@wayai/cli 0.3.106 → 0.3.108

package/dist/index.js

@@ -5958,7 +5958,7 @@ function findStepBoundaries(transcript) {
   }
   return out;
 }
-var UUID_RE, HEX_RE, WORKOS_ID_RE, OPAQUE_SECRET_RE, BASE64_SECRET_RE, BASE64_MARKER_RE, TOKEN_RE, SENSITIVE_FIELDS, SENSITIVE_KEY_ALTERNATION, SENSITIVE_KEY_PATTERN, JSON_CREDENTIAL_RE, QUERY_CREDENTIAL_RE, REDACTED, PROVIDER_TOKEN_RE, APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_CONTENT_BRAND, LlmProviderContentError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, appMessageBody, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, sendMessageBody, listConversationsQuery, getConversationDetailParams, getConversationDetailQuery, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminHubIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminSetOrgHarnessBody, adminSetHubHarnessBody, adminScopedTargetBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysQuery, dataExplorerKvKeyParam, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteQuery, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, sentryRefStatusSchema, createReportBody, editReportBody, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, discordTier, discordBillingCycle, discordMetadata, discordOAuthStartResponse, discordOAuthFinalizeBody, discordOAuthFinalizeResponse, discordDisconnectResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, templateLocaleSchema, TEMPLATE_SLUG_REGEX, templateSlugSchema, templateStatusSchema, templateFileMapSchema, templateTextSchema, templateUsesEntrySchema, templateUsesSchema, templateYamlLocaleEntry, templateYamlWayaiBlock, templateTagsSchema, templateYamlSchema, templateHeroSchema, templatePushLocaleSchema, templatePushBody, templateListQuery, templateSlugParam, templateDetailQuery, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, WAYAI_WORKSPACE_LAYOUT;
+var UUID_RE, HEX_RE, WORKOS_ID_RE, OPAQUE_SECRET_RE, BASE64_SECRET_RE, BASE64_MARKER_RE, TOKEN_RE, SENSITIVE_FIELDS, SENSITIVE_KEY_ALTERNATION, SENSITIVE_KEY_PATTERN, JSON_CREDENTIAL_RE, QUERY_CREDENTIAL_RE, REDACTED, PROVIDER_TOKEN_RE, APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_CONTENT_BRAND, LlmProviderContentError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, appMessageBody, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, sendMessageBody, listConversationsQuery, getConversationDetailParams, getConversationDetailQuery, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminHubIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminSetOrgHarnessBody, adminSetHubHarnessBody, adminScopedTargetBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysQuery, dataExplorerKvKeyParam, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteQuery, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, discordTier, discordBillingCycle, discordMetadata, discordOAuthStartResponse, discordOAuthFinalizeBody, discordOAuthFinalizeResponse, discordDisconnectResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, templateLocaleSchema, TEMPLATE_SLUG_REGEX, templateSlugSchema, templateStatusSchema, templateFileMapSchema, templateTextSchema, templateUsesEntrySchema, templateUsesSchema, templateYamlLocaleEntry, templateYamlWayaiBlock, templateTagsSchema, templateYamlSchema, templateHeroSchema, templatePushLocaleSchema, templatePushBody, templateListQuery, templateSlugParam, templateDetailQuery, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, WAYAI_WORKSPACE_LAYOUT;
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
     "use strict";
@@ -8424,6 +8424,20 @@ var init_dist = __esm({
     ]);
     reportLocaleSchema = external_exports.enum(["en", "pt", "es"]);
     reportMessageAuthorRoleSchema = external_exports.enum(["reporter", "triage", "fixer", "system"]);
+    reportMessageSchema = external_exports.object({
+      message_id: external_exports.string(),
+      author_role: reportMessageAuthorRoleSchema,
+      /** The status transition this note accompanied (e.g. 'shipped'); null for a free/system note. */
+      transition: external_exports.string().nullable(),
+      body: external_exports.string(),
+      created_at: timestampSchema,
+      /**
+       * Visibility: `false` = reporter-facing (the default for every narrative entry); `true` =
+       * triage-internal (e.g. a `hold` rationale) — surfaced to platform admins only and NEVER
+       * returned on the reporter read path. The reporter's `GET /api/reports/:id` filters these out.
+       */
+      internal: external_exports.boolean()
+    });
     sentryRefStatusSchema = external_exports.enum(["valid", "not_found", "mismatch", "unverified"]);
     createReportBody = external_exports.object({
       title: external_exports.string().min(5).max(256),
@@ -8455,6 +8469,30 @@ var init_dist = __esm({
     }).strict().refine((b) => Object.keys(b).length > 0, {
       message: "at least one field must be provided"
     });
+    reporterReportSummarySchema = external_exports.object({
+      report_id: external_exports.string(),
+      title: external_exports.string(),
+      description: external_exports.string(),
+      classification: reportClassificationSchema,
+      status: reportStatusSchema,
+      created_at: timestampSchema,
+      triaged_at: timestampSchema.nullable(),
+      resolved_at: timestampSchema.nullable(),
+      /** How many times the reporter has contested (gates the hard cap). */
+      contest_count: external_exports.number(),
+      /** True once triage issued a non-contestable (final) dismissal. */
+      dismissal_final: external_exports.boolean()
+    });
+    reporterListResponseSchema = external_exports.object({
+      data: external_exports.array(reporterReportSummarySchema)
+    });
+    getReportResponseSchema = external_exports.object({
+      report: reporterReportSummarySchema,
+      messages: external_exports.array(reportMessageSchema)
+    });
+    reporterTransitionResponseSchema = external_exports.object({
+      report: reporterReportSummarySchema
+    });
     contestReportBody = external_exports.object({
       reason: external_exports.string().min(1).max(5e3)
     });
@@ -11147,6 +11185,20 @@ var init_init = __esm({
 // src/lib/fs-safety.ts
 import * as fs9 from "fs";
 import * as path11 from "path";
+function fileHasBytes(abs, data) {
+  let st;
+  try {
+    st = fs9.lstatSync(abs);
+  } catch {
+    return false;
+  }
+  if (!st.isFile() || st.isSymbolicLink()) return false;
+  try {
+    return fs9.readFileSync(abs).equals(data);
+  } catch {
+    return false;
+  }
+}
 function realpathContained(root, abs) {
   let realRoot;
   let realAbs;
@@ -11852,7 +11904,7 @@ function isSanitizableSliceFile(path31) {
 function distinctUsesBackends(uses) {
   return [...new Set((uses ?? []).map((u) => u.backend))];
 }
-var uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, clientOptionalString2, clientOptionalBoolean2, clientOptionalNumber2, messageAttachment2, MAX_MESSAGE_BODY_BYTES2, MAX_ATTACHMENTS_PER_MESSAGE2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, AUTH_TYPE3, ORG_CREDENTIAL_AUTH_TYPES3, AUTH_TYPE_DISPLAY3, LEGACY_AUTH_TYPE_MAP3, VALID_AUTH_TYPES3, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, PREVIEW_LABEL_MAX_LENGTH2, MAX_ENDED_INDEX_RETENTION_DAYS2, previewLabelField2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, updateChannelTestIdentitiesBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, PRODUCTION_DIRECT_FIELDS2, setProductionCredentialBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlSchemaQuery2, EVAL_PACING_PRESET_NAMES2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, EVAL_INPUT_ROLES2, EVAL_INPUT_ROLE_LIST2, ROLE_ECHO_MAX2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, EVAL_ATTACHMENT_HASH_REGEX2, evalAttachmentRef2, turnMayCarryAttachments2, ATTACHMENTS_USER_ONLY_MESSAGE2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, fixtureField2, createJourneyBody2, updateJourneyBody2, getConversationsQuery2, getMessagesQuery2, appMessageSenderType2, appMessageReceiverType2, appMessageBody2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, sendMessageBody2, listConversationsQuery2, getConversationDetailParams2, getConversationDetailQuery2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