@wayai/cli 0.3.218 → 0.3.220

package/dist/index.js

@@ -5553,10 +5553,10 @@ var init_chunk_5DGHIY7L = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-KWBAMM7C.js
-var REKOR_ACTOR_TYPE_HEADER, REKOR_ACTOR_ID_HEADER, REKOR_ACTOR_LABEL_HEADER, REKOR_ACTOR_ORG_HEADER, REKOR_ACTOR_ADMIN_HEADER, REKOR_CLIENT_HEADER, REKOR_TOOL_ID_HEADER, REKOR_CLIENTS, rekorClientSchema, MAX_REKOR_TOOL_ID_LENGTH, rekorToolIdSchema, REKOR_V1_PREFIX, DATA_PROXY_ORG_QUERY_PARAM, MAX_PROVISIONING_BODY_BYTES, dataProxyQuery, rekorAttestation, REQUIRED_REKOR_ATTESTATION_HEADERS, REKOR_BOUND_BASE_HEADER, REKOR_BOUND_TOOLSET_HEADER, REKOR_BOUND_TOKEN_HEADER, DATA_BASE_GENERATION_HEADER, REKOR_MAX_ACTOR_ID_LENGTH, REKOR_MAX_ACTOR_LABEL_LENGTH;
-var init_chunk_KWBAMM7C = __esm({
-  "../../packages/core/dist/chunk-KWBAMM7C.js"() {
+// ../../packages/core/dist/chunk-BEOHBREG.js
+var REKOR_ACTOR_TYPE_HEADER, REKOR_ACTOR_ID_HEADER, REKOR_ACTOR_LABEL_HEADER, REKOR_ACTOR_ORG_HEADER, REKOR_ACTOR_ADMIN_HEADER, REKOR_CLIENT_HEADER, REKOR_TOOL_ID_HEADER, REKOR_CLIENTS, rekorClientSchema, MAX_REKOR_TOOL_ID_LENGTH, rekorToolIdSchema, REKOR_V1_PREFIX, DATA_PROXY_ORG_QUERY_PARAM, MAX_PROVISIONING_BODY_BYTES, dataProxyQuery, rekorAttestation, REQUIRED_REKOR_ATTESTATION_HEADERS, REKOR_BOUND_BASE_HEADER, REKOR_BOUND_TOOLSET_HEADER, REKOR_BOUND_TOKEN_HEADER, REKOR_BOUND_CUSTOMER_HEADER, DATA_BASE_GENERATION_HEADER, REKOR_MAX_ACTOR_ID_LENGTH, REKOR_MAX_ACTOR_LABEL_LENGTH;
+var init_chunk_BEOHBREG = __esm({
+  "../../packages/core/dist/chunk-BEOHBREG.js"() {
     "use strict";
     init_zod();
     REKOR_ACTOR_TYPE_HEADER = "X-Rekor-Actor-Type";
@@ -5589,18 +5589,19 @@ var init_chunk_KWBAMM7C = __esm({
     REKOR_BOUND_BASE_HEADER = "X-Rekor-Bound-Base";
     REKOR_BOUND_TOOLSET_HEADER = "X-Rekor-Bound-Toolset";
     REKOR_BOUND_TOKEN_HEADER = "X-Rekor-Bound-Token";
+    REKOR_BOUND_CUSTOMER_HEADER = "X-Rekor-Bound-Customer";
     DATA_BASE_GENERATION_HEADER = "X-Data-Base-Generation";
     REKOR_MAX_ACTOR_ID_LENGTH = 256;
     REKOR_MAX_ACTOR_LABEL_LENGTH = 256;
   }
 });
 
-// ../../packages/core/dist/chunk-4I3WSYXD.js
+// ../../packages/core/dist/chunk-BVQE66I2.js
 var TOOLSET_SLUG_PATTERN, REKOR_STRUCTURAL_ID_PATTERN, baseEnvironmentSchema, TOOLSET_FILE_OPERATIONS, toolsetFileToolSchema, toolsetSurfaceSchema, toolsetConnectionBindingSchema, rekorToolsetToolsSchema, rekorBoundAttestation, rekorResolvedToolsetSchema, resolvedFileToolSchema, rekorToolsetFileSchema, rekorToolsetFileListSchema, rekorToolsetFileGetSchema, rekorToolsetFilePutSchema, TOOLSET_CUSTOMER_FACING_REFUSAL_MARK, TOOLSET_CUSTOMER_FACING_REFUSAL;
-var init_chunk_4I3WSYXD = __esm({
-  "../../packages/core/dist/chunk-4I3WSYXD.js"() {
+var init_chunk_BVQE66I2 = __esm({
+  "../../packages/core/dist/chunk-BVQE66I2.js"() {
     "use strict";
-    init_chunk_KWBAMM7C();
+    init_chunk_BEOHBREG();
     init_chunk_DHPUPI4Y();
     init_zod();
     TOOLSET_SLUG_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
@@ -5624,6 +5625,20 @@ var init_chunk_4I3WSYXD = __esm({
       records: external_exports.boolean(),
       sql_query: external_exports.boolean(),
       batch: external_exports.boolean(),
+      /**
+       * The toolset serves one customer per call (#5083 RK2): its every call names the customer it serves,
+       * and reaches only that customer's records and shared ones. Absent on a surface recorded before it
+       * was, which reads as not scoped until the connection's next tool sync or token save records it: its
+       * calls name no customer, and the customer-facing rule admits none of its record tools.
