@wayai/cli 0.3.165 → 0.3.167

package/dist/index.js

@@ -4797,6 +4797,31 @@ function monitorRuleKeysOffTrigger(monitorConfig) {
   const config = monitorConfig;
   return MONITOR_RULE_KEYS.filter((key) => config[key] !== void 0);
 }
+function monitorRulesStructuredOutputMessage(trigger) {
+  const [article, consequence] = trigger === "assistant_reply" ? ["an", "every reply is delivered unjudged"] : ["a", "none of their actions runs"];
+  return `${article} ${trigger} monitor with rules needs structured output: its rules read variables only a JSON answer carries, so on text output no rule can match and ${consequence}. Set response_format to json_schema (wayai push), or remove the rules.`;
+}
+function monitorRulesStructuredOutputRefusal(agent) {
+  const trigger = refusedRulesTrigger(agent);
+  return trigger === null ? null : monitorRulesStructuredOutputMessage(trigger);
+}
+function refusedRulesTrigger(agent) {
+  if (agent.agent_role !== "monitor") return null;
+  const config = decodedMonitorConfig(agent.monitor_config);
+  const trigger = resolveMonitorTrigger(config);
+  if (!MONITOR_RULE_TRIGGERS.includes(trigger)) return null;
+  const rules = config.rules;
+  if (!Array.isArray(rules) || rules.length === 0) return null;
+  return agent.response_format === "json_schema" ? null : trigger;
+}
+function decodedMonitorConfig(value) {
+  if (typeof value !== "string") return value;
+  try {
+    return JSON.parse(value);
+  } catch {
+    return null;
+  }
+}
 function monitorRuleActionKinds(trigger) {
   return trigger === "assistant_reply" ? MONITOR_ASSISTANT_REPLY_ACTION_KINDS : MONITOR_USER_MESSAGE_ACTION_KINDS;
 }
@@ -4945,6 +4970,10 @@ function refineDecisionsModelBinding(body, ctx) {
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["agent_settings", "model"], message: refusal2.message });
   }
 }
+function refineMonitorRulesStructuredOutput(body, ctx) {
+  const refusal2 = monitorRulesStructuredOutputRefusal(body);
+  if (refusal2) ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["response_format"], message: refusal2 });
+}
 function visibleLength(s) {
   return s.replace(INVISIBLE_NAME_CHARS, "").length;
 }
@@ -5791,7 +5820,7 @@ function refineHubAsCodeDecisionsModel(config, ctx) {
     const refusal2 = checkDecisionsModelBinding({
       model: readAgentSettingsModel(a.settings),
       agent_role: a.role,
-      response_format: responseFormat ? "json_schema" : "text",
+      response_format: pushedResponseFormatColumn(responseFormat),
       schema_json: responseFormat?.schema_json ?? null
     });
     if (refusal2) {
@@ -5803,6 +5832,25 @@ function refineHubAsCodeDecisionsModel(config, ctx) {
     }
   });
 }
+function pushedResponseFormatColumn(responseFormat) {
+  return responseFormat ? "json_schema" : "text";
+}
+function refineHubAsCodeMonitorRulesOutput(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  agents.forEach((agent, agentIndex) => {
+    const a = agent;
+    if (!a) return;
+    const refusal2 = monitorRulesStructuredOutputRefusal({
+      agent_role: a.role,
+      response_format: pushedResponseFormatColumn(a.response_format),
+      monitor_config: a.monitor_config
+    });
+    if (refusal2) {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["agents", agentIndex, "response_format"], message: refusal2 });
+    }
+  });
+}
 var uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, MAX_AUDIO_FILE_BASE64_BYTES, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, PREVIOUS_CONVERSATIONS_MAX, FLAG_CONDITION_OPERATORS, DECISION_SCORE_MIN_LEVELS, DECISION_SCORE_MAX_LEVELS, DECISIONS_MODEL_PREFIXES, DECISION_CAPABLE_AGENT_ROLES, NATIVE_TOOL_SCHEMAS, WAYAI_CONNECTOR, BASE_NATIVE_TOOLS, NATIVE_TOOLS, NATIVE_TOOL_NAMES, previousConversationsCountField, summarizationThresholdField, flagConditionSchema, MONITOR_TRIGGERS, monitorTriggerSchema, MONITOR_FIRING_TRIGGERS, MONITOR_DELAY_SECONDS_MIN, MONITOR_IDLE_DELAY_REQUIRED_MESSAGE, MONITOR_HISTORY_MESSAGES_MAX, monitorHistoryMessagesSchema, monitorIncludeToolResultsSchema, MONITOR_INPUT_SHAPING_KEYS, MONITOR_INPUT_SHAPING_SCHEMAS, MONITOR_INPUT_SHAPING_IDLE_MESSAGE, monitorArgumentSourceSchema, MONITOR_NOTE_TEMPLATE_MAX, monitorActionSchema, monitorRuleSchema, MONITOR_RULE_KEYS, MONITOR_RULE_SCHEMAS, MONITOR_RULE_TRIGGERS, MONITOR_RULE_TRIGGER_MESSAGE, MONITOR_USER_MESSAGE_ACTION_KINDS, MONITOR_ASSISTANT_REPLY_ACTION_KINDS, INSERT_NOTE_TOOL_NAME, RUN_MONITOR_TOOL_NAME, MONITOR_RULE_ALLOWED_NATIVE_TOOLS, MONITOR_RULE_REENTRY_TOOLS, MONITOR_RULE_REENTRY_TRACKS, monitorConfigField, flagConditionsField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupTypeSchema, EVENT_RELATIVE_FOLLOWUP_TYPES, followupTimeUnitSchema, followupIdSchema, SELECTABLE_FOLLOWUP_TYPES, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS, followupSchema, MAX_OUTCOMES_PER_STATUS, kanbanOutcomeSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, MAX_EVAL_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, ORG_TAG_NAME_REGEX, ORG_TAG_NAME_MAX_LENGTH, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, BASE_CREDENTIAL_MANAGED_BY, BASE_CREDENTIAL_NAME_MAX, baseCredentialNameSchema, createBaseCredentialLinkBody, baseCredentialLinkParams, baseCredentialLinkQuery, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlTable, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_MAX_RUNS_PER_SCENARIO, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, ISO_UTC_RE, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, evalDateContextSchema, EVAL_FIXTURE_NAME_MAX_LENGTH, evalFixtureOverrideSchema, runSessionQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, createEvalBody, updateEvalBody, EVAL_LIST_MAX_LIMIT, evalListLimit, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, EVAL_MAX_SELECTED_SCENARIOS, evalScenarioSelectionEntrySchema, evalScenarioSelectionSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, evalSessionConfigResponseSchema, evalSessionResponseSchema, evalSessionListConfigSchema, evalSessionListItemSchema, seedReleaseStatusSchema, EVAL_SESSION_NOT_QUIESCENT, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, copilotSuggestBody, copilotSuggestResponse, CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, planKeySchema, billingStatusSchema, billingPlanTypeSchema, dataUsageCountersSchema, REKOR_ENTITLEMENT_CONTRACT_VERSION, entitlementProjectionSchema, rekorEntitlementRefreshMessageSchema, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, PRICING_PLAN_ID_RE, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetBody, adminRepairLegacyOrgGrantsBody, adminRepairCompedPlansBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysBody, dataExplorerKvKeyBody, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteBody, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, META_ENTITY_ID_PATTERN, metaEntityId, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, passwordLoginBody, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, REKOR_ACTOR_TYPE_HEADER, REKOR_ACTOR_ID_HEADER, REKOR_ACTOR_LABEL_HEADER, REKOR_ACTOR_ORG_HEADER, REKOR_ACTOR_ADMIN_HEADER, REKOR_CLIENT_HEADER, REKOR_TOOL_ID_HEADER, REKOR_CLIENTS, rekorClientSchema, MAX_REKOR_TOOL_ID_LENGTH, rekorToolIdSchema, DATA_PROXY_MOUNT, DATA_PROXY_PREFIX, REKOR_V1_PREFIX, DATA_PROXY_ORG_QUERY_PARAM, MAX_PROVISIONING_BODY_BYTES, dataProxyQuery, rekorAttestation, REQUIRED_REKOR_ATTESTATION_HEADERS, BASE_DESTRUCTION_MOUNT, BASE_DESTRUCTION_PREFIX, BASE_DESTRUCTION_CONFIRM_PATH, baseDestructionConfirmBody, BASE_DESTRUCTION_GRACE_MS, BASE_DESTRUCTION_CONFIRM_TTL_MS, BASE_DESTRUCTION_ORG_QUERY_PARAM, baseDestructionQuery, baseDestructionParam, baseDestructionInitiateBody, baseDestructionStatus, baseDestructionRequest, baseDestructionListResponse, baseDestructionInitiateResponse, baseDestructionConfirmResponse, baseDestructionCancelResponse, rekorBaseChangeMessageSchema;
 var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
@@ -6985,7 +7033,10 @@ var init_contracts = __esm({
       previous_conversations_count: previousConversationsCountField,
       monitor_config: monitorConfigField,
       flag_conditions: flagConditionsField
-    }).passthrough().superRefine(refineDecisionsModelBinding);
+    }).passthrough().superRefine((body, ctx) => {
+      refineDecisionsModelBinding(body, ctx);
+      refineMonitorRulesStructuredOutput(body, ctx);
+    });
     updateAgentBody = external_exports.object({
       additional_context_template: external_exports.string().max(2e4).optional(),
       summarization_threshold_tokens: summarizationThresholdField,
@@ -8498,8 +8549,12 @@ var init_contracts = __esm({
         name: clientOptionalString
       }).optional(),
       message: apiChannelMessage,
-      // Idempotency key: maps to channel_message_sid; a retried POST echoes the original
-      // message_id and skips billing / turn dispatch (dedupe in ConversationDO.storeMessage).