, MAX_RESOURCE_FILE_SIZE2, MAX_10MB_BASE64_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_CARRIERS2, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES2, MAX_RESOURCE_ENCODED_BYTES2, MAX_HUB_AS_CODE_RESOURCES2, MAX_HUB_AS_CODE_RESOURCE_FILES2, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES2, MAX_CI_CONFIG_BODY_BYTES2, hubAsCodeResourceFileSchema2, hubAsCodeResourceSchema2, uuidPattern2, ciUuidSchema2, boundedHubAsCodeResourcesSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminHubIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, adminSetOrgHarnessBody2, adminSetHubHarnessBody2, adminScopedTargetBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysQuery2, dataExplorerKvKeyParam2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteQuery2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, sandboxEgressPolicy2, SANDBOX_EXEC_MAX_CMD_LENGTH2, SANDBOX_EXEC_MAX_ALLOWLIST2, SANDBOX_EXEC_MAX_TIMEOUT_MS2, adminSandboxExecBody2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, discordTier2, discordBillingCycle2, discordMetadata2, discordOAuthStartResponse2, discordOAuthFinalizeBody2, discordOAuthFinalizeResponse2, discordDisconnectResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, templateLocaleSchema2, TEMPLATE_SLUG_REGEX2, templateSlugSchema2, templateStatusSchema2, templateFileMapSchema2, TEMPLATE_INSTANCE_ID_KEYS, TEMPLATE_OPAQUE_BLOB_KEYS, TEMPLATE_AUTHOR_DATA_KEYS, templateTextSchema2, templateUsesEntrySchema2, templateUsesSchema2, templateYamlLocaleEntry2, templateYamlWayaiBlock2, templateTagsSchema2, templateYamlSchema2, templateHeroSchema2, templatePushLocaleSchema2, templatePushBody2, templateListQuery2, templateSlugParam2, templateDetailQuery2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2;
+var uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, clientOptionalString2, clientOptionalBoolean2, clientOptionalNumber2, messageAttachment2, MAX_MESSAGE_BODY_BYTES2, MAX_ATTACHMENTS_PER_MESSAGE2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, AUTH_TYPE3, ORG_CREDENTIAL_AUTH_TYPES3, AUTH_TYPE_DISPLAY3, LEGACY_AUTH_TYPE_MAP3, VALID_AUTH_TYPES3, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, PREVIEW_LABEL_MAX_LENGTH2, MAX_ENDED_INDEX_RETENTION_DAYS2, previewLabelField2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, updateChannelTestIdentitiesBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, PRODUCTION_DIRECT_FIELDS2, setProductionCredentialBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlSchemaQuery2, EVAL_PACING_PRESET_NAMES2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, EVAL_INPUT_ROLES2, EVAL_INPUT_ROLE_LIST2, ROLE_ECHO_MAX2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, EVAL_ATTACHMENT_HASH_REGEX2, evalAttachmentRef2, turnMayCarryAttachments2, ATTACHMENTS_USER_ONLY_MESSAGE2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, fixtureField2, createJourneyBody2, updateJourneyBody2, getConversationsQuery2, getMessagesQuery2, appMessageSenderType2, appMessageReceiverType2, appMessageBody2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, sendMessageBody2, listConversationsQuery2, getConversationDetailParams2, getConversationDetailQuery2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, MAX_RESOURCE_FILE_SIZE2, MAX_10MB_BASE64_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_CARRIERS2, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES2, MAX_RESOURCE_ENCODED_BYTES2, MAX_HUB_AS_CODE_RESOURCES2, MAX_HUB_AS_CODE_RESOURCE_FILES2, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES2, MAX_CI_CONFIG_BODY_BYTES2, hubAsCodeResourceFileSchema2, hubAsCodeResourceSchema2, uuidPattern2, ciUuidSchema2, boundedHubAsCodeResourcesSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminHubIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, adminSetOrgHarnessBody2, adminSetHubHarnessBody2, adminScopedTargetBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysQuery2, dataExplorerKvKeyParam2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteQuery2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, sandboxEgressPolicy2, SANDBOX_EXEC_MAX_CMD_LENGTH2, SANDBOX_EXEC_MAX_ALLOWLIST2, SANDBOX_EXEC_MAX_TIMEOUT_MS2, adminSandboxExecBody2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, reportMessageSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, reporterReportSummarySchema2, reporterListResponseSchema2, getReportResponseSchema2, reporterTransitionResponseSchema2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, discordTier2, discordBillingCycle2, discordMetadata2, discordOAuthStartResponse2, discordOAuthFinalizeBody2, discordOAuthFinalizeResponse2, discordDisconnectResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, templateLocaleSchema2, TEMPLATE_SLUG_REGEX2, templateSlugSchema2, templateStatusSchema2, templateFileMapSchema2, TEMPLATE_INSTANCE_ID_KEYS, TEMPLATE_OPAQUE_BLOB_KEYS, TEMPLATE_AUTHOR_DATA_KEYS, templateTextSchema2, templateUsesEntrySchema2, templateUsesSchema2, templateYamlLocaleEntry2, templateYamlWayaiBlock2, templateTagsSchema2, templateYamlSchema2, templateHeroSchema2, templatePushLocaleSchema2, templatePushBody2, templateListQuery2, templateSlugParam2, templateDetailQuery2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2;
 var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
     "use strict";
@@ -14161,6 +14213,20 @@ var init_contracts = __esm({
     ]);
     reportLocaleSchema2 = external_exports.enum(["en", "pt", "es"]);
     reportMessageAuthorRoleSchema2 = external_exports.enum(["reporter", "triage", "fixer", "system"]);
+    reportMessageSchema2 = external_exports.object({
+      message_id: external_exports.string(),
+      author_role: reportMessageAuthorRoleSchema2,
+      /** The status transition this note accompanied (e.g. 'shipped'); null for a free/system note. */
+      transition: external_exports.string().nullable(),
+      body: external_exports.string(),
+      created_at: timestampSchema2,
+      /**
+       * Visibility: `false` = reporter-facing (the default for every narrative entry); `true` =
+       * triage-internal (e.g. a `hold` rationale) — surfaced to platform admins only and NEVER
+       * returned on the reporter read path. The reporter's `GET /api/reports/:id` filters these out.
+       */
+      internal: external_exports.boolean()
+    });
     sentryRefStatusSchema2 = external_exports.enum(["valid", "not_found", "mismatch", "unverified"]);
     createReportBody2 = external_exports.object({
       title: external_exports.string().min(5).max(256),
@@ -14192,6 +14258,30 @@ var init_contracts = __esm({
     }).strict().refine((b) => Object.keys(b).length > 0, {
       message: "at least one field must be provided"
     });
+    reporterReportSummarySchema2 = external_exports.object({
+      report_id: external_exports.string(),
+      title: external_exports.string(),
+      description: external_exports.string(),
+      classification: reportClassificationSchema2,
+      status: reportStatusSchema2,
+      created_at: timestampSchema2,
+      triaged_at: timestampSchema2.nullable(),
+      resolved_at: timestampSchema2.nullable(),
+      /** How many times the reporter has contested (gates the hard cap). */
+      contest_count: external_exports.number(),
+      /** True once triage issued a non-contestable (final) dismissal. */
+      dismissal_final: external_exports.boolean()
+    });
+    reporterListResponseSchema2 = external_exports.object({
+      data: external_exports.array(reporterReportSummarySchema2)
+    });
+    getReportResponseSchema2 = external_exports.object({
+      report: reporterReportSummarySchema2,
+      messages: external_exports.array(reportMessageSchema2)
+    });
+    reporterTransitionResponseSchema2 = external_exports.object({
+      report: reporterReportSummarySchema2
+    });
     contestReportBody2 = external_exports.object({
       reason: external_exports.string().min(1).max(5e3)
     });
@@ -14762,13 +14852,13 @@ function assertResourcePayloadFitsWithoutPruning(payload, cause) {
     }
   }
 }
-function writeResourceFileTree(resDir, files, root) {
+function writeResourceFileTree(resDir, files, root, log) {
   if (!ensureRealSubdirNoSymlink(root, resDir, files.length > 0)) {
