@wayai/cli 0.3.133 → 0.3.135

package/dist/index.js

@@ -441,11 +441,11 @@ function captureException2(error, context) {
     Sentry.captureException(error);
   });
 }
-function addApiBreadcrumb(method, path30) {
+function addApiBreadcrumb(method, path31) {
   if (!initialized) return;
   Sentry.addBreadcrumb({
     category: "http",
-    message: `${method} ${path30}`,
+    message: `${method} ${path31}`,
     level: "info"
   });
 }
@@ -899,8 +899,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path30, errorMaps, issueData } = params;
-      const fullPath = [...path30, ...issueData.path || []];
+      const { data, path: path31, errorMaps, issueData } = params;
+      const fullPath = [...path31, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -1211,11 +1211,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path30, key) {
+      constructor(parent, value, path31, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path30;
+        this._path = path31;
         this._key = key;
       }
       get path() {
@@ -4628,12 +4628,12 @@ function validateFollowupLinks(followups, label, ctx) {
   const linkTargets = /* @__PURE__ */ new Set();
   followups.forEach((followup, i) => {
     const ref = followup?.after_followup_id;
-    const path30 = ["followups", i, "after_followup_id"];
+    const path31 = ["followups", i, "after_followup_id"];
     if (followup?.type !== "inactivity_after_before_event") {
       if (ref !== void 0) {
         ctx.addIssue({
           code: external_exports.ZodIssueCode.custom,
-          path: path30,
+          path: path31,
           message: `kanban status ${label}: after_followup_id is only valid on inactivity_after_before_event followups (this one is ${followup?.type})`
         });
       }
@@ -4642,7 +4642,7 @@ function validateFollowupLinks(followups, label, ctx) {
     if (ref === void 0) {
       ctx.addIssue({
         code: external_exports.ZodIssueCode.custom,
-        path: path30,
+        path: path31,
         message: `kanban status ${label}: inactivity_after_before_event requires after_followup_id naming the id of a before_event followup in the same status`
       });
       return;
@@ -4652,7 +4652,7 @@ function validateFollowupLinks(followups, label, ctx) {
     if (matches.length > 1) {
       ctx.addIssue({
         code: external_exports.ZodIssueCode.custom,
-        path: path30,
+        path: path31,
         message: `kanban status ${label}: after_followup_id "${ref}" matches ${matches.length} followups \u2014 a link must name exactly one`
       });
       return;
@@ -4664,7 +4664,7 @@ function validateFollowupLinks(followups, label, ctx) {
       );
       ctx.addIssue({
         code: external_exports.ZodIssueCode.custom,
-        path: path30,
+        path: path31,
         message: hasIdlessBeforeEvent ? `kanban status ${label}: after_followup_id "${ref}" matches no followup \u2014 a link target must declare an explicit id, and this status has before_event followups without one` : `kanban status ${label}: after_followup_id "${ref}" matches no followup in this status`
       });
       return;
@@ -4672,7 +4672,7 @@ function validateFollowupLinks(followups, label, ctx) {
     if (target.type !== "before_event") {
       ctx.addIssue({
         code: external_exports.ZodIssueCode.custom,
-        path: path30,
+        path: path31,
         message: `kanban status ${label}: after_followup_id "${ref}" points at a ${target.type} followup \u2014 only before_event followups can anchor a chain`
       });
     }
@@ -4748,12 +4748,12 @@ function typeMatches(typeField, allowed) {
   if (Array.isArray(typeField)) return typeField.every((t) => typeof t === "string" && allowed.has(t));
   return false;
 }
-function validateSchema(schema, path30, errors, opts = {}) {
+function validateSchema(schema, path31, errors, opts = {}) {
   if (typeof schema === "boolean") return;
   const depth = opts.depth ?? 0;
   if (depth > MAX_SCHEMA_DEPTH) {
     errors.push({
-      path: path30 || "<root>",
+      path: path31 || "<root>",
       message: `schema nesting exceeds ${MAX_SCHEMA_DEPTH} levels`,
       suggestion: "Flatten the schema; LLM providers reject deeply nested tool input_schemas."
     });
@@ -4761,7 +4761,7 @@ function validateSchema(schema, path30, errors, opts = {}) {
   }
   if (!isRecord(schema)) {
     errors.push({
-      path: path30,
+      path: path31,
       message: `expected object, got ${schema === null ? "null" : typeof schema}`
     });
     return;
@@ -4769,14 +4769,14 @@ function validateSchema(schema, path30, errors, opts = {}) {
   if (opts.isRoot) {
     if ("type" in schema && schema.type !== "object") {
       errors.push({
-        path: path30 ? `${path30}.type` : "type",
+        path: path31 ? `${path31}.type` : "type",
         message: `root type must be 'object', got ${JSON.stringify(schema.type)}`,
         suggestion: "Tool parameters at the root must be an object: `{ type: 'object', properties: { ... } }`."
       });
     }
   } else if ("type" in schema && !typeMatches(schema.type, ALLOWED_TYPES)) {
     errors.push({
-      path: `${path30}.type`,
+      path: `${path31}.type`,
       message: `type must be one of ${[...ALLOWED_TYPES].join("/")} or an array of those, got ${JSON.stringify(schema.type)}`
     });
   }
@@ -4786,25 +4786,25 @@ function validateSchema(schema, path30, errors, opts = {}) {
       const isPlaceholder = PLACEHOLDER_TOKENS.includes(e);
       const isOutcomePlaceholder = e === "[KANBAN_OUTCOME_VALUES]";
       errors.push({
-        path: `${path30}.enum`,
+        path: `${path31}.enum`,
         message: `enum must be a non-empty array of primitives, got string ${JSON.stringify(e)}`,
         suggestion: isOutcomePlaceholder ? "Declare `outcomes` on the hub's terminal kanban status so the platform can render the placeholder into a valid array; with none configured the platform drops the parameter instead." : isPlaceholder ? "Set `operation: 'update_kanban_status'` on the tool and ensure at least one hub.kanban_status has `allowsAgentUpdate: true` so the platform can render the placeholder into a valid array." : 'Wrap the value in an array: `enum: ["value"]`.'
       });
     } else if (!Array.isArray(e)) {
       errors.push({
-        path: `${path30}.enum`,
+        path: `${path31}.enum`,
         message: `enum must be a non-empty array of primitives, got ${typeof e}`
       });
     } else if (e.length === 0) {
       errors.push({
-        path: `${path30}.enum`,
+        path: `${path31}.enum`,
         message: "enum must not be empty"
       });
     } else {
       for (let i = 0; i < e.length; i++) {
         if (!isPrimitive(e[i])) {
           errors.push({
-            path: `${path30}.enum[${i}]`,
+            path: `${path31}.enum[${i}]`,
             message: `enum entry must be a primitive (string/number/boolean/null), got ${typeof e[i]}`
           });
         }
@@ -4814,7 +4814,7 @@ function validateSchema(schema, path30, errors, opts = {}) {
   for (const key of ["exclusiveMinimum", "exclusiveMaximum"]) {
     if (key in schema && typeof schema[key] === "boolean") {
       errors.push({
-        path: `${path30}.${key}`,
+        path: `${path31}.${key}`,
         message: `${key} as boolean is draft-04 syntax; draft 2020-12 requires a numeric value`,
         suggestion: `Replace with the numeric bound, e.g. \`${key}: 0\`.`
       });
@@ -4823,45 +4823,45 @@ function validateSchema(schema, path30, errors, opts = {}) {
   if ("properties" in schema) {
     if (!isRecord(schema.properties)) {
       errors.push({
-        path: `${path30}.properties`,
+        path: `${path31}.properties`,
         message: `properties must be an object, got ${Array.isArray(schema.properties) ? "array" : typeof schema.properties}`
       });
     } else {
       for (const [propName, propSchema] of Object.entries(schema.properties)) {
-        validateSchema(propSchema, `${path30}.properties.${propName}`, errors, { depth: depth + 1 });
+        validateSchema(propSchema, `${path31}.properties.${propName}`, errors, { depth: depth + 1 });
       }
     }
   }
   if (schemaTypeIncludes(schema, "array") && "items" in schema) {
     if (Array.isArray(schema.items)) {
-      schema.items.forEach((sub, i) => validateSchema(sub, `${path30}.items[${i}]`, errors, { depth: depth + 1 }));
+      schema.items.forEach((sub, i) => validateSchema(sub, `${path31}.items[${i}]`, errors, { depth: depth + 1 }));
     } else {
-      validateSchema(schema.items, `${path30}.items`, errors, { depth: depth + 1 });
+      validateSchema(schema.items, `${path31}.items`, errors, { depth: depth + 1 });
     }
   }
   for (const key of SUBSCHEMA_OBJECT_KEYWORDS) {
     if (key in schema && isRecord(schema[key])) {
-      validateSchema(schema[key], `${path30}.${key}`, errors, { depth: depth + 1 });
+      validateSchema(schema[key], `${path31}.${key}`, errors, { depth: depth + 1 });
     }
   }
   for (const key of SUBSCHEMA_LIST_KEYWORDS) {
     const list = schema[key];
     if (Array.isArray(list)) {
-      list.forEach((sub, i) => validateSchema(sub, `${path30}.${key}[${i}]`, errors, { depth: depth + 1 }));
+      list.forEach((sub, i) => validateSchema(sub, `${path31}.${key}[${i}]`, errors, { depth: depth + 1 }));
     }
   }
   for (const key of SUBSCHEMA_MAP_KEYWORDS) {
     const map = schema[key];
     if (isRecord(map)) {
       for (const [name, sub] of Object.entries(map)) {
-        validateSchema(sub, `${path30}.${key}.${name}`, errors, { depth: depth + 1 });
+        validateSchema(sub, `${path31}.${key}.${name}`, errors, { depth: depth + 1 });
       }
     }
   }
   const reportedPaths = new Set(errors.map((e) => e.path));
   for (const [k, v] of Object.entries(schema)) {
     if (typeof v !== "string") continue;
-    const fieldPath = `${path30}.${k}`;
+    const fieldPath = `${path31}.${k}`;
     if (reportedPaths.has(fieldPath)) continue;
     for (const token of PLACEHOLDER_TOKENS) {
       if (v === token) {
@@ -5006,8 +5006,8 @@ function evalInitialStateError(input) {
     const parsed = evalInitialStateEntry.safeParse(entries[i]);
     if (!parsed.success) {
       const issue = parsed.error.issues[0];
-      const path30 = issue?.path.join(".") || "?";
-      return `initial_state[${i}].${path30} is invalid: ${issue?.message ?? "malformed"}`;
+      const path31 = issue?.path.join(".") || "?";
+      return `initial_state[${i}].${path31} is invalid: ${issue?.message ?? "malformed"}`;
     }
     if (seenSlugs.has(parsed.data.slug)) {
       return `initial_state[${i}].slug "${parsed.data.slug}" is declared more than once`;
@@ -5195,10 +5195,10 @@ function refineHubAsCodeEvals(config, ctx) {
 function refineHubAsCodeEvalAttachments(config, ctx) {
   const cfg = config;
   const referencedHashes = /* @__PURE__ */ new Set();
-  const addTurnIssue = (path30, turn, name) => {
+  const addTurnIssue = (path31, turn, name) => {
     const error = evalTurnAttachmentsError(turn);
     if (error) {
-      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: path30, message: `${name}: ${error}` });
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: path31, message: `${name}: ${error}` });
       return;
     }
     for (const hash of collectTurnAttachmentHashes(turn)) referencedHashes.add(hash);
@@ -5344,11 +5344,11 @@ function refineHubAsCodeDelegation(config, ctx) {
         }
       }
       if (del.context_boundary === void 0) return;
-      const path30 = ["agents", agentIndex, "tools", "delegation", delIndex, "context_boundary"];
+      const path31 = ["agents", agentIndex, "tools", "delegation", delIndex, "context_boundary"];
       if (del.type !== "hub") {
         ctx.addIssue({
           code: external_exports.ZodIssueCode.custom,
-          path: path30,
+          path: path31,
           message: `context_boundary applies only to \`type: hub\` delegations (got type "${String(del.type)}")`
         });
         return;
@@ -5356,14 +5356,14 @@ function refineHubAsCodeDelegation(config, ctx) {
       if (!CONTEXT_BOUNDARIES.includes(del.context_boundary)) {
         ctx.addIssue({
           code: external_exports.ZodIssueCode.custom,
-          path: path30,
+          path: path31,
           message: `context_boundary must be one of: ${CONTEXT_BOUNDARIES.join(", ")}`
         });
       }
     });
   });
 }
-var uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, MAX_AUDIO_FILE_BASE64_BYTES, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, PREVIOUS_CONVERSATIONS_MAX, previousConversationsCountField, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupTypeSchema, EVENT_RELATIVE_FOLLOWUP_TYPES, followupTimeUnitSchema, followupIdSchema, SELECTABLE_FOLLOWUP_TYPES, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS, followupSchema, MAX_OUTCOMES_PER_STATUS, kanbanOutcomeSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlTable, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_MAX_RUNS_PER_SCENARIO, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, ISO_UTC_RE, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, evalDateContextSchema, EVAL_FIXTURE_NAME_MAX_LENGTH, evalFixtureOverrideSchema, runSessionQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, EVAL_MAX_SELECTED_SCENARIOS, evalScenarioSelectionEntrySchema, evalScenarioSelectionSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, evalSessionConfigResponseSchema, evalSessionResponseSchema, seedReleaseStatusSchema, EVAL_SESSION_NOT_QUIESCENT, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, copilotSuggestBody, copilotSuggestResponse, CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysBody, dataExplorerKvKeyBody, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteBody, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, passwordLoginBody, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam;
+var uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, MAX_AUDIO_FILE_BASE64_BYTES, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, PREVIOUS_CONVERSATIONS_MAX, previousConversationsCountField, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupTypeSchema, EVENT_RELATIVE_FOLLOWUP_TYPES, followupTimeUnitSchema, followupIdSchema, SELECTABLE_FOLLOWUP_TYPES, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS, followupSchema, MAX_OUTCOMES_PER_STATUS, kanbanOutcomeSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, MAX_EVAL_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlTable, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_MAX_RUNS_PER_SCENARIO, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, ISO_UTC_RE, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, evalDateContextSchema, EVAL_FIXTURE_NAME_MAX_LENGTH, evalFixtureOverrideSchema, runSessionQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, createEvalBody, updateEvalBody, EVAL_LIST_MAX_LIMIT, evalListLimit, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, EVAL_MAX_SELECTED_SCENARIOS, evalScenarioSelectionEntrySchema, evalScenarioSelectionSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, evalSessionConfigResponseSchema, evalSessionResponseSchema, evalSessionListConfigSchema, evalSessionListItemSchema, seedReleaseStatusSchema, EVAL_SESSION_NOT_QUIESCENT, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, copilotSuggestBody, copilotSuggestResponse, CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, planKeySchema, billingStatusSchema, REKOR_ENTITLEMENT_CONTRACT_VERSION, entitlementProjectionSchema, rekorEntitlementRefreshMessageSchema, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysBody, dataExplorerKvKeyBody, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteBody, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, passwordLoginBody, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, REKOR_ACTOR_TYPE_HEADER, REKOR_ACTOR_ID_HEADER, REKOR_ACTOR_LABEL_HEADER, REKOR_ACTOR_ORG_HEADER, REKOR_ACTOR_ADMIN_HEADER, REKOR_CLIENT_HEADER, REKOR_TOOL_ID_HEADER, REKOR_CLIENTS, rekorClientSchema, MAX_REKOR_TOOL_ID_LENGTH, rekorToolIdSchema, DATA_PROXY_MOUNT, DATA_PROXY_PREFIX, REKOR_V1_PREFIX, DATA_PROXY_ORG_QUERY_PARAM, dataProxyQuery, rekorAttestation, REQUIRED_REKOR_ATTESTATION_HEADERS;
 var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
     "use strict";
@@ -5415,6 +5415,7 @@ var init_contracts = __esm({
     init_zod();
     init_zod();
     init_zod();
+    init_zod();
     uuidSchema = external_exports.string().uuid();
     paginationSchema = external_exports.object({
       limit: external_exports.coerce.number().int().min(1).max(100).default(50),
@@ -5909,6 +5910,7 @@ var init_contracts = __esm({
     hubSchemaQuery = external_exports.object({ hub_id: uuidSchema });
     PREVIEW_LABEL_MAX_LENGTH = 60;
     MAX_ENDED_INDEX_RETENTION_DAYS = 730;
+    MAX_EVAL_RETENTION_DAYS = 3650;
     previewLabelField = external_exports.string().max(PREVIEW_LABEL_MAX_LENGTH).optional().nullable().transform((v) => {
       if (v == null) return null;
       const trimmed = v.trim();
@@ -5944,6 +5946,10 @@ var init_contracts = __esm({
       // the cleanup cron reaps its index row. Absent → DEFAULT_ENDED_INDEX_RETENTION_DAYS
       // (365). Re-clamped to the effective storage retention at reap time.
       ended_index_retention_days: external_exports.number().int().min(1).max(MAX_ENDED_INDEX_RETENTION_DAYS).optional(),
+      // Per-hub eval-session retention window (days). null CLEARS the override (back to
+      // the platform default); 0 disables retention for this hub (keep sessions forever).
