@wayai/cli 0.3.205 → 0.3.207

package/dist/index.js

@@ -9789,7 +9789,7 @@ function communityLessonVideoWatchUrl(video) {
       return `https://www.youtube.com/watch?v=${video.id}`;
   }
 }
-var connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, ORG_TAG_NAME_REGEX, ORG_TAG_NAME_MAX_LENGTH, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, BASE_CREDENTIAL_MANAGED_BY, BASE_CREDENTIAL_NAME_MAX, baseCredentialNameSchema, createBaseCredentialLinkBody, baseCredentialLinkParams, baseCredentialLinkQuery, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlTable, analyticsSqlSchemaQuery, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse, CALL_STATUSES, callStatus, CALL_END_REASONS, callEndReason, CALL_TRANSPORTS, callTransport, CALL_PARTICIPANT_TYPES, callParticipantType, callInstant, MAX_SDP_OFFER_LENGTH, sdpDescription, sdpOffer, MAX_CALL_REQUEST_BODY_BYTES, hubScoped, callSummaryFields, callSummary, callIdParam, createCallBody, createCallResponse, callReadyBody, callHangupBody, callStatusQuery, MAX_REPORTED_DELEGATION_IDS, callDelegationId, callDelegationsBody, callResponse, MAX_CALL_RECORDING_GAPS, callRecordingGap, callRecordingNoteMetadata, evalCallInstant, EVAL_CALL_MIN_SECONDS, EVAL_CALL_MAX_SECONDS, EVAL_CALL_SPOKEN_LINE_MAX_CHARS, hubScoped2, createEvalCallBody, createEvalCallResponse, evalCallConversationQuery, evalCallRecordQuery, evalCallSpeaker, evalCallUtterance, evalCallTurn, evalCallRecording, evalCallRecordResponse, evalCallFinishResponse, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, recordAiDisclosureAcceptanceBody, activityQuery, deletionModeSchema, deletionRequestBody, CACHE_RECONCILE_MAX_IDS, CACHE_RECONCILE_MAX_HUBS, cacheReconcileScopeSchema, cachedConversationPageSchema, cachedHistoryThreadSchema, cachedPeopleThreadSchema, cacheReconcileBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, conversationHubQuery, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, copilotSuggestBody, copilotSuggestResponse, CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, planKeySchema, billingStatusSchema, billingPlanTypeSchema, dataUsageCountersSchema, REKOR_ENTITLEMENT_CONTRACT_VERSION, entitlementProjectionSchema, rekorEntitlementRefreshMessageSchema, downloadBody, uploadQuery, SIGN_URL_MAX_EXPIRES_IN_SECONDS, signUrlBody, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, CONTACT_ENVIRONMENTS, CONTACT_NAME_MAX, CONTACT_EMAIL_MAX, CONTACT_PHONE_INPUT_MAX, CONTACT_INSTAGRAM_SID_MAX, CONTACT_METADATA_MAX_BYTES, CONTACT_LABEL_MAX, CONTACT_LABELS_MAX, CONTACT_SCOPE_TAGS_MAX, CONTACT_PAGE_MAX, CONTACT_IMPORT_BATCH_MAX, CONTACT_SEARCH_MAX, CONTACT_LIST_NAME_MAX, CONTACT_LIST_NAME_REGEX, CONTACT_LIST_DESCRIPTION_MAX, CONTACT_LIST_FILTER_MAX, CONTACT_LIST_PINS_PER_REQUEST_MAX, SUPPRESSION_SCOPES, SUPPRESSION_ID_REGEX, contactName, contactPhone, contactEmail, contactInstagramSid, contactLabel, contactLabels, contactMetadata, scopeTagIds, contactVisibilitySchema, hasIdentity, IDENTITY_REQUIRED, contactBookOrgQuery, contactBookContactParam, contactBookListParam, contactBookHubParam, contactBookPageQuery, listContactBookContactsQuery, listHubContactBookContactsQuery, contactBookLinkCandidatesQuery, listContactBookListMembersQuery, contactRowFields, createContactBookContactBody, updateContactBookContactBody, contactImportRowSchema, importContactBookContactsBody, linkContactBookContactBody, listName, contactListFilterSchema, createContactBookListBody, updateContactBookListBody, updateContactBookListPinsBody, suppressionIdentitySchema, createContactBookSuppressionBody, contactBookSuppressionParam, listContactBookSuppressionsQuery, CONTACT_BOOK_EMAIL_UNSUBSCRIBE_PATH, contactBookEmailUnsubscribeTokenSchema, contactBookEmailUnsubscribeQuery, orgListReferenceSchema, hubListNameSchema, HUB_LIST_FILTER_REQUIRED, hubContactListFilterSchema, hubContactListIdParam, hubContactListHubQuery, description, createHubContactListBody, updateHubContactListBody, AUTOMATION_TRIGGER_TYPES, AUTOMATION_EVENT_TYPES, AUTOMATION_TARGET_TYPES, AUTOMATION_ACTION_TYPES, AUTOMATION_CHANNEL_TYPES, AUTOMATION_PURPOSES, AUTOMATION_NAME_MAX, AUTOMATION_DESCRIPTION_MAX, AUTOMATION_INSTRUCTIONS_MAX, AUTOMATION_TEXT_MAX, AUTOMATION_CRON_MAX, AUTOMATION_WEBHOOK_AUTHS, AUTOMATION_WEBHOOK_HEADERS, AUTOMATION_WEBHOOK_BODY_MAX_BYTES, AUTOMATION_WEBHOOK_HEADER_NAME_MAX, AUTOMATION_WEBHOOK_MOUNT, WEBHOOK_RESERVED_HEADERS, automationTriggerSchema, automationTargetSchema, automationActionSchema, automationGateSchema, automationName, automationDescription, automationIdParam, automationHubQuery, automationWebhookParams, AUTOMATION_RUNS_PAGE_MAX, listAutomationRunsQuery, createAutomationBody, updateAutomationBody, AUTOMATION_ALERT_CATEGORIES, AUTOMATION_BLOCKED_ALERT_CATEGORY, automationEventSubscriberParam, VERSION_PART, MOBILE_APP_VERSION_RE, mobileAppVersionSchema, MOBILE_PLATFORMS, mobilePlatformSchema, mobileVersionPolicyQuery, mobileVersionPolicySchema, mobileVersionPolicyResponse, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, PRICING_PLAN_ID_RE, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, MAX_VOICE_CALL_MINUTE_OPS, voiceCallMinuteOps, AUTOMATION_GATE_EVALUATIONS_PER_OPERATION_BOUND, automationGateEvaluationsPerOperation, AUTOMATION_RUN_RETENTION_DAYS_MAX, automationRunRetentionDays, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetShape, adminScopedTargetBody, BRANCHING_ORPHAN_ENTITY_TYPES, BRANCHING_ORPHAN_MAX_TARGETS, adminRepairBranchingOrphansBody, adminRepairLegacyOrgGrantsBody, adminRepairCompedPlansBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysBody, dataExplorerKvKeyBody, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteBody, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, META_ENTITY_ID_PATTERN, metaEntityId, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, passwordLoginBody, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, invitePreviewQuery, inviteRolePreviewResponse, inviteContactPreviewResponse, invitePreviewResponse, inviteUnsubscribeBody, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, REKOR_ACTOR_TYPE_HEADER, REKOR_ACTOR_ID_HEADER, REKOR_ACTOR_LABEL_HEADER, REKOR_ACTOR_ORG_HEADER, REKOR_ACTOR_ADMIN_HEADER, REKOR_CLIENT_HEADER, REKOR_TOOL_ID_HEADER, REKOR_CLIENTS, rekorClientSchema, MAX_REKOR_TOOL_ID_LENGTH, rekorToolIdSchema, DATA_PROXY_MOUNT, DATA_PROXY_PREFIX, REKOR_V1_PREFIX, DATA_PROXY_ORG_QUERY_PARAM, MAX_PROVISIONING_BODY_BYTES, dataProxyQuery, rekorAttestation, REQUIRED_REKOR_ATTESTATION_HEADERS, BASE_DESTRUCTION_MOUNT, BASE_DESTRUCTION_PREFIX, BASE_DESTRUCTION_CONFIRM_PATH, baseDestructionConfirmBody, BASE_DESTRUCTION_GRACE_MS, BASE_DESTRUCTION_CONFIRM_TTL_MS, BASE_DESTRUCTION_ORG_QUERY_PARAM, baseDestructionQuery, baseDestructionParam, baseDestructionInitiateBody, baseDestructionStatus, baseDestructionRequest, baseDestructionListResponse, baseDestructionInitiateResponse, baseDestructionConfirmResponse, baseDestructionCancelResponse, rekorBaseChangeMessageSchema, PEOPLE_CONTACT_PAGE_MAX, PEOPLE_CONTACT_PAGE_DEFAULT, PEOPLE_CONTACT_EMAIL_MAX_LENGTH, peopleUserIdSchema, peopleInviteEmailSchema, peopleContactInviteBody, peopleContactInviteIdParam, peopleContactUserIdParam, peopleContactBlockBody, peopleContactPageQuery, peopleOutgoingInviteSchema, peopleContactPersonSchema, peopleContactSchema, peopleIncomingInviteSchema, peopleBlockedUserSchema, PEOPLE_THREAD_MESSAGE_MAX_LENGTH, PEOPLE_THREAD_MESSAGES_PAGE_MAX, PEOPLE_THREAD_PAGE_MAX, PEOPLE_THREAD_PAGE_DEFAULT, PEOPLE_GROUP_NAME_MAX_LENGTH, PEOPLE_GROUP_AVATAR_URL_MAX_LENGTH, PEOPLE_THREAD_ATTACHMENT_MAX_BYTES, PEOPLE_THREAD_ATTACHMENT_NAME_MAX_LENGTH, PEOPLE_ATTACHMENT_STORAGE_PER_USER_BYTES, PEOPLE_THREAD_ATTACHMENT_MAX_MB, PEOPLE_THREAD_ATTACHMENT_URL_TTL_SECONDS, PEOPLE_THREAD_ATTACHMENT_URLS_MAX, peopleThreadIdParam, peopleThreadMessageIdParam, peopleThreadListQuery, peopleThreadMessagesQuery, peopleThreadAttachmentUploadSchema, peopleThreadSendBody, peopleThreadAttachmentUrlsBody, peopleThreadReadBody, peopleThreadSettingsBody, peopleGroupNameSchema, peopleGroupAvatarUrlSchema, peopleGroupCreateBody, peopleOrgDirectBody, peopleGroupUpdateBody, peopleGroupInviteBody, peopleOrgErasureBody, peopleGroupLeaveBody, peopleGroupInviteIdParam, peopleGroupIncomingInviteIdParam, peopleGroupMemberParam, peopleThreadKindSchema, peopleThreadMemberSchema, peopleThreadLastMessageSchema, peopleGroupRoleSchema, peopleGroupSummarySchema, peopleThreadSummarySchema, peopleThreadAttachmentSchema, peopleThreadMessageSchema, peopleGroupMemberSchema, peopleGroupSentInviteSchema, peopleGroupIncomingInviteSchema, PEOPLE_REPORT_DETAILS_MAX_LENGTH, peopleReportReasonSchema, reportDetailsSchema, reportFields, peopleReportBody, PEOPLE_MODERATION_NOTE_MAX_LENGTH, ADMIN_PEOPLE_REPORTS_PAGE_MAX, ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT, peopleModerationActionSchema, moderationNoteSchema, adminPeopleReportListQuery, adminPeopleReportIdParam, adminPeopleMessageRemovalBody, adminPeopleSuspendBody, adminPeopleNoteBody, COMMUNITIES_PER_ORG_MAX, COMMUNITY_NAME_MAX_LENGTH, COMMUNITY_REGISTRY_CLOSED_REASON, COMMUNITY_ADMISSIONS, COMMUNITY_ACCESS_ADD_MAX, COMMUNITY_JOIN_SOURCE_MAX_LENGTH, COMMUNITY_JOIN_FLOW_TOKEN_MAX_LENGTH, COMMUNITY_ROOMS_MAX, COMMUNITY_ROOM_NAME_MAX_LENGTH, COMMUNITY_MESSAGE_MAX_LENGTH, COMMUNITY_MESSAGES_PAGE_SIZE, COMMUNITY_ATTACHMENT_URLS_MAX, COMMUNITY_POST_TITLE_MAX_LENGTH, COMMUNITY_POST_SEARCH_MAX_LENGTH, COMMUNITY_MEMBER_STATUSES, COMMUNITY_RULES_MAX_LENGTH, COMMUNITY_SLOW_MODE_MAX_SECONDS, COMMUNITY_COURSES_LABEL_MAX_LENGTH, COMMUNITY_LIVE_TICKET_PREFIX, COMMUNITY_STATS_DAYS, communityNameSchema, adminCreateCommunityBody, communityIdParam, communityJoinTokenSchema, communityJoinSourceSchema, communityJoinPreviewQuery, communityJoinBody, communityRoomKindSchema, communityRoomNameSchema, communityRoomIdParam, communityMessageIdParam, communityRoomCreateBody, communityRoomUpdateBody, communityMessagesQuery, communityMessageBodySchema, communityPostTitleSchema, communityAttachmentUploadSchema, communitySendBody, communityEditBody, communityPostIdParam, communityPostsQuery, communityAnswerBody, communityReadBody, communityAttachmentUrlsBody, communityPersonParam, communityOrgParam, communityPeopleQuery, communityCoursesLabelSchema, communityAdmissionSchema, communitySettingsBody, communityAccessEmailSchema, communityAccessAddBody, communityAccessQuery, communityAccessIdParam, communityBanBody, communityLockBody, communityPinBody, communityModLogQuery, communityReportsQuery, communityReportIdParam, communityLiveTicketSchema, communityLiveQuery, communityMuteBody, communityEmailUnsubscribeTokenSchema, COMMUNITY_EMAIL_UNSUBSCRIBE_PATH, communityEmailUnsubscribeQuery, COMMUNITY_COURSES_MAX, COMMUNITY_COURSE_MODULES_MAX, COMMUNITY_COURSE_LESSONS_MAX, COMMUNITY_LESSONS_MAX, COMMUNITY_COURSE_TITLE_MAX_LENGTH, COMMUNITY_COURSE_DESCRIPTION_MAX_LENGTH, COMMUNITY_LESSON_BODY_MAX_LENGTH, COMMUNITY_LESSON_LINKS_MAX, COMMUNITY_LESSON_URL_MAX_LENGTH, YOUTUBE_ID, YOUTUBE_HOSTS, YOUTU_BE, YOUTUBE_ID_PATH, communityCourseIdParam, communityCourseModuleIdParam, communityLessonIdParam, communityCourseTitleSchema, communityCourseDescriptionSchema, communityCoursePositionSchema, communityLessonVideoUrlSchema, communityLessonLinkSchema, communityLessonLinksSchema, communityLessonBodySchema, communityCourseCreateBody, communityCourseUpdateBody, communityModuleCreateBody, communityModuleUpdateBody, communityLessonCreateBody, communityLessonUpdateBody, COMMUNITY_LESSON_TREE_MAX_BYTES, COMMUNITY_LESSON_LINK_PROTOCOLS, COMMUNITY_LESSON_TREE_TOO_LARGE_REASON, COMMUNITY_LESSON_TREE_TOO_DEEP_REASON, COMMUNITY_LESSON_LINE_PREFIX_TOO_WIDE_REASON, LINK_SCHEME, adminSetGuideHubBody, GUIDE_HUB_INELIGIBLE_REASON;