+       */
+      customer_scoped: external_exports.boolean().optional(),
+      /**
+       * A key of the resolve this side neither describes nor classifies exposes something: a kind of tool
+       * the data product added later, counted in `records`. The customer-facing rule never admits it, a
+       * customer scope included, until it is classified here. Absent on a surface recorded before it was,
+       * which reads as present.
+       */
+      unclassified_tools: external_exports.boolean().optional(),
       /**
        * Any of its file tools writes: an operation other than `list` and `get` (`put`, `delete`, or one
        * the data product adds later), or an entry this side cannot read. Absent on a surface recorded
@@ -5678,7 +5693,12 @@ var init_chunk_4I3WSYXD = __esm({
        */
       [DATA_BASE_GENERATION_HEADER]: external_exports.string().regex(/^[1-9]\d{0,14}$/),
       /** The token the binding was resolved from, when the connection records it (owner decision 41). */
-      [REKOR_BOUND_TOKEN_HEADER]: external_exports.string().regex(REKOR_STRUCTURAL_ID_PATTERN).optional()
+      [REKOR_BOUND_TOKEN_HEADER]: external_exports.string().regex(REKOR_STRUCTURAL_ID_PATTERN).optional(),
+      /**
+       * The customer the call serves (#5083 RK2): a contact id, which the contact book mints as a UUID.
+       * Every UUID is an id the far side reads back as the customer's external id.
+       */
+      [REKOR_BOUND_CUSTOMER_HEADER]: external_exports.string().uuid().optional()
     });
     rekorResolvedToolsetSchema = external_exports.object({
       data: external_exports.object({
@@ -5706,7 +5726,9 @@ var init_chunk_4I3WSYXD = __esm({
         relationships: external_exports.array(external_exports.unknown()).optional(),
         files: external_exports.array(external_exports.unknown()).optional(),
         batch: external_exports.object({ enabled: external_exports.boolean().optional() }).passthrough().nullable().optional(),
-        sql_query: external_exports.boolean().optional()
+        sql_query: external_exports.boolean().optional(),
+        /** The toolset serves one customer per call (#5083 RK2). Absent reads as not scoped. */
+        customer_scope: external_exports.boolean().optional()
       }).passthrough()
     });
     resolvedFileToolSchema = external_exports.object({
@@ -5731,7 +5753,7 @@ var init_chunk_4I3WSYXD = __esm({
     });
     rekorToolsetFilePutSchema = external_exports.object({ data: rekorToolsetFileSchema });
     TOOLSET_CUSTOMER_FACING_REFUSAL_MARK = "A customer-facing agent (a pilot, pilot specialist or pilot advisor) can use a toolset only when it exposes files alone: no record, composite or relationship tools, and neither sql_query nor batch";
-    TOOLSET_CUSTOMER_FACING_REFUSAL = `${TOOLSET_CUSTOMER_FACING_REFUSAL_MARK}, nor a file put or delete`;
+    TOOLSET_CUSTOMER_FACING_REFUSAL = `${TOOLSET_CUSTOMER_FACING_REFUSAL_MARK}, nor a file put or delete \u2014 unless the toolset is customer-scoped, which admits its record, composite and relationship tools, since each of their calls reaches only the conversation's customer and shared records`;
   }
 });
 
@@ -6184,7 +6206,7 @@ var init_chunk_E4DIIOOE = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-LR5WDVCH.js
+// ../../packages/core/dist/chunk-FMXFEZN4.js
 function spokenLineField(label, description2) {
   return { type: "text", label, maxLength: SPOKEN_LINE_MAX_CHARS, default: "", description: description2 };
 }
@@ -6194,8 +6216,8 @@ function byLowercaseName(a, b) {
   return x < y ? -1 : x > y ? 1 : 0;
 }
 var CALLER_LANGUAGE, TTS_VOICE_REPLY_ENABLED_FIELD, COPILOT_TRIGGER_FIELD, SANDBOX_AGENT_FIELDS, AUDIO_LANGUAGE_OPTIONS, whatsapp, instagram, resend, telegram, API_CHANNEL_DELIVERY_EVENTS, apiChannel, OPENAI_REASONING_MODELS, openai, anthropic, googleAiStudio, openRouter, xai, groqStt, openaiStt, elevenLabsStt, openaiTts, groqTts, elevenLabsTts, GEMINI_TTS_VOICES, googleTts, wayai, externalResources, restApiTool, mcpServer, REKOR_TOOLSET_SERVICE_NAME, rekorToolset, CLAUDE_HARNESS_MODELS, CLAUDE_HARNESS_MODEL_OPTIONS, HARNESS_MCP_SERVERS_FIELD, HARNESS_EGRESS_FIELDS, claudeManagedAgents, SPOKEN_LINE_MAX_CHARS, gptLive, CONNECTORS;
-var init_chunk_LR5WDVCH = __esm({
-  "../../packages/core/dist/chunk-LR5WDVCH.js"() {
+var init_chunk_FMXFEZN4 = __esm({
+  "../../packages/core/dist/chunk-FMXFEZN4.js"() {
     "use strict";
     CALLER_LANGUAGE = "caller";
     TTS_VOICE_REPLY_ENABLED_FIELD = {
@@ -7149,13 +7171,13 @@ var init_chunk_LR5WDVCH = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-73J42LZ3.js
+// ../../packages/core/dist/chunk-VOC3AGY4.js
 var evalCallInstant, EVAL_CALL_MIN_SECONDS, EVAL_CALL_MAX_SECONDS, EVAL_CALL_SPOKEN_LINE_MAX_CHARS, hubScoped2, createEvalCallBody, createEvalCallResponse, evalCallConversationQuery, evalCallRecordQuery, evalCallSpeaker, evalCallUtterance, evalCallTurn, evalCallRecording, evalCallRecordResponse, evalCallFinishResponse;
-var init_chunk_73J42LZ3 = __esm({
-  "../../packages/core/dist/chunk-73J42LZ3.js"() {