+      // Nullable — unlike the fields above, "unset" is a meaningful, settable state.
+      eval_retention_days: external_exports.number().int().min(0).max(MAX_EVAL_RETENTION_DAYS).nullable().optional(),
       // Channel contact access control. Enum-validated explicitly (not via passthrough)
       // so `language`/`access_approval_role` can't reach the DB with an invalid value.
       language: external_exports.enum(["en", "pt", "es"]).optional(),
@@ -6524,7 +6530,6 @@ var init_contracts = __esm({
       agent_id: uuidSchema,
       priority: external_exports.number().optional(),
       use_native_integration: external_exports.boolean().optional(),
-      include_structure_in_prompt: external_exports.boolean().optional(),
       write_enabled: external_exports.boolean().optional()
     });
     updateAgentResourceBody = external_exports.object({
@@ -6532,7 +6537,6 @@ var init_contracts = __esm({
       resource_id: uuidSchema,
       agent_id: uuidSchema,
       use_native_integration: external_exports.boolean().optional(),
-      include_structure_in_prompt: external_exports.boolean().optional(),
       enabled: external_exports.boolean().optional(),
       priority: external_exports.number().optional(),
       write_enabled: external_exports.boolean().optional()
@@ -6716,12 +6720,16 @@ var init_contracts = __esm({
     updateEvalBody = external_exports.object({
       eval: external_exports.record(external_exports.unknown())
     }).superRefine(refineEvalMessageTextRole).superRefine(refineEvalAttachments).superRefine(refineEvalInitialState);
+    EVAL_LIST_MAX_LIMIT = 1e3;
+    evalListLimit = external_exports.string().regex(/^\d+$/).refine((v) => Number(v) <= EVAL_LIST_MAX_LIMIT, {
+      message: `limit must be ${EVAL_LIST_MAX_LIMIT} or less`
+    }).optional();
     getEvalsQuery = external_exports.object({
       hub_id: external_exports.string().uuid(),
       agent_id: external_exports.string().uuid().optional(),
       enabled: external_exports.string().regex(/^(true|false)$/).optional(),
       search: external_exports.string().optional(),
-      limit: external_exports.string().regex(/^\d+$/).optional(),
+      limit: evalListLimit,
       offset: external_exports.string().regex(/^\d+$/).optional()
     });
     toggleEvalBody = external_exports.object({
@@ -6776,7 +6784,7 @@ var init_contracts = __esm({
       hub_id: external_exports.string().uuid(),
       status: external_exports.string().optional(),
       search: external_exports.string().optional(),
-      limit: external_exports.string().regex(/^\d+$/).optional(),
+      limit: evalListLimit,
       offset: external_exports.string().regex(/^\d+$/).optional()
     });
     getSessionResultsQuery = external_exports.object({
@@ -6955,6 +6963,15 @@ var init_contracts = __esm({
       /** Launch-time snapshot. */
       session_config: evalSessionConfigResponseSchema.optional()
     }).passthrough();
+    evalSessionListConfigSchema = external_exports.object({
+      agent: external_exports.object({
+        agent_id: external_exports.string().nullable().optional(),
+        agent_name: external_exports.string().nullable().optional(),
+        agent_role: external_exports.string().nullable().optional()
+      }).optional(),
+      scenario_set_id: external_exports.string().optional().catch(void 0)
+    });
+    evalSessionListItemSchema = evalSessionResponseSchema.omit({ session_config: true }).extend({ session_config: evalSessionListConfigSchema.optional() }).passthrough();
     seedReleaseStatusSchema = external_exports.enum(["not_applicable", "pending", "releasing"]);
     EVAL_SESSION_NOT_QUIESCENT = "session_not_quiescent";
     getConversationsQuery = external_exports.object({
@@ -7500,6 +7517,42 @@ var init_contracts = __esm({
     invoicesQuery = external_exports.object({
       limit: external_exports.string().regex(/^\d+$/).optional()
     });
+    planKeySchema = external_exports.enum(["free", "solo", "team"]);
+    billingStatusSchema = external_exports.enum(["active", "past_due", "cancelled"]);
+    REKOR_ENTITLEMENT_CONTRACT_VERSION = 1;
+    entitlementProjectionSchema = external_exports.object({
+      contract_version: external_exports.literal(REKOR_ENTITLEMENT_CONTRACT_VERSION),
+      /**
+       * Monotonic per org, WayAI-assigned. An ordering guard for concurrent WayAI
+       * writers (a plan change racing a token mint) — NOT a cross-repo CAS. Gaps are
+       * expected: a version is allocated per push attempt, and an idempotency skip
+       * (§2.4) burns none while a failed KV put burns one.
+       */
+      projection_version: external_exports.number().int().nonnegative(),
+      /** Diagnostic only — never gates. Freshness is `window_resets_at`'s job (§2.2). */
+      written_at: external_exports.string().datetime(),
+      /** The WayAI org UUID. The `account_id` spelling is Rekor's documented carve-out. */
+      account_id: external_exports.string().uuid(),
+      /** The EFFECTIVE plan, not the subscribed one (§2.2.1). Never gates. */
+      plan_key: planKeySchema,
+      /** Informational only (§2.2.1). `cancelled` spelling matches `BillingRecord`. */
+      billing_status: billingStatusSchema,
+      /** Tenths, matching Rekor's meter granularity (write 10, point-read 1, list/SQL 10). */
+      ops_tenths_included: external_exports.number().int().nonnegative(),
+      max_records: external_exports.number().int().nonnegative(),
+      /** Its own field, no longer derived from `max_records` (§2.2). */
+      import_rows_included: external_exports.number().int().nonnegative(),
+      /** REQUIRED — absence is malformed, never coerced to `false` (§2.2.2). */
+      production_bases: external_exports.boolean(),
+      /** Opaque to Rekor; compared for equality only, to reset `usage:` counters (§2.3). */
+      window_key: external_exports.string().min(1),
+      /** The sole staleness authority (§2.3). Never triggers a counter reset. */
+      window_resets_at: external_exports.string().datetime()
+    }).strict();
+    rekorEntitlementRefreshMessageSchema = external_exports.object({
+      org_id: external_exports.string().uuid(),
+      reason: external_exports.enum(["window_elapsed", "projection_missing", "projection_malformed"])
+    });
     downloadBody = external_exports.object({
       type: external_exports.enum(["workspace", "agent_instructions"]),
       agent_id: external_exports.string().uuid().optional(),
@@ -7941,7 +7994,14 @@ var init_contracts = __esm({
        * disable|enable` flips this. The DO's `updatePlatformConfig` allowlist already
        * accepts it; this exposes it on the route.
        */
-      harness_enabled: external_exports.number().int().min(0).max(1).optional()
+      harness_enabled: external_exports.number().int().min(0).max(1).optional(),
+      /**
+       * Default eval-session retention window in days, used by every hub that sets no
+       * `eval_retention_days` override. `0` disables eval retention platform-wide.
+       * NOT NULL in the DDL, so the field is non-nullable here — clearing is not a
+       * state; setting 0 is.
+       */
+      default_eval_retention_days: external_exports.number().int().min(0).max(MAX_EVAL_RETENTION_DAYS).optional()
     }).strip().refine(
       (data) => Object.keys(data).length > 0,
       { message: "No fields to update" }
@@ -7985,7 +8045,14 @@ var init_contracts = __esm({
       messages_per_unit: external_exports.number().int().min(1, "messages_per_unit must be a positive integer").optional(),
       seats_per_unit: external_exports.number().int().min(1, "seats_per_unit must be a positive integer").optional(),
       seats_scaling: external_exports.enum(["fixed", "per_quantity"]).optional(),
-      is_active: external_exports.boolean().optional()
+      is_active: external_exports.boolean().optional(),
+      // Rekor entitlement allowances (rekor-platform-contracts §2.2). Editable here for the
+      // same reason `messages_per_unit` is: otherwise the only way to change an allowance in
+      // production is a code deploy plus a seed-version bump.
+      rekor_ops_tenths_included: external_exports.number().int().min(0).optional(),
+      rekor_max_records: external_exports.number().int().min(0).optional(),
+      rekor_import_rows_included: external_exports.number().int().min(0).optional(),
+      rekor_production_bases: external_exports.number().int().min(0).max(1).optional()
     }).strip().refine(
       (data) => Object.keys(data).length > 0,
       { message: "No fields to update" }
@@ -8596,6 +8663,34 @@ var init_contracts = __esm({
     adminSkillNameParam = external_exports.object({
       name: external_exports.string().regex(ADMIN_SKILL_NAME_REGEX, "invalid skill name")
     });
+    REKOR_ACTOR_TYPE_HEADER = "X-Rekor-Actor-Type";
+    REKOR_ACTOR_ID_HEADER = "X-Rekor-Actor-Id";
+    REKOR_ACTOR_LABEL_HEADER = "X-Rekor-Actor-Label";
+    REKOR_ACTOR_ORG_HEADER = "X-Rekor-Actor-Org";
+    REKOR_ACTOR_ADMIN_HEADER = "X-Rekor-Actor-Admin";
+    REKOR_CLIENT_HEADER = "X-Rekor-Client";
+    REKOR_TOOL_ID_HEADER = "X-Rekor-Tool-Id";
+    REKOR_CLIENTS = ["api", "cli", "mcp"];
+    rekorClientSchema = external_exports.enum(REKOR_CLIENTS);
+    MAX_REKOR_TOOL_ID_LENGTH = 128;
+    rekorToolIdSchema = external_exports.string().trim().min(1).max(MAX_REKOR_TOOL_ID_LENGTH);
+    DATA_PROXY_MOUNT = "/data";
+    DATA_PROXY_PREFIX = `/api${DATA_PROXY_MOUNT}`;
+    REKOR_V1_PREFIX = "/v1";
+    DATA_PROXY_ORG_QUERY_PARAM = "org_id";
+    dataProxyQuery = external_exports.object({
+      [DATA_PROXY_ORG_QUERY_PARAM]: external_exports.string().uuid().optional()
+    });
+    rekorAttestation = external_exports.object({
+      [REKOR_ACTOR_TYPE_HEADER]: external_exports.enum(["user", "token"]),
+      [REKOR_ACTOR_ID_HEADER]: external_exports.string().min(1),
+      [REKOR_ACTOR_LABEL_HEADER]: external_exports.string(),
+      [REKOR_ACTOR_ORG_HEADER]: external_exports.string().uuid(),
+      [REKOR_ACTOR_ADMIN_HEADER]: external_exports.enum(["0", "1"]),
+      [REKOR_CLIENT_HEADER]: rekorClientSchema,
+      [REKOR_TOOL_ID_HEADER]: rekorToolIdSchema.optional()
+    });
+    REQUIRED_REKOR_ATTESTATION_HEADERS = Object.entries(rekorAttestation.shape).filter(([, field]) => !field.isOptional()).map(([header]) => header);
   }
 });
 
@@ -8603,7 +8698,9 @@ var init_contracts = __esm({
 var api_client_exports = {};
 __export(api_client_exports, {
   ApiClient: () => ApiClient,
-  ApiError: () => ApiError
+  ApiError: () => ApiError,
+  dataErrorMessage: () => dataErrorMessage,
+  toDataProxyPath: () => toDataProxyPath
 });
 function isRetryableErrorBody(body) {
   try {
@@ -8613,6 +8710,26 @@ function isRetryableErrorBody(body) {
     return false;
   }
 }
+function toDataProxyPath(v1Path) {
+  if (!v1Path.startsWith(`${REKOR_V1_PREFIX}/`)) {
+    throw new Error(`Data path must start with ${REKOR_V1_PREFIX}/: ${v1Path}`);
+  }
+  return `${DATA_PROXY_PREFIX}${v1Path.slice(REKOR_V1_PREFIX.length)}`;
+}
+function dataErrorMessage(err) {
+  if (!(err instanceof ApiError)) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(err.body);
+  } catch {
+    return null;
+  }
+  if (err.status === 404 && err.path.startsWith(DATA_PROXY_PREFIX) && typeof parsed?.error === "string") {
+    return "The Data surface is not available on this backend. Update the CLI, or point it at a backend that serves it.";
+  }
+  const message = parsed?.error?.message;
+  return typeof message === "string" && message ? message : null;
+}
 var RETRYABLE_BACKOFF_MS, delay, ApiError, ApiClient;
 var init_api_client = __esm({
   "src/lib/api-client.ts"() {
@@ -8625,12 +8742,19 @@ var init_api_client = __esm({
     ApiError = class extends Error {
       status;
       body;
-      constructor(method, path30, status, body) {
+      /**
+       * The request path that failed. Retained because a body alone cannot say
+       * WHICH surface answered: WayAI and the Data surface both emit 404s, and
+       * telling them apart by body shape misreads one for the other.
+       */
+      path;
+      constructor(method, path31, status, body) {
         const safeBody = maskSecretsInMessage(body);
-        super(`API request failed: ${method} ${path30} (${status}): ${safeBody}`);
+        super(`API request failed: ${method} ${path31} (${status}): ${safeBody}`);
         this.name = "ApiError";
         this.status = status;
         this.body = safeBody;
+        this.path = path31;
       }
       /** True when the status code is a 4xx client error (expected user-facing condition, not a bug). */
       get isExpected() {
@@ -8726,8 +8850,8 @@ var init_api_client = __esm({
           ...opts?.check && { check: true }
         });
       }
-      async lookup(path30, opts) {
-        const params = new URLSearchParams({ path: path30 });
+      async lookup(path31, opts) {
+        const params = new URLSearchParams({ path: path31 });
         if (opts?.organizationId) params.set("organization_id", opts.organizationId);
         return this.request("GET", `/api/ci/lookup?${params.toString()}`);
       }
@@ -9148,9 +9272,9 @@ var init_api_client = __esm({
        * sandbox for this conversation, or the blob was purged).
        */
       async downloadArchiveSandboxFs(hubId, conversationId) {
-        const path30 = `/api/archive/${encodeURIComponent(hubId)}/conversations/${encodeURIComponent(conversationId)}/sandbox`;
-        addApiBreadcrumb("GET", path30);
-        const url = `${this.apiUrl}${path30}`;
+        const path31 = `/api/archive/${encodeURIComponent(hubId)}/conversations/${encodeURIComponent(conversationId)}/sandbox`;
+        addApiBreadcrumb("GET", path31);
+        const url = `${this.apiUrl}${path31}`;
         let response = await this.send(url, "GET");
         if (response.status === 401 && this.onUnauthorized) {
           let refreshed;
@@ -9164,7 +9288,7 @@ var init_api_client = __esm({
           }
         }
         if (!response.ok) {
-          throw new ApiError("GET", path30, response.status, await response.text());
+          throw new ApiError("GET", path31, response.status, await response.text());
         }
         return new Uint8Array(await response.arrayBuffer());
       }
@@ -9204,9 +9328,9 @@ var init_api_client = __esm({
           `/api/admin/data-explorer/debug/observability/${encodeURIComponent(hubId)}/conversations/${encodeURIComponent(conversationId)}${qs}`
         );
       }
-      async request(method, path30, body) {
-        addApiBreadcrumb(method, path30);
-        const url = `${this.apiUrl}${path30}`;
+      async request(method, path31, body) {
+        addApiBreadcrumb(method, path31);
+        const url = `${this.apiUrl}${path31}`;
         let refreshedOn401 = false;
         for (let retry = 0; ; retry++) {
           let response = await this.send(url, method, body);
@@ -9223,23 +9347,65 @@ var init_api_client = __esm({
             }
           }
           if (response.ok) {
-            return response.json();
+            const okBody = await response.text();
+            return okBody ? JSON.parse(okBody) : void 0;
           }
           const errorBody = await response.text();
           if (method === "GET" && retry < RETRYABLE_BACKOFF_MS.length && isRetryableErrorBody(errorBody)) {
             await delay(RETRYABLE_BACKOFF_MS[retry]);
             continue;
           }
-          throw new ApiError(method, path30, response.status, errorBody);
+          throw new ApiError(method, path31, response.status, errorBody);
         }
       }
+      /**
+       * One request against the Data (`/v1`) surface — bases, records, files and the
+       * rest of the Bases namespace.