+var connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, ORG_TAG_NAME_REGEX, ORG_TAG_NAME_MAX_LENGTH, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, BASE_CREDENTIAL_MANAGED_BY, BASE_CREDENTIAL_NAME_MAX, baseCredentialNameSchema, createBaseCredentialLinkBody, baseCredentialLinkParams, baseCredentialLinkQuery, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlTable, analyticsSqlSchemaQuery, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse, CALL_STATUSES, callStatus, CALL_END_REASONS, callEndReason, CALL_TRANSPORTS, callTransport, CALL_PARTICIPANT_TYPES, callParticipantType, callInstant, MAX_SDP_OFFER_LENGTH, sdpDescription, sdpOffer, MAX_CALL_REQUEST_BODY_BYTES, hubScoped, callSummaryFields, callSummary, callIdParam, createCallBody, createCallResponse, callReadyBody, callHangupBody, callStatusQuery, MAX_REPORTED_DELEGATION_IDS, callDelegationId, callDelegationsBody, callResponse, MAX_CALL_RECORDING_GAPS, callRecordingGap, callRecordingNoteMetadata, evalCallInstant, EVAL_CALL_MIN_SECONDS, EVAL_CALL_MAX_SECONDS, EVAL_CALL_SPOKEN_LINE_MAX_CHARS, hubScoped2, createEvalCallBody, createEvalCallResponse, evalCallConversationQuery, evalCallRecordQuery, evalCallSpeaker, evalCallUtterance, evalCallTurn, evalCallRecording, evalCallRecordResponse, evalCallFinishResponse, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, recordAiDisclosureAcceptanceBody, activityQuery, deletionModeSchema, deletionRequestBody, CACHE_RECONCILE_MAX_IDS, CACHE_RECONCILE_MAX_HUBS, cacheReconcileScopeSchema, cachedConversationPageSchema, cachedHistoryThreadSchema, cachedPeopleThreadSchema, cacheReconcileBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, conversationHubQuery, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, copilotSuggestBody, copilotSuggestResponse, CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, planKeySchema, billingStatusSchema, billingPlanTypeSchema, dataUsageCountersSchema, REKOR_ENTITLEMENT_CONTRACT_VERSION, entitlementProjectionSchema, rekorEntitlementRefreshMessageSchema, downloadBody, uploadQuery, SIGN_URL_MAX_EXPIRES_IN_SECONDS, signUrlBody, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, CONTACT_ENVIRONMENTS, CONTACT_NAME_MAX, CONTACT_EMAIL_MAX, CONTACT_PHONE_INPUT_MAX, CONTACT_INSTAGRAM_SID_MAX, CONTACT_METADATA_MAX_BYTES, CONTACT_LABEL_MAX, CONTACT_LABELS_MAX, CONTACT_SCOPE_TAGS_MAX, CONTACT_PAGE_MAX, CONTACT_IMPORT_BATCH_MAX, CONTACT_SEARCH_MAX, CONTACT_LIST_NAME_MAX, CONTACT_LIST_NAME_REGEX, CONTACT_LIST_DESCRIPTION_MAX, CONTACT_LIST_FILTER_MAX, CONTACT_LIST_PINS_PER_REQUEST_MAX, SUPPRESSION_SCOPES, SUPPRESSION_ID_REGEX, contactName, contactPhone, contactEmail, contactInstagramSid, contactLabel, contactLabels, contactMetadata, scopeTagIds, contactVisibilitySchema, hasIdentity, IDENTITY_REQUIRED, contactBookOrgQuery, contactBookContactParam, contactBookListParam, contactBookHubParam, contactBookPageQuery, listContactBookContactsQuery, listHubContactBookContactsQuery, contactBookLinkCandidatesQuery, listContactBookListMembersQuery, contactRowFields, createContactBookContactBody, updateContactBookContactBody, contactImportRowSchema, importContactBookContactsBody, linkContactBookContactBody, listName, contactListFilterSchema, createContactBookListBody, updateContactBookListBody, updateContactBookListPinsBody, suppressionIdentitySchema, createContactBookSuppressionBody, contactBookSuppressionParam, listContactBookSuppressionsQuery, CONTACT_BOOK_EMAIL_UNSUBSCRIBE_PATH, contactBookEmailUnsubscribeTokenSchema, contactBookEmailUnsubscribeQuery, orgListReferenceSchema, hubListNameSchema, HUB_LIST_FILTER_REQUIRED, hubContactListFilterSchema, hubContactListIdParam, hubContactListHubQuery, description, createHubContactListBody, updateHubContactListBody, AUTOMATION_TRIGGER_TYPES, AUTOMATION_EVENT_TYPES, AUTOMATION_TARGET_TYPES, AUTOMATION_ACTION_TYPES, AUTOMATION_CHANNEL_TYPES, AUTOMATION_PURPOSES, AUTOMATION_NAME_MAX, AUTOMATION_DESCRIPTION_MAX, AUTOMATION_INSTRUCTIONS_MAX, AUTOMATION_TEXT_MAX, AUTOMATION_CRON_MAX, AUTOMATION_WEBHOOK_AUTHS, AUTOMATION_WEBHOOK_HEADERS, AUTOMATION_WEBHOOK_BODY_MAX_BYTES, AUTOMATION_WEBHOOK_HEADER_NAME_MAX, AUTOMATION_WEBHOOK_MOUNT, WEBHOOK_RESERVED_HEADERS, automationTriggerSchema, automationTargetSchema, automationActionSchema, automationGateSchema, automationName, automationDescription, automationIdParam, automationHubQuery, automationWebhookParams, AUTOMATION_RUNS_PAGE_MAX, listAutomationRunsQuery, createAutomationBody, updateAutomationBody, AUTOMATION_ALERT_CATEGORIES, AUTOMATION_BLOCKED_ALERT_CATEGORY, automationEventSubscriberParam, VERSION_PART, MOBILE_APP_VERSION_RE, mobileAppVersionSchema, MOBILE_PLATFORMS, mobilePlatformSchema, mobileVersionPolicyQuery, mobileVersionPolicySchema, mobileVersionPolicyResponse, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, PRICING_PLAN_ID_RE, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, MAX_VOICE_CALL_MINUTE_OPS, voiceCallMinuteOps, AUTOMATION_GATE_EVALUATIONS_PER_OPERATION_BOUND, automationGateEvaluationsPerOperation, AUTOMATION_RUN_RETENTION_DAYS_MAX, automationRunRetentionDays, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetShape, adminScopedTargetBody, BRANCHING_ORPHAN_ENTITY_TYPES, BRANCHING_ORPHAN_MAX_TARGETS, adminRepairBranchingOrphansBody, adminRepairLegacyOrgGrantsBody, adminRepairCompedPlansBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysBody, dataExplorerKvKeyBody, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteBody, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, META_ENTITY_ID_PATTERN, metaEntityId, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, passwordLoginBody, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, invitePreviewQuery, inviteRolePreviewResponse, inviteContactPreviewResponse, invitePreviewResponse, inviteUnsubscribeBody, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, REKOR_ACTOR_TYPE_HEADER, REKOR_ACTOR_ID_HEADER, REKOR_ACTOR_LABEL_HEADER, REKOR_ACTOR_ORG_HEADER, REKOR_ACTOR_ADMIN_HEADER, REKOR_CLIENT_HEADER, REKOR_TOOL_ID_HEADER, REKOR_CLIENTS, rekorClientSchema, MAX_REKOR_TOOL_ID_LENGTH, rekorToolIdSchema, DATA_PROXY_MOUNT, DATA_PROXY_PREFIX, REKOR_V1_PREFIX, DATA_PROXY_ORG_QUERY_PARAM, MAX_PROVISIONING_BODY_BYTES, dataProxyQuery, rekorAttestation, REQUIRED_REKOR_ATTESTATION_HEADERS, BASE_DESTRUCTION_MOUNT, BASE_DESTRUCTION_PREFIX, BASE_DESTRUCTION_CONFIRM_PATH, baseDestructionConfirmBody, BASE_DESTRUCTION_GRACE_MS, BASE_DESTRUCTION_CONFIRM_TTL_MS, BASE_DESTRUCTION_ORG_QUERY_PARAM, baseDestructionQuery, baseDestructionParam, baseDestructionInitiateBody, baseDestructionStatus, baseDestructionRequest, baseDestructionListResponse, baseDestructionInitiateResponse, baseDestructionConfirmResponse, baseDestructionCancelResponse, rekorBaseChangeMessageSchema, PEOPLE_CONTACT_PAGE_MAX, PEOPLE_CONTACT_PAGE_DEFAULT, PEOPLE_CONTACT_EMAIL_MAX_LENGTH, peopleUserIdSchema, peopleInviteEmailSchema, peopleContactInviteBody, peopleContactInviteIdParam, peopleContactUserIdParam, peopleContactBlockBody, peopleContactPageQuery, peopleOutgoingInviteSchema, peopleContactPersonSchema, peopleContactSchema, peopleIncomingInviteSchema, peopleBlockedUserSchema, PEOPLE_THREAD_MESSAGE_MAX_LENGTH, PEOPLE_THREAD_MESSAGES_PAGE_MAX, PEOPLE_THREAD_PAGE_MAX, PEOPLE_THREAD_PAGE_DEFAULT, PEOPLE_GROUP_NAME_MAX_LENGTH, PEOPLE_GROUP_AVATAR_URL_MAX_LENGTH, PEOPLE_THREAD_ATTACHMENT_MAX_BYTES, PEOPLE_THREAD_ATTACHMENT_NAME_MAX_LENGTH, PEOPLE_ATTACHMENT_STORAGE_PER_USER_BYTES, PEOPLE_THREAD_ATTACHMENT_MAX_MB, PEOPLE_THREAD_ATTACHMENT_URL_TTL_SECONDS, PEOPLE_THREAD_ATTACHMENT_URLS_MAX, peopleThreadIdParam, peopleThreadMessageIdParam, peopleThreadListQuery, peopleThreadMessagesQuery, peopleThreadAttachmentUploadSchema, peopleThreadSendBody, peopleThreadAttachmentUrlsBody, peopleThreadReadBody, peopleThreadSettingsBody, peopleGroupNameSchema, peopleGroupAvatarUrlSchema, peopleGroupCreateBody, peopleOrgDirectBody, peopleGroupUpdateBody, peopleGroupInviteBody, peopleOrgErasureBody, peopleGroupLeaveBody, peopleGroupInviteIdParam, peopleGroupIncomingInviteIdParam, peopleGroupMemberParam, peopleThreadKindSchema, peopleThreadMemberSchema, peopleThreadLastMessageSchema, peopleGroupRoleSchema, peopleGroupSummarySchema, peopleThreadSummarySchema, peopleThreadAttachmentSchema, peopleThreadMessageSchema, peopleGroupMemberSchema, peopleGroupSentInviteSchema, peopleGroupIncomingInviteSchema, PEOPLE_REPORT_DETAILS_MAX_LENGTH, peopleReportReasonSchema, reportDetailsSchema, reportFields, peopleReportBody, PEOPLE_MODERATION_NOTE_MAX_LENGTH, ADMIN_PEOPLE_REPORTS_PAGE_MAX, ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT, PEOPLE_SUSPENDED_REASON, peopleModerationActionSchema, moderationNoteSchema, adminPeopleReportListQuery, adminPeopleReportIdParam, adminPeopleMessageRemovalBody, adminPeopleSuspendBody, adminPeopleNoteBody, COMMUNITIES_PER_ORG_MAX, COMMUNITY_NAME_MAX_LENGTH, COMMUNITY_REGISTRY_CLOSED_REASON, COMMUNITY_MEMBERS_MAX, COMMUNITY_ADMISSIONS, COMMUNITY_ACCESS_MAX, COMMUNITY_ACCESS_ADD_MAX, COMMUNITY_ACCESS_FULL_REASON, COMMUNITY_JOIN_SOURCE_MAX_LENGTH, COMMUNITY_JOIN_FLOW_TOKEN_MAX_LENGTH, COMMUNITY_ROOMS_MAX, COMMUNITY_ROOM_NAME_MAX_LENGTH, COMMUNITY_MESSAGE_MAX_LENGTH, COMMUNITY_MESSAGES_PAGE_SIZE, COMMUNITY_ATTACHMENT_URLS_MAX, COMMUNITY_POST_TITLE_MAX_LENGTH, COMMUNITY_POST_SEARCH_MAX_LENGTH, COMMUNITY_MEMBER_STATUSES, COMMUNITY_RULES_MAX_LENGTH, COMMUNITY_SLOW_MODE_MAX_SECONDS, COMMUNITY_COURSES_LABEL_MAX_LENGTH, COMMUNITY_LIVE_TICKET_PREFIX, COMMUNITY_STATS_DAYS, communityNameSchema, adminCreateCommunityBody, communityIdParam, communityJoinTokenSchema, communityJoinSourceSchema, communityJoinPreviewQuery, communityJoinBody, communityRoomKindSchema, communityRoomNameSchema, communityRoomIdParam, communityMessageIdParam, communityRoomCreateBody, communityRoomUpdateBody, communityMessagesQuery, communityMessageBodySchema, communityPostTitleSchema, communityAttachmentUploadSchema, communitySendBody, communityEditBody, communityPostIdParam, communityPostsQuery, communityAnswerBody, communityReadBody, communityAttachmentUrlsBody, communityPersonParam, communityOrgParam, communityPeopleQuery, communityCoursesLabelSchema, communityAdmissionSchema, communitySettingsBody, communityAccessEmailSchema, communityAccessAddBody, communityAccessQuery, communityAccessIdParam, communityBanBody, communityLockBody, communityPinBody, communityModLogQuery, communityReportsQuery, communityReportIdParam, communityLiveTicketSchema, communityLiveQuery, communityMuteBody, communityEmailUnsubscribeTokenSchema, COMMUNITY_EMAIL_UNSUBSCRIBE_PATH, communityEmailUnsubscribeQuery, COMMUNITY_COURSES_MAX, COMMUNITY_COURSE_MODULES_MAX, COMMUNITY_COURSE_LESSONS_MAX, COMMUNITY_LESSONS_MAX, COMMUNITY_COURSE_TITLE_MAX_LENGTH, COMMUNITY_COURSE_DESCRIPTION_MAX_LENGTH, COMMUNITY_LESSON_BODY_MAX_LENGTH, COMMUNITY_LESSON_LINKS_MAX, COMMUNITY_LESSON_URL_MAX_LENGTH, YOUTUBE_ID, YOUTUBE_HOSTS, YOUTU_BE, YOUTUBE_ID_PATH, communityCourseIdParam, communityCourseModuleIdParam, communityLessonIdParam, communityCourseTitleSchema, communityCourseDescriptionSchema, communityCoursePositionSchema, communityLessonVideoUrlSchema, communityLessonLinkSchema, communityLessonLinksSchema, communityLessonBodySchema, communityCourseCreateBody, communityCourseUpdateBody, communityModuleCreateBody, communityModuleUpdateBody, communityLessonCreateBody, communityLessonUpdateBody, COMMUNITY_LESSON_TREE_MAX_BYTES, COMMUNITY_LESSON_LINK_PROTOCOLS, COMMUNITY_LESSON_TREE_TOO_LARGE_REASON, COMMUNITY_LESSON_TREE_TOO_DEEP_REASON, COMMUNITY_LESSON_LINE_PREFIX_TOO_WIDE_REASON, LINK_SCHEME, adminSetGuideHubBody, GUIDE_HUB_INELIGIBLE_REASON;
 var init_chunk_T3VB6VFG = __esm({
   "../../packages/core/dist/chunk-T3VB6VFG.js"() {
     "use strict";
@@ -12803,6 +12803,7 @@ var init_chunk_T3VB6VFG = __esm({
     PEOPLE_MODERATION_NOTE_MAX_LENGTH = 500;
     ADMIN_PEOPLE_REPORTS_PAGE_MAX = 100;
     ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT = 50;
+    PEOPLE_SUSPENDED_REASON = "suspended";
     peopleModerationActionSchema = external_exports.enum(["remove_message", "suspend", "unsuspend", "dismiss"]);
     moderationNoteSchema = optionalTrimmedText(PEOPLE_MODERATION_NOTE_MAX_LENGTH);
     adminPeopleReportListQuery = external_exports.object({
@@ -12819,8 +12820,11 @@ var init_chunk_T3VB6VFG = __esm({
     COMMUNITIES_PER_ORG_MAX = 10;
     COMMUNITY_NAME_MAX_LENGTH = 100;
     COMMUNITY_REGISTRY_CLOSED_REASON = "community_registry_closed";
+    COMMUNITY_MEMBERS_MAX = 1e4;
     COMMUNITY_ADMISSIONS = ["link", "invite"];
+    COMMUNITY_ACCESS_MAX = COMMUNITY_MEMBERS_MAX;
     COMMUNITY_ACCESS_ADD_MAX = 500;
+    COMMUNITY_ACCESS_FULL_REASON = "community_access_full";
     COMMUNITY_JOIN_SOURCE_MAX_LENGTH = 32;
     COMMUNITY_JOIN_FLOW_TOKEN_MAX_LENGTH = 128;
     COMMUNITY_ROOMS_MAX = 20;
@@ -13503,6 +13507,21 @@ var init_api_client = __esm({
       async updateCommunitySettings(communityId, body) {
         return this.request("PATCH", `/api/communities/${encodeURIComponent(communityId)}/settings`, body);
       }
+      // A community's access list (gh #5042, `wayai communities access`): one page of it, oldest first;
+      // an add; the removal of one entry, which removes the members that entry admitted.