     console.warn(`  Warning: skipping resource dir (not reachable inside the workspace without a symlink)`);
     return;
   }
   if (files.length === 0) {
-    if (fs10.existsSync(resDir)) cleanOrphanFiles(resDir, "", /* @__PURE__ */ new Set());
+    if (fs10.existsSync(resDir)) cleanOrphanFiles(resDir, "", /* @__PURE__ */ new Set(), root, log);
     return;
   }
   const writtenPaths = /* @__PURE__ */ new Set();
@@ -14779,34 +14869,33 @@ function writeResourceFileTree(resDir, files, root) {
       continue;
     }
     writtenPaths.add(file.path);
-    if (file.content !== void 0) {
-      if (!writeFileNoFollow(resDir, filePath, Buffer.from(file.content, "utf-8"))) {
-        console.warn(`  Warning: skipping ${file.path} (destination escapes the resource folder via a symlink)`);
-        writtenPaths.delete(file.path);
-      }
-    } else if (file.content_base64) {
-      if (!writeFileNoFollow(resDir, filePath, Buffer.from(file.content_base64, "base64"))) {
-        console.warn(`  Warning: skipping ${file.path} (destination escapes the resource folder via a symlink)`);
-        writtenPaths.delete(file.path);
-      }
+    const buf = file.content !== void 0 ? Buffer.from(file.content, "utf-8") : file.content_base64 ? Buffer.from(file.content_base64, "base64") : void 0;
+    if (buf === void 0) continue;
+    if (fileHasBytes(filePath, buf)) continue;
+    if (writeFileNoFollow(resDir, filePath, buf)) {
+      log?.changed.push(path12.relative(root, filePath));
+    } else {
+      console.warn(`  Warning: skipping ${file.path} (destination escapes the resource folder via a symlink)`);
+      writtenPaths.delete(file.path);
     }
   }
-  if (fs10.existsSync(resDir)) cleanOrphanFiles(resDir, "", writtenPaths);
+  if (fs10.existsSync(resDir)) cleanOrphanFiles(resDir, "", writtenPaths, root, log);
 }
-function cleanOrphanFiles(dir, prefix, writtenPaths) {
+function cleanOrphanFiles(dir, prefix, writtenPaths, root, log) {
   const entries = fs10.readdirSync(dir, { withFileTypes: true });
   for (const entry of entries) {
     const relPath = prefix ? `${prefix}/${entry.name}` : entry.name;
     const fullPath = path12.join(dir, entry.name);
     if (entry.isDirectory()) {
-      cleanOrphanFiles(fullPath, relPath, writtenPaths);
+      cleanOrphanFiles(fullPath, relPath, writtenPaths, root, log);
       if (fs10.readdirSync(fullPath).length === 0) fs10.rmdirSync(fullPath);
     } else if (!writtenPaths.has(relPath)) {
       fs10.unlinkSync(fullPath);
+      if (log && root) log.removed.push(path12.relative(root, fullPath));
     }
   }
 }
-async function downloadBinaryFiles(resDir, files, root) {
+async function downloadBinaryFiles(resDir, files, root, log) {
   if (!ensureRealSubdirNoSymlink(root, resDir, true)) {
     console.warn(`  Warning: skipping resource downloads (dir not reachable inside the workspace without a symlink)`);
     return 0;
@@ -14820,14 +14909,26 @@ async function downloadBinaryFiles(resDir, files, root) {
         console.warn(`  Warning: skipping ${file.path} (path traversal detected)`);
         continue;
       }
+      if (file.hash) {
+        try {
+          const st = fs10.lstatSync(filePath);
+          if (st.isFile() && !st.isSymbolicLink() && computeHash(fs10.readFileSync(filePath)) === file.hash) continue;
+        } catch {
+        }
+      }
       const response = await fetch(file.download_url);
       if (!response.ok) {
         console.warn(`  Warning: failed to download ${file.path} (${response.status})`);
         continue;
       }
       const buffer = Buffer.from(await response.arrayBuffer());
-      if (writeFileNoFollow(resDir, filePath, buffer)) count++;
-      else console.warn(`  Warning: skipping ${file.path} (destination escapes the resource folder via a symlink)`);
+      if (fileHasBytes(filePath, buffer)) continue;
+      if (writeFileNoFollow(resDir, filePath, buffer)) {
+        count++;
+        log?.changed.push(path12.relative(root, filePath));
+      } else {
+        console.warn(`  Warning: skipping ${file.path} (destination escapes the resource folder via a symlink)`);
+      }
     } catch (err) {
       console.warn(`  Warning: failed to download ${file.path} (${err instanceof Error ? err.message : String(err)})`);
     }
@@ -15006,12 +15107,12 @@ function rewriteEvalAttachmentsToLocalPaths(payload) {
 }
 async function downloadEvalAttachments(hubFolder, downloads) {
   const attachDir = path13.resolve(hubFolder, ATTACHMENTS_DIR);
-  let written = 0;
+  const result = { written: 0, changed: [], removed: [] };
   if (!ensureRealSubdirNoSymlink(hubFolder, attachDir, downloads.length > 0)) {
     console.warn(`  Warning: ${ATTACHMENTS_DIR}/ is not reachable inside the hub folder without a symlink; skipping attachment sync.`);
-    return written;
+    return result;
   }
-  if (!fs11.existsSync(attachDir)) return written;
+  if (!fs11.existsSync(attachDir)) return result;
   for (const dl of downloads) {
     const abs = path13.resolve(hubFolder, dl.relPath);
     if (abs !== attachDir && !abs.startsWith(attachDir + path13.sep)) continue;
@@ -15029,7 +15130,10 @@ async function downloadEvalAttachments(hubFolder, downloads) {
         console.warn(`  Warning: failed to download ${dl.relPath} (HTTP ${res.status})`);
         continue;
       }
-      if (writeFileNoFollow(hubFolder, abs, Buffer.from(await res.arrayBuffer()))) written++;
+      if (writeFileNoFollow(hubFolder, abs, Buffer.from(await res.arrayBuffer()))) {
+        result.written++;
+        result.changed.push(dl.relPath);
+      }
     } catch (err) {
       console.warn(`  Warning: failed to download ${dl.relPath}: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -15038,9 +15142,12 @@ async function downloadEvalAttachments(hubFolder, downloads) {
   for (const name of fs11.readdirSync(attachDir)) {
     const abs = path13.join(attachDir, name);
     const st = fs11.lstatSync(abs);
-    if ((st.isFile() || st.isSymbolicLink()) && !keep.has(abs)) fs11.rmSync(abs);
+    if ((st.isFile() || st.isSymbolicLink()) && !keep.has(abs)) {
+      fs11.rmSync(abs);
+      result.removed.push(path13.relative(hubFolder, abs));
+    }
   }
-  return written;
+  return result;
 }
 var ATTACHMENTS_DIR;
 var init_eval_attachments = __esm({
@@ -15460,6 +15567,15 @@ var init_diff_display = __esm({
 import * as fs13 from "fs";
 import * as path15 from "path";
 import * as yaml5 from "js-yaml";
+function writeFileIfChanged(hubFolder, absPath, content, log) {
+  const buf = Buffer.from(content, "utf-8");
+  if (fileHasBytes(absPath, buf)) return;
+  if (writeFileNoFollow(hubFolder, absPath, buf)) {
+    log.changed.push(path15.relative(hubFolder, absPath));
+  } else {
+    console.warn(`  Warning: skipping ${path15.relative(hubFolder, absPath)} (destination escapes the hub folder via a symlink)`);
+  }
+}
 function buildEvalYamlObject(evalEntry, slug) {
   const out = {};
   if (evalEntry.id) out.id = evalEntry.id;
@@ -15494,6 +15610,7 @@ function buildEvalYamlObject(evalEntry, slug) {
   return out;
 }
 function writeHubFolder(hubFolder, payload, options = {}) {
+  const log = { changed: [], removed: [] };
   const agentsDir = path15.join(hubFolder, "agents");
   if (!fs13.existsSync(hubFolder)) {
     fs13.mkdirSync(hubFolder, { recursive: true });
@@ -15504,38 +15621,48 @@ function writeHubFolder(hubFolder, payload, options = {}) {
   const yamlPayload = buildYamlPayload(payload);
   const agentFiles = extractAgentFiles(payload);
   const yamlContent = yaml5.dump(yamlPayload, YAML_DUMP_OPTIONS);
-  fs13.writeFileSync(path15.join(hubFolder, "hub.yaml"), yamlContent, "utf-8");
+  writeFileIfChanged(hubFolder, path15.join(hubFolder, "hub.yaml"), yamlContent, log);
   if (options.seedAgentContext ?? true) {
-    writeIfAbsent(path15.join(hubFolder, "AGENTS.md"), perHubAgentsMd(path15.basename(hubFolder)));
-    writeIfAbsent(path15.join(hubFolder, "CLAUDE.md"), CLAUDE_MD_SHIM);
+    for (const seeded of [
+      writeIfAbsent(path15.join(hubFolder, "AGENTS.md"), perHubAgentsMd(path15.basename(hubFolder))),
+      writeIfAbsent(path15.join(hubFolder, "CLAUDE.md"), CLAUDE_MD_SHIM)
+    ]) {
+      if (seeded) log.changed.push(seeded);
