import_zod35.z.string().trim().min(1);
 var AUTOMATION_RUN_HTTP_TIMEOUT_MS = 6e4;
-var agentToolAccessSchema = import_zod34.z.array(
-  import_zod34.z.object({
+var agentToolAccessSchema = import_zod35.z.array(
+  import_zod35.z.object({
     tool_key: nonEmptyStringSchema,
     scope_value: nonEmptyStringSchema
   }).strict()
 ).min(1);
 var agentToolAccessUpdateSchema = agentToolAccessSchema.min(0);
-var agentPluginConnectionsSchema = import_zod34.z.array(
-  import_zod34.z.object({
+var agentPluginConnectionsSchema = import_zod35.z.array(
+  import_zod35.z.object({
     external_tool_connection_id: nonEmptyStringSchema,
     tool_key: nonEmptyStringSchema,
     scope_value: nonEmptyStringSchema.optional(),
-    allowed_tools: import_zod34.z.array(nonEmptyStringSchema).optional(),
-    allowed_scopes: import_zod34.z.array(nonEmptyStringSchema).optional(),
-    requires_confirmation: import_zod34.z.boolean().optional(),
-    enabled: import_zod34.z.boolean().optional()
+    allowed_tools: import_zod35.z.array(nonEmptyStringSchema).optional(),
+    allowed_scopes: import_zod35.z.array(nonEmptyStringSchema).optional(),
+    requires_confirmation: import_zod35.z.boolean().optional(),
+    enabled: import_zod35.z.boolean().optional()
   }).strict()
 ).min(1);
-var agentPluginConnectionUpdateSchema = import_zod34.z.array(
-  import_zod34.z.union([
-    import_zod34.z.object({
+var agentPluginConnectionUpdateSchema = import_zod35.z.array(
+  import_zod35.z.union([
+    import_zod35.z.object({
       id: nonEmptyStringSchema,
-      _destroy: import_zod34.z.literal(true)
+      _destroy: import_zod35.z.literal(true)
     }).strict(),
-    import_zod34.z.object({
+    import_zod35.z.object({
       id: nonEmptyStringSchema.optional(),
       external_tool_connection_id: nonEmptyStringSchema.optional(),
       tool_key: nonEmptyStringSchema.optional(),
       scope_value: nonEmptyStringSchema.optional(),
-      allowed_tools: import_zod34.z.array(nonEmptyStringSchema).optional(),
-      allowed_scopes: import_zod34.z.array(nonEmptyStringSchema).optional(),
-      requires_confirmation: import_zod34.z.boolean().optional(),
-      enabled: import_zod34.z.boolean().optional()
+      allowed_tools: import_zod35.z.array(nonEmptyStringSchema).optional(),
+      allowed_scopes: import_zod35.z.array(nonEmptyStringSchema).optional(),
+      requires_confirmation: import_zod35.z.boolean().optional(),
+      enabled: import_zod35.z.boolean().optional()
     }).strict().superRefine((value, context) => {
       if (value.id || value.external_tool_connection_id && value.tool_key) return;
       context.addIssue({
-        code: import_zod34.z.ZodIssueCode.custom,
+        code: import_zod35.z.ZodIssueCode.custom,
         message: "Plugin updates require an id, or both external_tool_connection_id and tool_key for a new grant."