+      // Idempotency key: maps to channel_message_sid, deduped within one conversation
+      // (ConversationDO.storeMessage). A retried POST resolves to the same conversation (a chat
+      // hub's user, the external_ref, the conversation_id, or on a task hub with neither, this key
+      // scoped by the sender), so it echoes the original message_id and skips billing / turn
+      // dispatch. A failed store answers a retryable 503 only when this key is set; without it a
+      // retry could store the message twice, so it answers 400.
       client_message_id: external_exports.string().min(1).max(256).optional()
     }).refine((b) => !(b.external_ref && b.conversation_id), {
       message: "provide external_ref or conversation_id, not both",
@@ -9276,6 +9331,7 @@ var init_contracts = __esm({
       refineHubAsCodeFlagConditions(config, ctx);
       refineHubAsCodeMonitorConfig(config, ctx);
       refineHubAsCodeDecisionsModel(config, ctx);
+      refineHubAsCodeMonitorRulesOutput(config, ctx);
     });
     ciPullHubIdParam = external_exports.object({
       hub_id: ciUuidSchema
@@ -11437,6 +11493,31 @@ function monitorRuleKeysOffTrigger2(monitorConfig) {
   const config = monitorConfig;
   return MONITOR_RULE_KEYS2.filter((key) => config[key] !== void 0);
 }
+function monitorRulesStructuredOutputMessage2(trigger) {
+  const [article, consequence] = trigger === "assistant_reply" ? ["an", "every reply is delivered unjudged"] : ["a", "none of their actions runs"];
+  return `${article} ${trigger} monitor with rules needs structured output: its rules read variables only a JSON answer carries, so on text output no rule can match and ${consequence}. Set response_format to json_schema (wayai push), or remove the rules.`;
+}
+function monitorRulesStructuredOutputRefusal2(agent) {
+  const trigger = refusedRulesTrigger2(agent);
+  return trigger === null ? null : monitorRulesStructuredOutputMessage2(trigger);
+}
+function refusedRulesTrigger2(agent) {
+  if (agent.agent_role !== "monitor") return null;
+  const config = decodedMonitorConfig2(agent.monitor_config);
+  const trigger = resolveMonitorTrigger2(config);
+  if (!MONITOR_RULE_TRIGGERS2.includes(trigger)) return null;
+  const rules = config.rules;
+  if (!Array.isArray(rules) || rules.length === 0) return null;
+  return agent.response_format === "json_schema" ? null : trigger;
+}
+function decodedMonitorConfig2(value) {
+  if (typeof value !== "string") return value;
+  try {
+    return JSON.parse(value);
+  } catch {
+    return null;
+  }
+}
 function monitorRuleActionKinds2(trigger) {
   return trigger === "assistant_reply" ? MONITOR_ASSISTANT_REPLY_ACTION_KINDS2 : MONITOR_USER_MESSAGE_ACTION_KINDS2;
 }
@@ -11585,6 +11666,10 @@ function refineDecisionsModelBinding2(body, ctx) {
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["agent_settings", "model"], message: refusal2.message });
   }
 }
+function refineMonitorRulesStructuredOutput2(body, ctx) {
+  const refusal2 = monitorRulesStructuredOutputRefusal2(body);
+  if (refusal2) ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["response_format"], message: refusal2 });
+}
 function visibleLength2(s) {
   return s.replace(INVISIBLE_NAME_CHARS2, "").length;
 }
@@ -12454,7 +12539,7 @@ function refineHubAsCodeDecisionsModel2(config, ctx) {
     const refusal2 = checkDecisionsModelBinding2({
       model: readAgentSettingsModel2(a.settings),
       agent_role: a.role,
-      response_format: responseFormat ? "json_schema" : "text",
+      response_format: pushedResponseFormatColumn2(responseFormat),
       schema_json: responseFormat?.schema_json ?? null
     });
     if (refusal2) {
@@ -12466,6 +12551,25 @@ function refineHubAsCodeDecisionsModel2(config, ctx) {
     }
   });
 }
+function pushedResponseFormatColumn2(responseFormat) {
+  return responseFormat ? "json_schema" : "text";
+}
+function refineHubAsCodeMonitorRulesOutput2(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  agents.forEach((agent, agentIndex) => {
+    const a = agent;
+    if (!a) return;
+    const refusal2 = monitorRulesStructuredOutputRefusal2({
+      agent_role: a.role,
+      response_format: pushedResponseFormatColumn2(a.response_format),
+      monitor_config: a.monitor_config
+    });
+    if (refusal2) {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["agents", agentIndex, "response_format"], message: refusal2 });
+    }
+  });
+}
 function identifyTokenType(token) {
   if (token.startsWith("way_")) return "way_token";
   if (token.startsWith("eyJ")) return "jwt";
@@ -14142,7 +14246,10 @@ var init_dist = __esm({
       previous_conversations_count: previousConversationsCountField2,
       monitor_config: monitorConfigField2,
       flag_conditions: flagConditionsField2
-    }).passthrough().superRefine(refineDecisionsModelBinding2);
+    }).passthrough().superRefine((body, ctx) => {
+      refineDecisionsModelBinding2(body, ctx);
+      refineMonitorRulesStructuredOutput2(body, ctx);
+    });
     updateAgentBody2 = external_exports.object({
       additional_context_template: external_exports.string().max(2e4).optional(),
       summarization_threshold_tokens: summarizationThresholdField2,
@@ -15650,8 +15757,12 @@ var init_dist = __esm({
         name: clientOptionalString2
       }).optional(),
       message: apiChannelMessage2,
-      // Idempotency key: maps to channel_message_sid; a retried POST echoes the original
-      // message_id and skips billing / turn dispatch (dedupe in ConversationDO.storeMessage).