+    }
   }
   const oldYamlPath = path15.join(hubFolder, "wayai.yaml");
   if (fs13.existsSync(oldYamlPath)) {
     fs13.unlinkSync(oldYamlPath);
+    log.removed.push(path15.relative(hubFolder, oldYamlPath));
   }
-  const yamlSlugs = writeAgentYamlFiles(agentsDir, payload.agents || []);
+  const yamlSlugs = writeAgentYamlFiles(hubFolder, agentsDir, payload.agents || [], log);
   const mdSlugs = /* @__PURE__ */ new Set();
   for (const { slug, content } of agentFiles) {
     mdSlugs.add(slug);
-    fs13.writeFileSync(path15.join(agentsDir, `${slug}.md`), content, "utf-8");
+    writeFileIfChanged(hubFolder, path15.join(agentsDir, `${slug}.md`), content, log);
   }
   const existingFiles = fs13.readdirSync(agentsDir);
   for (const file of existingFiles) {
     if (file.endsWith(".yaml")) {
       const slug = file.slice(0, -5);
       if (!yamlSlugs.has(slug)) {
-        fs13.unlinkSync(path15.join(agentsDir, file));
+        const orphan = path15.join(agentsDir, file);
+        fs13.unlinkSync(orphan);
+        log.removed.push(path15.relative(hubFolder, orphan));
       }
     } else if (file.endsWith(".md")) {
       const slug = file.slice(0, -3);
       if (!mdSlugs.has(slug)) {
-        fs13.unlinkSync(path15.join(agentsDir, file));
+        const orphan = path15.join(agentsDir, file);
+        fs13.unlinkSync(orphan);
+        log.removed.push(path15.relative(hubFolder, orphan));
       }
     }
   }
-  writeResourceFiles(hubFolder, payload.resources || []);
-  writeEvalYamlFiles(hubFolder, payload.evals || []);
-  writeJourneyYamlFiles(hubFolder, payload.journeys || []);
+  writeResourceFiles(hubFolder, payload.resources || [], log);
+  writeEvalYamlFiles(hubFolder, payload.evals || [], log);
+  writeJourneyYamlFiles(hubFolder, payload.journeys || [], log);
+  return log;
 }
 function setPreviewLabelInHubYaml(hubFolder, label) {
   const yamlPath = resolveHubYamlPath(hubFolder);
@@ -15581,7 +15708,7 @@ function buildYamlPayload(payload) {
   }
   return result;
 }
-function writeAgentYamlFiles(agentsDir, agents) {
+function writeAgentYamlFiles(hubFolder, agentsDir, agents, log) {
   const slugs = /* @__PURE__ */ new Set();
   for (const agent of agents) {
     const slug = slugify(agent.name);
@@ -15589,7 +15716,7 @@ function writeAgentYamlFiles(agentsDir, agents) {
     const entry = { ...agent };
     delete entry.instructions;
     const yamlContent = yaml5.dump(entry, YAML_DUMP_OPTIONS);
-    fs13.writeFileSync(path15.join(agentsDir, `${slug}.yaml`), yamlContent, "utf-8");
+    writeFileIfChanged(hubFolder, path15.join(agentsDir, `${slug}.yaml`), yamlContent, log);
   }
   return slugs;
 }
@@ -15605,11 +15732,11 @@ function extractAgentFiles(payload) {
   }
   return files;
 }
-function writeEvalYamlFiles(hubFolder, evals) {
+function writeEvalYamlFiles(hubFolder, evals, log) {
   const evalsDir = path15.join(hubFolder, "evals");
   if (evals.length === 0) {
     if (fs13.existsSync(evalsDir)) {
-      cleanEvalOrphans(evalsDir, /* @__PURE__ */ new Set());
+      cleanEvalOrphans(hubFolder, evalsDir, /* @__PURE__ */ new Set(), log);
       try {
         if (fs13.readdirSync(evalsDir).length === 0) fs13.rmdirSync(evalsDir);
       } catch {
@@ -15637,18 +15764,19 @@ function writeEvalYamlFiles(hubFolder, evals) {
       }
     }
     const yamlContent = yaml5.dump(buildEvalYamlObject(evalEntry, slug), YAML_DUMP_OPTIONS);
-    fs13.writeFileSync(targetPath, yamlContent, "utf-8");
+    writeFileIfChanged(hubFolder, targetPath, yamlContent, log);
     writtenRelPaths.add(relPath);
   }
-  cleanEvalOrphans(evalsDir, writtenRelPaths);
+  cleanEvalOrphans(hubFolder, evalsDir, writtenRelPaths, log);
 }
-function cleanEvalOrphans(evalsDir, writtenRelPaths) {
+function cleanEvalOrphans(hubFolder, evalsDir, writtenRelPaths, log) {
   const entries = fs13.readdirSync(evalsDir, { withFileTypes: true });
   for (const entry of entries) {
     const fullPath = path15.join(evalsDir, entry.name);
     if (entry.isFile()) {
       if (entry.name.endsWith(".yaml") && !writtenRelPaths.has(entry.name)) {
         fs13.unlinkSync(fullPath);
+        log.removed.push(path15.relative(hubFolder, fullPath));
       }
       continue;
     }
@@ -15659,7 +15787,9 @@ function cleanEvalOrphans(evalsDir, writtenRelPaths) {
         if (sub.isFile() && sub.name.endsWith(".yaml")) {
           const relPath = `${setName}/${sub.name}`;
           if (!writtenRelPaths.has(relPath)) {
-            fs13.unlinkSync(path15.join(fullPath, sub.name));
+            const orphan = path15.join(fullPath, sub.name);
+            fs13.unlinkSync(orphan);
+            log.removed.push(path15.relative(hubFolder, orphan));
           }
         }
       }
@@ -15700,11 +15830,11 @@ function buildJourneyYamlObject(journeyEntry, slug) {
   }
   return out;
 }
-function writeJourneyYamlFiles(hubFolder, journeys) {
+function writeJourneyYamlFiles(hubFolder, journeys, log) {
   const journeysDir = path15.join(hubFolder, "journeys");
   if (journeys.length === 0) {
     if (fs13.existsSync(journeysDir)) {
-      cleanJourneyOrphans(journeysDir, /* @__PURE__ */ new Set());
+      cleanJourneyOrphans(hubFolder, journeysDir, /* @__PURE__ */ new Set(), log);
       try {
         if (fs13.readdirSync(journeysDir).length === 0) fs13.rmdirSync(journeysDir);
       } catch {
@@ -15721,33 +15851,37 @@ function writeJourneyYamlFiles(hubFolder, journeys) {
     const slug = ensureUniqueSlug(slugify(journeyEntry.name), usedSlugs);
     const fileName = `${slug}.yaml`;
     const yamlContent = yaml5.dump(buildJourneyYamlObject(journeyEntry, slug), YAML_DUMP_OPTIONS);
-    fs13.writeFileSync(path15.join(journeysDir, fileName), yamlContent, "utf-8");
+    writeFileIfChanged(hubFolder, path15.join(journeysDir, fileName), yamlContent, log);
     writtenFiles.add(fileName);
   }
-  cleanJourneyOrphans(journeysDir, writtenFiles);
+  cleanJourneyOrphans(hubFolder, journeysDir, writtenFiles, log);
 }
-function cleanJourneyOrphans(journeysDir, writtenFiles) {
+function cleanJourneyOrphans(hubFolder, journeysDir, writtenFiles, log) {
   const entries = fs13.readdirSync(journeysDir, { withFileTypes: true });
   for (const entry of entries) {
     if (entry.isFile() && entry.name.endsWith(".yaml") && !writtenFiles.has(entry.name)) {
-      fs13.unlinkSync(path15.join(journeysDir, entry.name));
+      const orphan = path15.join(journeysDir, entry.name);
+      fs13.unlinkSync(orphan);
+      log.removed.push(path15.relative(hubFolder, orphan));
     }
   }
 }
-function writeResourceFiles(hubFolder, resources) {
+function writeResourceFiles(hubFolder, resources, log) {
   const resourcesDir = path15.join(hubFolder, "resources");
   const currentSlugs = /* @__PURE__ */ new Set();
   for (const resource of resources) {
     const resSlug = slugify(resource.name);
     currentSlugs.add(resSlug);
     const resDir = path15.join(resourcesDir, resSlug);
-    writeResourceFileTree(resDir, resource.files || [], hubFolder);
+    writeResourceFileTree(resDir, resource.files || [], hubFolder, log);
   }
   if (fs13.existsSync(resourcesDir)) {
     const existingDirs = fs13.readdirSync(resourcesDir, { withFileTypes: true });
     for (const entry of existingDirs) {
       if (entry.isDirectory() && !currentSlugs.has(entry.name)) {
-        fs13.rmSync(path15.join(resourcesDir, entry.name), { recursive: true, force: true });
+        const orphanDir = path15.join(resourcesDir, entry.name);
+        fs13.rmSync(orphanDir, { recursive: true, force: true });
+        log.removed.push(`${path15.relative(hubFolder, orphanDir)}/`);
       }
     }
   }
@@ -15761,6 +15895,7 @@ var init_yaml_writer = __esm({
     init_resource_files();
     init_eval_attachments();
     init_workspace_files();
+    init_fs_safety();
     YAML_DUMP_OPTIONS = {
       lineWidth: -1,
       // don't wrap lines
@@ -15783,22 +15918,28 @@ async function materializeHubFolder(hubFolder, payload, options = {}) {
   }
   materialized.add(payload);
   const attachmentDownloads = rewriteEvalAttachmentsToLocalPaths(payload);
-  writeHubFolder(hubFolder, payload, options);
-  await downloadBinaryResourceFiles(hubFolder, payload);