+       *
+       * `v1Path` is the Data backend's OWN path, verbatim (`/v1/bases`), so every
+       * ported command spells the path the Data Worker documents; only
+       * `toDataProxyPath` knows how WayAI mounts that surface. Identity is the
+       * caller's ordinary WayAI session — there is one keyring login, and the
+       * backend attests the org over its service binding rather than forwarding a
+       * credential (docs/reference/rekor-platform-contracts.md §1).
+       *
+       * Returns the surface's `{ data, meta }` envelope rather than unwrapping, so
+       * cursor-paginated lists can follow `meta.has_more`. A failure throws the same
+       * `ApiError` as every other CLI request, so the top-level handler is unchanged;
+       * `dataErrorMessage` recovers the envelope's own message for display.
+       *
+       * `orgId` is the caller's org SELECTOR (the `--org` flag, else the repo's
+       * `.wayai.yaml`), not an authorization claim: the backend validates it against
+       * the caller's grants and attests only the validated result. A multi-org user
+       * needs it to pick; a single-org user can omit it.
+       *
+       * It travels as the proxy's own query param, whose name is imported rather
+       * than spelled — the handler validates it and strips it before forwarding,
+       * since it is WayAI's selector and not an input Rekor sees.
+       */
+      async dataRequest(method, v1Path, body, orgId) {
+        const separator = v1Path.includes("?") ? "&" : "?";
+        const orgQuery = orgId ? `${separator}${DATA_PROXY_ORG_QUERY_PARAM}=${encodeURIComponent(orgId)}` : "";
+        const envelope = await this.request(
+          method,
+          `${toDataProxyPath(v1Path)}${orgQuery}`,
+          body
+        );
+        return envelope ?? {};
+      }
       /** Issue a single authenticated request with the client's current token. */
       send(url, method, body) {
         return fetch(url, {
           method,
           headers: {
             Authorization: `Bearer ${this.accessToken}`,
-            "Content-Type": "application/json"
+            "Content-Type": "application/json",
+            // Names the calling process, on every request. A HINT, not an
+            // authorization input: any client can send it, so the backend must
+            // normalize it against what it knows about its own ingress rather than
+            // trust it. Nothing is granted or denied on its value; the Data Worker's
+            // audit rows are its consumer (contracts §1.4).
+            "X-WayAI-Client": "cli"
           },
           body: body ? JSON.stringify(body) : void 0
         });
@@ -9288,6 +9454,8 @@ function friendlyHint(err) {
   if (err.body.includes("FREE_PLAN_RESTRICTION")) {
     return "Publishing to production requires a paid plan. Upgrade your organization to publish or sync.";
   }
+  const dataMessage = dataErrorMessage(err);
+  if (dataMessage) return dataMessage;
   const { status } = err;
   if (status === 401) return "Your session may have expired. Run `wayai login` to re-authenticate.";
   if (status === 402) return "Quota exceeded for your plan. Review usage or upgrade your plan.";
@@ -9349,12 +9517,12 @@ function validateFollowupLinks2(followups, label, ctx) {
   const linkTargets = /* @__PURE__ */ new Set();
   followups.forEach((followup, i) => {
     const ref = followup?.after_followup_id;
-    const path30 = ["followups", i, "after_followup_id"];
+    const path31 = ["followups", i, "after_followup_id"];
     if (followup?.type !== "inactivity_after_before_event") {
       if (ref !== void 0) {
         ctx.addIssue({
           code: external_exports.ZodIssueCode.custom,
-          path: path30,
+          path: path31,
           message: `kanban status ${label}: after_followup_id is only valid on inactivity_after_before_event followups (this one is ${followup?.type})`
         });
       }
@@ -9363,7 +9531,7 @@ function validateFollowupLinks2(followups, label, ctx) {
     if (ref === void 0) {
       ctx.addIssue({
         code: external_exports.ZodIssueCode.custom,
-        path: path30,
+        path: path31,
         message: `kanban status ${label}: inactivity_after_before_event requires after_followup_id naming the id of a before_event followup in the same status`
       });
       return;
@@ -9373,7 +9541,7 @@ function validateFollowupLinks2(followups, label, ctx) {
     if (matches.length > 1) {
       ctx.addIssue({
         code: external_exports.ZodIssueCode.custom,
-        path: path30,
+        path: path31,
         message: `kanban status ${label}: after_followup_id "${ref}" matches ${matches.length} followups \u2014 a link must name exactly one`
       });
       return;
@@ -9385,7 +9553,7 @@ function validateFollowupLinks2(followups, label, ctx) {
       );
       ctx.addIssue({
         code: external_exports.ZodIssueCode.custom,
-        path: path30,
+        path: path31,
         message: hasIdlessBeforeEvent ? `kanban status ${label}: after_followup_id "${ref}" matches no followup \u2014 a link target must declare an explicit id, and this status has before_event followups without one` : `kanban status ${label}: after_followup_id "${ref}" matches no followup in this status`
       });
       return;
@@ -9393,7 +9561,7 @@ function validateFollowupLinks2(followups, label, ctx) {
     if (target.type !== "before_event") {
       ctx.addIssue({
         code: external_exports.ZodIssueCode.custom,
-        path: path30,
+        path: path31,
         message: `kanban status ${label}: after_followup_id "${ref}" points at a ${target.type} followup \u2014 only before_event followups can anchor a chain`
       });
     }
@@ -9469,12 +9637,12 @@ function typeMatches2(typeField, allowed) {
   if (Array.isArray(typeField)) return typeField.every((t) => typeof t === "string" && allowed.has(t));
   return false;
 }
-function validateSchema2(schema, path30, errors, opts = {}) {
+function validateSchema2(schema, path31, errors, opts = {}) {
   if (typeof schema === "boolean") return;
   const depth = opts.depth ?? 0;
   if (depth > MAX_SCHEMA_DEPTH2) {
     errors.push({
-      path: path30 || "<root>",
+      path: path31 || "<root>",
       message: `schema nesting exceeds ${MAX_SCHEMA_DEPTH2} levels`,
       suggestion: "Flatten the schema; LLM providers reject deeply nested tool input_schemas."
     });
@@ -9482,7 +9650,7 @@ function validateSchema2(schema, path30, errors, opts = {}) {
   }
   if (!isRecord2(schema)) {
     errors.push({
-      path: path30,
+      path: path31,
       message: `expected object, got ${schema === null ? "null" : typeof schema}`
     });
     return;
@@ -9490,14 +9658,14 @@ function validateSchema2(schema, path30, errors, opts = {}) {
   if (opts.isRoot) {
     if ("type" in schema && schema.type !== "object") {
       errors.push({
-        path: path30 ? `${path30}.type` : "type",
+        path: path31 ? `${path31}.type` : "type",
         message: `root type must be 'object', got ${JSON.stringify(schema.type)}`,
         suggestion: "Tool parameters at the root must be an object: `{ type: 'object', properties: { ... } }`."
       });
     }
   } else if ("type" in schema && !typeMatches2(schema.type, ALLOWED_TYPES2)) {
     errors.push({
-      path: `${path30}.type`,
+      path: `${path31}.type`,
       message: `type must be one of ${[...ALLOWED_TYPES2].join("/")} or an array of those, got ${JSON.stringify(schema.type)}`
     });
   }
@@ -9507,25 +9675,25 @@ function validateSchema2(schema, path30, errors, opts = {}) {
       const isPlaceholder = PLACEHOLDER_TOKENS2.includes(e);
       const isOutcomePlaceholder = e === "[KANBAN_OUTCOME_VALUES]";
       errors.push({
-        path: `${path30}.enum`,
+        path: `${path31}.enum`,
         message: `enum must be a non-empty array of primitives, got string ${JSON.stringify(e)}`,
         suggestion: isOutcomePlaceholder ? "Declare `outcomes` on the hub's terminal kanban status so the platform can render the placeholder into a valid array; with none configured the platform drops the parameter instead." : isPlaceholder ? "Set `operation: 'update_kanban_status'` on the tool and ensure at least one hub.kanban_status has `allowsAgentUpdate: true` so the platform can render the placeholder into a valid array." : 'Wrap the value in an array: `enum: ["value"]`.'
       });
     } else if (!Array.isArray(e)) {
       errors.push({
-        path: `${path30}.enum`,
+        path: `${path31}.enum`,
         message: `enum must be a non-empty array of primitives, got ${typeof e}`
       });
     } else if (e.length === 0) {
       errors.push({
-        path: `${path30}.enum`,
+        path: `${path31}.enum`,
         message: "enum must not be empty"
       });
     } else {
       for (let i = 0; i < e.length; i++) {
         if (!isPrimitive2(e[i])) {
           errors.push({
-            path: `${path30}.enum[${i}]`,
+            path: `${path31}.enum[${i}]`,
             message: `enum entry must be a primitive (string/number/boolean/null), got ${typeof e[i]}`
           });
         }
@@ -9535,7 +9703,7 @@ function validateSchema2(schema, path30, errors, opts = {}) {
   for (const key of ["exclusiveMinimum", "exclusiveMaximum"]) {
     if (key in schema && typeof schema[key] === "boolean") {
       errors.push({
-        path: `${path30}.${key}`,
+        path: `${path31}.${key}`,
         message: `${key} as boolean is draft-04 syntax; draft 2020-12 requires a numeric value`,
         suggestion: `Replace with the numeric bound, e.g. \`${key}: 0\`.`
       });
@@ -9544,45 +9712,45 @@ function validateSchema2(schema, path30, errors, opts = {}) {
   if ("properties" in schema) {
     if (!isRecord2(schema.properties)) {
       errors.push({
-        path: `${path30}.properties`,
+        path: `${path31}.properties`,
         message: `properties must be an object, got ${Array.isArray(schema.properties) ? "array" : typeof schema.properties}`
       });
     } else {
       for (const [propName, propSchema] of Object.entries(schema.properties)) {
-        validateSchema2(propSchema, `${path30}.properties.${propName}`, errors, { depth: depth + 1 });
+        validateSchema2(propSchema, `${path31}.properties.${propName}`, errors, { depth: depth + 1 });
       }
     }
   }
   if (schemaTypeIncludes2(schema, "array") && "items" in schema) {
     if (Array.isArray(schema.items)) {
-      schema.items.forEach((sub, i) => validateSchema2(sub, `${path30}.items[${i}]`, errors, { depth: depth + 1 }));
+      schema.items.forEach((sub, i) => validateSchema2(sub, `${path31}.items[${i}]`, errors, { depth: depth + 1 }));
     } else {
-      validateSchema2(schema.items, `${path30}.items`, errors, { depth: depth + 1 });
+      validateSchema2(schema.items, `${path31}.items`, errors, { depth: depth + 1 });
     }
   }
   for (const key of SUBSCHEMA_OBJECT_KEYWORDS2) {
     if (key in schema && isRecord2(schema[key])) {
-      validateSchema2(schema[key], `${path30}.${key}`, errors, { depth: depth + 1 });
+      validateSchema2(schema[key], `${path31}.${key}`, errors, { depth: depth + 1 });
     }
   }
   for (const key of SUBSCHEMA_LIST_KEYWORDS2) {
     const list = schema[key];
     if (Array.isArray(list)) {
-      list.forEach((sub, i) => validateSchema2(sub, `${path30}.${key}[${i}]`, errors, { depth: depth + 1 }));
+      list.forEach((sub, i) => validateSchema2(sub, `${path31}.${key}[${i}]`, errors, { depth: depth + 1 }));
     }
   }
   for (const key of SUBSCHEMA_MAP_KEYWORDS2) {
     const map = schema[key];
     if (isRecord2(map)) {
       for (const [name, sub] of Object.entries(map)) {
-        validateSchema2(sub, `${path30}.${key}.${name}`, errors, { depth: depth + 1 });
+        validateSchema2(sub, `${path31}.${key}.${name}`, errors, { depth: depth + 1 });
       }
     }
   }
   const reportedPaths = new Set(errors.map((e) => e.path));
   for (const [k, v] of Object.entries(schema)) {
     if (typeof v !== "string") continue;
-    const fieldPath = `${path30}.${k}`;
+    const fieldPath = `${path31}.${k}`;
     if (reportedPaths.has(fieldPath)) continue;
     for (const token of PLACEHOLDER_TOKENS2) {
       if (v === token) {
@@ -9727,8 +9895,8 @@ function evalInitialStateError2(input) {
     const parsed = evalInitialStateEntry2.safeParse(entries[i]);
     if (!parsed.success) {
       const issue = parsed.error.issues[0];
-      const path30 = issue?.path.join(".") || "?";
-      return `initial_state[${i}].${path30} is invalid: ${issue?.message ?? "malformed"}`;
+      const path31 = issue?.path.join(".") || "?";
+      return `initial_state[${i}].${path31} is invalid: ${issue?.message ?? "malformed"}`;
     }
     if (seenSlugs.has(parsed.data.slug)) {
       return `initial_state[${i}].slug "${parsed.data.slug}" is declared more than once`;
@@ -9933,10 +10101,10 @@ function refineHubAsCodeEvals2(config, ctx) {
 function refineHubAsCodeEvalAttachments2(config, ctx) {
   const cfg = config;
   const referencedHashes = /* @__PURE__ */ new Set();
-  const addTurnIssue = (path30, turn, name) => {
+  const addTurnIssue = (path31, turn, name) => {
     const error = evalTurnAttachmentsError2(turn);
     if (error) {
-      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: path30, message: `${name}: ${error}` });
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: path31, message: `${name}: ${error}` });
       return;
     }
     for (const hash of collectTurnAttachmentHashes2(turn)) referencedHashes.add(hash);
@@ -10082,11 +10250,11 @@ function refineHubAsCodeDelegation2(config, ctx) {
         }
       }
       if (del.context_boundary === void 0) return;
-      const path30 = ["agents", agentIndex, "tools", "delegation", delIndex, "context_boundary"];
+      const path31 = ["agents", agentIndex, "tools", "delegation", delIndex, "context_boundary"];
       if (del.type !== "hub") {
         ctx.addIssue({
           code: external_exports.ZodIssueCode.custom,
-          path: path30,
+          path: path31,
           message: `context_boundary applies only to \`type: hub\` delegations (got type "${String(del.type)}")`
         });
         return;
@@ -10094,7 +10262,7 @@ function refineHubAsCodeDelegation2(config, ctx) {
       if (!CONTEXT_BOUNDARIES2.includes(del.context_boundary)) {
         ctx.addIssue({
           code: external_exports.ZodIssueCode.custom,
-          path: path30,
+          path: path31,
           message: `context_boundary must be one of: ${CONTEXT_BOUNDARIES2.join(", ")}`
         });
       }
@@ -10140,7 +10308,7 @@ function findStepBoundaries(transcript) {
   }
   return out;
 }