+      // Idempotency key: maps to channel_message_sid, deduped within one conversation
+      // (ConversationDO.storeMessage). A retried POST resolves to the same conversation (a chat
+      // hub's user, the external_ref, the conversation_id, or on a task hub with neither, this key
+      // scoped by the sender), so it echoes the original message_id and skips billing / turn
+      // dispatch. A failed store answers a retryable 503 only when this key is set; without it a
+      // retry could store the message twice, so it answers 400.
       client_message_id: external_exports.string().min(1).max(256).optional()
     }).refine((b) => !(b.external_ref && b.conversation_id), {
       message: "provide external_ref or conversation_id, not both",
@@ -16428,6 +16539,7 @@ var init_dist = __esm({
       refineHubAsCodeFlagConditions2(config, ctx);
       refineHubAsCodeMonitorConfig2(config, ctx);
       refineHubAsCodeDecisionsModel2(config, ctx);
+      refineHubAsCodeMonitorRulesOutput2(config, ctx);
     });
     ciPullHubIdParam2 = external_exports.object({
       hub_id: ciUuidSchema2
@@ -17528,11 +17640,33 @@ function ensureRealSubdirNoSymlink(root, target, create) {
   }
   return true;
 }
+function isUnder(parent, child) {
+  const rel = path.relative(parent, child);
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel);
+}
+function isSymlink(p) {
+  try {
+    return fs.lstatSync(p).isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function workspaceRefusal(message) {
+  const err = expected(message);
+  err.isWorkspaceRefusal = true;
+  return err;
+}
+function isWorkspaceRefusal(err) {
+  return err?.isWorkspaceRefusal === true;
+}
+function symlinkRefusal(rel, kind) {
+  return workspaceRefusal(
+    `${rel} is a symlink, is reached through one, or is not a ${kind}. The CLI never reads or writes workspace config through a symlink \u2014 make it a real ${kind}.`
+  );
+}
 function requireRealSubdirNoSymlink(root, target, create) {
   if (ensureRealSubdirNoSymlink(root, target, create)) return;
-  throw expected(
-    `${path.relative(path.dirname(root), target)} is reached through a symlink (or a file is in the way). The CLI never reads or writes workspace config through a symlink \u2014 make it a real directory.`
-  );
+  throw symlinkRefusal(path.relative(path.dirname(root), target), "directory");
 }
 function requireRealHubFolder(hubFolder, create) {
   if (!create) {
@@ -17553,11 +17687,7 @@ function requireRealHubFolder(hubFolder, create) {
     } catch {
       continue;
     }
-    if (!st.isFile()) {
-      throw expected(
-        `${path.join(path.basename(hubFolder), name)} is a symlink (or not a file). The CLI never reads or writes workspace config through a symlink \u2014 make it a real file.`
-      );
-    }
+    if (!st.isFile()) throw symlinkRefusal(path.join(path.basename(hubFolder), name), "file");
   }
 }
 function readRealFileOrThrow(root, abs) {
@@ -17568,11 +17698,7 @@ function readRealFileOrThrow(root, abs) {
     return null;
   }
   const bytes = st.isFile() ? readFileNoFollow(root, abs) : null;
-  if (!bytes) {
-    throw expected(
-      `${path.relative(path.dirname(root), abs)} is a symlink (or reached through one). The CLI never reads or writes workspace config through a symlink \u2014 make it a real file.`
-    );
-  }
+  if (!bytes) throw symlinkRefusal(path.relative(path.dirname(root), abs), "file");
   return bytes.toString("utf-8");
 }
 function readFileNoFollow(root, abs) {
@@ -17767,10 +17893,9 @@ function resolveWorkspaceDir() {
   return resolveLayout(gitRoot).hubsDir;
 }
 function readHubYaml(yamlPath) {
-  if (!fs3.existsSync(yamlPath)) return null;
+  if (!fs3.existsSync(yamlPath) || isSymlink(yamlPath)) return null;
   try {
-    const content = fs3.readFileSync(yamlPath, "utf-8");
-    const config = yaml.load(content);
+    const config = yaml.load(fs3.readFileSync(yamlPath, "utf-8"));
     if (!config?.hub_id || !config.hub_environment) return null;
     return { hubId: config.hub_id, hubEnvironment: config.hub_environment };
   } catch {
@@ -17796,10 +17921,9 @@ function filterPreviewHubs(hubs) {
   return hubs.filter(isPreviewHub);
 }
 function readNewHubYaml(yamlPath) {
-  if (!fs3.existsSync(yamlPath)) return null;
+  if (!fs3.existsSync(yamlPath) || isSymlink(yamlPath)) return null;
   try {