+      async listCommunityAccess(communityId, cursor) {
+        const qs = cursor === void 0 ? "" : `?${new URLSearchParams({ cursor })}`;
+        return this.request("GET", `/api/communities/${encodeURIComponent(communityId)}/access${qs}`);
+      }
+      async addCommunityAccess(communityId, body) {
+        return this.request("POST", `/api/communities/${encodeURIComponent(communityId)}/access`, body);
+      }
+      async removeCommunityAccess(communityId, accessId) {
+        return this.request(
+          "DELETE",
+          `/api/communities/${encodeURIComponent(communityId)}/access/${encodeURIComponent(accessId)}`
+        );
+      }
       async listCommunityRooms(communityId) {
         return this.request("GET", `/api/communities/${encodeURIComponent(communityId)}/rooms`);
       }
@@ -15012,6 +15031,21 @@ var init_expected = __esm({
   }
 });
 
+// src/lib/terminal-output.ts
+import { stripVTControlCharacters } from "util";
+function sanitizeTerminalText(value) {
+  const normalizedNewlines = value.replace(/\r\n?/g, "\n");
+  return stripVTControlCharacters(normalizedNewlines).replace(
+    /[\u0000-\u0009\u000b-\u001f\u007f-\u009f]/g,
+    ""
+  );
+}
+var init_terminal_output = __esm({
+  "src/lib/terminal-output.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/fs-safety.ts
 import * as fs from "fs";
 import * as path from "path";
@@ -15471,7 +15505,7 @@ function findEnclosingNewHubFolder(workspaceDir) {
   return null;
 }
 function resolvePushTarget(workspaceDir, existingHubs, newHubs, selector) {
-  if (selector) {
+  if (selector !== void 0) {
     const existingMatch = existingHubs.find(
       (h) => h.hubId === selector || path3.basename(h.hubFolder) === selector
     );
@@ -15491,7 +15525,7 @@ function resolvePushTarget(workspaceDir, existingHubs, newHubs, selector) {
   return previewHubs.length === 1 ? { ok: true, target: { kind: "existing", hub: previewHubs[0] } } : { ok: true, target: { kind: "new", hub: newHubs[0] } };
 }
 function resolveNewHubForCreate(workspaceDir, existingHubs, newHubs, selector) {
-  if (selector) {
+  if (selector !== void 0) {
     const newMatch = newHubs.find((h) => path3.basename(h.hubFolder) === selector);
     if (newMatch) return { ok: true, hub: newMatch };
     const existingMatch = existingHubs.find(
@@ -16065,6 +16099,38 @@ function shouldInterceptHelp(command2, args2, ownHelpCommands) {
   if (ownHelpCommands.has(command2)) return false;
   return wantsHelp(args2);
 }
+function isDryRunToken(arg) {
+  return /^--dry-run(=\S*)?$/.test(arg);
+}
+function unreadDryRunRefusal(invocation, token, readsBare) {
+  const only = readsBare ? " (only a bare `--dry-run`)" : "";
+  return `\`${invocation}\` does not read \`${sanitizeTerminalText(token)}\`${only}, so it is refused rather than run without it.`;
+}
+function entryFlagRefusal(command2, args2, dataNamespaces) {
+  if (command2 === void 0 || ["help", "--help", "-h", "--version", "-v"].includes(command2)) return null;
+  if (dataNamespaces.has(command2)) return null;
+  const words = [command2];
+  for (const arg of args2.slice(0, 2)) {
+    if (!/^[a-z][a-z-]*$/.test(arg)) break;
+    words.push(arg);
+  }
+  const invocation = `wayai ${words.join(" ")}`;
+  let parsed;
+  for (let n = words.length; n > 0 && parsed === void 0; n--) {
+    parsed = PARSED_BY_THE_COMMAND.get(words.slice(0, n).join(" "));
+  }
+  if (parsed === "all") return null;
+  const dryRuns = args2.filter(isDryRunToken);
+  const readsBare = parsed === "bare --dry-run";
+  const refused = readsBare ? dryRuns.find((token) => token !== "--dry-run") : dryRuns[0];
+  if (refused !== void 0) return unreadDryRunRefusal(invocation, refused, readsBare);
+  if (parsed === "selectors") return null;
+  for (const { flag, noun } of SELECTOR_FLAGS) {
+    const empty = args2.some((arg, i) => arg === `${flag}=` || arg === flag && (args2[i + 1] ?? "") === "");
+    if (empty) return `\`${invocation} ${flag}\` needs ${noun}, and none followed it.`;
+  }
+  return null;
+}
 function isNewerVersion(latest, current) {
   const strip = (v) => v.replace(/[-+].*$/, "");
   const l = strip(latest).split(".").map(Number);
@@ -16096,12 +16162,13 @@ function resolveSecretSource(source) {
   }
   return "prompt";
 }
-var UUID_RE3, slugify2, OWN_HELP_COMMANDS;
+var UUID_RE3, slugify2, OWN_HELP_COMMANDS, PARSED_BY_THE_COMMAND, SELECTOR_FLAGS;
 var init_utils = __esm({
   "src/lib/utils.ts"() {
     "use strict";
     init_dist();
     init_expected();
+    init_terminal_output();
     UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     slugify2 = slugifySkillName;
     OWN_HELP_COMMANDS = /* @__PURE__ */ new Set([
@@ -16112,6 +16179,23 @@ var init_utils = __esm({
       "alerts",
       "communities"
     ]);
+    PARSED_BY_THE_COMMAND = /* @__PURE__ */ new Map([
+      ["pull", "all"],
+      ["push", "all"],
+      ["communities", "all"],
+      ["sync-mcp", "bare --dry-run"],
+      ["admin hubs repair-team-orphans", "bare --dry-run"],
+      ["admin hubs repair-branching-orphans", "bare --dry-run"],
+      ["admin orgs repair-legacy-grants", "bare --dry-run"],
+      ["admin harness mass-destroy", "bare --dry-run"],
+      ["use", "selectors"],
+      ["unbind", "selectors"],
+      ["unlock", "selectors"]
+    ]);
+    SELECTOR_FLAGS = [
+      { flag: "--hub", noun: "a hub" },
+      { flag: "--org", noun: "an organization" }
+    ];
   }
 });
 
@@ -19540,21 +19624,6 @@ var init_hub_materializer = __esm({
   }
 });
 
-// src/lib/terminal-output.ts
-import { stripVTControlCharacters } from "util";
-function sanitizeTerminalText(value) {
-  const normalizedNewlines = value.replace(/\r\n?/g, "\n");
-  return stripVTControlCharacters(normalizedNewlines).replace(
-    /[\u0000-\u0009\u000b-\u001f\u007f-\u009f]/g,
-    ""
-  );
-}
-var init_terminal_output = __esm({
-  "src/lib/terminal-output.ts"() {
-    "use strict";
-  }
-});
-
 // src/lib/base-workspace.ts
 import * as fs15 from "fs";
 import * as path19 from "path";
@@ -19618,7 +19687,7 @@ function assertValidBaseSelector(selector, source = "base") {
 }
 function resolveBaseTarget(gitRoot, selector, cwd = process.cwd()) {
   const basesDir = resolveBasesDir(gitRoot);
-  if (selector) {
+  if (selector !== void 0) {
     const folder = folderForSelector(basesDir, selector);
     if (!isUnder(basesDir, folder)) {
       throw expected(`Refusing to target ${folder}: it is outside ${basesDir}.`);
@@ -19818,7 +19887,7 @@ function routeToSubtree(options) {
   const cwd = options.cwd ?? process.cwd();
   const tokens2 = parseRoutingTokens(args2);
   const { hubFlag, baseFlag, communityFlag, positional, orgFlag } = tokens2;
-  if (orgFlag !== void 0) {
+  if (orgFlag !== void 0 || args2.includes("--org")) {
     return {
       ok: false,
       refusal: [
@@ -19830,6 +19899,10 @@ function routeToSubtree(options) {
       ].join("\n")