-var UUID_RE, HEX_RE, WORKOS_ID_RE, OPAQUE_SECRET_RE, BASE64_SECRET_RE, BASE64_MARKER_RE, TOKEN_RE, SENSITIVE_FIELDS, SENSITIVE_KEY_ALTERNATION, SENSITIVE_KEY_PATTERN, JSON_CREDENTIAL_RE, QUERY_CREDENTIAL_RE, REDACTED, PROVIDER_TOKEN_RE, APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_CONTENT_BRAND, LlmProviderContentError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE2, ORG_CREDENTIAL_AUTH_TYPES2, AUTH_TYPE_DISPLAY2, LEGACY_AUTH_TYPE_MAP2, VALID_AUTH_TYPES2, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, clientOptionalString2, clientOptionalBoolean2, clientOptionalNumber2, messageAttachment2, MAX_MESSAGE_BODY_BYTES2, MAX_ATTACHMENTS_PER_MESSAGE2, MAX_AUDIO_FILE_BASE64_BYTES2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, PREVIOUS_CONVERSATIONS_MAX2, previousConversationsCountField2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupTypeSchema2, EVENT_RELATIVE_FOLLOWUP_TYPES2, followupTimeUnitSchema2, followupIdSchema2, SELECTABLE_FOLLOWUP_TYPES2, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS2, followupSchema2, MAX_OUTCOMES_PER_STATUS2, kanbanOutcomeSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, PREVIEW_LABEL_MAX_LENGTH2, MAX_ENDED_INDEX_RETENTION_DAYS2, previewLabelField2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, updateChannelTestIdentitiesBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, PRODUCTION_DIRECT_FIELDS2, setProductionCredentialBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, CONTEXT_BOUNDARIES2, contextBoundarySchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlTable2, analyticsSqlSchemaQuery2, EVAL_PACING_PRESET_NAMES2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_MAX_RUNS_PER_SCENARIO2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, ISO_UTC_RE2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, evalDateContextSchema2, EVAL_FIXTURE_NAME_MAX_LENGTH2, evalFixtureOverrideSchema2, runSessionQuery2, EVAL_INPUT_ROLES2, EVAL_INPUT_ROLE_LIST2, ROLE_ECHO_MAX2, EVAL_INITIAL_STATE_SCOPES2, MAX_INITIAL_STATE_ENTRIES2, evalInitialStateEntry2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, EVAL_MAX_SELECTED_SCENARIOS2, evalScenarioSelectionEntrySchema2, evalScenarioSelectionSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, EVAL_ATTACHMENT_HASH_REGEX2, evalAttachmentRef2, turnMayCarryAttachments2, ATTACHMENTS_USER_ONLY_MESSAGE2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, fixtureField2, createJourneyBody2, updateJourneyBody2, evalSessionConfigResponseSchema2, evalSessionResponseSchema2, seedReleaseStatusSchema2, getConversationsQuery2, getMessagesQuery2, appMessageSenderType2, appMessageReceiverType2, apiChannelMessage2, apiChannelMessageBody2, appMessageBody2, appMessageResponse2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, deleteUserConversationsResponse2, sendMessageBody2, listConversationsQuery2, flagSourceSchema2, getConversationsResponse2, getConversationDetailParams2, getConversationDetailQuery2, getConversationDetailResponse2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, copilotSuggestBody2, copilotSuggestResponse2, CONSULT_THREAD_STATUSES2, consultThreadStatus2, CONSULT_THREAD_TITLE_MAX2, consultThreadTitle2, consultThreadSummary2, listConsultThreadsQuery2, listConsultThreadsResponse2, createConsultThreadBody2, createConsultThreadResponse2, consultThreadIdParam2, updateConsultThreadBody2, updateConsultThreadResponse2, CONSULT_AWAIT_TIMEOUT_MS2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, MAX_RESOURCE_FILE_SIZE2, MAX_10MB_BASE64_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_CARRIERS2, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES2, MAX_RESOURCE_ENCODED_BYTES2, MAX_HUB_AS_CODE_RESOURCES2, MAX_HUB_AS_CODE_RESOURCE_FILES2, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES2, MAX_CI_CONFIG_BODY_BYTES2, hubAsCodeStateSchema2, hubAsCodeResourceFileSchema2, hubAsCodeResourceSchema2, uuidPattern2, ciUuidSchema2, boundedHubAsCodeResourcesSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, CI_APPLY_ENTITY_KINDS2, CI_APPLY_OPERATIONS2, ciApplyErrorBaseSchema2, ciApplyErrorSchema2, ciSyncCountSchema2, ciSyncChangesSchema2, ciSyncWarningSchema2, ciSyncResponseSchema2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, adminScopedTargetBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysBody2, dataExplorerKvKeyBody2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteBody2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, sandboxEgressPolicy2, SANDBOX_EXEC_MAX_CMD_LENGTH2, SANDBOX_EXEC_MAX_ALLOWLIST2, SANDBOX_EXEC_MAX_TIMEOUT_MS2, adminSandboxExecBody2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, passwordLoginBody2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, reportMessageSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, reporterReportSummarySchema2, reporterListResponseSchema2, getReportResponseSchema2, reporterTransitionResponseSchema2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2, WAYAI_WORKSPACE_LAYOUT;
+var UUID_RE, HEX_RE, WORKOS_ID_RE, OPAQUE_SECRET_RE, BASE64_SECRET_RE, BASE64_MARKER_RE, TOKEN_RE, SENSITIVE_FIELDS, SENSITIVE_KEY_ALTERNATION, SENSITIVE_KEY_PATTERN, JSON_CREDENTIAL_RE, QUERY_CREDENTIAL_RE, REDACTED, PROVIDER_TOKEN_RE, APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_CONTENT_BRAND, LlmProviderContentError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, REKOR_ACTOR_TYPE_HEADER2, REKOR_ACTOR_ID_HEADER2, REKOR_ACTOR_LABEL_HEADER2, REKOR_ACTOR_ORG_HEADER2, REKOR_ACTOR_ADMIN_HEADER2, REKOR_CLIENT_HEADER2, REKOR_TOOL_ID_HEADER2, REKOR_CLIENTS2, rekorClientSchema2, MAX_REKOR_TOOL_ID_LENGTH2, rekorToolIdSchema2, DATA_PROXY_MOUNT2, DATA_PROXY_PREFIX2, DATA_PROXY_ORG_QUERY_PARAM2, dataProxyQuery2, rekorAttestation2, REQUIRED_REKOR_ATTESTATION_HEADERS2, ENDPOINT_CONFIGS, AUTH_TYPE2, ORG_CREDENTIAL_AUTH_TYPES2, AUTH_TYPE_DISPLAY2, LEGACY_AUTH_TYPE_MAP2, VALID_AUTH_TYPES2, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, clientOptionalString2, clientOptionalBoolean2, clientOptionalNumber2, messageAttachment2, MAX_MESSAGE_BODY_BYTES2, MAX_ATTACHMENTS_PER_MESSAGE2, MAX_AUDIO_FILE_BASE64_BYTES2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, PREVIOUS_CONVERSATIONS_MAX2, previousConversationsCountField2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupTypeSchema2, EVENT_RELATIVE_FOLLOWUP_TYPES2, followupTimeUnitSchema2, followupIdSchema2, SELECTABLE_FOLLOWUP_TYPES2, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS2, followupSchema2, MAX_OUTCOMES_PER_STATUS2, kanbanOutcomeSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, PREVIEW_LABEL_MAX_LENGTH2, MAX_ENDED_INDEX_RETENTION_DAYS2, MAX_EVAL_RETENTION_DAYS2, previewLabelField2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, updateChannelTestIdentitiesBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, PRODUCTION_DIRECT_FIELDS2, setProductionCredentialBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, CONTEXT_BOUNDARIES2, contextBoundarySchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlTable2, analyticsSqlSchemaQuery2, EVAL_PACING_PRESET_NAMES2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_MAX_RUNS_PER_SCENARIO2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, ISO_UTC_RE2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, evalDateContextSchema2, EVAL_FIXTURE_NAME_MAX_LENGTH2, evalFixtureOverrideSchema2, runSessionQuery2, EVAL_INPUT_ROLES2, EVAL_INPUT_ROLE_LIST2, ROLE_ECHO_MAX2, EVAL_INITIAL_STATE_SCOPES2, MAX_INITIAL_STATE_ENTRIES2, evalInitialStateEntry2, createEvalBody2, updateEvalBody2, EVAL_LIST_MAX_LIMIT2, evalListLimit2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, EVAL_MAX_SELECTED_SCENARIOS2, evalScenarioSelectionEntrySchema2, evalScenarioSelectionSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, EVAL_ATTACHMENT_HASH_REGEX2, evalAttachmentRef2, turnMayCarryAttachments2, ATTACHMENTS_USER_ONLY_MESSAGE2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, fixtureField2, createJourneyBody2, updateJourneyBody2, evalSessionConfigResponseSchema2, evalSessionResponseSchema2, evalSessionListConfigSchema2, evalSessionListItemSchema2, seedReleaseStatusSchema2, getConversationsQuery2, getMessagesQuery2, appMessageSenderType2, appMessageReceiverType2, apiChannelMessage2, apiChannelMessageBody2, appMessageBody2, appMessageResponse2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, deleteUserConversationsResponse2, sendMessageBody2, listConversationsQuery2, flagSourceSchema2, getConversationsResponse2, getConversationDetailParams2, getConversationDetailQuery2, getConversationDetailResponse2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, copilotSuggestBody2, copilotSuggestResponse2, CONSULT_THREAD_STATUSES2, consultThreadStatus2, CONSULT_THREAD_TITLE_MAX2, consultThreadTitle2, consultThreadSummary2, listConsultThreadsQuery2, listConsultThreadsResponse2, createConsultThreadBody2, createConsultThreadResponse2, consultThreadIdParam2, updateConsultThreadBody2, updateConsultThreadResponse2, CONSULT_AWAIT_TIMEOUT_MS2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, planKeySchema2, billingStatusSchema2, REKOR_ENTITLEMENT_CONTRACT_VERSION2, entitlementProjectionSchema2, rekorEntitlementRefreshMessageSchema2, downloadBody2, uploadQuery2, signUrlBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, MAX_RESOURCE_FILE_SIZE2, MAX_10MB_BASE64_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_CARRIERS2, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES2, MAX_RESOURCE_ENCODED_BYTES2, MAX_HUB_AS_CODE_RESOURCES2, MAX_HUB_AS_CODE_RESOURCE_FILES2, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES2, MAX_CI_CONFIG_BODY_BYTES2, hubAsCodeStateSchema2, hubAsCodeResourceFileSchema2, hubAsCodeResourceSchema2, uuidPattern2, ciUuidSchema2, boundedHubAsCodeResourcesSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, CI_APPLY_ENTITY_KINDS2, CI_APPLY_OPERATIONS2, ciApplyErrorBaseSchema2, ciApplyErrorSchema2, ciSyncCountSchema2, ciSyncChangesSchema2, ciSyncWarningSchema2, ciSyncResponseSchema2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, adminScopedTargetBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysBody2, dataExplorerKvKeyBody2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteBody2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, sandboxEgressPolicy2, SANDBOX_EXEC_MAX_CMD_LENGTH2, SANDBOX_EXEC_MAX_ALLOWLIST2, SANDBOX_EXEC_MAX_TIMEOUT_MS2, adminSandboxExecBody2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, passwordLoginBody2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, reportMessageSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, reporterReportSummarySchema2, reporterListResponseSchema2, getReportResponseSchema2, reporterTransitionResponseSchema2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2, WAYAI_WORKSPACE_LAYOUT;
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
     "use strict";
@@ -10192,6 +10360,7 @@ var init_dist = __esm({
     init_zod();
     init_zod();
     init_zod();
+    init_zod();
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     HEX_RE = /^[0-9a-f]{16,}$/;
     WORKOS_ID_RE = /^(?:user|org)_[0-9A-HJKMNP-TV-Z]{26}$/;
@@ -10349,6 +10518,208 @@ var init_dist = __esm({
       }
       [MEDIA_PROVIDER_HTTP_BRAND] = true;
     };
+    REKOR_ACTOR_TYPE_HEADER2 = "X-Rekor-Actor-Type";
+    REKOR_ACTOR_ID_HEADER2 = "X-Rekor-Actor-Id";
+    REKOR_ACTOR_LABEL_HEADER2 = "X-Rekor-Actor-Label";
+    REKOR_ACTOR_ORG_HEADER2 = "X-Rekor-Actor-Org";
+    REKOR_ACTOR_ADMIN_HEADER2 = "X-Rekor-Actor-Admin";
+    REKOR_CLIENT_HEADER2 = "X-Rekor-Client";
+    REKOR_TOOL_ID_HEADER2 = "X-Rekor-Tool-Id";
+    REKOR_CLIENTS2 = ["api", "cli", "mcp"];
+    rekorClientSchema2 = external_exports.enum(REKOR_CLIENTS2);
+    MAX_REKOR_TOOL_ID_LENGTH2 = 128;
+    rekorToolIdSchema2 = external_exports.string().trim().min(1).max(MAX_REKOR_TOOL_ID_LENGTH2);
+    DATA_PROXY_MOUNT2 = "/data";
+    DATA_PROXY_PREFIX2 = `/api${DATA_PROXY_MOUNT2}`;
+    DATA_PROXY_ORG_QUERY_PARAM2 = "org_id";
+    dataProxyQuery2 = external_exports.object({
+      [DATA_PROXY_ORG_QUERY_PARAM2]: external_exports.string().uuid().optional()
+    });
+    rekorAttestation2 = external_exports.object({
+      [REKOR_ACTOR_TYPE_HEADER2]: external_exports.enum(["user", "token"]),
+      [REKOR_ACTOR_ID_HEADER2]: external_exports.string().min(1),
+      [REKOR_ACTOR_LABEL_HEADER2]: external_exports.string(),
+      [REKOR_ACTOR_ORG_HEADER2]: external_exports.string().uuid(),
+      [REKOR_ACTOR_ADMIN_HEADER2]: external_exports.enum(["0", "1"]),
+      [REKOR_CLIENT_HEADER2]: rekorClientSchema2,
+      [REKOR_TOOL_ID_HEADER2]: rekorToolIdSchema2.optional()
+    });
+    REQUIRED_REKOR_ATTESTATION_HEADERS2 = Object.entries(rekorAttestation2.shape).filter(([, field]) => !field.isOptional()).map(([header]) => header);
+    ENDPOINT_CONFIGS = {
+      // OAuth callbacks - strict, fail-closed (prevent brute force)
+      "/oauth/callback/*": { tier: "STRICT", failClosed: true },
+      // Auth endpoints - strict, fail-closed
+      "/auth/phone": { tier: "STRICT", failClosed: true },
+      "/auth/mcp/exchange": { tier: "MODERATE", failClosed: true },
+      // Native magic-code login (pre-auth) — STRICT per-IP bounds a single host; WorkOS owns
+      // the per-email lockout / TTL / single-use guarantees.
+      "/api/auth/magic-code/*": { tier: "STRICT", failClosed: true },
+      // Native password login (pre-auth) — same posture as magic-code above. STRICT per-IP bounds a
+      // single host but FAILS OPEN on a binding error (like every IP limit); the `failClosed` flag
+      // here is inert on a pre-auth route (it's only enforced on the per-user branch, which needs an
+      // authenticated caller). The fail-CLOSED brute-force guarantee for the static credential comes
+      // from the route's per-email caps (burst + cumulative hourly), not this flag.
+      "/api/auth/password/*": { tier: "STRICT", failClosed: true },
+      // Billing - moderate, fail-closed with user limits
+      "/api/billing/*": { tier: "MODERATE", userLimit: 100, failClosed: true, skipAuthenticatedUsers: true },
+      "/webhooks/stripe": { tier: "MODERATE", failClosed: true },
+      "/webhooks/workos": { tier: "MODERATE", failClosed: true },
+      // API endpoints - standard with user limits
+      "/api/setup/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/conversations/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/users/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/analytics/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/evals/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/files/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/outbound/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/live-updates/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/hub-users/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      "/api/conversation-state/*": { tier: "STANDARD", userLimit: 150, skipAuthenticatedUsers: true },
+      // Channel webhooks - high throughput (external systems, never authenticated)
+      "/webhooks/whatsapp/*": { tier: "HIGH" },
+      "/webhooks/instagram/*": { tier: "HIGH" },
+      // Reports (CLI → platform_report triage queue). One per-user budget covers intake
+      // (POST), the content edit (PATCH /:id), the reporter read-back (GET, GET /:id), and the
+      // verification loop (POST /:id/accept, /:id/contest). The limiter is path-based, so a
+      // method-level split (loose reads, strict writes) isn't expressible — GET /:id and PATCH
+      // /:id share a path. So the budget is sized for the read-heavy poll loop (a reporter agent
+      // polling `report get`/`list` while it waits for the fix), at 60/hour. Intake-flooding stays
+      // bounded regardless: identical reports collapse on `fingerprint` (ON CONFLICT DO NOTHING),
+      // so a runaway create loop merges rather than floods. Still STRICT tier + failClosed so a
+      // genuinely runaway distinct-report loop surfaces as 429. The `/*` is load-bearing — an
+      // exact `/api/reports` key would leave the `/:id` paths unmatched (→ unthrottled).