-  const attachmentsWritten = await downloadEvalAttachments(hubFolder, attachmentDownloads);
-  return { attachmentsWritten };
+  const writeLog = writeHubFolder(hubFolder, payload, options);
+  const resourceDownloads = await downloadBinaryResourceFiles(hubFolder, payload);
+  const attachments = await downloadEvalAttachments(hubFolder, attachmentDownloads);
+  return {
+    attachmentsWritten: attachments.written,
+    changed: [...writeLog.changed, ...resourceDownloads.changed, ...attachments.changed],
+    removed: [...writeLog.removed, ...attachments.removed]
+  };
 }
 async function downloadBinaryResourceFiles(hubFolder, payload) {
   const resources = payload.resources || [];
+  const log = { changed: [], removed: [] };
   let downloadCount = 0;
   for (const resource of resources) {
     if (!resource.files) continue;
     const resDir = path16.join(hubFolder, "resources", slugify(resource.name));
-    downloadCount += await downloadBinaryFiles(resDir, resource.files, hubFolder);
+    downloadCount += await downloadBinaryFiles(resDir, resource.files, hubFolder, log);
   }
   if (downloadCount > 0) {
     console.log(`Downloaded ${downloadCount} binary resource file(s).`);
   }
+  return { changed: log.changed };
 }
 var materialized;
 var init_hub_materializer = __esm({
@@ -15812,207 +15953,13 @@ var init_hub_materializer = __esm({
   }
 });
 
-// src/commands/pull.ts
-var pull_exports = {};
-__export(pull_exports, {
-  connectionsEqual: () => connectionsEqual,
-  pullCommand: () => pullCommand,
-  resolveHubTarget: () => resolveHubTarget,
-  writeProductionMirror: () => writeProductionMirror
-});
-import * as fs14 from "fs";
-import * as path17 from "path";
-function parseArgs4(args2) {
-  let autoConfirm = false;
-  let hubSelector;
-  for (let i = 0; i < args2.length; i++) {
-    const arg = args2[i];
-    if (arg === "--yes" || arg === "-y") {
-      autoConfirm = true;
-    } else if (arg === "--hub" && args2[i + 1]) {
-      hubSelector = args2[++i];
-    }
-  }
-  return { autoConfirm, hubSelector };
-}
-function resolveHubTarget(workspaceDir, selector) {
-  const wsLabel = hubsDirLabel(findGitRoot());
-  const allHubs = scanWorkspaceHubs(workspaceDir);
-  if (selector) {
-    const match = allHubs.find(
-      (h) => h.hubId === selector || path17.basename(h.hubFolder) === selector
-    );
-    if (match) return { hubId: match.hubId, hubFolder: match.hubFolder };
-    if (UUID_RE2.test(selector)) return { hubId: selector, hubFolder: null };
-    console.error(`No hub matching --hub ${selector} found in ${wsLabel}/. Pass a UUID for first-time pulls.`);
-    process.exit(1);
-  }
-  const enclosing = findEnclosingHubFolder(workspaceDir);
-  if (enclosing) return { hubId: enclosing.hubId, hubFolder: enclosing.hubFolder };
-  const previewHubs = filterPreviewHubs(allHubs);
-  if (previewHubs.length === 1) return { hubId: previewHubs[0].hubId, hubFolder: previewHubs[0].hubFolder };
-  if (previewHubs.length === 0) {
-    console.error(`No hub folders found in ${wsLabel}/. Pass --hub <uuid> to fetch a hub for the first time.`);
-    process.exit(1);
-  }
-  console.error(`Multiple hubs found in ${wsLabel}/. Pass --hub <uuid|folder-name> to choose, or run from inside a hub folder:`);
-  for (const h of previewHubs) {
-    console.error(`  ${path17.basename(h.hubFolder)} (${h.hubId})`);
-  }
-  process.exit(1);
-}
-async function pullCommand(args2) {
-  const { autoConfirm, hubSelector } = parseArgs4(args2);
-  const repoConfig = requireRepoConfig();
-  const { organization_id: organizationId } = repoConfig;
-  const { config, accessToken } = await requireAuth();
-  const client = new ApiClient({ apiUrl: config.api_url, accessToken });
-  const workspaceDir = resolveWorkspaceDir();
-  const gitRoot = findGitRoot();
-  if (gitRoot) warnLayoutOnce(gitRoot);
-  if (gitRoot) {
-    for (const file of ensureWorkspaceFiles(gitRoot)) {
-      console.error(`Created ${file}`);
-    }
-  }
-  const { hubId, hubFolder: existingFolder } = resolveHubTarget(workspaceDir, hubSelector);
-  console.log("Fetching hub configuration...");
-  const payload = await client.pull(hubId, organizationId);
-  if (payload.hub_environment === "production") {
-    const folder = await writeProductionMirror(workspaceDir, payload);
-    console.log(`Production hub mirrored (read-only) \u2192 ${folder}`);
-    return;
-  }
-  assertHubMatchesBinding(hubId);
-  let hubFolder = existingFolder;
-  let wroteFiles = false;
-  if (!hubFolder) {
-    hubFolder = resolveHubFolder(
-      workspaceDir,
-      hubId,
-      payload.hub.name,
-      payload.hub_environment,
-      payload.preview_label,
-      payload.branch_name
-    );
-    fs14.mkdirSync(path17.dirname(hubFolder), { recursive: true });
-    console.log("Writing hub configuration...");
-    await materializeHubFolder(hubFolder, payload);
-    const finalFolder = autoRenameHubFolder(hubFolder, payload.hub.name, payload.hub_environment, payload.hub_id, payload.preview_label, payload.branch_name);
-    console.log(`Hub configuration written to ${finalFolder}`);
-    wroteFiles = true;
-  } else {
-    let action = "overwrite";
-    try {
-      const localPayload = parseHubFolder(hubFolder);
-      const diffResult = await client.diff(hubId, prepareResourcePayload(localPayload, payload), "pull", organizationId);
-      const connectionsChanged = !connectionsEqual(localPayload.connections, payload.connections);
-      if (!diffResult.has_changes && !connectionsChanged) {
-        action = "sync_metadata";
-      } else {
-        console.log("\nChanges to apply locally:");
-        if (connectionsChanged) {
-          console.log("**Connections:** updated");
-        }
-        printDiff(diffResult.summary);
-        if (!autoConfirm) {
-          const ok = await confirm("Apply these changes?");
-          if (!ok) {
-            console.log("Cancelled.");
-            return;
-          }
-        }
-        action = "apply";
-      }
-    } catch {
-      action = "overwrite";
-    }
-    if (action === "overwrite") console.log("Writing hub configuration...");
-    await materializeHubFolder(hubFolder, payload);
-    const finalFolder = autoRenameHubFolder(hubFolder, payload.hub.name, payload.hub_environment, payload.hub_id, payload.preview_label, payload.branch_name);
-    wroteFiles = true;
-    if (action === "sync_metadata") {
-      if (finalFolder === hubFolder) {
-        console.log("Metadata synced \u2014 no config changes.");
-      } else {
-        console.log("Metadata synced; folder renamed.");
-      }
-    } else {
-      console.log(`Hub configuration written to ${finalFolder}`);
-    }
-  }
-  if (wroteFiles) autoBindIfUnbound(hubId);
-  if (payload.production_hub_id) {
-    await mirrorLinkedProduction(client, workspaceDir, payload.production_hub_id, organizationId);
-  }
-}
-async function writeProductionMirror(workspaceDir, prodPayload) {
-  const folder = resolveHubFolder(workspaceDir, prodPayload.hub_id, prodPayload.hub.name, "production", null, null);
-  fs14.mkdirSync(path17.dirname(folder), { recursive: true });
-  await materializeHubFolder(folder, prodPayload, { seedAgentContext: false });
-  const finalFolder = autoRenameHubFolder(folder, prodPayload.hub.name, "production", prodPayload.hub_id, null, null);
-  prependMirrorMarker(finalFolder, prodPayload.hub_id);
-  return finalFolder;
-}
-async function mirrorLinkedProduction(client, workspaceDir, productionHubId, organizationId) {
-  try {
-    const prodPayload = await client.pull(productionHubId, organizationId);
-    const folder = await writeProductionMirror(workspaceDir, prodPayload);
-    console.log(`Mirrored production hub \u2192 ${folder} (read-only)`);
-  } catch (err) {
-    console.warn(`Warning: could not mirror production hub (${err instanceof Error ? err.message : String(err)}). Preview pull is unaffected.`);
-  }
-}
-function prependMirrorMarker(hubFolder, productionHubId) {
-  const hubYaml = path17.join(hubFolder, "hub.yaml");
-  try {
-    const content = fs14.readFileSync(hubYaml, "utf-8");
-    if (content.startsWith(MIRROR_MARKER_PREFIX)) return;
-    const marker = `${MIRROR_MARKER_PREFIX} ${productionHubId}. Edits are ignored; push is blocked. Edit the linked preview hub instead.