     };
   }
+  const valuedDryRun = args2.find((arg) => isDryRunToken(arg) && arg !== "--dry-run");
+  if (valuedDryRun !== void 0) {
+    return { ok: false, refusal: unreadDryRunRefusal(`wayai ${verb}`, valuedDryRun, true) };
+  }
   if (tokens2.takenAsValue) {
     const { flag: flag2, by } = tokens2.takenAsValue;
     return {
@@ -19850,7 +19923,23 @@ function routeToSubtree(options) {
   if (flagged.length > 1) {
     return { ok: false, refusal: mixedInvocationRefusal(verb, flagged) };
   }
+  if (positional === "") {
+    return {
+      ok: false,
+      refusal: `\`wayai ${verb} ""\` names nothing, so it is refused rather than run on a folder it did not name.`
+    };
+  }
   const fromPositional = positional !== void 0 ? resolveSelectorSubtree(layout, positional, cwd) : void 0;
+  if (positional !== void 0 && fromPositional && fromPositional.kind !== "both" && fromPositional.kind !== "unknown" && fromPositional.target === "") {
+    const { kind } = fromPositional;
+    const { target, value } = SUBTREE_FLAGS.find(({ subtree }) => subtree === kind);
+    const dir = `${SUBDIR[kind]}/`;
+    return {
+      ok: false,
+      refusal: `\`wayai ${verb} ${sanitizeTerminalText(positional)}\` names ${dir}, not ${target} in it, so it is refused rather than run on a folder it did not name.
+  wayai ${verb} ${dir}${value}`
+    };
+  }
   if (fromPositional?.kind === "both") {
     return {
       ok: false,
@@ -19914,6 +20003,7 @@ var init_subtree_routing = __esm({
     "use strict";
     init_layout();
     init_terminal_output();
+    init_utils();
     init_workspace_manifest();
     init_workspace();
     init_base_workspace();
@@ -21067,7 +21157,8 @@ function settingsContent(settings) {
   return {
     rules: normalizeRules(settings.rules),
     slow_mode_seconds: settings.slow_mode_seconds,
-    courses_label: (settings.courses_label ?? "").trim()
+    courses_label: (settings.courses_label ?? "").trim(),
+    admission: settings.admission ?? DEFAULT_ADMISSION
   };
 }
 function roomContent(room) {
@@ -21136,13 +21227,21 @@ function localName(name, id, taken, fallback) {
   const withPrefix = `${slug}--${id.slice(0, 8)}`;
   return taken.has(withPrefix) ? `${slug}--${id}` : withPrefix;
 }
-var REV_VERSION, settingsRev, joinLinkRev, roomRev, courseRev, moduleRev, lessonRev;
+var REV_VERSION, DEFAULT_ADMISSION, settingsRev, joinLinkRev, roomRev, courseRev, moduleRev, lessonRev;
 var init_model = __esm({
   "src/communities/model.ts"() {
     "use strict";
     init_dist();
     REV_VERSION = "v1";
-    settingsRev = (communityId, c) => rev(["settings", communityId, c.rules, c.slow_mode_seconds, c.courses_label]);
+    DEFAULT_ADMISSION = "link";
+    settingsRev = (communityId, c) => rev([
+      "settings",
+      communityId,
+      c.rules,
+      c.slow_mode_seconds,
+      c.courses_label,
+      ...c.admission === DEFAULT_ADMISSION ? [] : [c.admission]
+    ]);
     joinLinkRev = (communityId, c) => rev(["join_link", communityId, c.enabled]);
     roomRev = (roomId, c) => rev(["room", roomId, c.name, c.archived]);
     courseRev = (courseId, c) => rev(["course", courseId, c.title, c.description, c.published]);
@@ -21550,10 +21649,11 @@ function readCommunityFolder(folder) {
   const settingsRev2 = settings ? optionalString(settings, "rev", `${COMMUNITY_FILE} settings`, problems2) : void 0;
   const slowMode = settings?.slow_mode_seconds;
   const coursesLabel = settings?.courses_label ?? "";
+  const admission = settings?.admission ?? DEFAULT_ADMISSION;
   if (settings && typeof slowMode !== "number") problems2.push(`${COMMUNITY_FILE} settings: slow_mode_seconds must be a number`);
   if (typeof coursesLabel !== "string") problems2.push(`${COMMUNITY_FILE} settings: courses_label must be text`);
   if (settings && typeof slowMode === "number" && typeof coursesLabel === "string") {
-    const parsed = communitySettingsBody.safeParse({ rules, slow_mode_seconds: slowMode, courses_label: coursesLabel });
+    const parsed = communitySettingsBody.safeParse({ rules, slow_mode_seconds: slowMode, courses_label: coursesLabel, admission });
     if (!parsed.success) problems2.push(`settings: ${contractProblem(parsed.error)}`);
   }
   if (typeof doc.join_link_enabled !== "boolean") problems2.push(`${COMMUNITY_FILE}: join_link_enabled must be true or false`);
@@ -21572,7 +21672,8 @@ ${problems2.map((p) => `  - ${p}`).join("\n")}`);
     settings: {
       ...settingsRev2 === void 0 ? {} : { rev: settingsRev2 },
       slow_mode_seconds: slowMode,
-      courses_label: coursesLabel
+      courses_label: coursesLabel,
+      admission
     },
     rules,
     join_link_enabled: doc.join_link_enabled,
@@ -21675,7 +21776,8 @@ function renderCommunityYaml(files) {
     settings: {
       ...files.settings.rev ? { rev: files.settings.rev } : {},
       slow_mode_seconds: files.settings.slow_mode_seconds,
-      courses_label: files.settings.courses_label
+      courses_label: files.settings.courses_label,
+      admission: files.settings.admission
     },
     join_link_enabled: files.join_link_enabled,
     ...files.join_link_rev ? { join_link_rev: files.join_link_rev } : {},
@@ -21733,7 +21835,7 @@ var init_files = __esm({
     init_model();
     init_course_files();
     TOP_KEYS = ["community_id", "name", "settings", "join_link_enabled", "join_link_rev", "rooms", "courses", "synced"];
-    SETTINGS_KEYS = ["rev", "slow_mode_seconds", "courses_label"];
+    SETTINGS_KEYS = ["rev", "slow_mode_seconds", "courses_label", "admission"];
     ROOM_KEYS = ["key", "id", "rev", "name", "kind", "archived"];
   }
 });
@@ -23171,9 +23273,13 @@ function settingsChanges(from, to) {
   const out = [];
   if (from.slow_mode_seconds !== to.slow_mode_seconds) out.push(`slow_mode_seconds ${from.slow_mode_seconds} \u2192 ${to.slow_mode_seconds}`);
   if (from.courses_label !== to.courses_label) out.push(`courses_label ${show(from.courses_label)} \u2192 ${show(to.courses_label)}`);
+  if (from.admission !== to.admission) out.push(`admission ${from.admission} \u2192 ${to.admission}`);
   if (from.rules !== to.rules) out.push("rules (rules.md)");
   return out;
 }
+function admissionChange(to) {
+  return to === "invite" ? "From now on the link admits only the organization's owners and admins and the emails on the access list (wayai communities access). Current members stay, including anyone who joined with a shared link; any other member who leaves needs their email on the list to join again." : "From now on anyone with the join link can join. The access list is kept.";
+}
 function roomChanges(from, to) {
   const out = [];
   if (from.name !== to.name) out.push(`name ${show(from.name)} \u2192 ${show(to.name)}`);
@@ -23209,7 +23315,8 @@ function settingsPatch(files, server) {
     // Raw: the text as the file holds it; the server trims it and reads '' as none.