+      // `userLimitKey` is equally load-bearing: without it, middleware falls back to each raw
+      // pathname and report IDs/actions receive independent counters instead of this shared budget.
+      "/api/reports/*": {
+        tier: "STRICT",
+        userLimit: 60,
+        userWindow: 3600,
+        failClosed: true,
+        skipAuthenticatedUsers: true,
+        userLimitKey: "/api/reports/*"
+      },
+      // Admin report mutations (transition/group/ungroup/edit) — platform-admin
+      // gated at the route, rate-limited here as defense-in-depth. Generous STANDARD
+      // cap so legitimate triage bursts aren't throttled (grouping is one request
+      // even for many members); deliberately NOT failClosed so a Redis blip never
+      // blocks an admin's triage. The bare GET reads share this budget harmlessly.
+      "/api/admin/reports/*": { tier: "STANDARD", userLimit: 150 },
+      // GitHub webhook (issues.closed → platform_report addressed). MODERATE +
+      // fail-closed; GitHub retries on transient failures so a brief Redis blip
+      // doesn't lose state.
+      "/webhooks/github": { tier: "MODERATE", failClosed: true },
+      // Account deletion — strict on the destructive POST + public undo. The
+      // /api/users/* default tier above ALSO matches these, but `getEndpointConfig`
+      // returns the longest-prefix match, so the more specific entries here win.
+      // `skipAuthenticatedUsers` deliberately omitted: every caller is authenticated,
+      // so including it would make `userLimit` a no-op — the per-user cap IS the gate.
+      "/api/users/me/deletion": { tier: "STRICT", userLimit: 3, userWindow: 3600, failClosed: true },
+      "/api/users/me/deletion/preflight": { tier: "STANDARD", userLimit: 30, failClosed: true },
+      "/api/users/deletion/undo": { tier: "STRICT", failClosed: true },
+      // Email-invite preview — public, fail-closed. MODERATE (30/min IP) leaves
+      // headroom for the signup-page server-fetch + reloads + prefetches; STRICT
+      // would throttle legitimate users opening the link in multiple tabs.
+      "/api/invites/preview": { tier: "MODERATE", failClosed: true },
+      // Admin DO debug reads — the ONE deliberate deviation from the Data Explorer
+      // catch-all below, and the only reason a per-route key still exists here.
+      // Platform-admin is enforced at the route; this is the independent
+      // defense-in-depth signal so a runaway investigation script surfaces as 429.
+      //
+      // STRICT is kept ON PURPOSE even though the catch-all moved off it, because
+      // `tier` is the only layer that bounds enumeration on this surface: the
+      // per-user cap keys on the RAW pathname (see the CAVEAT below), so sweeping
+      // `/debug/do/hub/<id>/tables` across thousands of ids never trips it. At 5/min
+      // vs STANDARD's 100/min, walking 10k ids takes ~33h instead of ~100min — a
+      // detection window worth keeping on the routes that return RAW DO ROWS.
+      //
+      // The cost, stated rather than elided: STRICT is one bucket shared with
+      // `/oauth/callback/*` and `/api/auth/magic-code/*`, so a debug session from a
+      // NAT'd office IP can 429 a colleague's login for up to a minute. That trade is
+      // accepted for a rare, deliberate investigation surface — and is exactly why the
+      // browse routes below are NOT here.
+      "/api/admin/data-explorer/debug/*": { tier: "STRICT", userLimit: 60, userWindow: 3600, failClosed: true },
+      // Catch-all for the rest of the Data Explorer (`/search`, `/entity/*`, `/do/*`,
+      // `/kv/*`, the DELETE routes). Added as a catch-all rather than another per-route
+      // key because this budget kept lagging behind routes joining the debug boundary:
+      // with no match the path falls to the default, which sets no `userLimit`, so the
+      // per-user layer never runs at all. `getEndpointConfig` takes the longest match,
+      // so `debug/*` above still wins.
+      //
+      // `/entity/*` deliberately has NO key of its own: it needs precisely this config,
+      // and a duplicate entry is how the two drift apart on the next edit.
+      //
+      // `tier` is deliberately STANDARD, not STRICT. `tier` is the per-IP knob and
+      // STRICT is 5/min keyed on IP ALONE — one bucket shared across every STRICT
+      // endpoint. On these browse routes that breaks the console (open Browse KV and
+      // inspect four values = 6 requests; expand six org rows in the search results =
+      // 6 `/entity/org/:id` calls) and would drain the same IP's budget for
+      // `/oauth/callback/*` and `/api/auth/magic-code/*`, which on a NAT'd office IP
+      // means all admins. The per-user hourly cap is the leg that matters here.
+      //
+      // The canonical key is deliberate: raw pathnames contain DO ids and arbitrary
+      // malformed requests can contain credential material. Keying on the raw pathname
+      // both stores that material in Redis/logs and gives every target a fresh counter.
+      // One stable identity makes every browse request consume the same per-admin
+      // budget without storing request targets.
+      //
+      // 600/hour preserves the original pagination requirement (about 30k rows at
+      // 50/page) while now genuinely bounding id/key enumeration across the surface.
+      "/api/admin/data-explorer/*": {
+        tier: "STANDARD",
+        userLimit: 600,
+        userWindow: 3600,
+        failClosed: true,
+        userLimitKey: "/api/admin/data-explorer/*"
+      },
+      // Admin sandbox exec (harness-agents PR 1.5) — this is ARBITRARY CODE EXECUTION,
+      // so it gets the strictest budget on the platform: STRICT tier + a low per-user
+      // hourly cap (well below the 60/hr debug-read cap) + fail-closed. Platform-admin
+      // is enforced at the route; this is the independent defense-in-depth signal so a
+      // runaway exec loop surfaces as 429 instead of silently provisioning sandboxes.
+      "/api/admin/sandbox/*": { tier: "STRICT", userLimit: 20, userWindow: 3600, failClosed: true },
+      // Admin harness incident-response (harness-agents PR 2.9b) — mass-destroy reaps
+      // EVERY live harness sandbox/token/slot in scope, so it gets a strict budget
+      // (STRICT + a low per-user hourly cap + fail-closed). Platform-admin is enforced
+      // at the route; this is the independent defense-in-depth signal so a runaway
+      // reap loop surfaces as 429. The break-glass disable/enable rides through
+      // `/api/admin/config` (its own STANDARD budget), not this key.
+      "/api/admin/harness/*": { tier: "STRICT", userLimit: 10, userWindow: 3600, failClosed: true },
+      // Platform-wide team-orphan repair — a single call can WRITE across every hub of
+      // every org (HubDO purge + UserDO mirror fan-out), so it gets the same strict,
+      // fail-closed budget as the other cross-platform admin write. Exact path (not a
+      // prefix): the sibling `/api/admin/hubs/:hubId/harness` flag flips stay on the
+      // default admin budget. Platform-admin is enforced at the route; this is the
+      // defense-in-depth signal that a repair loop surfaces as 429.
+      "/api/admin/hubs/repair-team-orphans": { tier: "STRICT", userLimit: 10, userWindow: 3600, failClosed: true },
+      // CI/GitOps endpoints - standard with user limits
+      "/api/ci/*": { tier: "STANDARD", userLimit: 100, skipAuthenticatedUsers: true },
+      // Attested `/v1` proxy onto the Rekor Worker. `userLimitKey` is load-bearing here in a
+      // way it is not for the siblings above: the per-user budget defaults to the full request
+      // path, and this surface's paths carry base, record, and file ids — so without a pinned
+      // key every distinct resource would get its own fresh budget and the per-user limit
+      // would bound nothing. One shared budget across the whole data surface is the intent.
+      [`${DATA_PROXY_PREFIX2}/*`]: {
+        tier: "STANDARD",
+        userLimit: 150,
+        skipAuthenticatedUsers: true,
+        userLimitKey: `${DATA_PROXY_PREFIX2}/*`
+      },
+      // App channel - high throughput with user limits
+      "/channels/app/*": { tier: "HIGH", userLimit: 500, skipAuthenticatedUsers: true },
+      // API channel (api-channel-connector) - machine-to-machine, high throughput
+      "/channels/api/*": { tier: "HIGH", userLimit: 500, skipAuthenticatedUsers: true },
+      // System/scheduled - high throughput (internal)
+      "/channels/system/*": { tier: "HIGH", skipAuthenticatedUsers: true },
+      "/scheduled/*": { tier: "HIGH", skipAuthenticatedUsers: true },
+      // WebSocket - standard with user limit to prevent connection spam
+      "/live-updates/ws": { tier: "STANDARD", userLimit: 100, failClosed: true },
+      // WS ticket mint - per-user 60/min accommodates aggressive reconnect patterns
+      // without opening abuse vectors; fail-closed so Redis outages don't let
+      // runaway clients mint unbounded tickets.
+      "/api/auth/ws-ticket": { tier: "MODERATE", userLimit: 60, failClosed: true, skipAuthenticatedUsers: true },
+      "/api/auth/session-check": { tier: "STANDARD", userLimit: 120, skipAuthenticatedUsers: true },
+      "/api/auth/logout": { tier: "MODERATE", userLimit: 10, failClosed: true, skipAuthenticatedUsers: true }
+    };
     AUTH_TYPE2 = {
       OAUTH: "oauth",
       API_KEY: "api_key",
@@ -10843,6 +11214,7 @@ var init_dist = __esm({
     hubSchemaQuery2 = external_exports.object({ hub_id: uuidSchema2 });
     PREVIEW_LABEL_MAX_LENGTH2 = 60;
     MAX_ENDED_INDEX_RETENTION_DAYS2 = 730;
+    MAX_EVAL_RETENTION_DAYS2 = 3650;
     previewLabelField2 = external_exports.string().max(PREVIEW_LABEL_MAX_LENGTH2).optional().nullable().transform((v) => {
       if (v == null) return null;
       const trimmed = v.trim();
@@ -10878,6 +11250,10 @@ var init_dist = __esm({
       // the cleanup cron reaps its index row. Absent → DEFAULT_ENDED_INDEX_RETENTION_DAYS
       // (365). Re-clamped to the effective storage retention at reap time.
       ended_index_retention_days: external_exports.number().int().min(1).max(MAX_ENDED_INDEX_RETENTION_DAYS2).optional(),
+      // Per-hub eval-session retention window (days). null CLEARS the override (back to
+      // the platform default); 0 disables retention for this hub (keep sessions forever).
+      // Nullable — unlike the fields above, "unset" is a meaningful, settable state.
+      eval_retention_days: external_exports.number().int().min(0).max(MAX_EVAL_RETENTION_DAYS2).nullable().optional(),
       // Channel contact access control. Enum-validated explicitly (not via passthrough)
       // so `language`/`access_approval_role` can't reach the DB with an invalid value.
       language: external_exports.enum(["en", "pt", "es"]).optional(),
@@ -11458,7 +11834,6 @@ var init_dist = __esm({
       agent_id: uuidSchema2,
       priority: external_exports.number().optional(),
       use_native_integration: external_exports.boolean().optional(),
-      include_structure_in_prompt: external_exports.boolean().optional(),
       write_enabled: external_exports.boolean().optional()
     });
     updateAgentResourceBody2 = external_exports.object({
@@ -11466,7 +11841,6 @@ var init_dist = __esm({
       resource_id: uuidSchema2,
       agent_id: uuidSchema2,
       use_native_integration: external_exports.boolean().optional(),
-      include_structure_in_prompt: external_exports.boolean().optional(),
       enabled: external_exports.boolean().optional(),
       priority: external_exports.number().optional(),
       write_enabled: external_exports.boolean().optional()
@@ -11650,12 +12024,16 @@ var init_dist = __esm({
     updateEvalBody2 = external_exports.object({
       eval: external_exports.record(external_exports.unknown())
     }).superRefine(refineEvalMessageTextRole2).superRefine(refineEvalAttachments2).superRefine(refineEvalInitialState2);
+    EVAL_LIST_MAX_LIMIT2 = 1e3;
+    evalListLimit2 = external_exports.string().regex(/^\d+$/).refine((v) => Number(v) <= EVAL_LIST_MAX_LIMIT2, {
+      message: `limit must be ${EVAL_LIST_MAX_LIMIT2} or less`
+    }).optional();
     getEvalsQuery2 = external_exports.object({
       hub_id: external_exports.string().uuid(),
       agent_id: external_exports.string().uuid().optional(),
       enabled: external_exports.string().regex(/^(true|false)$/).optional(),
       search: external_exports.string().optional(),
-      limit: external_exports.string().regex(/^\d+$/).optional(),
+      limit: evalListLimit2,
       offset: external_exports.string().regex(/^\d+$/).optional()
     });
     toggleEvalBody2 = external_exports.object({
@@ -11710,7 +12088,7 @@ var init_dist = __esm({
       hub_id: external_exports.string().uuid(),
       status: external_exports.string().optional(),
       search: external_exports.string().optional(),
-      limit: external_exports.string().regex(/^\d+$/).optional(),
+      limit: evalListLimit2,
       offset: external_exports.string().regex(/^\d+$/).optional()
     });
     getSessionResultsQuery2 = external_exports.object({
@@ -11889,6 +12267,15 @@ var init_dist = __esm({
       /** Launch-time snapshot. */
       session_config: evalSessionConfigResponseSchema2.optional()
     }).passthrough();
+    evalSessionListConfigSchema2 = external_exports.object({
+      agent: external_exports.object({
+        agent_id: external_exports.string().nullable().optional(),
+        agent_name: external_exports.string().nullable().optional(),
+        agent_role: external_exports.string().nullable().optional()
+      }).optional(),
+      scenario_set_id: external_exports.string().optional().catch(void 0)
+    });
+    evalSessionListItemSchema2 = evalSessionResponseSchema2.omit({ session_config: true }).extend({ session_config: evalSessionListConfigSchema2.optional() }).passthrough();
     seedReleaseStatusSchema2 = external_exports.enum(["not_applicable", "pending", "releasing"]);
     getConversationsQuery2 = external_exports.object({
       nav_item: external_exports.enum(["chat", "task", "support", "chat_task"]),
@@ -12433,6 +12820,42 @@ var init_dist = __esm({
     invoicesQuery2 = external_exports.object({
       limit: external_exports.string().regex(/^\d+$/).optional()
     });
+    planKeySchema2 = external_exports.enum(["free", "solo", "team"]);
+    billingStatusSchema2 = external_exports.enum(["active", "past_due", "cancelled"]);
+    REKOR_ENTITLEMENT_CONTRACT_VERSION2 = 1;
+    entitlementProjectionSchema2 = external_exports.object({
+      contract_version: external_exports.literal(REKOR_ENTITLEMENT_CONTRACT_VERSION2),
+      /**
+       * Monotonic per org, WayAI-assigned. An ordering guard for concurrent WayAI
+       * writers (a plan change racing a token mint) — NOT a cross-repo CAS. Gaps are
+       * expected: a version is allocated per push attempt, and an idempotency skip
+       * (§2.4) burns none while a failed KV put burns one.