-`;
-    fs14.writeFileSync(hubYaml, marker + content, "utf-8");
-  } catch {
-  }
-}
-function connectionsEqual(a, b) {
-  const listA = a || [];
-  const listB = b || [];
-  if (listA.length !== listB.length) return false;
-  const key = (c) => c.id || `${c.name}|${c.type}|${c.service || ""}`;
-  const setA = new Set(listA.map(key));
-  const setB = new Set(listB.map(key));
-  if (setA.size !== setB.size) return false;
-  for (const k of setA) {
-    if (!setB.has(k)) return false;
-  }
-  return true;
-}
-var MIRROR_MARKER_PREFIX;
-var init_pull = __esm({
-  "src/commands/pull.ts"() {
-    "use strict";
-    init_auth();
-    init_api_client();
-    init_parser();
-    init_diff_display();
-    init_utils();
-    init_resource_files();
-    init_hub_materializer();
-    init_workspace();
-    init_layout();
-    init_workspace_files();
-    init_repo_config();
-    init_hub_binding();
-    MIRROR_MARKER_PREFIX = "# Read-only mirror of production hub";
-  }
-});
-
 // src/commands/push.ts
 var push_exports = {};
 __export(push_exports, {
   autoRenameAgentFiles: () => autoRenameAgentFiles,
   createAndPushNewHub: () => createAndPushNewHub,
   printErrors: () => printErrors,
+  printLocalFileChanges: () => printLocalFileChanges,
   printSyncResult: () => printSyncResult,
   printWarnings: () => printWarnings,
   pushCommand: () => pushCommand,
@@ -16021,10 +15968,10 @@ __export(push_exports, {
   shouldWarnIgnoredPreviewLabel: () => shouldWarnIgnoredPreviewLabel,
   syncAfterPush: () => syncAfterPush
 });
-import * as fs15 from "fs";
-import * as path18 from "path";
+import * as fs14 from "fs";
+import * as path17 from "path";
 import * as yaml6 from "js-yaml";
-function parseArgs5(args2) {
+function parseArgs4(args2) {
   let autoConfirm = false;
   let hubSelector;
   let label;
@@ -16114,14 +16061,30 @@ function printErrors(errors) {
     console.error(`  \x1B[31m! ${error}\x1B[0m`);
   }
 }
+function printLocalFileChanges(delta) {
+  if (delta.changed.length === 0 && delta.removed.length === 0) {
+    console.log("Local files already in sync.");
+    return;
+  }
+  console.log("Local files updated from server:");
+  const emit = (paths, sigil) => {
+    const sorted = [...paths].sort();
+    for (const p of sorted.slice(0, LOCAL_CHANGE_LIST_CAP)) console.log(`  ${sigil} ${p}`);
+    if (sorted.length > LOCAL_CHANGE_LIST_CAP) {
+      console.log(`  \u2026and ${sorted.length - LOCAL_CHANGE_LIST_CAP} more ${sigil === "-" ? "removed" : "changed"}`);
+    }
+  };
+  emit(delta.removed, "-");
+  emit(delta.changed, "~");
+}
 async function autoRenameAgentFiles(client, hubId, hubFolder, organizationId, remoteConfig) {
-  const agentsDir = path18.join(hubFolder, "agents");
+  const agentsDir = path17.join(hubFolder, "agents");
   let agentsWithIds = [];
-  if (fs15.existsSync(agentsDir)) {
-    const yamlFiles = fs15.readdirSync(agentsDir).filter((f) => f.endsWith(".yaml"));
+  if (fs14.existsSync(agentsDir)) {
+    const yamlFiles = fs14.readdirSync(agentsDir).filter((f) => f.endsWith(".yaml"));
     for (const file of yamlFiles) {
       try {
-        const content = fs15.readFileSync(path18.join(agentsDir, file), "utf-8");
+        const content = fs14.readFileSync(path17.join(agentsDir, file), "utf-8");
         const agent = yaml6.load(content);
         if (agent?.id && agent.name) {
           agentsWithIds.push({ id: agent.id, name: agent.name });
@@ -16134,7 +16097,7 @@ async function autoRenameAgentFiles(client, hubId, hubFolder, organizationId, re
   if (agentsWithIds.length === 0) {
     const yamlPath = resolveHubYamlPath(hubFolder);
     if (!yamlPath) return;
-    const yamlContent = fs15.readFileSync(yamlPath, "utf-8");
+    const yamlContent = fs14.readFileSync(yamlPath, "utf-8");
     const config = yaml6.load(yamlContent);
     agentsWithIds = (config.agents || []).filter((a) => !!a.id && !!a.name);
   }
@@ -16166,18 +16129,18 @@ async function autoRenameAgentFiles(client, hubId, hubFolder, organizationId, re
     }
   }
   if (renames.length === 0) return;
-  if (!fs15.existsSync(agentsDir)) return;
-  for (const file of fs15.readdirSync(agentsDir)) {
+  if (!fs14.existsSync(agentsDir)) return;
+  for (const file of fs14.readdirSync(agentsDir)) {
     if (file.startsWith("__rename_temp_") && (file.endsWith(".md") || file.endsWith(".yaml"))) {
       console.warn(`  Warning: removing orphaned temp file agents/${file}`);
-      fs15.unlinkSync(path18.join(agentsDir, file));
+      fs14.unlinkSync(path17.join(agentsDir, file));
     }
   }
   const renameFileIfExists = (dir, oldName, newName) => {
-    const oldPath = path18.join(dir, oldName);
-    const newPath = path18.join(dir, newName);
-    if (!fs15.existsSync(oldPath)) return false;
-    fs15.renameSync(oldPath, newPath);
+    const oldPath = path17.join(dir, oldName);
+    const newPath = path17.join(dir, newName);
+    if (!fs14.existsSync(oldPath)) return false;
+    fs14.renameSync(oldPath, newPath);
     return true;
   };
   const oldSlugs = new Set(renames.map((r) => r.oldSlug));
@@ -16210,9 +16173,9 @@ async function autoRenameAgentFiles(client, hubId, hubFolder, organizationId, re
     }
   } else {
     for (const { oldSlug, newSlug } of renames) {
-      const hasOldFile = extensions.some((ext) => fs15.existsSync(path18.join(agentsDir, `${oldSlug}${ext}`)));
+      const hasOldFile = extensions.some((ext) => fs14.existsSync(path17.join(agentsDir, `${oldSlug}${ext}`)));
       if (!hasOldFile) continue;
-      const hasNewFile = extensions.some((ext) => fs15.existsSync(path18.join(agentsDir, `${newSlug}${ext}`)));
+      const hasNewFile = extensions.some((ext) => fs14.existsSync(path17.join(agentsDir, `${newSlug}${ext}`)));
       if (hasNewFile) {
         console.warn(`  Warning: skipping rename agents/${oldSlug}.* \u2192 agents/${newSlug}.* (target already exists)`);
         continue;
@@ -16227,7 +16190,7 @@ async function autoRenameAgentFiles(client, hubId, hubFolder, organizationId, re
   if (completedRenames.length === 0) return;
   const mainYamlPath = resolveHubYamlPath(hubFolder);
   if (mainYamlPath) {
-    const mainYamlContent = fs15.readFileSync(mainYamlPath, "utf-8");
+    const mainYamlContent = fs14.readFileSync(mainYamlPath, "utf-8");
     const substitutionMap = /* @__PURE__ */ new Map();
     for (const { oldSlug, newSlug } of completedRenames) {
       substitutionMap.set(`agents/${oldSlug}.md`, `agents/${newSlug}.md`);
@@ -16238,16 +16201,16 @@ async function autoRenameAgentFiles(client, hubId, hubFolder, organizationId, re
       (_match, prefix, pathMatch) => `${prefix}${substitutionMap.get(pathMatch) ?? pathMatch}`
     );
     if (updatedYaml !== mainYamlContent) {
-      fs15.writeFileSync(mainYamlPath, updatedYaml, "utf-8");
-      console.log(`  Updated instructions paths in ${path18.basename(mainYamlPath)}`);
+      fs14.writeFileSync(mainYamlPath, updatedYaml, "utf-8");
+      console.log(`  Updated instructions paths in ${path17.basename(mainYamlPath)}`);
     }
   }
 }
 async function syncAfterPush(client, hubId, hubFolder, organizationId) {
   try {
     const remoteConfig = await client.pull(hubId, organizationId);
-    await materializeHubFolder(hubFolder, remoteConfig);
-    console.log("Local files synced with server.");
+    const delta = await materializeHubFolder(hubFolder, remoteConfig);
+    printLocalFileChanges(delta);
     const finalFolder = autoRenameHubFolder(hubFolder, remoteConfig.hub.name, remoteConfig.hub_environment, hubId, remoteConfig.preview_label, remoteConfig.branch_name);
     if (finalFolder !== hubFolder) {
       console.log(`Hub folder is now ${finalFolder}`);
@@ -16307,7 +16270,7 @@ async function pushSingleHub(client, hubId, hubFolder, autoConfirm, organization
 function selectExistingHub(workspaceDir, allHubs, selector, wsLabel) {
   if (selector) {
     const match = allHubs.find(
-      (h) => h.hubId === selector || path18.basename(h.hubFolder) === selector
+      (h) => h.hubId === selector || path17.basename(h.hubFolder) === selector
     );
     if (!match) {
       console.error(`No hub matching --hub ${selector} found in ${wsLabel}/.`);