     ...file.rules !== server.rules ? { rules: files.rules } : {},
     ...file.slow_mode_seconds !== server.slow_mode_seconds ? { slow_mode_seconds: files.settings.slow_mode_seconds } : {},
-    ...file.courses_label !== server.courses_label ? { courses_label: files.settings.courses_label } : {}
+    ...file.courses_label !== server.courses_label ? { courses_label: files.settings.courses_label } : {},
+    ...file.admission !== server.admission ? { admission: file.admission } : {}
   };
 }
 function roomPatch(entry, room) {
@@ -23229,10 +23336,12 @@ function takeRoom(entry, room) {
   entry.kind = room.kind;
 }
 function takeSettings(files, settings) {
+  const { content, rev: rev2 } = serverSettings(files.community_id, settings);
   files.settings = {
-    rev: serverSettings(files.community_id, settings).rev,
+    rev: rev2,
     slow_mode_seconds: settings.slow_mode_seconds,
-    courses_label: settings.courses_label ?? ""
+    courses_label: settings.courses_label ?? "",
+    admission: content.admission
   };
   files.rules = settings.rules ?? "";
 }
@@ -23346,6 +23455,7 @@ function pushListing(plan, courses) {
   const { settings, joinLink } = plan;
   if (settings.state === "local") {
     listing.changes.push(`~ settings: ${settingsChanges(settings.server, settings.file).join("; ")}`);
+    if (settings.server.admission !== settings.file.admission) listing.changes.push(`    ${admissionChange(settings.file.admission)}`);
     if (settings.server.rules !== settings.file.rules) {
       listing.changes.push(...lineDiff(settings.server.rules, settings.file.rules).map((line) => `    ${line}`));
     }
@@ -23531,7 +23641,7 @@ function filesFromServer(server) {
   const files = {
     community_id: server.community.community_id,
     name: server.community.name,
-    settings: { slow_mode_seconds: 0, courses_label: "" },
+    settings: { slow_mode_seconds: 0, courses_label: "", admission: DEFAULT_ADMISSION },
     rules: "",
     join_link_enabled: false,
     rooms: [],
@@ -24063,7 +24173,7 @@ async function pushSingleHub(client, hubId, hubFolder, autoConfirm, organization
   return true;
 }
 function selectExistingHub(workspaceDir, allHubs, selector, wsLabel) {
-  if (selector) {
+  if (selector !== void 0) {
     const match = allHubs.find(
       (h) => h.hubId === selector || path28.basename(h.hubFolder) === selector
     );
@@ -24248,7 +24358,7 @@ function resolveHubTarget(workspaceDir, selector) {
   const gitRoot = findGitRoot();
   const wsLabel = hubsDirLabel(gitRoot);
   const allHubs = scanWorkspaceHubs(workspaceDir);
-  if (selector) {
+  if (selector !== void 0) {
     const match = allHubs.find(
       (h) => h.hubId === selector || path29.basename(h.hubFolder) === selector
     );
@@ -24471,7 +24581,8 @@ var init_pull = __esm({
 // src/commands/create.ts
 var create_exports = {};
 __export(create_exports, {
-  createCommand: () => createCommand
+  createCommand: () => createCommand,
+  parseArgs: () => parseArgs8
 });
 import * as path30 from "path";
 import * as fs22 from "fs";
@@ -24483,7 +24594,7 @@ function parseArgs8(args2) {
     const arg = args2[i];
     if (arg === "--yes" || arg === "-y") {
       autoConfirm = true;
-    } else if (arg === "--label" && args2[i + 1]) {
+    } else if (arg === "--label") {
       label = args2[++i];
     } else if (!arg.startsWith("-") && folderSelector === void 0) {
       folderSelector = arg;
@@ -24633,6 +24744,7 @@ var init_diff = __esm({
 // src/commands/replicate.ts
 var replicate_exports = {};
 __export(replicate_exports, {
+  parseArgs: () => parseArgs10,
   replicateCommand: () => replicateCommand
 });
 import * as fs23 from "fs";
@@ -24642,7 +24754,7 @@ function parseArgs10(args2) {
   let hubSelector;
   for (let i = 0; i < args2.length; i++) {
     const arg = args2[i];
-    if (arg === "--label" && args2[i + 1]) {
+    if (arg === "--label") {
       label = args2[++i];
     } else if (arg === "--hub" && args2[i + 1]) {
       hubSelector = args2[++i];
@@ -31374,8 +31486,12 @@ async function communitiesCommand(args2) {
   if (sub === "join-link" && !JOIN_LINK_ACTIONS.includes(action)) {
     throw usageError("join-link takes get, rotate or off.");
   }
+  if (sub === "access" && !ACCESS_ACTIONS.includes(action)) {
+    throw usageError("access takes list, add or remove.");
+  }
   const changesLink = sub === "join-link" && action !== "get";
-  if (yes && !changesLink) throw usageError("-y applies only to `join-link rotate` and `join-link off`.");
+  const asks = changesLink || sub === "access" && action === "remove";
+  if (yes && !asks) throw usageError("-y applies only to `join-link rotate`, `join-link off` and `access remove`.");
   switch (sub) {
     case "list":
       if (rest.length > 0) throw usageError(`Unexpected argument ${JSON.stringify(rest[0])}.`);
@@ -31393,6 +31509,21 @@ async function communitiesCommand(args2) {
       if (selector === void 0 || extra.length > 0) throw usageError("stats takes one <community>.");
       return runStats(targetOf(selector, org), json);
     }
+    case "access": {
+      const [, selector, ...emails] = rest;
+      if (selector === void 0) throw usageError(`access ${action} takes a <community>.`);
+      if (action === "list" && emails.length > 0) throw usageError("access list takes one <community>.");
+      if (action === "add" && emails.length === 0) throw usageError("access add takes a <community> and one or more emails.");
+      if (action === "remove" && emails.length !== 1) throw usageError("access remove takes a <community> and one email.");
+      const valid = accessEmails(emails);
+      if (action === "remove" && !yes && !isInteractive()) {
+        throw usageError("access remove asks before it removes anyone; pass -y when not running in a terminal.");
+      }
+      const target = targetOf(selector, org);
+      if (action === "list") return runAccessList(target, json);
+      if (action === "add") return runAccessAdd(target, valid, json);
+      return runAccessRemove(target, valid[0], { json, yes });
+    }
   }
 }
 async function runList(orgId, json) {
@@ -31419,17 +31550,24 @@ async function runJoinLink(action, target, { json, yes }) {
     printLink(data2, label, json);
     return;
   }
-  console.error(
-    action === "rotate" ? `This replaces the join link of ${label} with a new one and turns it on.` : `This turns off the join link of ${label}.`
+  await warnThenAsk(
+    [
+      action === "rotate" ? `This replaces the join link of ${label} with a new one and turns it on.` : `This turns off the join link of ${label}.`,
+      "Every link shared before stops working."
+    ],
+    yes,
+    "Aborted: the join link is unchanged."