+       */
+      projection_version: external_exports.number().int().nonnegative(),
+      /** Diagnostic only — never gates. Freshness is `window_resets_at`'s job (§2.2). */
+      written_at: external_exports.string().datetime(),
+      /** The WayAI org UUID. The `account_id` spelling is Rekor's documented carve-out. */
+      account_id: external_exports.string().uuid(),
+      /** The EFFECTIVE plan, not the subscribed one (§2.2.1). Never gates. */
+      plan_key: planKeySchema2,
+      /** Informational only (§2.2.1). `cancelled` spelling matches `BillingRecord`. */
+      billing_status: billingStatusSchema2,
+      /** Tenths, matching Rekor's meter granularity (write 10, point-read 1, list/SQL 10). */
+      ops_tenths_included: external_exports.number().int().nonnegative(),
+      max_records: external_exports.number().int().nonnegative(),
+      /** Its own field, no longer derived from `max_records` (§2.2). */
+      import_rows_included: external_exports.number().int().nonnegative(),
+      /** REQUIRED — absence is malformed, never coerced to `false` (§2.2.2). */
+      production_bases: external_exports.boolean(),
+      /** Opaque to Rekor; compared for equality only, to reset `usage:` counters (§2.3). */
+      window_key: external_exports.string().min(1),
+      /** The sole staleness authority (§2.3). Never triggers a counter reset. */
+      window_resets_at: external_exports.string().datetime()
+    }).strict();
+    rekorEntitlementRefreshMessageSchema2 = external_exports.object({
+      org_id: external_exports.string().uuid(),
+      reason: external_exports.enum(["window_elapsed", "projection_missing", "projection_malformed"])
+    });
     downloadBody2 = external_exports.object({
       type: external_exports.enum(["workspace", "agent_instructions"]),
       agent_id: external_exports.string().uuid().optional(),
@@ -12874,7 +13297,14 @@ var init_dist = __esm({
        * disable|enable` flips this. The DO's `updatePlatformConfig` allowlist already
        * accepts it; this exposes it on the route.
        */
-      harness_enabled: external_exports.number().int().min(0).max(1).optional()
+      harness_enabled: external_exports.number().int().min(0).max(1).optional(),
+      /**
+       * Default eval-session retention window in days, used by every hub that sets no
+       * `eval_retention_days` override. `0` disables eval retention platform-wide.
+       * NOT NULL in the DDL, so the field is non-nullable here — clearing is not a
+       * state; setting 0 is.
+       */
+      default_eval_retention_days: external_exports.number().int().min(0).max(MAX_EVAL_RETENTION_DAYS2).optional()
     }).strip().refine(
       (data) => Object.keys(data).length > 0,
       { message: "No fields to update" }
@@ -12918,7 +13348,14 @@ var init_dist = __esm({
       messages_per_unit: external_exports.number().int().min(1, "messages_per_unit must be a positive integer").optional(),
       seats_per_unit: external_exports.number().int().min(1, "seats_per_unit must be a positive integer").optional(),
       seats_scaling: external_exports.enum(["fixed", "per_quantity"]).optional(),
-      is_active: external_exports.boolean().optional()
+      is_active: external_exports.boolean().optional(),
+      // Rekor entitlement allowances (rekor-platform-contracts §2.2). Editable here for the
+      // same reason `messages_per_unit` is: otherwise the only way to change an allowance in
+      // production is a code deploy plus a seed-version bump.
+      rekor_ops_tenths_included: external_exports.number().int().min(0).optional(),
+      rekor_max_records: external_exports.number().int().min(0).optional(),
+      rekor_import_rows_included: external_exports.number().int().min(0).optional(),
+      rekor_production_bases: external_exports.number().int().min(0).max(1).optional()
     }).strip().refine(
       (data) => Object.keys(data).length > 0,
       { message: "No fields to update" }
@@ -13535,7 +13972,9 @@ var init_dist = __esm({
       /** Subdir of `wsDir` holding hub folders. */
       hubsSubdir: "hubs",
       /** Subdir of `wsDir` holding org-as-code. */
-      orgSubdir: "org"
+      orgSubdir: "org",
+      /** Subdir of `wsDir` holding base folders. */
+      basesSubdir: "bases"
     };
   }
 });
@@ -13556,10 +13995,12 @@ function resolveLayout(gitRoot, layout = WAYAI_LAYOUT) {
   const legacyOrg = path.join(gitRoot, layout.legacy.orgAtRoot);
   const newExists = isDirectory(newWs);
   const legacyExists = isDirectory(legacyWs) || isDirectory(legacyOrg);
+  const basesDir = path.join(newWs, layout.basesSubdir);
   if (newExists) {
     return {
       hubsDir: path.join(newWs, layout.hubsSubdir),
       orgDir: path.join(newWs, layout.orgSubdir),
+      basesDir,
       isLegacy: false,
       legacyAlsoPresent: legacyExists
     };
@@ -13568,6 +14009,7 @@ function resolveLayout(gitRoot, layout = WAYAI_LAYOUT) {
     return {
       hubsDir: legacyWs,
       orgDir: legacyOrg,
+      basesDir,
       isLegacy: true,
       legacyAlsoPresent: false
     };
@@ -13575,10 +14017,14 @@ function resolveLayout(gitRoot, layout = WAYAI_LAYOUT) {
   return {
     hubsDir: path.join(newWs, layout.hubsSubdir),
     orgDir: path.join(newWs, layout.orgSubdir),
+    basesDir,
     isLegacy: false,
     legacyAlsoPresent: false
   };
 }
+function resolveBasesDir(gitRoot) {
+  return resolveLayout(gitRoot).basesDir;
+}
 function hubsDirLabel(gitRoot) {
   if (!gitRoot) return path.join(WAYAI_LAYOUT.wsDir, WAYAI_LAYOUT.hubsSubdir);
   return path.relative(gitRoot, resolveLayout(gitRoot).hubsDir);
@@ -14271,6 +14717,290 @@ var init_utils = __esm({
   }
 });
 
+// src/data/registry.ts
+function isDataNamespace(command2) {
+  return command2 !== void 0 && DATA_NAMESPACES.includes(command2);
+}
+var COMMAND_SURVIVAL, DATA_NAMESPACES;
+var init_registry = __esm({
+  "src/data/registry.ts"() {
+    "use strict";
+    COMMAND_SURVIVAL = [
+      // --- Clause 1: deleted. One keyring login, one status, one CLI self-update. ---
+      {
+        original: "login",
+        disposition: "deleted",
+        surviving: null,
+        clause: 1,
+        shipped: true,
+        reason: "One keyring login. WayAI's `login` and `~/.wayai/config.json` are the survivors."
+      },
+      {
+        original: "logout",
+        disposition: "deleted",
+        surviving: null,
+        clause: 1,
+        shipped: true,
+        reason: "One session to clear."
+      },
+      {
+        original: "whoami",
+        disposition: "deleted",
+        surviving: null,
+        clause: 1,
+        shipped: true,
+        reason: "One authenticated identity."
+      },
+      {
+        original: "status",
+        disposition: "deleted",
+        surviving: null,
+        clause: 1,
+        shipped: true,
+        reason: "One auth/connectivity status."
+      },
+      {
+        original: "init",
+        disposition: "deleted",
+        surviving: null,
+        clause: 1,
+        shipped: true,
+        reason: "One root org binding (`.wayai.yaml`), so one `init`."
+      },
+      {
+        original: "update",
+        disposition: "deleted",
+        surviving: null,
+        clause: 1,
+        shipped: true,
+        reason: "One binary, one self-update."
+      },
+      // --- Clause 2: top-level ontology entities WayAI owns no concept of. ---
+      {
+        original: "bases",
+        disposition: "top-level",
+        surviving: "bases",
+        clause: 2,
+        shipped: true,
+        reason: "The ontology root entity. No WayAI command of this name."
+      },
+      {
+        original: "records",
+        disposition: "top-level",
+        surviving: "records",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity. No WayAI command of this name."
+      },
+      {
+        original: "record-types",
+        disposition: "top-level",
+        surviving: "record-types",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "relationships",
+        disposition: "top-level",
+        surviving: "relationships",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "relationship-types",
+        disposition: "top-level",
+        surviving: "relationship-types",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "query-relationships",
+        disposition: "top-level",
+        surviving: "query-relationships",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology traversal over relationships."
+      },
+      {
+        original: "files",
+        disposition: "top-level",
+        surviving: "files",
+        clause: 2,
+        shipped: false,
+        reason: "Unambiguous: WayAI has no `files` command \u2014 hub-local resource files are reached through hub config-as-code, and the two file surfaces stay deliberately separate."
+      },
+      {
+        original: "file-types",
+        disposition: "top-level",
+        surviving: "file-types",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "attachments",
+        disposition: "top-level",
+        surviving: "attachments",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "toolsets",
+        disposition: "top-level",
+        surviving: "toolsets",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "actions",
+        disposition: "top-level",
+        surviving: "actions",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "triggers",
+        disposition: "top-level",
+        surviving: "triggers",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "inbound-webhooks",
+        disposition: "top-level",
+        surviving: "inbound-webhooks",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity."
+      },
+      {
+        original: "seed",
+        disposition: "top-level",
+        surviving: "seed",
+        clause: 2,
+        shipped: false,
+        reason: "Ontology entity. `wayai status` vs `wayai seed lease status` differ by depth, not by word."
+      },
+      // --- Clause 3: namespaced. ---
+      {
+        original: "use",
+        disposition: "namespaced",
+        surviving: "bases use",
+        clause: 3,
+        shipped: true,
+        reason: "WayAI's `use` binds a hub; this binds a base."
+      },
+      {
+        original: "unbind",
+        disposition: "namespaced",
+        surviving: "bases unbind",
+        clause: 3,
+        shipped: true,
+        reason: "WayAI's `unbind` clears the hub binding; this clears the base binding."
+      },
+      {
+        original: "bases promote",
+        disposition: "namespaced",
+        surviving: "bases promote",
+        clause: 3,
+        shipped: true,
+        reason: "Already namespaced; kept verbatim. Distinct from `wayai publish` (hub production) \u2014 the two promote words stay distinct."
+      },
+      {
+        original: "tokens",
+        disposition: "namespaced",
+        surviving: "bases tokens",
+        clause: 3,
+        shipped: false,
+        reason: "Mints base tokens; WayAI's own token surface mints platform tokens."
+      },
+      {
+        original: "secrets",
+        disposition: "namespaced",
+        surviving: "bases secrets",
+        clause: 3,
+        shipped: false,
+        reason: "Base org vault; WayAI has connection credentials."
+      },
+      {
+        original: "sql",
+        disposition: "namespaced",
+        surviving: "bases sql",
+        clause: 3,
+        shipped: false,
+        reason: "WayAI already has tenant SQL over conversation analytics."
+      },
+      {
+        original: "import",
+        disposition: "namespaced",
+        surviving: "bases import",
+        clause: 3,
+        shipped: false,
+        reason: "WayAI has outbound-contact import."
+      },
+      {
+        original: "batch",
+        disposition: "namespaced",
+        surviving: "bases batch",
+        clause: 3,
+        shipped: false,
+        reason: "Too generic to stand alone."
+      },
+      {
+        original: "providers",
+        disposition: "namespaced",
+        surviving: "bases providers",
+        clause: 3,
+        shipped: false,
+        reason: "WayAI's provider is a connector."
+      },
+      {
+        original: "admin",
+        disposition: "namespaced",
+        surviving: "admin bases",
+        clause: 3,
+        shipped: false,
+        reason: "Clause 3's group exception: `wayai admin` is an existing group with its own gating and subgroups, so the operator surface joins it as a peer rather than sitting under `bases`."
+      },
+      {
+        original: "report",
+        disposition: "namespaced",
+        surviving: "bases report",
+        clause: 3,
+        shipped: false,
+        reason: "Two report queues still exist, so the merged CLI must be able to file to either. The two collapse when the queues do."
+      },
+      // --- Neither: one verb each, routing by workspace subtree. ---
+      {
+        original: "pull",
+        disposition: "routed",
+        surviving: "pull",
+        clause: null,
+        shipped: false,
+        reason: "One verb, workspace-relative, routing by subtree: `hubs/` targets preview hubs, `bases/` targets preview bases. An invocation spanning both is refused, never merged."
+      },
+      {
+        original: "push",
+        disposition: "routed",
+        surviving: "push",
+        clause: null,
+        shipped: false,
+        reason: "Same as `pull`."