+var init_chunk_VOC3AGY4 = __esm({
+  "../../packages/core/dist/chunk-VOC3AGY4.js"() {
     "use strict";
     init_chunk_E4DIIOOE();
-    init_chunk_LR5WDVCH();
+    init_chunk_FMXFEZN4();
     init_chunk_HZ6CADSY();
     init_chunk_MIWZOSPI();
     init_zod();
@@ -7522,15 +7544,15 @@ var init_chunk_MH4O3YEX = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-45TIBJK6.js
+// ../../packages/core/dist/chunk-QCQUZL4L.js
 function catalogToolSideEffects(toolName) {
   const sideEffects = CATALOG_SIDE_EFFECTS.get(toolName);
   if (sideEffects === void 0) return "unknown";
   return sideEffects ? "side_effects" : "none";
 }
 var NATIVE_TOOL_SCHEMAS, WAYAI_CONNECTOR, SANDBOX_AGENT_ROLES, BASE_NATIVE_TOOLS, NATIVE_TOOLS, CATALOG_SIDE_EFFECTS;
-var init_chunk_45TIBJK6 = __esm({
-  "../../packages/core/dist/chunk-45TIBJK6.js"() {
+var init_chunk_QCQUZL4L = __esm({
+  "../../packages/core/dist/chunk-QCQUZL4L.js"() {
     "use strict";
     init_chunk_DHPUPI4Y();
     NATIVE_TOOL_SCHEMAS = {
@@ -8410,12 +8432,12 @@ var init_chunk_45TIBJK6 = __esm({
     SANDBOX_AGENT_ROLES = [...PILOT_TRACK_ROLES, ...COPILOT_TRACK_ROLES];
     BASE_NATIVE_TOOLS = [
       // --- Wayai core tools ---
-      { tool_native_id: "nt-001", tool_name: "transfer_to_agent", tool_display_name: "Transfer to Agent", tool_description: "Transfer the conversation to another AI agent", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "reconcile" },
-      { tool_native_id: "nt-002", tool_name: "transfer_to_team", tool_display_name: "Transfer to Team", tool_description: "Escalate conversation to a human support team", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_team", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "reconcile" },
+      { tool_native_id: "nt-001", tool_name: "transfer_to_agent", tool_display_name: "Transfer to Agent", tool_description: "Transfer the conversation to another AI agent", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed" },
+      { tool_native_id: "nt-002", tool_name: "transfer_to_team", tool_display_name: "Transfer to Team", tool_description: "Escalate conversation to a human support team", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_team", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed" },
       { tool_native_id: "nt-003", tool_name: "close_conversation", tool_display_name: "Close Conversation", tool_description: "Close and end the current conversation", connector_id: WAYAI_CONNECTOR, operation: "close_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed" },
       { tool_native_id: "nt-004", tool_name: "update_kanban_status", tool_display_name: "Update Kanban Status", tool_description: "Update the kanban status of the conversation", connector_id: WAYAI_CONNECTOR, operation: "update_kanban_status", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
       { tool_native_id: "nt-005", tool_name: "schedule_followup", tool_display_name: "Schedule Follow-up", tool_description: "Schedule a follow-up message for the conversation", connector_id: WAYAI_CONNECTOR, operation: "schedule_followup", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: true, execution_config: null, side_effects: true, replay: "keyed" },
-      { tool_native_id: "nt-006", tool_name: "send_files", tool_display_name: "Send Files", tool_description: "Send files to the user", connector_id: WAYAI_CONNECTOR, operation: "send_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile" },
+      { tool_native_id: "nt-006", tool_name: "send_files", tool_display_name: "Send Files", tool_description: "Send files to the user", connector_id: WAYAI_CONNECTOR, operation: "send_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed" },
       { tool_native_id: "nt-007", tool_name: "update_state", tool_display_name: "Update State", tool_description: "Update conversation or user state variables", connector_id: WAYAI_CONNECTOR, operation: "update_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
       { tool_native_id: "nt-008", tool_name: "get_state", tool_display_name: "Get State", tool_description: "Retrieve conversation or user state values", connector_id: WAYAI_CONNECTOR, operation: "get_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
       { tool_native_id: "nt-009", tool_name: "reset_state", tool_display_name: "Reset State", tool_description: "Reset conversation or user state to initial values", connector_id: WAYAI_CONNECTOR, operation: "reset_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
@@ -8507,7 +8529,7 @@ var init_chunk_45TIBJK6 = __esm({
       { tool_native_id: "nt-031", tool_name: "copy_to_sandbox", tool_display_name: "Copy File to Sandbox", tool_description: "Copy one of the conversation's files into its code sandbox", connector_id: WAYAI_CONNECTOR, operation: "copy_to_sandbox", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", assignable_roles: SANDBOX_AGENT_ROLES },
       // Copies a sandbox file OUT into the conversation, as an internal note for the team: nothing
       // reaches the customer until `send_files` sends it.