   );
-  console.error("Every link shared before stops working.");
-  if (!yes && !await confirm("Proceed?")) throw expected("Aborted: the join link is unchanged.");
   const { data } = await callCommunities(
     action === "rotate" ? api.replaceCommunityJoinLink(id) : api.disableCommunityJoinLink(id),
     notFound
   );
   printLink(data, label, json);
 }
+async function warnThenAsk(warning, yes, aborted) {
+  for (const line of warning) console.error(line);
+  if (!yes && !await confirm("Proceed?")) throw expected(aborted);
+}
 function printLink(link, label, json) {
   if (json) {
     console.log(JSON.stringify(link, null, 2));
@@ -31486,11 +31624,107 @@ function printStats(stats, label) {
     }
   }
 }
-var USAGE2, SUBCOMMANDS, JOIN_LINK_ACTIONS;
+function accessEmails(raw) {
+  const emails = /* @__PURE__ */ new Set();
+  const invalid = [];
+  for (const value of raw) {
+    const parsed = communityAccessEmailSchema.safeParse(value);
+    if (parsed.success) emails.add(parsed.data);
+    else invalid.push(JSON.stringify(sanitizeTerminalText(value)));
+  }
+  if (invalid.length > 0) {
+    throw expected(`Not ${invalid.length === 1 ? "an email" : "emails"}: ${invalid.join(", ")}. Nothing was sent.`);
+  }
+  if (emails.size > COMMUNITY_ACCESS_ADD_MAX) {
+    throw expected(`An add takes at most ${COMMUNITY_ACCESS_ADD_MAX} emails, and ${emails.size} were given. Nothing was sent.`);
+  }
+  return [...emails];
+}
+async function callAccess(request, notFound, label) {
+  try {
+    return await callCommunities(request, notFound);
+  } catch (err) {
+    if (err instanceof ApiError && err.status === 409) {
+      const reason = extractApiErrorReason(err);
+      if (reason === COMMUNITY_ACCESS_FULL_REASON) {
+        throw expected(`Nothing was added: the access list of ${label} would hold more than ${COMMUNITY_ACCESS_MAX} emails.`);
+      }
+      if (reason === PEOPLE_SUSPENDED_REASON) {
+        throw expected("WayAI has suspended this account, so it cannot change a community's access list.");
+      }
+    }
+    throw err;
+  }
+}
+async function* accessPages(api, id, notFound) {
+  let cursor;
+  do {
+    const { data } = await callCommunities(api.listCommunityAccess(id, cursor), notFound);
+    yield data.entries;
+    cursor = data.next_cursor ?? void 0;
+  } while (cursor !== void 0);
+}
+async function runAccessList(target, json) {
+  const api = await communitiesClient();
+  const { id, label } = await resolveCommunity(api, target);
+  const entries = [];
+  for await (const page of accessPages(api, id, communityNotFound(label))) entries.push(...page);
+  if (json) {
+    console.log(JSON.stringify(entries, null, 2));
+    return;
+  }
+  if (entries.length === 0) {
+    console.log(`The access list of ${label} is empty.`);
+    return;
+  }
+  console.log(`The access list of ${label}: ${entries.length} email(s), oldest first
+`);
+  printRows(entries.map((entry) => ({ email: entry.email, added: entry.created_at })));
+}
+async function runAccessAdd(target, emails, json) {
+  const api = await communitiesClient();
+  const { id, label } = await resolveCommunity(api, target);
+  const { data } = await callAccess(api.addCommunityAccess(id, { emails }), communityNotFound(label), label);
+  if (json) {
+    console.log(JSON.stringify(data, null, 2));
+    return;
+  }
+  const { added, already_listed: already } = data;
+  const listed2 = already === 0 ? "" : `; ${already} ${already === 1 ? "was" : "were"} already on it`;
+  console.log(`Added ${added.length} email(s) to the access list of ${label}${listed2}.`);
+}
+async function runAccessRemove(target, email, { json, yes }) {
+  const api = await communitiesClient();
+  const { id, label } = await resolveCommunity(api, target);
+  let entry;
+  for await (const page of accessPages(api, id, communityNotFound(label))) {
+    entry = page.find((e) => e.email === email);
+    if (entry) break;
+  }
+  if (!entry) throw expected(`${email} is not on the access list of ${label}. Nothing was removed.`);
+  await warnThenAsk(
+    [`This takes ${email} off the access list of ${label}.`, "Anyone this email let in is removed from the community now."],
+    yes,
+    "Aborted: the access list is unchanged."
+  );
+  await callAccess(
+    api.removeCommunityAccess(id, entry.access_id),
+    `${email} is no longer on the access list of ${label}, or you are not an owner or admin of its organization. Nothing was removed.`,
+    label
+  );
+  if (json) {
+    console.log(JSON.stringify(entry, null, 2));
+    return;
+  }
+  console.log(`Removed ${email} from the access list of ${label}, and from the community anyone it let in.`);
+}
+var USAGE2, SUBCOMMANDS, JOIN_LINK_ACTIONS, ACCESS_ACTIONS;
 var init_communities = __esm({
   "src/commands/communities.ts"() {
     "use strict";
     init_contracts();
+    init_api_client();
+    init_errors2();
     init_expected();
     init_repo_config();
     init_terminal_output();
@@ -31507,6 +31741,9 @@ Usage:
   wayai communities join-link rotate <community> [--org <org_id>] [-y] [--json]
   wayai communities join-link off <community> [--org <org_id>] [-y] [--json]
   wayai communities stats <community> [--org <org_id>] [--json]
+  wayai communities access list <community> [--org <org_id>] [--json]
+  wayai communities access add <community> <email>... [--org <org_id>] [--json]
+  wayai communities access remove <community> <email> [--org <org_id>] [-y] [--json]
 
 <community> is a community id, or its exact name within the organization.
 The organization is --org, else this repo's (wayai-ws/wayai.yaml).
@@ -31515,15 +31752,24 @@ join-link get     Print the join link, or that it is off
 join-link rotate  Replace the link with a new one and turn it on
 join-link off     Turn the link off
 stats             Members, joins by source, messages and course completions
+access list       Print the emails on the access list, oldest first
+access add        Add emails to it, at most ${COMMUNITY_ACCESS_ADD_MAX} at a time
+access remove     Take an email off it, and remove from the community anyone it let in
 
-rotate and off make every link shared before stop working. Both ask first;
--y skips the question, and is required when not run in a terminal.
+The access list is who the join link admits once the community is invite-only
+(settings.admission: invite in community.yaml, or the web console). Emails
+match exactly, once trimmed and lowercased.
+
+rotate and off make every link shared before stop working, and access remove
+removes members. All three ask first; -y skips the question, and is required
+when not run in a terminal.
 
 These commands need a browser sign-in (\`wayai login\`). An API token
 (\`wayai login --token\`, or WAYAI_TOKEN) is refused.
 `.trim();
-    SUBCOMMANDS = ["list", "join-link", "stats"];
+    SUBCOMMANDS = ["list", "join-link", "stats", "access"];
     JOIN_LINK_ACTIONS = ["get", "rotate", "off"];
+    ACCESS_ACTIONS = ["list", "add", "remove"];
   }
 });
 
@@ -37085,6 +37331,11 @@ async function main() {
     await printHelp3();
     return;
   }
+  const flagRefusal = entryFlagRefusal(command, args, new Set(DATA_NAMESPACES));
+  if (flagRefusal) {
+    console.error(flagRefusal);
+    process.exit(1);
+  }
   if (command && !wantsHelp(args)) {
     const { findGitRoot: findGitRoot2 } = await Promise.resolve().then(() => (init_workspace(), workspace_exports));
     const { healSkillLinkForCommand: healSkillLinkForCommand2 } = await Promise.resolve().then(() => (init_skill_symlink(), skill_symlink_exports));
@@ -37348,7 +37599,7 @@ Commands:
   sync-skills        Sync skills to Anthropic/OpenAI provider connections
   sync-mcp           Re-discover an MCP connection's tools (refresh stale schemas)
   list               List organizations and hubs
-  communities        An organization's communities: list, join link (get/rotate/off), stats \u2014 \`wayai communities --help\`
+  communities        An organization's communities: list, join link (get/rotate/off), stats, access list (list/add/remove) \u2014 \`wayai communities --help\`
   report create      Report a platform bug (submits to the triage queue)
   report edit        Amend your own pending report (title/description/error/steps/context)
   update             Update CLI to the latest version