+      }
+    ];
+    DATA_NAMESPACES = COMMAND_SURVIVAL.filter(
+      (c) => c.disposition === "top-level" && c.shipped
+    ).map((c) => c.surviving);
+  }
+});
+
 // src/lib/version-cache.ts
 import { existsSync as existsSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync2, mkdirSync } from "fs";
 import { dirname as dirname3, join as join6 } from "path";
@@ -14280,9 +15010,9 @@ function getVersionCachePath(filename = CLI_CACHE_FILE) {
 }
 function readVersionCache(filename = CLI_CACHE_FILE) {
   try {
-    const path30 = getVersionCachePath(filename);
-    if (!existsSync4(path30)) return null;
-    const parsed = JSON.parse(readFileSync5(path30, "utf-8"));
+    const path31 = getVersionCachePath(filename);
+    if (!existsSync4(path31)) return null;
+    const parsed = JSON.parse(readFileSync5(path31, "utf-8"));
     if (typeof parsed.lastCheck !== "number") return null;
     if (parsed.latest !== null && typeof parsed.latest !== "string") return null;
     return parsed;
@@ -14302,10 +15032,10 @@ function isVersionCacheStale(filename = CLI_CACHE_FILE, maxAgeMs = MAX_AGE_24H_M
   return Date.now() - cache.lastCheck > maxAgeMs;
 }
 function writeVersionCache(filename, cache) {
-  const path30 = getVersionCachePath(filename);
-  const dir = dirname3(path30);
+  const path31 = getVersionCachePath(filename);
+  const dir = dirname3(path31);
   if (!existsSync4(dir)) mkdirSync(dir, { recursive: true });
-  writeFileSync2(path30, JSON.stringify(cache));
+  writeFileSync2(path31, JSON.stringify(cache));
 }
 function touchVersionCache(filename) {
   writeVersionCache(filename, { lastCheck: Date.now(), latest: readVersionCache(filename)?.latest ?? null });
@@ -14344,14 +15074,14 @@ function parseFrontmatterVersion(content) {
 function findInstalledSkills(projectRoot, paths = SKILL_INSTALL_PATHS) {
   const found = [];
   for (const rel of paths) {
-    const path30 = join7(projectRoot, rel);
-    if (!existsSync5(path30)) continue;
+    const path31 = join7(projectRoot, rel);
+    if (!existsSync5(path31)) continue;
     let version = null;
     try {
-      version = parseFrontmatterVersion(readFileSync6(path30, "utf-8"));
+      version = parseFrontmatterVersion(readFileSync6(path31, "utf-8"));
     } catch {
     }
-    found.push({ path: path30, version });
+    found.push({ path: path31, version });
   }
   return found;
 }
@@ -15227,7 +15957,7 @@ var init_logout = __esm({
   }
 });
 
-// src/lib/hub-binding.ts
+// src/lib/worktree-binding.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import * as fs7 from "fs";
 import * as path7 from "path";
@@ -15248,111 +15978,158 @@ function resolveGitDir() {
   _gitDirCache = { cwd, gitDir };
   return gitDir;
 }
-function getBindingPath() {
-  const gitDir = resolveGitDir();
-  return gitDir ? path7.join(gitDir, BINDING_FILENAME) : null;
-}
-function getLegacyBindingPath() {
-  const gitDir = resolveGitDir();
-  return gitDir ? path7.join(gitDir, LEGACY_BINDING_FILENAME) : null;
-}
-function readBinding() {
-  for (const bindingPath of [getBindingPath(), getLegacyBindingPath()]) {
-    if (!bindingPath) continue;
-    let raw;
+function createWorktreeBinding(descriptor) {
+  const {
+    filename,
+    legacyFilename,
+    isValidId,
+    noun,
+    idLabel,
+    unbindCommand: unbindCommand2,
+    useCommand: useCommand2
+  } = descriptor;
+  function getBindingPath2() {
+    const gitDir = resolveGitDir();
+    return gitDir ? path7.join(gitDir, filename) : null;
+  }
+  function getLegacyBindingPath() {
+    if (!legacyFilename) return null;
+    const gitDir = resolveGitDir();
+    return gitDir ? path7.join(gitDir, legacyFilename) : null;
+  }
+  function readBinding2() {
+    for (const bindingPath of [getBindingPath2(), getLegacyBindingPath()]) {
+      if (!bindingPath) continue;
+      let raw;
+      try {
+        raw = fs7.readFileSync(bindingPath, "utf-8");
+      } catch (err) {
+        if (err.code === "ENOENT") continue;
+        throw err;
+      }
+      const trimmed = raw.trim();
+      return isValidId(trimmed) ? trimmed : null;
+    }
+    return null;
+  }
+  function removeLegacyBinding() {
+    const legacyPath = getLegacyBindingPath();
+    if (!legacyPath) return;
     try {
-      raw = fs7.readFileSync(bindingPath, "utf-8");
-    } catch (err) {
-      if (err.code === "ENOENT") continue;
-      throw err;
+      fs7.unlinkSync(legacyPath);
+    } catch {
     }
-    const trimmed = raw.trim();
-    return UUID_RE2.test(trimmed) ? trimmed : null;
   }
-  return null;
-}
-function writeBinding(hubId) {
-  if (!UUID_RE2.test(hubId)) {
-    throw new Error(`Invalid hub_id (must be a UUID): ${hubId}`);
+  function writeBinding2(id) {
+    if (!isValidId(id)) {
+      throw new Error(`Invalid ${idLabel}: ${id}`);
+    }
+    const bindingPath = getBindingPath2();
+    if (!bindingPath) {
+      throw new Error(`Not inside a git repository \u2014 cannot write ${noun} binding.`);
+    }
+    fs7.writeFileSync(bindingPath, `${id}
+`, "utf-8");
+    removeLegacyBinding();
   }
-  const bindingPath = getBindingPath();
-  if (!bindingPath) {
-    throw new Error("Not inside a git repository \u2014 cannot write hub binding.");
+  function clearBinding2() {
+    let removed = false;
+    for (const bindingPath of [getBindingPath2(), getLegacyBindingPath()]) {
+      if (!bindingPath) continue;
+      try {
+        fs7.unlinkSync(bindingPath);
+        removed = true;
+      } catch (err) {
+        if (err.code !== "ENOENT") throw err;
+      }
+    }
+    return removed;
   }
-  fs7.writeFileSync(bindingPath, `${hubId}
-`, "utf-8");
-  removeLegacyBinding();
-}
-function removeLegacyBinding() {
-  const legacyPath = getLegacyBindingPath();
-  if (!legacyPath) return;
-  try {
-    fs7.unlinkSync(legacyPath);
-  } catch {
+  function assertMatchesBinding(resolvedId, label) {
+    const bound = readBinding2();
+    if (!bound) return;
+    if (bound === resolvedId) return;
+    const target = label ? `${label} (${resolvedId})` : resolvedId;
+    console.error(
+      [
+        `This worktree is bound to ${noun} ${bound}, but the command resolved to ${target}.`,
+        "",
+        "This usually means a prompt was routed to the wrong worktree.",
+        "Confirm with the user before unbinding. To override:",
+        `  ${unbindCommand2}             # clear the binding for this worktree`,
+        `  ${useCommand2} ${resolvedId}  # rebind this worktree to the new ${noun}`
+      ].join("\n")
+    );
+    process.exit(1);
   }
-}
-function clearBinding() {
-  let removed = false;
-  for (const bindingPath of [getBindingPath(), getLegacyBindingPath()]) {
-    if (!bindingPath) continue;
+  function assertNoBindingBlocksCreation(newName) {
+    const bound = readBinding2();
+    if (!bound) return;
+    console.error(
+      [
+        `This worktree is bound to ${noun} ${bound}, but you're about to create a new ${noun} "${newName}" here.`,
+        "",
+        "This usually means a prompt was routed to the wrong worktree.",
+        "Confirm with the user before unbinding. To override:",
+        `  ${unbindCommand2}             # clear the binding for this worktree`
+      ].join("\n")
+    );
+    process.exit(1);
+  }
+  function autoBindIfUnbound2(id) {
     try {
-      fs7.unlinkSync(bindingPath);
-      removed = true;
+      if (readBinding2()) return false;
+      writeBinding2(id);
+      console.log(`Worktree bound to ${noun} ${id} (run \`${unbindCommand2}\` to clear).`);
+      return true;
     } catch (err) {
-      if (err.code !== "ENOENT") throw err;
+      console.warn(
+        `  Warning: could not auto-bind worktree (${err instanceof Error ? err.message : String(err)})`
+      );
+      return false;
     }
   }
-  return removed;
-}
-function assertHubMatchesBinding(resolvedHubId, hubLabel) {
-  const bound = readBinding();
-  if (!bound) return;
-  if (bound === resolvedHubId) return;
-  const target = hubLabel ? `${hubLabel} (${resolvedHubId})` : resolvedHubId;
-  console.error(
-    [
-      `This worktree is bound to hub ${bound}, but the command resolved to ${target}.`,
-      "",
-      "This usually means a prompt was routed to the wrong worktree.",
-      "Confirm with the user before unbinding. To override:",
-      "  wayai unbind             # clear the binding for this worktree",
-      `  wayai use ${resolvedHubId}  # rebind this worktree to the new hub`
-    ].join("\n")
-  );
-  process.exit(1);
+  return {
+    getBindingPath: getBindingPath2,
+    readBinding: readBinding2,
+    writeBinding: writeBinding2,
+    clearBinding: clearBinding2,
+    assertMatchesBinding,
+    assertNoBindingBlocksCreation,
+    autoBindIfUnbound: autoBindIfUnbound2
+  };
 }
-function autoBindIfUnbound(hubId) {
-  try {
-    if (readBinding()) return false;
-    writeBinding(hubId);
-    console.log(`Worktree bound to hub ${hubId} (run \`wayai unbind\` to clear).`);
-    return true;
-  } catch (err) {
-    console.warn(`  Warning: could not auto-bind worktree (${err instanceof Error ? err.message : String(err)})`);
-    return false;
+var _gitDirCache;
+var init_worktree_binding = __esm({
+  "src/lib/worktree-binding.ts"() {
+    "use strict";
   }
-}
-function assertNoBindingBlocksHubCreation(newHubName) {
-  const bound = readBinding();
-  if (!bound) return;
-  console.error(
-    [
-      `This worktree is bound to hub ${bound}, but you're about to create a new hub "${newHubName}" here.`,
-      "",
-      "This usually means a prompt was routed to the wrong worktree.",
-      "Confirm with the user before unbinding. To override:",
-      "  wayai unbind             # clear the binding for this worktree"
-    ].join("\n")
-  );
-  process.exit(1);
-}
-var BINDING_FILENAME, LEGACY_BINDING_FILENAME, _gitDirCache;
+});
+
+// src/lib/hub-binding.ts
+var binding, getBindingPath, readBinding, writeBinding, clearBinding, autoBindIfUnbound, assertHubMatchesBinding, assertNoBindingBlocksHubCreation;
 var init_hub_binding = __esm({
   "src/lib/hub-binding.ts"() {
     "use strict";
     init_utils();
-    BINDING_FILENAME = "wayai-binding";
-    LEGACY_BINDING_FILENAME = "wayai-lock";
+    init_worktree_binding();
+    binding = createWorktreeBinding({
+      filename: "wayai-binding",
+      // Pre-rename filename, from when this was called a "lock".
+      legacyFilename: "wayai-lock",
+      isValidId: (id) => UUID_RE2.test(id),
+      noun: "hub",
+      idLabel: "hub_id (must be a UUID)",
+      unbindCommand: "wayai unbind",
+      useCommand: "wayai use"
+    });
+    getBindingPath = binding.getBindingPath;
+    readBinding = binding.readBinding;
+    writeBinding = binding.writeBinding;
+    clearBinding = binding.clearBinding;
+    autoBindIfUnbound = binding.autoBindIfUnbound;
+    assertHubMatchesBinding = binding.assertMatchesBinding;
+    assertNoBindingBlocksHubCreation = binding.assertNoBindingBlocksCreation;
   }
 });
 
@@ -24050,14 +24827,538 @@ var init_update = __esm({
   }
 });
 
+// src/data/org-context.ts
+function setDataOrgOverride(orgId) {
+  override = orgId;
+}
+function getDataOrgOverride() {
+  return override;
+}
+var override;
+var init_org_context = __esm({
+  "src/data/org-context.ts"() {
+    "use strict";
+  }
+});
+
+// src/data/client.ts
+async function createDataClient(orgId) {
+  const { config, accessToken } = await requireAuth();
+  const api = new ApiClient({ apiUrl: config.api_url, accessToken });
+  const selected = orgId ?? getDataOrgOverride();
+  if (selected !== void 0 && !UUID_RE2.test(selected)) {
+    throw expected(`Invalid --org: ${JSON.stringify(selected)}. Expected an organization UUID.`);
+  }
+  const org = selected ?? readRepoConfig()?.organization_id;
+  return {
+    async request(method, v1Path, body) {
+      const envelope = await api.dataRequest(method, v1Path, body, org);
+      return envelope.data;
+    },
+    async collectPages(makePath) {
+      const all = [];
+      const seen = /* @__PURE__ */ new Set();
+      let cursor;
+      for (let page = 0; page < MAX_PAGES; page++) {
+        const { data, meta } = await api.dataRequest("GET", makePath(cursor), void 0, org);
+        for (const row of data ?? []) all.push(row);
+        cursor = meta?.has_more ? meta.cursor : void 0;
+        if (cursor === void 0) break;
+        if (seen.has(cursor)) break;
+        seen.add(cursor);
+      }
+      return all;
+    }
+  };
+}
+var MAX_PAGES;
+var init_client = __esm({
+  "src/data/client.ts"() {
+    "use strict";
+    init_auth();
+    init_api_client();
+    init_repo_config();
+    init_utils();
+    init_expected();
+    init_org_context();
+    MAX_PAGES = 1e3;
+  }
+});
+
+// src/data/output.ts
+function printOutput(data, format) {
+  if (format === "json") {
+    console.log(JSON.stringify(data, null, 2));
+    return;
+  }
+  if (Array.isArray(data)) {
+    printRows(data);
+    return;
+  }
+  if (typeof data === "object" && data !== null) {
+    printFields(data);
+    return;
+  }
+  console.log(formatCell2(data));
+}
+function printRows(rows) {
+  if (rows.length === 0) {
+    console.log("(no results)");
+    return;
+  }
+  const columns = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    for (const key of Object.keys(row ?? {})) {
+      if (seen.has(key)) continue;
+      seen.add(key);
+      columns.push(key);
+    }
+  }
+  const headers = columns.map((c) => sanitizeTerminalText(c));
+  const cells = rows.map((row) => columns.map((c) => cellAt(row, c)));
+  const widths = columns.map(
+    (_, i) => cells.reduce((width, row) => Math.max(width, row[i].length), headers[i].length)
+  );
+  console.log(headers.map((c, i) => c.padEnd(widths[i])).join("  "));
+  console.log(widths.map((w) => "-".repeat(w)).join("  "));
+  for (const row of cells) {
+    console.log(row.map((cell, i) => cell.padEnd(widths[i])).join("  "));
+  }
+}
+function printFields(obj) {
+  const entries = Object.entries(obj).map(([key, value]) => ({
+    key: sanitizeTerminalText(key),
+    value
+  }));
+  if (entries.length === 0) {
+    console.log("(empty)");
+    return;
+  }
+  const width = entries.reduce((w, e) => Math.max(w, e.key.length), 0);
+  for (const { key, value } of entries) {
+    console.log(`${key.padEnd(width)}  ${formatCell2(value)}`);
+  }
+}
+function cellAt(row, column) {
+  return formatCell2(row?.[column]);
+}
+function formatCell2(value) {
+  if (value === null || value === void 0) return "";
+  if (typeof value === "object") return sanitizeTerminalText(JSON.stringify(value));
+  return sanitizeTerminalText(String(value));
+}
+var init_output = __esm({
+  "src/data/output.ts"() {
+    "use strict";
+    init_terminal_output();
+  }
+});
+
+// src/lib/base-id.ts
+function isValidBaseId(id) {
+  return BASE_ID_RE.test(id);
+}
+var BASE_ID_RE;
+var init_base_id = __esm({
+  "src/lib/base-id.ts"() {
+    "use strict";
+    BASE_ID_RE = /^(?!\.\.?$)[A-Za-z0-9._-]{1,256}$/;
+  }
+});
+
+// src/data/helpers.ts
+import { readFileSync as readFileSync19 } from "fs";
+function pathSegment(id, label = "id") {
+  if (!isValidBaseId(id)) {
+    throw expected(
+      `Invalid ${label}: ${JSON.stringify(id)}. Ids are slugs \u2014 letters, digits, dot, dash and underscore only.`
+    );
+  }
+  return encodeURIComponent(id);
+}
+function parseData(data) {
+  if (data.startsWith("@")) {
+    return JSON.parse(readFileSync19(data.slice(1), "utf-8"));
+  }
+  return JSON.parse(data);
+}
+function globals(cmd) {
+  let namespace = cmd;
+  while (namespace.parent?.parent) namespace = namespace.parent;
+  return namespace.opts();
+}
+function outputFormat(cmd) {
+  const opts = globals(cmd);
+  return opts.json || opts.output === "json" ? "json" : "table";
+}
+function splitList(value) {
+  return value.split(",").map((v) => v.trim()).filter((v) => v.length > 0);
+}
+var init_helpers = __esm({
+  "src/data/helpers.ts"() {
+    "use strict";
+    init_base_id();
+    init_expected();
+  }
+});
+
+// src/lib/base-binding.ts
+var binding2, getBaseBindingPath, readBaseBinding, writeBaseBinding, clearBaseBinding, autoBindBaseIfUnbound, assertBaseMatchesBinding, assertNoBindingBlocksBaseCreation;
+var init_base_binding = __esm({
+  "src/lib/base-binding.ts"() {
+    "use strict";
+    init_base_id();
+    init_worktree_binding();
+    binding2 = createWorktreeBinding({
+      filename: "wayai-base-binding",
+      isValidId: isValidBaseId,
+      noun: "base",
+      idLabel: "base id (must be a slug)",
+      unbindCommand: "wayai bases unbind",
+      useCommand: "wayai bases use"
+    });
+    getBaseBindingPath = binding2.getBindingPath;
+    readBaseBinding = binding2.readBinding;
+    writeBaseBinding = binding2.writeBinding;
+    clearBaseBinding = binding2.clearBinding;
+    autoBindBaseIfUnbound = binding2.autoBindIfUnbound;
+    assertBaseMatchesBinding = binding2.assertMatchesBinding;
+    assertNoBindingBlocksBaseCreation = binding2.assertNoBindingBlocksCreation;
+  }
+});
+
+// src/data/commands/bases.ts
+import { Command } from "commander";
+import * as fs24 from "fs";
+import * as path30 from "path";
+import * as yaml9 from "js-yaml";
+function pageOf(path31, cursor) {
+  if (!cursor) return path31;
+  return `${path31}${path31.includes("?") ? "&" : "?"}cursor=${encodeURIComponent(cursor)}`;
+}
+function parseEnum(flag, value, allowed) {
+  if (value === void 0) return void 0;
+  if (!allowed.includes(value)) {
+    throw expected(`${flag} must be one of: ${allowed.join(", ")}.`);
+  }
+  return value;
+}
+function buildBasesCommand() {
+  const bases = new Command("bases").description("Manage bases");
+  bases.command("list").description("List all bases").option("--tag <tag>", "Filter by tag").action(async function(opts) {
+    const client = await createDataClient();
+    const qs = opts.tag ? `?tag=${encodeURIComponent(opts.tag)}` : "";
+    printOutput(
+      await client.collectPages((cursor) => pageOf(`/v1/bases${qs}`, cursor)),
+      outputFormat(this)
+    );
+  });
+  bases.command("get <id>").description("Get a base").action(async function(id) {
+    const client = await createDataClient();
+    printOutput(await client.request("GET", `/v1/bases/${pathSegment(id)}`), outputFormat(this));
+  });
+  bases.command("create <id>").description("Create a base").requiredOption("--name <name>", "Base name").option("--description <desc>", "Description").option("--tags <tags>", "Comma-separated tags (e.g. client:acme,billing)").option(
+    "--timezone <tz>",
+    "Default IANA timezone for datetime canonicalization (e.g. America/Sao_Paulo); a record type's own timezone overrides it"
+  ).option(
+    "--environment <env>",
+    "production (default) | preview. Production bases require a paid plan. A preview created here has no production origin and cannot be given one later, so it cannot be promoted directly \u2014 move its config to a linked preview with pull/push when you upgrade"
+  ).action(async function(id, opts) {
+    const environment = parseEnum("--environment", opts.environment, [
+      "production",
+      "preview"
+    ]);
+    const client = await createDataClient();
+    const body = { name: opts.name, description: opts.description };
+    if (environment) body.environment = environment;
+    if (opts.tags) body.tags = splitList(opts.tags);
+    if (opts.timezone) body.settings = { timezone: opts.timezone };
+    printOutput(await client.request("PUT", `/v1/bases/${pathSegment(id)}`, body), outputFormat(this));
+  });
+  bases.command("update <id>").description(
+    "Update a base's mutable config (display name, description, tags, default timezone/settings). The id/slug is immutable."