-      { tool_native_id: "nt-032", tool_name: "copy_from_sandbox", tool_display_name: "Copy File from Sandbox", tool_description: "Copy a file out of the code sandbox into the conversation, for the team", connector_id: WAYAI_CONNECTOR, operation: "copy_from_sandbox", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "reconcile", assignable_roles: SANDBOX_AGENT_ROLES },
+      { tool_native_id: "nt-032", tool_name: "copy_from_sandbox", tool_display_name: "Copy File from Sandbox", tool_description: "Copy a file out of the code sandbox into the conversation, for the team", connector_id: WAYAI_CONNECTOR, operation: "copy_from_sandbox", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed", assignable_roles: SANDBOX_AGENT_ROLES },
       // The `data/` mount's writes (#5142 step 2): a document of the agent's Base Toolset, written
       // through the toolset's own `put` tool with its version check. `reconcile`, not `keyed`: a re-run
       // after a first write that changed the file is refused by that check (its version, or the create's
@@ -8742,7 +8764,7 @@ var init_chunk_T7KQKDET = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-STST7XWM.js
+// ../../packages/core/dist/chunk-BQWVW6JO.js
 function resolveMonitorTrigger(monitorConfig) {
   if (!monitorConfig || typeof monitorConfig !== "object") return "idle";
   const raw = monitorConfig.trigger;
@@ -9048,10 +9070,10 @@ function refineMonitorRulesStructuredOutput(body, ctx) {
   if (refusal2) ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["response_format"], message: refusal2 });
 }
 var NATIVE_TOOL_NAMES, previousConversationsCountField, summarizationThresholdField, flagConditionSchema, MONITOR_TRIGGERS, monitorTriggerSchema, AUTOMATION_GATE_TRIGGERS, NON_FIRING_TRIGGERS, MONITOR_FIRING_TRIGGERS, MONITOR_DELAY_SECONDS_MIN, MONITOR_IDLE_DELAY_REQUIRED_MESSAGE, MONITOR_HISTORY_MESSAGES_MAX, monitorHistoryMessagesSchema, monitorIncludeToolResultsSchema, MONITOR_INPUT_SHAPING_KEYS, MONITOR_INPUT_SHAPING_SCHEMAS, MONITOR_INPUT_SHAPING_IDLE_MESSAGE, monitorArgumentSourceSchema, MONITOR_NOTE_TEMPLATE_MAX, MONITOR_STEER_NOTE_MAX, MONITOR_GATE_AGENT_NAME_MAX, monitorActionSchema, monitorRuleSchema, MONITOR_RULE_KEYS, MONITOR_RULE_SCHEMAS, MONITOR_RULE_TRIGGERS, MONITOR_RULE_TRIGGER_MESSAGE, CALL_UTTERANCE_SPEAKERS, callUtteranceSpeakerSchema, MONITOR_CALL_KEYS, MONITOR_CALL_SCHEMAS, MONITOR_CALL_KEY_MESSAGE, CALL_STEERING_MIN_CONFIDENCE, CALL_UTTERANCE_RULE_NOT_CONFIDENT_MESSAGE, CALL_UTTERANCE_FALLBACK_MESSAGE, CALL_UTTERANCE_FLAG_CONDITIONS_MESSAGE, CALL_STEER_NOTE_BLANK_MESSAGE, MONITOR_USER_MESSAGE_ACTION_KINDS, MONITOR_ASSISTANT_REPLY_ACTION_KINDS, MONITOR_CALL_UTTERANCE_ACTION_KINDS, MONITOR_AUTOMATION_FIRE_ACTION_KINDS, MONITOR_AUTOMATION_ITEM_ACTION_KINDS, INSERT_NOTE_TOOL_NAME, RUN_MONITOR_TOOL_NAME, MONITOR_RULE_ALLOWED_NATIVE_TOOLS, MONITOR_RULE_REENTRY_TOOLS, MONITOR_RULE_REENTRY_TRACKS, AUTOMATION_FIRE_FLAG_CONDITIONS_MESSAGE, AUTOMATION_FIRE_INPUT_SHAPING_MESSAGE, AUTOMATION_ITEM_FLAG_CONDITIONS_MESSAGE, AUTOMATION_ITEM_INPUT_SHAPING_MESSAGE, AUTOMATION_GATE_KEY_MESSAGES, monitorConfigField, flagConditionsField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody;
-var init_chunk_STST7XWM = __esm({
-  "../../packages/core/dist/chunk-STST7XWM.js"() {
+var init_chunk_BQWVW6JO = __esm({
+  "../../packages/core/dist/chunk-BQWVW6JO.js"() {
     "use strict";
-    init_chunk_45TIBJK6();
+    init_chunk_QCQUZL4L();
     init_chunk_IBL7FANV();
     init_chunk_PFDZEKDE();
     init_chunk_HZ6CADSY();
@@ -9274,12 +9296,12 @@ var init_chunk_STST7XWM = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-RKJYFGBO.js
+// ../../packages/core/dist/chunk-SPE6FAYO.js
 var conversationIdParam, conversationHubQuery, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody;
-var init_chunk_RKJYFGBO = __esm({
-  "../../packages/core/dist/chunk-RKJYFGBO.js"() {
+var init_chunk_SPE6FAYO = __esm({
+  "../../packages/core/dist/chunk-SPE6FAYO.js"() {
     "use strict";
-    init_chunk_STST7XWM();
+    init_chunk_BQWVW6JO();
     init_chunk_HZ6CADSY();
     init_chunk_DHPUPI4Y();
     init_zod();
@@ -9735,7 +9757,7 @@ var init_chunk_BPCNB5RT = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-OMZEKMYZ.js
+// ../../packages/core/dist/chunk-LM3FU67F.js