-    const content = fs3.readFileSync(yamlPath, "utf-8");
-    const config = yaml.load(content);
+    const config = yaml.load(fs3.readFileSync(yamlPath, "utf-8"));
     if (config?.hub_id) return null;
     if (!config?.hub?.name) return null;
     return { hubName: config.hub.name, hubType: config.hub.hub_type };
@@ -17882,6 +18006,7 @@ function getChangedHubs(workspaceDir) {
   }
   const hubs = [];
   for (const hubFolder of hubFolders) {
+    if (!isRealDirectory(hubFolder)) continue;
     const meta = readHubYaml(path3.join(hubFolder, "hub.yaml")) || readHubYaml(path3.join(hubFolder, "wayai.yaml"));
     if (meta) {
       hubs.push({ hubFolder, hubId: meta.hubId, hubEnvironment: meta.hubEnvironment });
@@ -17941,30 +18066,28 @@ function autoRenameHubFolder(currentFolder, hubName, hubEnvironment, hubId, prev
 function findEnclosingHubFolder(workspaceDir) {
   let current = process.cwd();
   const stop = path3.resolve(workspaceDir);
-  while (true) {
+  while (isUnder(stop, current)) {
     const meta = readHubYaml(path3.join(current, "hub.yaml")) || readHubYaml(path3.join(current, "wayai.yaml"));
     if (meta) {
       return { hubFolder: current, hubId: meta.hubId, hubEnvironment: meta.hubEnvironment };
     }
     if (current === stop) return null;
-    const parent = path3.dirname(current);
-    if (parent === current) return null;
-    current = parent;
+    current = path3.dirname(current);
   }
+  return null;
 }
 function findEnclosingNewHubFolder(workspaceDir) {
   let current = process.cwd();
   const stop = path3.resolve(workspaceDir);
-  while (true) {
+  while (isUnder(stop, current)) {
     const meta = readNewHubYaml(path3.join(current, "hub.yaml")) || readNewHubYaml(path3.join(current, "wayai.yaml"));
     if (meta) {
       return { hubFolder: current, hubName: meta.hubName, hubType: meta.hubType };
     }
     if (current === stop) return null;
-    const parent = path3.dirname(current);
-    if (parent === current) return null;
-    current = parent;
+    current = path3.dirname(current);
   }
+  return null;
 }
 function resolvePushTarget(workspaceDir, existingHubs, newHubs, selector) {
   if (selector) {
@@ -18066,6 +18189,7 @@ var init_workspace = __esm({
     "use strict";
     init_utils();
     init_layout();
+    init_fs_safety();
   }
 });
 
@@ -18080,6 +18204,11 @@ function rootConfigPath(gitRoot) {
   return path4.join(gitRoot, ROOT_CONFIG_FILE);
 }
 function loadYamlMapping(file) {
+  for (const p of [file, path4.dirname(file)]) {
+    if (isSymlink(p)) {
+      return { kind: "malformed", reason: `${path4.basename(p)} is a symlink \u2014 make it a real ${p === file ? "file" : "directory"}` };
+    }
+  }
   let raw;
   try {
     raw = fs4.readFileSync(file, "utf-8");
@@ -18107,6 +18236,7 @@ var init_workspace_manifest = __esm({
   "src/lib/workspace-manifest.ts"() {
     "use strict";
     init_layout();
+    init_fs_safety();
     WORKSPACE_MANIFEST_FILE = "wayai.yaml";
     WORKSPACE_MANIFEST_LABEL = `${WAYAI_LAYOUT.wsDir}/${WORKSPACE_MANIFEST_FILE}`;
     ROOT_CONFIG_FILE = ".wayai.yaml";
@@ -18903,7 +19033,7 @@ var init_registry = __esm({
 
 // src/lib/version-cache.ts
 import { existsSync as existsSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "fs";
-import { dirname as dirname5, join as join7 } from "path";
+import { dirname as dirname6, join as join7 } from "path";
 import { homedir as homedir2 } from "os";
 function getVersionCachePath(filename = CLI_CACHE_FILE) {
   return join7(homedir2(), ".wayai", filename);
@@ -18933,7 +19063,7 @@ function isVersionCacheStale(filename = CLI_CACHE_FILE, maxAgeMs = MAX_AGE_24H_M
 }
 function writeVersionCache(filename, cache) {
   const path35 = getVersionCachePath(filename);
-  const dir = dirname5(path35);
+  const dir = dirname6(path35);
   if (!existsSync3(dir)) mkdirSync2(dir, { recursive: true });
   writeFileSync2(path35, JSON.stringify(cache));
 }
@@ -20583,7 +20713,9 @@ function scanResourceFiles(dir, prefix = "") {
   const entries = fs9.readdirSync(dir, { withFileTypes: true });
   for (const entry of entries) {
     const relPath = prefix ? `${prefix}/${entry.name}` : entry.name;
-    if (entry.isDirectory()) {
+    if (entry.isSymbolicLink()) {
+      throw symlinkRefusal(relPath, "file or folder");
+    } else if (entry.isDirectory()) {
       files.push(...scanResourceFiles(path11.join(dir, entry.name), relPath));