@@ -16350,7 +16313,7 @@ New hub: "${newHub.hubName}" (${hubType})`);
     process.exit(1);
   }
   console.log(`Hub created: ${createdHub.hub_name} (${hubId})`);
-  const content = fs15.readFileSync(hubYamlPath, "utf-8");
+  const content = fs14.readFileSync(hubYamlPath, "utf-8");
   const hasVersion = content.match(/^version:\s/m);
   let updated;
   if (hasVersion) {
@@ -16366,7 +16329,7 @@ hub_id: "${hubId}"
 hub_environment: preview
 ${content}`;
   }
-  fs15.writeFileSync(hubYamlPath, updated, "utf-8");
+  fs14.writeFileSync(hubYamlPath, updated, "utf-8");
   autoBindIfUnbound(hubId);
   await pushSingleHub(client, hubId, newHub.hubFolder, opts.autoConfirm, opts.organizationId, { skipAgentRename: true });
 }
@@ -16375,7 +16338,7 @@ function reportUnresolvedPushTarget(reason, existingHubs, newHubs, selector, wsL
     if (existingHubs.length > 0) {
       console.error(`No pushable hub found in ${wsLabel}/ \u2014 only read-only production mirror folder(s). Edit the linked preview hub, pull one, or create a new hub with \`wayai create\`:`);
       for (const h of existingHubs) {
-        console.error(`  ${path18.basename(h.hubFolder)} (${h.hubId}, production mirror)`);
+        console.error(`  ${path17.basename(h.hubFolder)} (${h.hubId}, production mirror)`);
       }
     } else {
       console.error(`No hub folders found. Create hub files in ${wsLabel}/<hub>/hub.yaml with \`hub: { name: ... }\` and run \`wayai push\` (or \`wayai create\`).`);
@@ -16388,15 +16351,15 @@ function reportUnresolvedPushTarget(reason, existingHubs, newHubs, selector, wsL
     console.error(`Multiple hub folders found in ${wsLabel}/. Pass --hub <uuid|folder-name> to choose, or run from inside a hub folder:`);
   }
   for (const h of existingHubs) {
-    console.error(`  ${path18.basename(h.hubFolder)} (${h.hubId})`);
+    console.error(`  ${path17.basename(h.hubFolder)} (${h.hubId})`);
   }
   for (const h of newHubs) {
-    console.error(`  ${path18.basename(h.hubFolder)} (new \u2014 "${h.hubName}")`);
+    console.error(`  ${path17.basename(h.hubFolder)} (new \u2014 "${h.hubName}")`);
   }
   process.exit(1);
 }
 async function pushCommand(args2) {
-  const { autoConfirm, hubSelector, label } = parseArgs5(args2);
+  const { autoConfirm, hubSelector, label } = parseArgs4(args2);
   const repoConfig = requireRepoConfig();
   const { organization_id: organizationId } = repoConfig;
   const { config, accessToken } = await requireAuth();
@@ -16410,7 +16373,7 @@ async function pushCommand(args2) {
       console.error(`Created ${file}`);
     }
   }
-  if (!fs15.existsSync(workspaceDir)) {
+  if (!fs14.existsSync(workspaceDir)) {
     console.error(`No ${wsLabel}/ directory found. Run \`wayai pull\` first or create hub files in ${wsLabel}/<hub>/hub.yaml.`);
     process.exit(1);
   }
@@ -16429,14 +16392,15 @@ async function pushCommand(args2) {
     if (label) {
       console.warn("Note: --label is only used when creating a new hub. To change an existing hub's label, use `wayai relabel`.");
     }
-    console.log(`Target hub: ${path18.basename(existing.hubFolder)} (${existing.hubId})`);
-    assertHubMatchesBinding(existing.hubId, path18.basename(existing.hubFolder));
+    console.log(`Target hub: ${path17.basename(existing.hubFolder)} (${existing.hubId})`);
+    assertHubMatchesBinding(existing.hubId, path17.basename(existing.hubFolder));
     await pushSingleHub(client, existing.hubId, existing.hubFolder, autoConfirm, organizationId);
     return;
   }
   assertNoBindingBlocksHubCreation(resolution.target.hub.hubName);
   await createAndPushNewHub(client, resolution.target.hub, { autoConfirm, label, organizationId });
 }
+var LOCAL_CHANGE_LIST_CAP;
 var init_push = __esm({
   "src/commands/push.ts"() {
     "use strict";
@@ -16452,6 +16416,204 @@ var init_push = __esm({
     init_workspace_files();
     init_repo_config();
     init_hub_binding();
+    LOCAL_CHANGE_LIST_CAP = 20;
+  }
+});
+
+// src/commands/pull.ts
+var pull_exports = {};
+__export(pull_exports, {
+  connectionsEqual: () => connectionsEqual,
+  pullCommand: () => pullCommand,
+  resolveHubTarget: () => resolveHubTarget,
+  writeProductionMirror: () => writeProductionMirror
+});
+import * as fs15 from "fs";
+import * as path18 from "path";
+function parseArgs5(args2) {
+  let autoConfirm = false;
+  let hubSelector;
+  for (let i = 0; i < args2.length; i++) {
+    const arg = args2[i];
+    if (arg === "--yes" || arg === "-y") {
+      autoConfirm = true;
+    } else if (arg === "--hub" && args2[i + 1]) {
+      hubSelector = args2[++i];
+    }
+  }
+  return { autoConfirm, hubSelector };
+}
+function resolveHubTarget(workspaceDir, selector) {
+  const wsLabel = hubsDirLabel(findGitRoot());
+  const allHubs = scanWorkspaceHubs(workspaceDir);
+  if (selector) {
+    const match = allHubs.find(
+      (h) => h.hubId === selector || path18.basename(h.hubFolder) === selector
+    );
+    if (match) return { hubId: match.hubId, hubFolder: match.hubFolder };
+    if (UUID_RE2.test(selector)) return { hubId: selector, hubFolder: null };
+    console.error(`No hub matching --hub ${selector} found in ${wsLabel}/. Pass a UUID for first-time pulls.`);
+    process.exit(1);
+  }
+  const enclosing = findEnclosingHubFolder(workspaceDir);
+  if (enclosing) return { hubId: enclosing.hubId, hubFolder: enclosing.hubFolder };
+  const previewHubs = filterPreviewHubs(allHubs);
+  if (previewHubs.length === 1) return { hubId: previewHubs[0].hubId, hubFolder: previewHubs[0].hubFolder };
+  if (previewHubs.length === 0) {
+    console.error(`No hub folders found in ${wsLabel}/. Pass --hub <uuid> to fetch a hub for the first time.`);
+    process.exit(1);
+  }
+  console.error(`Multiple hubs found in ${wsLabel}/. Pass --hub <uuid|folder-name> to choose, or run from inside a hub folder:`);
+  for (const h of previewHubs) {
+    console.error(`  ${path18.basename(h.hubFolder)} (${h.hubId})`);
+  }
+  process.exit(1);
+}
+async function pullCommand(args2) {
+  const { autoConfirm, hubSelector } = parseArgs5(args2);
+  const repoConfig = requireRepoConfig();
+  const { organization_id: organizationId } = repoConfig;
+  const { config, accessToken } = await requireAuth();
+  const client = new ApiClient({ apiUrl: config.api_url, accessToken });
+  const workspaceDir = resolveWorkspaceDir();
+  const gitRoot = findGitRoot();
+  if (gitRoot) warnLayoutOnce(gitRoot);
+  if (gitRoot) {
+    for (const file of ensureWorkspaceFiles(gitRoot)) {
+      console.error(`Created ${file}`);
+    }
+  }
+  const { hubId, hubFolder: existingFolder } = resolveHubTarget(workspaceDir, hubSelector);
+  console.log("Fetching hub configuration...");
+  const payload = await client.pull(hubId, organizationId);
+  if (payload.hub_environment === "production") {
+    const folder = await writeProductionMirror(workspaceDir, payload);
+    console.log(`Production hub mirrored (read-only) \u2192 ${folder}`);
+    return;
+  }
+  assertHubMatchesBinding(hubId);
+  let hubFolder = existingFolder;
+  let wroteFiles = false;
+  if (!hubFolder) {
+    hubFolder = resolveHubFolder(
+      workspaceDir,
+      hubId,
+      payload.hub.name,
+      payload.hub_environment,
+      payload.preview_label,
+      payload.branch_name
+    );
+    fs15.mkdirSync(path18.dirname(hubFolder), { recursive: true });
+    console.log("Writing hub configuration...");
+    await materializeHubFolder(hubFolder, payload);
+    const finalFolder = autoRenameHubFolder(hubFolder, payload.hub.name, payload.hub_environment, payload.hub_id, payload.preview_label, payload.branch_name);
+    console.log(`Hub configuration written to ${finalFolder}`);
+    wroteFiles = true;
+  } else {
+    let action = "overwrite";
+    try {
+      const localPayload = parseHubFolder(hubFolder);
+      const diffResult = await client.diff(hubId, prepareResourcePayload(localPayload, payload), "pull", organizationId);
+      const connectionsChanged = !connectionsEqual(localPayload.connections, payload.connections);
+      if (!diffResult.has_changes && !connectionsChanged) {
+        action = "sync_metadata";
+      } else {
+        console.log("\nChanges to apply locally:");