 function idempotencyHeaderRefusal(value) {
   if (typeof value !== "string" || !/^[A-Za-z0-9][A-Za-z0-9-]{0,63}$/.test(value)) {
     return "idempotency_header must be a header name: letters, digits and dashes, at most 64";
@@ -9746,10 +9768,10 @@ function idempotencyHeaderRefusal(value) {
   return null;
 }
 var CATALOG_REPLAY, REPLAY_OVERRIDES, RESERVED_HEADERS;
-var init_chunk_OMZEKMYZ = __esm({
-  "../../packages/core/dist/chunk-OMZEKMYZ.js"() {
+var init_chunk_LM3FU67F = __esm({
+  "../../packages/core/dist/chunk-LM3FU67F.js"() {
     "use strict";
-    init_chunk_45TIBJK6();
+    init_chunk_QCQUZL4L();
     CATALOG_REPLAY = new Map(
       NATIVE_TOOLS.map((tool) => [tool.tool_name, tool.replay])
     );
@@ -9982,7 +10004,7 @@ var init_chunk_WEXVYJ5H = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-L3SN4B6Q.js
+// ../../packages/core/dist/chunk-GEYJNCIJ.js
 function refineToolConfig(value, ctx) {
   const raw = value.tool_config;
   if (raw == null) return;
@@ -10018,10 +10040,10 @@ function refineToolConfig(value, ctx) {
   }
 }
 var toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, toolReplaySettingsFields, toolReplaySettingsSchema, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody;
-var init_chunk_L3SN4B6Q = __esm({
-  "../../packages/core/dist/chunk-L3SN4B6Q.js"() {
+var init_chunk_GEYJNCIJ = __esm({
+  "../../packages/core/dist/chunk-GEYJNCIJ.js"() {
     "use strict";
-    init_chunk_OMZEKMYZ();
+    init_chunk_LM3FU67F();
     init_chunk_WEXVYJ5H();
     init_chunk_HZ6CADSY();
     init_zod();
@@ -10132,7 +10154,7 @@ var init_chunk_2ISUBJG7 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-KVO4NTS2.js
+// ../../packages/core/dist/chunk-7MRZJN4O.js
 function describeRole(role) {
   if (typeof role === "string") {
     return JSON.stringify(role.length > ROLE_ECHO_MAX ? `${role.slice(0, ROLE_ECHO_MAX)}\u2026` : role);
@@ -10220,6 +10242,13 @@ function evalInitialStateError(input) {
   }
   return null;
 }
+function evalCustomerContactIdError(input) {
+  const record = asEvalInputRecord(input);
+  if (record === null) return null;
+  const value = record.customer_contact_id;
+  if (value === void 0 || value === null) return null;
+  return evalCustomerContactIdSchema.safeParse(value).success ? null : "customer_contact_id must be a contact id (a UUID)";
+}
 function evalNameError(name) {
   if (name === void 0) return null;
   if (typeof name === "string" && name.trim().length > 0) return null;
@@ -10251,6 +10280,12 @@ function refineEvalInitialState(value, ctx) {
     });
   }
 }
+function refineEvalCustomer(value, ctx) {
+  const error = evalCustomerContactIdError(value.eval);
+  if (error) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["eval", "customer_contact_id"], message: error });
+  }
+}
 function refineEvalAttachments(value, ctx) {
   const triggerError = evalTurnAttachmentsError(value.eval.message_text);
   if (triggerError) {
@@ -10292,9 +10327,9 @@ function unprovenRunCount(counts) {
 function terminalRunCount(counts) {
   return counts.successful_runs + counts.failed_runs;
 }
-var evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, EVAL_FIXTURE_NAME_MAX_LENGTH, evalFixtureOverrideSchema, runSessionQuery, runJourneyQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, evalBody, EVAL_LIST_MAX_LIMIT, evalListLimit, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, EVAL_MAX_SELECTED_SCENARIOS, evalScenarioSelectionEntrySchema, evalScenarioSelectionSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, evalSessionConfigResponseSchema, evalSessionResponseSchema, evalSessionListConfigSchema, evalSessionListItemSchema, seedReleaseStatusSchema, EVAL_SESSION_NOT_QUIESCENT;
-var init_chunk_KVO4NTS2 = __esm({
-  "../../packages/core/dist/chunk-KVO4NTS2.js"() {
+var evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, EVAL_FIXTURE_NAME_MAX_LENGTH, evalFixtureOverrideSchema, runSessionQuery, runJourneyQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, evalCustomerContactIdSchema, evalBody, EVAL_LIST_MAX_LIMIT, evalListLimit, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, EVAL_MAX_SELECTED_SCENARIOS, evalScenarioSelectionEntrySchema, evalScenarioSelectionSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, evalSessionConfigResponseSchema, evalSessionResponseSchema, evalSessionListConfigSchema, evalSessionListItemSchema, seedReleaseStatusSchema, EVAL_SESSION_NOT_QUIESCENT;