       });
     })
   ])
 );
-var agentTriggerSchema = import_zod34.z.object({
-  trigger_type: import_zod34.z.literal("cron"),
+var agentTriggerSchema = import_zod35.z.object({
+  trigger_type: import_zod35.z.literal("cron"),
   cron_expression: nonEmptyStringSchema,
   timezone: nonEmptyStringSchema,
-  starts_at: import_zod34.z.iso.datetime({ offset: true }).nullable().optional(),
-  ends_at: import_zod34.z.iso.datetime({ offset: true }).nullable().optional(),
-  max_runs: import_zod34.z.number().int().positive().nullable().optional(),
-  enabled: import_zod34.z.boolean().optional()
+  starts_at: import_zod35.z.iso.datetime({ offset: true }).nullable().optional(),
+  ends_at: import_zod35.z.iso.datetime({ offset: true }).nullable().optional(),
+  max_runs: import_zod35.z.number().int().positive().nullable().optional(),
+  enabled: import_zod35.z.boolean().optional()
 }).strict();
-var agentTriggerUpdateSchema = import_zod34.z.union([
+var agentTriggerUpdateSchema = import_zod35.z.union([
   agentTriggerSchema.extend({ id: nonEmptyStringSchema.optional() }).strict(),
-  import_zod34.z.object({
+  import_zod35.z.object({
     id: nonEmptyStringSchema,
-    _destroy: import_zod34.z.literal(true)
+    _destroy: import_zod35.z.literal(true)
   }).strict()
 ]);
-var automationConfigSchema = import_zod34.z.record(import_zod34.z.string(), import_zod34.z.unknown());
+var automationConfigSchema = import_zod35.z.record(import_zod35.z.string(), import_zod35.z.unknown());
 var AGENT_DETAILS_SELECTION = `{
   count
   currentPage
@@ -19040,8 +19245,8 @@ function requirePaginationInteger(value, key3, minimum) {
   });
 }
 function normalizeAutomationList(payload) {
-  const page4 = asRecord6(payload);
-  if (!page4 || !Array.isArray(page4.data)) {
+  const page5 = asRecord6(payload);
+  if (!page5 || !Array.isArray(page5.data)) {
     throw new CliError({
       message: "Automation list response did not include a paginated data collection.",
       kind: "malformed_response",
@@ -19049,7 +19254,7 @@ function normalizeAutomationList(payload) {
       exitCode: EXIT_CODES.networkOrUpstream
     });
   }
-  const rows2 = page4.data;
+  const rows2 = page5.data;
   const data = rows2.map((value) => {
     const row = asRecord6(value);
     const attributes = asRecord6(row?.attributes);
@@ -19091,9 +19296,9 @@ function normalizeAutomationList(payload) {
   });
   return {
     data,
-    count: requirePaginationInteger(page4.count, "count", 0),
-    currentPage: requirePaginationInteger(page4.currentPage, "currentPage", 1),
-    totalPages: requirePaginationInteger(page4.totalPages, "totalPages", 1)
+    count: requirePaginationInteger(page5.count, "count", 0),
+    currentPage: requirePaginationInteger(page5.currentPage, "currentPage", 1),
+    totalPages: requirePaginationInteger(page5.totalPages, "totalPages", 1)
   };
 }
 function parseBooleanOption(value, optionName) {
@@ -19341,7 +19546,7 @@ function registerAtlasAuthoringCommands(program) {
     "--plugin-connections <json>",
     "JSON array of persisted Agent connector grants"
   ).option("--trigger <json>", "Canonical cron Agent trigger JSON").action(async (opts, cmd) => {
-    const idempotencyKey2 = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const idempotencyKey3 = idempotencyKeySchema.parse(opts.idempotencyKey);
     const runWhenMentioned = parseBooleanOption(opts.runWhenMentioned, "--run-when-mentioned");
     const webAccessEnabled = parseBooleanOption(opts.webAccessEnabled, "--web-access-enabled");
     const webFetchEnabled = parseBooleanOption(opts.webFetchEnabled, "--web-fetch-enabled");
@@ -19409,7 +19614,7 @@ function registerAtlasAuthoringCommands(program) {
             ...trigger !== void 0 ? { trigger_attributes: trigger } : {}
           }
         },
-        idempotency_key: idempotencyKey2
+        idempotency_key: idempotencyKey3
       },
       transformMutationPayload: normalizePersistedCreatePayload
     });
@@ -19551,7 +19756,7 @@ function registerAtlasAuthoringCommands(program) {
     "--service <service>",
     "Supported service: gmail, calendar, outlook_calendar, outlook_mail, slack, or stripe"
   ).action(async (opts, cmd) => {
-    const service = import_zod34.z.enum([
+    const service = import_zod35.z.enum([
       "gmail",
       "calendar",
       "outlook_calendar",
@@ -19598,7 +19803,7 @@ function registerAtlasAuthoringCommands(program) {
     });
   });