+        if (connectionsChanged) {
+          console.log("**Connections:** updated");
+        }
+        printDiff(diffResult.summary);
+        if (!autoConfirm) {
+          const ok = await confirm("Apply these changes?");
+          if (!ok) {
+            console.log("Cancelled.");
+            return;
+          }
+        }
+        action = "apply";
+      }
+    } catch {
+      action = "overwrite";
+    }
+    if (action === "overwrite") console.log("Writing hub configuration...");
+    const delta = await materializeHubFolder(hubFolder, payload);
+    const finalFolder = autoRenameHubFolder(hubFolder, payload.hub.name, payload.hub_environment, payload.hub_id, payload.preview_label, payload.branch_name);
+    wroteFiles = true;
+    if (action === "sync_metadata") {
+      if (finalFolder === hubFolder) {
+        printLocalFileChanges(delta);
+      } else {
+        console.log("Metadata synced; folder renamed.");
+      }
+    } else {
+      console.log(`Hub configuration written to ${finalFolder}`);
+      printLocalFileChanges(delta);
+    }
+  }
+  if (wroteFiles) autoBindIfUnbound(hubId);
+  if (payload.production_hub_id) {
+    await mirrorLinkedProduction(client, workspaceDir, payload.production_hub_id, organizationId);
+  }
+}
+async function writeProductionMirror(workspaceDir, prodPayload) {
+  const folder = resolveHubFolder(workspaceDir, prodPayload.hub_id, prodPayload.hub.name, "production", null, null);
+  fs15.mkdirSync(path18.dirname(folder), { recursive: true });
+  await materializeHubFolder(folder, prodPayload, { seedAgentContext: false });
+  const finalFolder = autoRenameHubFolder(folder, prodPayload.hub.name, "production", prodPayload.hub_id, null, null);
+  prependMirrorMarker(finalFolder, prodPayload.hub_id);
+  return finalFolder;
+}
+async function mirrorLinkedProduction(client, workspaceDir, productionHubId, organizationId) {
+  try {
+    const prodPayload = await client.pull(productionHubId, organizationId);
+    const folder = await writeProductionMirror(workspaceDir, prodPayload);
+    console.log(`Mirrored production hub \u2192 ${folder} (read-only)`);
+  } catch (err) {
+    console.warn(`Warning: could not mirror production hub (${err instanceof Error ? err.message : String(err)}). Preview pull is unaffected.`);
+  }
+}
+function prependMirrorMarker(hubFolder, productionHubId) {
+  const hubYaml = path18.join(hubFolder, "hub.yaml");
+  try {
+    const content = fs15.readFileSync(hubYaml, "utf-8");
+    if (content.startsWith(MIRROR_MARKER_PREFIX)) return;
+    const marker = `${MIRROR_MARKER_PREFIX} ${productionHubId}. Edits are ignored; push is blocked. Edit the linked preview hub instead.
+`;
+    fs15.writeFileSync(hubYaml, marker + content, "utf-8");
+  } catch {
+  }
+}
+function connectionsEqual(a, b) {
+  const listA = a || [];
+  const listB = b || [];
+  if (listA.length !== listB.length) return false;
+  const key = (c) => c.id || `${c.name}|${c.type}|${c.service || ""}`;
+  const setA = new Set(listA.map(key));
+  const setB = new Set(listB.map(key));
+  if (setA.size !== setB.size) return false;
+  for (const k of setA) {
+    if (!setB.has(k)) return false;
+  }
+  return true;
+}
+var MIRROR_MARKER_PREFIX;
+var init_pull = __esm({
+  "src/commands/pull.ts"() {
+    "use strict";
+    init_auth();
+    init_api_client();
+    init_parser();
+    init_diff_display();
+    init_utils();
+    init_resource_files();
+    init_hub_materializer();
+    init_push();
+    init_workspace();
+    init_layout();
+    init_workspace_files();
+    init_repo_config();
+    init_hub_binding();
+    MIRROR_MARKER_PREFIX = "# Read-only mirror of production hub";
   }
 });
 
@@ -16669,8 +16831,9 @@ async function replicateCommand(args2) {
     payload.preview_label,
     payload.branch_name
   );
+  const folderPreExisted = fs17.existsSync(hubFolder);
   fs17.mkdirSync(path20.dirname(hubFolder), { recursive: true });
-  await materializeHubFolder(hubFolder, payload);
+  const delta = await materializeHubFolder(hubFolder, payload);
   hubFolder = autoRenameHubFolder(
     hubFolder,
     payload.hub.name,
@@ -16680,6 +16843,7 @@ async function replicateCommand(args2) {
     payload.branch_name
   );
   autoBindIfUnbound(previewHubId);
+  if (folderPreExisted) printLocalFileChanges(delta);
   console.log(`Preview written to ${path20.basename(hubFolder)}`);
   console.log(`  Switch to it with: wayai use ${path20.basename(hubFolder)}`);
 }
@@ -16690,6 +16854,7 @@ var init_replicate = __esm({
     init_api_client();
     init_hub_materializer();
     init_pull();
+    init_push();
     init_workspace();
     init_layout();
     init_repo_config();
@@ -21891,7 +22056,7 @@ async function runReportList(flagArgs) {
     }
     console.log(`Reports: ${result.data.length}/${result.total}`);
     for (const r of result.data) {
-      const age = Math.floor((Date.now() - r.created_at) / 1e3 / 60);
+      const age = Math.floor((Date.now() - Date.parse(r.created_at)) / 1e3 / 60);
       const meta = [
         r.source,
         r.status,
@@ -22312,6 +22477,21 @@ var init_admin = __esm({
   }
 });
 
+// src/lib/terminal-output.ts
+import { stripVTControlCharacters } from "util";
+function sanitizeTerminalText(value) {
+  const normalizedNewlines = value.replace(/\r\n?/g, "\n");
+  return stripVTControlCharacters(normalizedNewlines).replace(
+    /[\u0000-\u0009\u000b-\u001f\u007f-\u009f]/g,
+    ""
+  );
+}
+var init_terminal_output = __esm({
+  "src/lib/terminal-output.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/version-status.ts
 function componentStatus(current, latest) {
   return { current, latest, behind: Boolean(current && latest && isNewerVersion(latest, current)) };
@@ -22624,7 +22804,8 @@ async function reportListCommand(args2) {
       return;
     }
     for (const r of result.data) {
-      console.log(`${r.report_id}  ${r.status.padEnd(10)}  ${r.classification}`);
+      const title = sanitizeTerminalText(r.title).replace(/\s+/g, " ").trim();
+      console.log(`${r.report_id}  ${r.status.padEnd(10)}  ${r.classification}  ${title}`);
     }
   } catch (err) {
     reportActionError(err);
@@ -22646,7 +22827,11 @@ async function reportGetCommand(args2) {
       return;
     }
     const { report, messages } = result;
+    const title = sanitizeTerminalText(report.title);
+    const description = sanitizeTerminalText(report.description);
     console.log(`Report ${report.report_id}`);
+    console.log(`  title:          ${title}`);
+    console.log(`  description:    ${description.replace(/\n/g, "\n                  ")}`);
     console.log(`  status:         ${report.status}`);
     console.log(`  classification: ${report.classification}`);
     if (report.contest_count > 0) console.log(`  contests:       ${report.contest_count}`);
@@ -22654,7 +22839,7 @@ async function reportGetCommand(args2) {
     if (messages.length > 0) {
       console.log("\n  Thread:");
       for (const m of messages) {
-        console.log(`    [${m.author_role}] ${m.body}`);
+        console.log(`    [${m.author_role}] ${sanitizeTerminalText(m.body)}`);
       }
     }
     if (report.status === "shipped") {
@@ -22723,6 +22908,7 @@ var init_report = __esm({
     "use strict";
     init_auth();
     init_api_client();
+    init_terminal_output();
     init_report_edit_args();
     init_report_create();
   }
@@ -22768,7 +22954,7 @@ var init_update = __esm({
 
 // src/index.ts
 init_sentry();
-import { readFileSync as readFileSync20 } from "fs";
+import { readFileSync as readFileSync21 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { dirname as dirname9, join as join28 } from "path";
 
@@ -22950,7 +23136,7 @@ Run \`wayai admin skill install\` to update.`);
 
 // src/index.ts
 var __dirname = dirname9(fileURLToPath2(import.meta.url));
-var pkg = JSON.parse(readFileSync20(join28(__dirname, "..", "package.json"), "utf-8"));
+var pkg = JSON.parse(readFileSync21(join28(__dirname, "..", "package.json"), "utf-8"));
 var [, , command, ...args] = process.argv;
 var isBackgroundRefresh = command === REFRESH_COMMAND;
 if (!isBackgroundRefresh) initSentry(command, pkg.version);