+var init_chunk_7MRZJN4O = __esm({
+  "../../packages/core/dist/chunk-7MRZJN4O.js"() {
     "use strict";
     init_chunk_4LXDRTO4();
     init_chunk_LZDVDC2S();
@@ -10331,9 +10366,10 @@ var init_chunk_KVO4NTS2 = __esm({
       scope: external_exports.enum(EVAL_INITIAL_STATE_SCOPES).default("user"),
       value: external_exports.record(external_exports.unknown())
     });
+    evalCustomerContactIdSchema = uuidSchema;
     evalBody = external_exports.object({
       eval: external_exports.record(external_exports.unknown())
-    }).superRefine(refineEvalName).superRefine(refineEvalMessageTextRole).superRefine(refineEvalAttachments).superRefine(refineEvalInitialState);
+    }).superRefine(refineEvalName).superRefine(refineEvalMessageTextRole).superRefine(refineEvalAttachments).superRefine(refineEvalInitialState).superRefine(refineEvalCustomer);
     EVAL_LIST_MAX_LIMIT = 1e3;
     evalListLimit = external_exports.string().regex(/^\d+$/).refine((v) => Number(v) <= EVAL_LIST_MAX_LIMIT, {
       message: `limit must be ${EVAL_LIST_MAX_LIMIT} or less`
@@ -11379,7 +11415,7 @@ var init_chunk_6NI5RAM4 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-UBTZT3O4.js
+// ../../packages/core/dist/chunk-54QBGDXF.js
 function refineHubAsCodeCustomTools(config, ctx) {
   const agents = config.agents;
   if (!Array.isArray(agents)) return;
@@ -11523,6 +11559,14 @@ function refineHubAsCodeEvals(config, ctx) {
         message: `eval "${entry?.name ?? "<unnamed>"}": ${initialStateError}`
       });
     }
+    const customerError = evalCustomerContactIdError(entry);
+    if (customerError) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["evals", e, "customer_contact_id"],
+        message: `eval "${entry?.name ?? "<unnamed>"}": ${customerError}`
+      });
+    }
   }
 }
 function refineHubAsCodeEvalAttachments(config, ctx) {
@@ -11899,12 +11943,12 @@ function refineHubAsCodeMonitorRulesOutput(config, ctx) {
   });
 }
 var MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, MAX_CALL_OPENING_CARRIERS, MAX_CALL_OPENING_AGGREGATE_ENCODED_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema;
-var init_chunk_UBTZT3O4 = __esm({
-  "../../packages/core/dist/chunk-UBTZT3O4.js"() {
+var init_chunk_54QBGDXF = __esm({
+  "../../packages/core/dist/chunk-54QBGDXF.js"() {
     "use strict";
-    init_chunk_L3SN4B6Q();
-    init_chunk_KVO4NTS2();
-    init_chunk_STST7XWM();
+    init_chunk_GEYJNCIJ();
+    init_chunk_7MRZJN4O();
+    init_chunk_BQWVW6JO();
     init_chunk_LBDH7LCG();
     init_chunk_4LXDRTO4();
     init_chunk_T4Q5COKJ();
@@ -12340,7 +12384,7 @@ var init_chunk_6J742GLA = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-JR2ITK6N.js
+// ../../packages/core/dist/chunk-3HSB6J4J.js
 function normalizeContactPhone(raw) {
   const compact = raw.trim().replace(/[\s\-.()]/g, "");
   const withPlus = compact.startsWith("00") ? `+${compact.slice(2)}` : compact;
@@ -12352,9 +12396,9 @@ function normalizeContactLabel(raw) {
 function importRowLabels(row, batchLabels) {
   return [.../* @__PURE__ */ new Set([...row.labels ?? [], ...batchLabels ?? []])];
 }
-var CONTACT_ENVIRONMENTS, CONTACT_NAME_MAX, CONTACT_EMAIL_MAX, CONTACT_PHONE_INPUT_MAX, CONTACT_INSTAGRAM_SID_MAX, CONTACT_METADATA_MAX_BYTES, CONTACT_LABEL_MAX, CONTACT_LABELS_MAX, CONTACT_SCOPE_TAGS_MAX, CONTACT_PAGE_MAX, CONTACT_IMPORT_BATCH_MAX, CONTACT_SEARCH_MAX, CONTACT_LIST_NAME_MAX, CONTACT_LIST_NAME_REGEX, CONTACT_LIST_DESCRIPTION_MAX, CONTACT_LIST_FILTER_MAX, CONTACT_LIST_PINS_PER_REQUEST_MAX, SUPPRESSION_SCOPES, SUPPRESSION_ID_REGEX, contactName, contactPhone, contactEmail, contactInstagramSid, contactLabel, contactLabels, contactMetadata, scopeTagIds, contactVisibilitySchema, hasIdentity, IDENTITY_REQUIRED, contactBookOrgQuery, contactBookContactParam, contactBookListParam, contactBookHubParam, contactBookPageQuery, listContactBookContactsQuery, listHubContactBookContactsQuery, contactBookLinkCandidatesQuery, listContactBookListMembersQuery, contactRowFields, createContactBookContactBody, updateContactBookContactBody, contactImportRowSchema, importContactBookContactsBody, linkContactBookContactBody, listName, contactListFilterSchema, createContactBookListBody, updateContactBookListBody, updateContactBookListPinsBody, suppressionIdentitySchema, createContactBookSuppressionBody, contactBookSuppressionParam, listContactBookSuppressionsQuery, contactBookEmailUnsubscribeTokenSchema, contactBookEmailUnsubscribeQuery, orgListReferenceSchema;