   automations.command("create").description("Create a Backlog Automation through the API-owned createAutomation contract").requiredOption("--summary <summary>").requiredOption("--ai-task-config <json>", "Valid JSON for the API-owned ai_task_config field").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--description <description>").option("--notes <notes>").option("--member-id <memberId>").requiredOption("--agent-id <agentId>", "Required executor Agent id").option("--priority <priority>").option("--due-date <date>", "ISO-8601 date (YYYY-MM-DD)").action(async (opts, cmd) => {
-    const idempotencyKey2 = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const idempotencyKey3 = idempotencyKeySchema.parse(opts.idempotencyKey);
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
     await runGraphqlMutationCommand({
@@ -19623,7 +19828,7 @@ function registerAtlasAuthoringCommands(program) {
           ...opts.priority !== void 0 ? { priority: String(opts.priority) } : {},
           ...opts.dueDate !== void 0 ? { due_date: isoDateSchema.parse(opts.dueDate) } : {}
         },
-        idempotency_key: idempotencyKey2
+        idempotency_key: idempotencyKey3
       },
       transformMutationPayload: normalizePersistedCreatePayload
     });
@@ -19769,7 +19974,7 @@ function registerAtlasAuthoringCommands(program) {
     throw new Error("Skills command must be registered before Atlas authoring commands.");
   }
   skills.command("create").description("Create a Skill through the API-owned createSkill contract").requiredOption("--name <name>").requiredOption("--scope <scope>", "ADMIN_GLOBAL or MEMBER_PERSONAL").requiredOption("--idempotency-key <key>", "Required create idempotency key").option("--emoji <emoji>").option("--description <description>").action(async (opts, cmd) => {
-    const idempotencyKey2 = idempotencyKeySchema.parse(opts.idempotencyKey);
+    const idempotencyKey3 = idempotencyKeySchema.parse(opts.idempotencyKey);
     const context = await resolveCommandContext(cmd.optsWithGlobals());
     const organizationId = resolveOrganizationId(context.organizationId);
     await runGraphqlMutationCommand({
@@ -19790,7 +19995,7 @@ function registerAtlasAuthoringCommands(program) {
           ...opts.emoji !== void 0 ? { emoji: String(opts.emoji) } : {},
           ...opts.description !== void 0 ? { description: String(opts.description) } : {}
         },
-        idempotency_key: idempotencyKey2
+        idempotency_key: idempotencyKey3
       },
       transformMutationPayload: normalizePersistedCreatePayload
     });
@@ -20181,8 +20386,8 @@ function transformSourceActions(value) {
       exitCode: EXIT_CODES.networkOrUpstream
     });
   }
-  for (const action of value) {
-    if (!isJsonRecord(action) || typeof action.key !== "string") {
+  for (const action2 of value) {
+    if (!isJsonRecord(action2) || typeof action2.key !== "string") {
       throw new CliError({
         message: "Data Pipeline source action discovery returned a malformed action",
         kind: "malformed_response",
@@ -20190,16 +20395,16 @@ function transformSourceActions(value) {
         exitCode: EXIT_CODES.networkOrUpstream
       });
     }
-    if (action.safetyClass !== "read_only" || action.requiresApproval !== false) {
+    if (action2.safetyClass !== "read_only" || action2.requiresApproval !== false) {
       throw new CliError({
-        message: `Data Pipeline source action discovery returned a non-read-only action: ${action.key}`,
+        message: `Data Pipeline source action discovery returned a non-read-only action: ${action2.key}`,
         kind: "malformed_response",
         status: 502,
         exitCode: EXIT_CODES.networkOrUpstream,
         details: {
-          actionKey: action.key,
-          safetyClass: action.safetyClass,
-          requiresApproval: action.requiresApproval
+          actionKey: action2.key,
+          safetyClass: action2.safetyClass,
+          requiresApproval: action2.requiresApproval
         }
       });
     }
@@ -20308,10 +20513,66 @@ function registerDataPipelineCommands(program) {
   });
 }
 
+// src/commands/prospecting.ts
+var import_commander7 = require("commander");
+function registerProspectingCommands(program) {
+  const prospecting = program.command("prospecting").description("Authorized Prospecting reads and exact approved actions");
+  for (const operation of PROSPECTING_OPERATIONS) {