     } else if (entry.isFile()) {
       const fullPath = path11.join(dir, entry.name);
@@ -20963,6 +21095,18 @@ var init_eval_attachments = __esm({
 import * as fs11 from "fs";
 import * as path13 from "path";
 import * as yaml6 from "js-yaml";
+function refuseConsumedLink(hubFolder, dir, entry) {
+  if (!entry.isSymbolicLink()) return;
+  const abs = path13.join(dir, entry.name);
+  let toDir = false;
+  try {
+    toDir = fs11.statSync(abs).isDirectory();
+  } catch {
+  }
+  if (toDir || entry.name.endsWith(".yaml")) {
+    throw symlinkRefusal(path13.relative(hubFolder, abs), "file or folder");
+  }
+}
 function parseHubFolder(hubFolder, opts) {
   requireRealHubFolder(hubFolder, false);
   const yamlPath = resolveHubYamlPath(hubFolder);
@@ -20997,8 +21141,14 @@ function parseHubFolder(hubFolder, opts) {
     if (typeof resolved.instructions === "string" && resolved.instructions.endsWith(".md")) {
       const instrValue = resolved.instructions;
       const instructionsPath = instrValue.startsWith("agents/") ? path13.join(hubFolder, instrValue) : path13.join(hubFolder, "agents", instrValue);
-      if (fs11.existsSync(instructionsPath)) {
-        resolved.instructions = fs11.readFileSync(instructionsPath, "utf-8");
+      if (!isUnder(path13.join(hubFolder, "agents"), instructionsPath)) {
+        throw workspaceRefusal(
+          `Agent instructions path "${instrValue}" (agent "${agent.name}") must stay inside agents/.`
+        );
+      }
+      const instructions = readRealFileOrThrow(hubFolder, instructionsPath);
+      if (instructions !== null) {
+        resolved.instructions = instructions;
       } else {
         throw expected(
           `Agent instructions file not found: ${instructionsPath} (referenced by agent "${agent.name}")`
@@ -21006,9 +21156,8 @@ function parseHubFolder(hubFolder, opts) {
       }
     } else if (resolved.instructions === void 0 && typeof agent.name === "string") {
       const conventionPath = path13.join(hubFolder, "agents", `${slugify(agent.name)}.md`);
-      if (fs11.existsSync(conventionPath)) {
-        resolved.instructions = fs11.readFileSync(conventionPath, "utf-8");
-      }
+      const instructions = readRealFileOrThrow(hubFolder, conventionPath);
+      if (instructions !== null) resolved.instructions = instructions;
     }
     return resolved;
   });
@@ -21067,6 +21216,7 @@ function scanEvalYamlFiles(hubFolder, bytesByHash) {
   const seen = /* @__PURE__ */ new Set();
   const topEntries = fs11.readdirSync(evalsDir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
   for (const entry of topEntries) {
+    refuseConsumedLink(hubFolder, evalsDir, entry);
     if (entry.isFile() && entry.name.endsWith(".yaml")) {
       collectEval(evals, seen, path13.join(evalsDir, entry.name), `evals/${entry.name}`, null, hubFolder, bytesByHash);
     } else if (entry.isDirectory()) {
@@ -21074,6 +21224,7 @@ function scanEvalYamlFiles(hubFolder, bytesByHash) {
       const setDir = path13.join(evalsDir, setName);
       const setEntries = fs11.readdirSync(setDir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
       for (const sub of setEntries) {
+        refuseConsumedLink(hubFolder, setDir, sub);
         if (sub.isDirectory()) {
           throw expected(
             `Nested scenario sets are not supported: ${path13.relative(hubFolder, path13.join(setDir, sub.name))}. Move scenarios up to evals/${setName}/.`
@@ -21209,6 +21360,7 @@ function scanJourneyYamlFiles(hubFolder, bytesByHash) {
   const seen = /* @__PURE__ */ new Set();
   const entries = fs11.readdirSync(journeysDir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
   for (const entry of entries) {
+    refuseConsumedLink(hubFolder, journeysDir, entry);
     if (entry.isDirectory()) {
       throw expected(
         `Subfolders are not supported under journeys/: ${path13.relative(hubFolder, path13.join(journeysDir, entry.name))}. A journey owns its own managed scenario set \u2014 put each journey in a single journeys/<slug>.yaml file.`
@@ -21290,7 +21442,7 @@ function scanAgentYamlFiles(hubFolder) {
   const agents = [];
   for (const file of yamlFiles) {
     const filePath = path13.join(agentsDir, file);
-    const content = fs11.readFileSync(filePath, "utf-8");
+    const content = readRealFileOrThrow(hubFolder, filePath) ?? "";
     let agent;
     try {