-var init_chunk_JR2ITK6N = __esm({
-  "../../packages/core/dist/chunk-JR2ITK6N.js"() {
+var CONTACT_ENVIRONMENTS, CONTACT_NAME_MAX, CONTACT_EMAIL_MAX, CONTACT_PHONE_INPUT_MAX, CONTACT_INSTAGRAM_SID_MAX, CONTACT_METADATA_MAX_BYTES, CONTACT_LABEL_MAX, CONTACT_LABELS_MAX, CONTACT_SCOPE_TAGS_MAX, CONTACT_PAGE_MAX, CONTACT_IMPORT_BATCH_MAX, CONTACT_SEARCH_MAX, CONTACT_LIST_NAME_MAX, CONTACT_LIST_NAME_REGEX, CONTACT_LIST_DESCRIPTION_MAX, CONTACT_LIST_FILTER_MAX, CONTACT_LIST_PINS_PER_REQUEST_MAX, SUPPRESSION_SCOPES, SUPPRESSION_ID_REGEX, contactName, contactPhone, contactEmail, contactInstagramSid, contactLabel, contactLabels, contactMetadata, scopeTagIds, contactVisibilitySchema, hasIdentity, IDENTITY_REQUIRED, contactBookOrgQuery, contactBookContactParam, contactBookListParam, contactBookHubParam, contactBookPageQuery, listContactBookContactsQuery, listHubContactBookContactsQuery, contactBookLinkCandidatesQuery, listContactBookListMembersQuery, contactRowFields, createContactBookContactBody, updateContactBookContactBody, contactImportRowSchema, importContactBookContactsBody, linkContactBookContactBody, CONTACT_CUSTOMER_BASE_ID_PATTERN, baseId, recordId, linkContactCustomerBody, unlinkContactCustomerQuery, listName, contactListFilterSchema, createContactBookListBody, updateContactBookListBody, updateContactBookListPinsBody, suppressionIdentitySchema, createContactBookSuppressionBody, contactBookSuppressionParam, listContactBookSuppressionsQuery, contactBookEmailUnsubscribeTokenSchema, contactBookEmailUnsubscribeQuery, orgListReferenceSchema;
+var init_chunk_3HSB6J4J = __esm({
+  "../../packages/core/dist/chunk-3HSB6J4J.js"() {
     "use strict";
     init_zod();
     CONTACT_ENVIRONMENTS = ["production", "preview", "all"];
@@ -12473,6 +12517,16 @@ var init_chunk_JR2ITK6N = __esm({
     linkContactBookContactBody = external_exports.object({
       user_id: external_exports.string().min(1).max(128)
     }).strict();
+    CONTACT_CUSTOMER_BASE_ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
+    baseId = external_exports.string().regex(CONTACT_CUSTOMER_BASE_ID_PATTERN, { message: "Must be a base id" });
+    recordId = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_\-.:]{0,254}$/, { message: "Must be a record id" });
+    linkContactCustomerBody = external_exports.object({
+      base_id: baseId,
+      record_id: recordId
+    }).strict();
+    unlinkContactCustomerQuery = contactBookOrgQuery.extend({
+      base_id: baseId
+    });
     listName = external_exports.string().trim().min(1).max(CONTACT_LIST_NAME_MAX).regex(CONTACT_LIST_NAME_REGEX, {
       message: 'Must be lowercase alphanumeric with hyphens (e.g. "vip-customers")'
     });
@@ -12515,14 +12569,14 @@ var init_chunk_JR2ITK6N = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-EA2IJGKN.js
+// ../../packages/core/dist/chunk-XCDUP42J.js
 var COMMUNITIES_PER_ORG_MAX, COMMUNITY_NAME_MAX_LENGTH, COMMUNITY_REGISTRY_CLOSED_REASON, COMMUNITY_MEMBERS_MAX, COMMUNITY_ADMISSIONS, COMMUNITY_ACCESS_MAX, COMMUNITY_ACCESS_ADD_MAX, COMMUNITY_ACCESS_FULL_REASON, COMMUNITY_JOIN_SOURCE_MAX_LENGTH, COMMUNITY_JOIN_FLOW_TOKEN_MAX_LENGTH, COMMUNITY_ROOMS_MAX, COMMUNITY_ROOM_NAME_MAX_LENGTH, COMMUNITY_MESSAGE_MAX_LENGTH, COMMUNITY_MESSAGES_PAGE_SIZE, COMMUNITY_ATTACHMENT_URLS_MAX, COMMUNITY_POST_TITLE_MAX_LENGTH, COMMUNITY_POST_SEARCH_MAX_LENGTH, COMMUNITY_MEMBER_STATUSES, COMMUNITY_RULES_MAX_LENGTH, COMMUNITY_SLOW_MODE_MAX_SECONDS, COMMUNITY_COURSES_LABEL_MAX_LENGTH, COMMUNITY_LIVE_TICKET_PREFIX, COMMUNITY_STATS_DAYS, communityNameSchema, adminCreateCommunityBody, communityIdParam, communityJoinTokenSchema, communityJoinSourceSchema, communityJoinPreviewQuery, communityJoinBody, communityRoomKindSchema, communityRoomNameSchema, communityRoomIdParam, communityMessageIdParam, communityRoomCreateBody, communityRoomUpdateBody, communityMessagesQuery, communityMessageBodySchema, communityPostTitleSchema, communityAttachmentUploadSchema, communitySendBody, communityEditBody, communityPostIdParam, communityPostsQuery, communityAnswerBody, communityReadBody, communityAttachmentUrlsBody, communityPersonParam, communityOrgParam, communityPeopleQuery, communityCoursesLabelSchema, communityAdmissionSchema, communitySettingsBody, communityAccessEmailSchema, communityAccessAddBody, communityAccessQuery, communityAccessIdParam, communityBanBody, communityLockBody, communityPinBody, communityModLogQuery, communityReportsQuery, communityReportIdParam, communityLiveTicketSchema, communityLiveQuery, communityMuteBody, communityEmailUnsubscribeTokenSchema, communityEmailUnsubscribeQuery;