+  ).option("--name <name>", "New display name").option("--description <desc>", "Description").option("--tags <tags>", "Comma-separated tags \u2014 replaces the existing tags").option(
+    "--timezone <tz>",
+    "Default IANA timezone for datetime canonicalization. Merges into existing settings."
+  ).option(
+    "--settings <json>",
+    "Raw settings JSON object (inline JSON or @file.json) \u2014 replaces the entire settings object"
+  ).option(
+    "--integrations <mode>",
+    "enabled | disabled. Preview-only: `disabled` neutralizes every external integration edge so the seeded preview behaves natively for production-safe agent evals"
+  ).action(async function(id, opts) {
+    const integrations = parseEnum("--integrations", opts.integrations, ["enabled", "disabled"]);
+    if (opts.name === void 0 && opts.description === void 0 && opts.tags === void 0 && opts.timezone === void 0 && opts.settings === void 0 && integrations === void 0) {
+      throw expected(
+        "Nothing to update. Provide at least one of --name, --description, --tags, --timezone, --settings, --integrations."
+      );
+    }
+    const client = await createDataClient();
+    const body = {};
+    if (opts.name !== void 0) body.name = opts.name;
+    if (opts.description !== void 0) body.description = opts.description;
+    if (opts.tags !== void 0) body.tags = splitList(opts.tags);
+    if (integrations !== void 0) body.integrations = integrations;
+    if (opts.settings !== void 0 || opts.timezone !== void 0) {
+      let settings;
+      if (opts.settings !== void 0) {
+        let parsed;
+        try {
+          parsed = parseData(opts.settings);
+        } catch (e) {
+          throw expected(`--settings: ${e instanceof Error ? e.message : "could not be read as JSON"}`);
+        }
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+          throw expected("--settings must be a valid JSON object");
+        }
+        settings = parsed;
+      } else {
+        const existing = await client.request("GET", `/v1/bases/${pathSegment(id)}`);
+        settings = { ...existing?.settings ?? {} };
+      }
+      if (opts.timezone !== void 0) settings.timezone = opts.timezone;
+      body.settings = settings;
+    }
+    printOutput(await client.request("PUT", `/v1/bases/${pathSegment(id)}`, body), outputFormat(this));
+  });
+  bases.command("rename <id>").description(
+    "Rename a base's display name (the id/slug is immutable \u2014 it scopes token grants, MCP endpoints, and references)"
+  ).requiredOption("--name <name>", "New display name").action(async function(id, opts) {
+    const client = await createDataClient();
+    printOutput(
+      await client.request("PUT", `/v1/bases/${pathSegment(id)}`, { name: opts.name }),
+      outputFormat(this)
+    );
+  });
+  bases.command("tag <id>").description("Set tags on a base").requiredOption("--tags <tags>", "Comma-separated tags (e.g. client:acme,billing)").action(async function(id, opts) {
+    const client = await createDataClient();
+    printOutput(
+      await client.request("PUT", `/v1/bases/${pathSegment(id)}`, { tags: splitList(opts.tags) }),
+      outputFormat(this)
+    );
+  });
+  bases.command("delete <id>").description(
+    "Delete a base. By default this is a tombstone: the base stops being listed, but its storage is retained and recreating the id restores it. Add --purge (preview bases only) to also reclaim the storage"
+  ).option("-y, --yes", "Skip confirmation prompt").option(
+    "--purge",
+    "Preview bases only. Permanently destroy the stored records, relationships, file metadata and config of this base instead of tombstoning it. The id is then retired and cannot be recreated"
+  ).action(async function(id, opts) {
+    const prompt3 = opts.purge ? `Purge base "${id}"? Its records, relationships, file metadata and config are destroyed permanently, and the id "${id}" is retired for good.` : `Delete base "${id}"? This cannot be undone.`;
+    if (!opts.yes && !await confirm(prompt3)) {
+      console.log("Aborted");
+      return;
+    }
+    const client = await createDataClient();
+    await client.request("DELETE", `/v1/bases/${pathSegment(id)}${opts.purge ? "?purge=true" : ""}`);
+    printOutput({ id, deleted: true, purged: opts.purge === true }, outputFormat(this));
+  });
+  bases.command("create-preview <origin-id>").description(
+    "Create a preview base by cloning the config of another base. The origin may be a production base or another preview; the new preview id is <origin-id>--<name>, linked to the origin it was cloned from (so a preview of a preview promotes through that origin, never straight to production)"
+  ).requiredOption("--name <name>", "Preview base name").option("--description <desc>", "Description").option(
+    "--integrations <mode>",
+    "enabled (default) | disabled. `disabled` makes this preview a seeded, production-safe agent-eval target: every external integration edge is inert and it behaves natively"
+  ).option(
+    "--create-only",
+    "Fail with 409 if the derived preview id already exists, instead of re-applying config onto it. Use for per-session ephemeral bases, where landing on a live sibling would corrupt both runs"
+  ).action(async function(originId, opts) {
+    const integrations = parseEnum("--integrations", opts.integrations, ["enabled", "disabled"]);
+    const client = await createDataClient();
+    printOutput(
+      await client.request("POST", `/v1/${pathSegment(originId, "origin base id")}/preview`, {
+        name: opts.name,
+        description: opts.description,
+        ...integrations !== void 0 ? { integrations } : {},
+        ...opts.createOnly ? { create_only: true } : {}
+      }),
+      outputFormat(this)
+    );
+  });
+  bases.command("list-previews <origin-id>").description("List preview bases cloned from a base (production or preview)").action(async function(originId) {
+    const client = await createDataClient();
+    const path31 = `/v1/${pathSegment(originId, "origin base id")}/previews`;
+    printOutput(
+      await client.collectPages((cursor) => pageOf(path31, cursor)),
+      outputFormat(this)
+    );
+  });
+  bases.command("promote <production-id>").description("Promote config from a preview base to production (human-only)").requiredOption("--from <preview-id>", "Source preview base id").option("--dry-run", "Show what would change without applying").option("--record-types <ids>", "Comma-separated record type ids to promote", splitList).option("--triggers <ids>", "Comma-separated trigger ids to promote", splitList).option("--inbound-webhooks <ids>", "Comma-separated inbound webhook ids to promote", splitList).action(async function(productionId, opts) {
+    const client = await createDataClient();
+    const data = await client.request("POST", `/v1/${pathSegment(productionId, "production base id")}/promote`, {
+      source_base_id: opts.from,
+      dry_run: opts.dryRun ?? false,
+      record_types: opts.recordTypes,
+      triggers: opts.triggers,
+      inbound_webhooks: opts.inboundWebhooks
+    });
+    printOutput(data, outputFormat(this));
+    const warnings = data?.source_credential_warnings ?? [];
+    if (warnings.length > 0) {
+      console.warn(
+        "\nExternal source credentials are NOT carried over by promotion \u2014 set these on production before the source will work:"
+      );
+      for (const w of warnings) console.warn(`  - ${sanitizeTerminalText(w.message)}`);
+    }
+  });
+  bases.command("rollback <production-id>").description("Roll back a promotion (human-only)").requiredOption("--promotion <promotion-id>", "Promotion id to roll back").action(async function(productionId, opts) {
+    const client = await createDataClient();
+    printOutput(
+      await client.request("POST", `/v1/${pathSegment(productionId, "production base id")}/promote/rollback`, {
+        promotion_id: opts.promotion
+      }),
+      outputFormat(this)
+    );
+  });
+  bases.command("promotions <production-id>").description("List promotion history for a production base").action(async function(productionId) {
+    const client = await createDataClient();
+    const path31 = `/v1/${pathSegment(productionId, "production base id")}/promotions`;
+    printOutput(
+      await client.collectPages((cursor) => pageOf(path31, cursor)),
+      outputFormat(this)
+    );
+  });
+  bases.command("use <base>").description(
+    "Bind this worktree to a base so push/pull refuse to run against a different one"
+  ).action(async function(selector) {
+    const baseId = resolveSelectorToBaseId(selector);
+    const previous = readBaseBinding();
+    if (previous !== baseId) {
+      try {
+        writeBaseBinding(baseId);
+      } catch (err) {
+        throw expected(err instanceof Error ? err.message : String(err));
+      }
+    }
+    if (outputFormat(this) === "json") {
+      printOutput({ base_id: baseId, previous_base_id: previous, changed: previous !== baseId }, "json");
+      return;
+    }
+    if (previous === baseId) {
+      console.log(`Worktree already bound to base ${baseId}.`);
+    } else {
+      console.log(
+        previous ? `Worktree rebound: ${previous} -> ${baseId}.` : `Worktree bound to base ${baseId}.`
+      );
+    }
+  });
+  bases.command("unbind").description("Clear the base binding for this worktree").action(async function() {
+    const previous = readBaseBinding();
+    if (previous) clearBaseBinding();
+    if (outputFormat(this) === "json") {
+      printOutput({ previous_base_id: previous, cleared: previous !== null }, "json");
+      return;
+    }
+    console.log(
+      previous ? `Worktree unbound from base (was: ${previous}).` : "No base binding to clear."
+    );
+  });
+  return bases;
+}
+function resolveSelectorToBaseId(selector) {
+  const gitRoot = findGitRoot();
+  if (!gitRoot || selector.includes("/") || selector.includes(path30.sep)) return selector;
+  if (!isValidBaseId(selector)) return selector;
+  const metaPath = path30.join(resolveBasesDir(gitRoot), selector, BASE_META_FILE);
+  let meta;
+  try {
+    meta = yaml9.load(fs24.readFileSync(metaPath, "utf-8"));
+  } catch {
+    return selector;
+  }
+  const id = meta?.[BASE_ID_FIELD];
+  return typeof id === "string" && isValidBaseId(id) ? id : selector;
+}
+var BASE_META_FILE, BASE_ID_FIELD;
+var init_bases = __esm({
+  "src/data/commands/bases.ts"() {
+    "use strict";
+    init_client();
+    init_output();
+    init_helpers();
+    init_utils();
+    init_terminal_output();
+    init_workspace();
+    init_layout();
+    init_base_binding();
+    init_base_id();
+    init_expected();
+    BASE_META_FILE = "base.yaml";
+    BASE_ID_FIELD = "base_id";
+  }
+});
+
+// src/data/program.ts
+var program_exports = {};
+__export(program_exports, {
+  DATA_NAMESPACES: () => DATA_NAMESPACES,
+  buildDataProgram: () => buildDataProgram,
+  isDataNamespace: () => isDataNamespace,
+  runDataCommand: () => runDataCommand,
+  withBaseOption: () => withBaseOption,
+  withDataGlobals: () => withDataGlobals
+});
+import { Command as Command2 } from "commander";
+function withDataGlobals(command2) {
+  return command2.option("--org <uuid>", "Organization to operate against (overrides .wayai.yaml)").option("--output <format>", "Output format: json or table", "table").option("--json", "Shorthand for --output json");
+}
+function withBaseOption(command2) {
+  return command2.option("--base <id>", "Base id (or set WAYAI_BASE)");
+}
+function routeErrorsToCli(command2) {
+  command2.exitOverride().configureOutput({ outputError: () => {
+  } });
+  for (const child of command2.commands) routeErrorsToCli(child);
+  return command2;
+}
+function buildDataProgram() {
+  const program = new Command2("wayai");
+  program.addCommand(withDataGlobals(buildBasesCommand()));
+  program.hook("preAction", (_thisCommand, actionCommand) => {
+    setDataOrgOverride(globals(actionCommand).org);
+  });
+  return routeErrorsToCli(program);
+}
+async function runDataCommand(namespace, args2) {
+  if (!isDataNamespace(namespace)) {
+    throw new Error(`Not a Data command: ${namespace}`);
+  }
+  const program = buildDataProgram();
+  try {
+    await program.parseAsync(["node", "wayai", namespace, ...args2]);
+  } catch (err) {
+    const { code, exitCode } = err ?? {};
+    if (code === "commander.helpDisplayed" || code === "commander.version") return;
+    if (code === "commander.help") {
+      process.exitCode = exitCode || 1;
+      return;
+    }
+    if (typeof code === "string" && code.startsWith("commander.")) {
+      throw expected(err instanceof Error ? err.message : String(err));
+    }
+    throw err;
+  }
+}
+var init_program = __esm({
+  "src/data/program.ts"() {
+    "use strict";
+    init_bases();
+    init_helpers();
+    init_expected();
+    init_org_context();
+    init_registry();
+    init_registry();
+  }
+});
+
 // src/index.ts
 init_sentry();
 init_errors2();
 init_mask_secrets();
 init_utils();
-import { readFileSync as readFileSync19 } from "fs";
+init_registry();
+import { readFileSync as readFileSync21 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { dirname as dirname9, join as join27 } from "path";
+import { dirname as dirname9, join as join28 } from "path";
 
 // src/lib/version-refresh.ts
 init_version_cache();
@@ -24213,12 +25514,12 @@ Run \`wayai admin skill install\` to update.`);
 
 // src/index.ts
 var __dirname = dirname9(fileURLToPath2(import.meta.url));
-var pkg = JSON.parse(readFileSync19(join27(__dirname, "..", "package.json"), "utf-8"));
+var pkg = JSON.parse(readFileSync21(join28(__dirname, "..", "package.json"), "utf-8"));
 var [, , command, ...args] = process.argv;
 var isBackgroundRefresh = command === REFRESH_COMMAND;
 if (!isBackgroundRefresh) initSentry(command, pkg.version);
 async function main() {
-  if (shouldInterceptHelp(command, args, OWN_HELP_COMMANDS)) {
+  if (shouldInterceptHelp(command, args, /* @__PURE__ */ new Set([...OWN_HELP_COMMANDS, ...DATA_NAMESPACES]))) {
     printHelp3();
     return;
   }
@@ -24417,10 +25718,16 @@ async function main() {
     case "-v":
       console.log(pkg.version);
       break;
-    default:
+    default: {
+      const { isDataNamespace: isDataNamespace2, runDataCommand: runDataCommand2 } = await Promise.resolve().then(() => (init_program(), program_exports));
+      if (isDataNamespace2(command)) {
+        await runDataCommand2(command, args);
+        break;
+      }
       console.error(`Unknown command: ${command}`);
       printHelp3();
       process.exit(1);
+    }
   }
 }
 function printHelp3() {
@@ -24471,6 +25778,13 @@ Commands:
   report edit        Amend your own pending report (title/description/error/steps/context)
   update             Update CLI to the latest version
 
+Data (bases):
+  bases              Manage bases (list/get/create/update/delete, previews, promote)
+  bases promote      Promote a preview base to production (distinct from \`publish\`, which promotes a hub)
+  bases use <base>   Bind this worktree to a base (\`wayai use\` binds a hub)
+  bases unbind       Clear this worktree's base binding
+  Run \`wayai bases --help\` for the full tree.
+
 Flags:
   --yes, -y              Skip confirmation prompts (useful for CI and scripting)
   --hub <uuid|name>      Target hub when the workspace has more than one (push, pull, diff, replicate, relabel, publish)