       agent = yaml6.load(content);
@@ -21325,6 +21477,7 @@ function parseResources(hubFolder, configResources) {
     if (res.skill_name) resource.skill_name = res.skill_name;
     const resSlug = slugify(resource.name);
     const resDir = path13.join(resourcesDir, resSlug);
+    requireRealSubdirNoSymlink(hubFolder, resDir, false);
     if (fs11.existsSync(resDir)) {
       const files = scanResourceFiles(resDir, "");
       if (files.length > 0) {
@@ -21842,10 +21995,6 @@ function isProductionFolder(meta) {
 function filterEditableBases(bases) {
   return bases.filter((b) => !isProductionFolder(b.meta));
 }
-function isUnder(parent, child) {
-  const rel = path17.relative(parent, child);
-  return rel === "" || !rel.startsWith("..") && !path17.isAbsolute(rel);
-}
 function findEnclosingBaseFolder(basesDir, cwd) {
   let dir = path17.resolve(cwd);
   const stop = path17.resolve(basesDir);
@@ -21923,6 +22072,7 @@ var init_base_workspace = __esm({
     init_expected();
     init_base_id();
     init_fs_safety();
+    init_fs_safety();
     BASE_META_FILE = "base.yaml";
   }
 });
@@ -23122,8 +23272,8 @@ async function autoRenameAgentFiles(client, hubId, hubFolder, organizationId, re
   if (fs16.existsSync(agentsDir)) {
     const yamlFiles = fs16.readdirSync(agentsDir).filter((f) => f.endsWith(".yaml"));
     for (const file of yamlFiles) {
+      const content = readRealFileOrThrow(hubFolder, path22.join(agentsDir, file)) ?? "";
       try {
-        const content = fs16.readFileSync(path22.join(agentsDir, file), "utf-8");
         const agent = yaml11.load(content);
         if (agent?.id && agent.name) {
           agentsWithIds.push({ id: agent.id, name: agent.name });
@@ -23568,7 +23718,8 @@ async function pullCommand(args2) {
         }
         action = "apply";
       }
-    } catch {
+    } catch (err) {
+      if (isWorkspaceRefusal(err)) throw err;
       action = "overwrite";
     }
     if (action === "overwrite") console.log("Writing hub configuration...");
@@ -23643,6 +23794,7 @@ var init_pull = __esm({
     init_utils();
     init_resource_files();
     init_hub_materializer();
+    init_fs_safety();
     init_push();
     init_workspace();
     init_layout();
@@ -28230,6 +28382,7 @@ function parseOrgResources(orgDir) {
     if (Array.isArray(res.tags)) resource.tags = res.tags;
     if (Array.isArray(res.folders)) resource.folders = res.folders;
     const resDir = path32.join(resourcesDir, slugify(resource.name));
+    requireRealSubdirNoSymlink(orgDir, resDir, false);
     if (fs23.existsSync(resDir)) {
       const files = scanResourceFiles(resDir, "");
       if (files.length > 0) resource.files = files;
@@ -30617,7 +30770,7 @@ var init_actions = __esm({
 
 // src/data/commands/attachments.ts
 import { Command as Command2 } from "commander";
-import { readFileSync as readFileSync18 } from "fs";
+import { readFileSync as readFileSync17 } from "fs";
 function findAttachmentByFilename(attachments, filename) {
   return attachments.find((a) => a.key.endsWith(`/${filename}`)) ?? null;
 }
@@ -30658,7 +30811,7 @@ function buildAttachmentsCommand() {
       printOutput(data, outputFormat(this));
       return;
     }
-    const body = readFileSync18(opts.file);
+    const body = readFileSync17(opts.file);
     await client.upload(uploadPathFrom(data?.upload_url), body, opts.contentType);
     printOutput({ ...data, uploaded: true }, outputFormat(this));
   });
@@ -31138,8 +31291,8 @@ var init_providers = __esm({
 
 // src/data/commands/report.ts
 import { Command as Command6 } from "commander";
-import { readFileSync as readFileSync19 } from "fs";
-import { dirname as dirname12, join as join30 } from "path";
+import { readFileSync as readFileSync18 } from "fs";
+import { dirname as dirname13, join as join30 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function resolveCliVersion() {
   for (const candidate of [
@@ -31147,7 +31300,7 @@ function resolveCliVersion() {
     join30(here, "..", "..", "..", "package.json")
   ]) {
     try {
-      const version = JSON.parse(readFileSync19(candidate, "utf-8")).version;
+      const version = JSON.parse(readFileSync18(candidate, "utf-8")).version;
       if (typeof version === "string" && version) return version;
     } catch {
     }
@@ -31343,13 +31496,13 @@ var init_report2 = __esm({
     init_terminal_output();
     init_workspace();