+    const command = prospecting.command(operation.id.split(".")[1]).description(operation.description).option("--json", "Emit the stable JSON envelope");
+    for (const definition of operation.options) {
+      const kebab2 = definition.name.replace(/[A-Z]/g, (letter) => `-${letter.toLowerCase()}`);
+      const option3 = new import_commander7.Option(`--${kebab2} <${definition.name}>`, `Prospecting ${definition.name}`);
+      if (definition.required) option3.makeOptionMandatory();
+      if (definition.choices) option3.choices([...definition.choices]);
+      command.addOption(option3);
+    }
+    command.action(async (raw, cmd) => {
+      const { json: _json, ...values } = raw;
+      const input = parseProspectingInput(operation, values);
+      const context = await resolveCommandContext(cmd.optsWithGlobals());
+      const variables = {
+        organization_id: resolveOrganizationId(context.organizationId)
+      };
+      const variableTypes = { organization_id: "ID!" };
+      if (operation.id === "prospecting.command") {
+        variables.action = input.action;
+        variables.input = input.dataJson;
+        variables.idempotency_key = input.idempotencyKey;
+        variableTypes.action = "String!";
+        variableTypes.input = "JSON!";
+        variableTypes.idempotency_key = "String!";
+        await runGraphqlMutationCommand({
+          command: operation.id,
+          field: operation.field,
+          runtimeOptions: context.runtimeOptions,
+          variables,
+          variableTypes,
+          selectionSet: "{ ok status errorCode errors data }"
+        });
+        return;
+      }
+      for (const definition of operation.options) {
+        if (input[definition.name] === void 0) continue;
+        const argument = prospectingArgument(definition.name);
+        variables[argument] = input[definition.name];
+        variableTypes[argument] = definition.type;
+      }
+      await runGraphqlQueryCommand({
+        command: operation.id,
+        field: operation.field,
+        runtimeOptions: context.runtimeOptions,
+        variables,
+        variableTypes,
+        selectionSet: ""
+      });
+    });
+  }
+}
+
 // src/commands/discovery.ts
 var import_node_fs4 = require("fs");
 var import_node_path5 = require("path");
-var import_zod35 = require("zod");
+var import_zod36 = require("zod");
 var PRIMARY_NAMESPACES = [
   "flow",
   "chats",
@@ -21032,9 +21293,9 @@ function commandSummary(command) {
       description: child.description(),
       usage: child.usage()
     })),
-    options: command.options.map((option2) => ({
-      flags: option2.flags,
-      description: option2.description
+    options: command.options.map((option3) => ({
+      flags: option3.flags,
+      description: option3.description
     }))
   };
 }
@@ -21328,7 +21589,7 @@ function attachNamespaceDiscovery(program) {
           } : {},
           ...command.name() === "flow" ? {
             humanHandoffOnly: FLOW_HANDOFFS,
-            payloadSchemas: Object.fromEntries(FLOW_OPERATIONS.filter((operation) => operation.payload).map((operation) => [operation.id, import_zod35.z.toJSONSchema(operation.payload)]))
+            payloadSchemas: Object.fromEntries(FLOW_OPERATIONS.filter((operation) => operation.payload).map((operation) => [operation.id, import_zod36.z.toJSONSchema(operation.payload)]))
           } : {}
         };
         if (opts.readable && !opts.json) {
@@ -21389,16 +21650,16 @@ function attachDiscoveryHelp(program) {
     ["doctor", "\nExamples:\n  wave doctor\n  wave doctor --readable\n"]
   ]);
   for (const command of program.commands) {
-    const text5 = helpByName.get(command.name());
-    if (text5) {
-      command.addHelpText("after", text5);
+    const text6 = helpByName.get(command.name());
+    if (text6) {
+      command.addHelpText("after", text6);
     }
   }
 }
 
 // src/cli.ts
 function buildCli(options) {
-  const program = new import_commander7.Command();
+  const program = new import_commander8.Command();
   program.name("wave").description("Wave agent CLI").version(CLI_VERSION, "-V, --version", "output the version number").showHelpAfterError(false).allowExcessArguments(false).option("--token <token>", "API token (prefer WAVE_API_TOKEN env var)").option("--token-stdin", "Read API token from stdin").option(
     "--auth-json-stdin",
     "Read auth/runtime context JSON from stdin (token, baseUrl, tracing fields, ...)"