     init_skill_version();
-    here = dirname12(fileURLToPath2(import.meta.url));
+    here = dirname13(fileURLToPath2(import.meta.url));
   }
 });
 
 // src/data/commands/credentials.ts
 import { Command as Command7 } from "commander";
-import { readFileSync as readFileSync20 } from "fs";
+import { readFileSync as readFileSync19 } from "fs";
 function withValueSourceOptions(cmd, what) {
   return cmd.option(
     "--file <path>",
@@ -31362,7 +31515,7 @@ async function resolveValue(opts, label) {
       throw expected("--file cannot be combined with --value-stdin or --value-prompt \u2014 pass one.");
     }
     try {
-      return readFileSync20(opts.file).toString("base64");
+      return readFileSync19(opts.file).toString("base64");
     } catch (e) {
       throw expected(`--file ${opts.file}: ${e instanceof Error ? e.message : "could not be read"}`);
     }
@@ -31511,7 +31664,7 @@ var init_credentials = __esm({
 
 // src/data/commands/sql.ts
 import { Command as Command8 } from "commander";
-import { readFileSync as readFileSync21 } from "fs";
+import { readFileSync as readFileSync20 } from "fs";
 function buildBasesSqlCommand() {
   return withBaseOption(new Command8("sql")).description("Execute a read-only SQL query against base data").argument("[query]", "SQL query (SELECT only)").option("--file <path>", "Read SQL from a file instead of the argument").option(
     "--param <kv...>",
@@ -31521,7 +31674,7 @@ function buildBasesSqlCommand() {
     let query;
     if (opts.file) {
       try {
-        query = readFileSync21(opts.file, "utf-8").trim();
+        query = readFileSync20(opts.file, "utf-8").trim();
       } catch (e) {
         throw expected(`--file ${opts.file}: ${e instanceof Error ? e.message : "could not be read"}`);
       }
@@ -32176,8 +32329,8 @@ var init_file_types = __esm({
 
 // src/data/commands/files.ts
 import { Command as Command12 } from "commander";
-import { readFileSync as readFileSync22, writeFileSync as writeFileSync10 } from "fs";
-import { basename as basename19 } from "path";
+import { readFileSync as readFileSync21, writeFileSync as writeFileSync10 } from "fs";
+import { basename as basename20 } from "path";
 function renderFileDiff(fileType, filePath, from, to, d) {
   console.log(sanitizeTerminalText(`${fileType}/${filePath}: v${from} \u2192 v${to}`));
   const md = d.metadata_delta;
@@ -32209,7 +32362,7 @@ function renderFileDiff(fileType, filePath, from, to, d) {
 }
 function downloadTarget(remotePath, to) {
   if (to) return to;
-  const derived = basename19(remotePath);
+  const derived = basename20(remotePath);
   if (derived === "" || derived === "." || derived === "..") {
     throw expected(
       `Cannot derive a local filename from "${remotePath}" \u2014 pass --to <local> to name it.`
@@ -32225,7 +32378,7 @@ function buildFilesCommand() {
     "Upload a local file to a path (e.g. wayai files put reports q3/summary.pdf --file ./summary.pdf)"
   ).requiredOption("--file <local>", "Local file to upload").option("--content-type <type>", "MIME type", "application/octet-stream").action(async function(fileType, filePath, opts) {
     const base = pathSegment(requireBase(this), "--base");
-    const body = readFileSync22(opts.file);
+    const body = readFileSync21(opts.file);
     const client = await createDataClient();
     printOutput(
       await client.upload(
@@ -33274,9 +33427,9 @@ init_errors2();
 init_mask_secrets();
 init_utils();
 init_registry();
-import { readFileSync as readFileSync23 } from "fs";
+import { readFileSync as readFileSync22 } from "fs";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { dirname as dirname13, join as join31 } from "path";
+import { dirname as dirname14, join as join31 } from "path";
 
 // src/lib/version-refresh.ts
 init_version_cache();
@@ -33431,8 +33584,8 @@ Run \`wayai admin skill install\` to update.`);
 }
 
 // src/index.ts
-var __dirname = dirname13(fileURLToPath3(import.meta.url));
-var pkg = JSON.parse(readFileSync23(join31(__dirname, "..", "package.json"), "utf-8"));
+var __dirname = dirname14(fileURLToPath3(import.meta.url));
+var pkg = JSON.parse(readFileSync22(join31(__dirname, "..", "package.json"), "utf-8"));
 var [, , command, ...args] = process.argv;
 var isBackgroundRefresh = command === REFRESH_COMMAND;
 if (!isBackgroundRefresh) initSentry(command, pkg.version);