@@ -21412,9 +21673,9 @@ function buildCli(options) {
     "--config <configPath>",
     "Optional JSON config file (default: ~/.wave/config.json when present)"
   ).addOption(
-    new import_commander7.Option("--auth-home <path>", "Credential storage directory (default: ~/.wave)")
+    new import_commander8.Option("--auth-home <path>", "Credential storage directory (default: ~/.wave)")
   ).addOption(
-    new import_commander7.Option("--auth-storage <mode>", "Credential storage mode").choices(["auto", "keychain", "file", "disabled"]).default("auto")
+    new import_commander8.Option("--auth-storage <mode>", "Credential storage mode").choices(["auto", "keychain", "file", "disabled"]).default("auto")
   ).option("--timeout-ms <timeoutMs>", "HTTP timeout in milliseconds").option("--agent-name <agentName>", "Agent name for tracing").option("--agent-run-id <agentRunId>", "Agent run identifier for tracing").option("--request-id <requestId>", "Request identifier").option(
     "--atlas-member-id <memberId>",
     "Atlas ledger member ID (prefer WAVE_ATLAS_MEMBER_ID env var)"
@@ -21490,6 +21751,7 @@ function buildCli(options) {
   registerSignatureCommands(program);
   registerDesktopContextCommands(program);
   registerDataPipelineCommands(program);
+  registerProspectingCommands(program);
   registerAuthCommands(program);
   registerDiscoveryCommands(program);
   attachNamespaceDiscovery(program);
@@ -21589,14 +21851,14 @@ async function readMachineInput(location) {
   let bytes = 0;
   process.stdin.setEncoding("utf8");
   for await (const chunk of process.stdin) {
-    const text5 = String(chunk);
-    bytes += Buffer.byteLength(text5, "utf8");
+    const text6 = String(chunk);
+    bytes += Buffer.byteLength(text6, "utf8");
     if (bytes > MAX_MACHINE_INPUT_BYTES) {
       throw new Error(
         `Machine input exceeds the maximum size of ${MAX_MACHINE_INPUT_BYTES} bytes.`
       );
     }
-    raw += text5;
+    raw += text6;
   }
   if (!raw.trim()) throw new Error("Machine input JSON is required.");
   const parsed = JSON.parse(raw);
@@ -21625,11 +21887,11 @@ function parseTrustedJsonFromFd(fd, predicate) {
     const buffer = Buffer.allocUnsafe(8 * 1024);
     let bytes = 0;
     while (true) {
-      const read4 = (0, import_node_fs5.readSync)(fd, buffer, 0, buffer.length, null);
-      if (read4 === 0) break;
-      bytes += read4;
+      const read5 = (0, import_node_fs5.readSync)(fd, buffer, 0, buffer.length, null);
+      if (read5 === 0) break;
+      bytes += read5;
       if (bytes > MAX_MACHINE_SECRET_BYTES) return null;
-      chunks.push(Buffer.from(buffer.subarray(0, read4)));
+      chunks.push(Buffer.from(buffer.subarray(0, read5)));
     }
     const parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
     return predicate(parsed) ? parsed : null;
@@ -21696,6 +21958,7 @@ function validateInput(operation, input) {
     ...validateBroadcastInput(operation.id, input),
     ...validatePhoneInput(operation.id, input),
     ...validateFlowInput(operation.id, input),
+    ...validateProspectingInput(operation.id, input),
     ...validateChatInput(operation.id, input),
     ...orderedRangeErrors(input)
   ];
@@ -21728,9 +21991,9 @@ function commandArgs(command, input) {
     if (Array.isArray(value)) args.push(...value.map(optionValue));
     else args.push(optionValue(value));
   }
-  for (const option2 of command.options) {
-    const key3 = option2.attributeName();
-    const long = option2.long;
+  for (const option3 of command.options) {
+    const key3 = option3.attributeName();
+    const long = option3.long;
     if (!long) continue;
     if (isMachinePresentationOption(key3)) {
       if (key3 === "json") args.push(long);
@@ -22015,7 +22278,7 @@ main().catch((error) => {
     });
     return;
   }
-  if (error instanceof import_commander8.CommanderError) {
+  if (error instanceof import_commander9.CommanderError) {
     if (error.code === "commander.helpDisplayed" || error.code === "commander.help" || error.code === "commander.version") {
       process.exitCode = EXIT_CODES.success;
       return;
@@ -22029,13 +22292,13 @@ main().catch((error) => {
     });
     return;
   }
-  if (error instanceof import_zod36.ZodError || error instanceof import_commander8.InvalidArgumentError) {
+  if (error instanceof import_zod37.ZodError || error instanceof import_commander9.InvalidArgumentError) {
     printCliFailure({
       status: 400,
       code: "invalid_args",
       message: "Invalid command arguments.",
       details: {
-        issues: error instanceof import_zod36.ZodError ? error.issues : [{ message: error.message, code: "invalid_argument" }]
+        issues: error instanceof import_zod37.ZodError ? error.issues : [{ message: error.message, code: "invalid_argument" }]
       },
       exitCode: EXIT_CODES.invalidArgs
     });