-var init_chunk_EA2IJGKN = __esm({
-  "../../packages/core/dist/chunk-EA2IJGKN.js"() {
+var init_chunk_XCDUP42J = __esm({
+  "../../packages/core/dist/chunk-XCDUP42J.js"() {
     "use strict";
     init_chunk_6J742GLA();
     init_chunk_ZVXO3XL6();
-    init_chunk_JR2ITK6N();
+    init_chunk_3HSB6J4J();
     init_chunk_HZ6CADSY();
     init_zod();
     COMMUNITIES_PER_ORG_MAX = 10;
@@ -12623,7 +12677,7 @@ var init_chunk_EA2IJGKN = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-QAWIPRNA.js
+// ../../packages/core/dist/chunk-3KYTITOR.js
 function parseCommunityLessonVideoUrl(url) {
   const parts = /^https?:\/\/([^/?#]+)([^?#]*)(?:\?([^#]*))?(?:#.*)?$/i.exec(url.trim());
   if (!parts) return null;
@@ -12649,10 +12703,10 @@ function communityLessonVideoWatchUrl(video) {
   }
 }
 var COMMUNITY_COURSES_MAX, COMMUNITY_COURSE_MODULES_MAX, COMMUNITY_COURSE_LESSONS_MAX, COMMUNITY_LESSONS_MAX, COMMUNITY_COURSE_TITLE_MAX_LENGTH, COMMUNITY_COURSE_DESCRIPTION_MAX_LENGTH, COMMUNITY_LESSON_BODY_MAX_LENGTH, COMMUNITY_LESSON_LINKS_MAX, COMMUNITY_LESSON_URL_MAX_LENGTH, YOUTUBE_ID, YOUTUBE_HOSTS, YOUTU_BE, YOUTUBE_ID_PATH, communityCourseIdParam, communityCourseModuleIdParam, communityLessonIdParam, communityCourseTitleSchema, communityCourseDescriptionSchema, communityCoursePositionSchema, communityLessonVideoUrlSchema, communityLessonLinkSchema, communityLessonLinksSchema, communityLessonBodySchema, communityCourseCreateBody, communityCourseUpdateBody, communityModuleCreateBody, communityModuleUpdateBody, communityLessonCreateBody, communityLessonUpdateBody;
-var init_chunk_QAWIPRNA = __esm({
-  "../../packages/core/dist/chunk-QAWIPRNA.js"() {
+var init_chunk_3KYTITOR = __esm({
+  "../../packages/core/dist/chunk-3KYTITOR.js"() {
     "use strict";
-    init_chunk_EA2IJGKN();
+    init_chunk_XCDUP42J();
     init_chunk_HZ6CADSY();
     init_zod();
     COMMUNITY_COURSES_MAX = 20;
@@ -12868,15 +12922,15 @@ var init_chunk_ZHJEQBXJ = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-WNWIYFR3.js
+// ../../packages/core/dist/chunk-LQY2OCQL.js
 function filterNamesAnything(filter) {
   return filter.labels.length + filter.scope_tag_ids.length > 0;
 }
 var hubListNameSchema, HUB_LIST_FILTER_REQUIRED, hubContactListFilterSchema, hubContactListIdParam, hubContactListHubQuery, description, createHubContactListBody, updateHubContactListBody;
-var init_chunk_WNWIYFR3 = __esm({
-  "../../packages/core/dist/chunk-WNWIYFR3.js"() {
+var init_chunk_LQY2OCQL = __esm({
+  "../../packages/core/dist/chunk-LQY2OCQL.js"() {
     "use strict";
-    init_chunk_JR2ITK6N();
+    init_chunk_3HSB6J4J();
     init_zod();
     hubListNameSchema = orgListReferenceSchema;
     HUB_LIST_FILTER_REQUIRED = "A hub list names at least one label or scope tag";
@@ -12918,14 +12972,14 @@ var init_chunk_F3JHI4Y4 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-FAVLH62F.js
+// ../../packages/core/dist/chunk-MTQ6G7VB.js
 var AUTOMATION_TRIGGER_TYPES, AUTOMATION_EVENT_TYPES, AUTOMATION_TARGET_TYPES, AUTOMATION_ACTION_TYPES, AUTOMATION_CHANNEL_TYPES, AUTOMATION_PURPOSES, AUTOMATION_NAME_MAX, AUTOMATION_DESCRIPTION_MAX, AUTOMATION_INSTRUCTIONS_MAX, AUTOMATION_TEXT_MAX, AUTOMATION_CRON_MAX, AUTOMATION_WEBHOOK_AUTHS, AUTOMATION_WEBHOOK_HEADERS, AUTOMATION_WEBHOOK_BODY_MAX_BYTES, AUTOMATION_WEBHOOK_HEADER_NAME_MAX, WEBHOOK_RESERVED_HEADERS, automationTriggerSchema, automationTargetSchema, automationActionSchema, automationGateSchema, automationName, automationDescription, automationIdParam, automationHubQuery, automationWebhookParams, AUTOMATION_RUNS_PAGE_MAX, listAutomationRunsQuery, createAutomationBody, updateAutomationBody, AUTOMATION_ALERT_CATEGORIES, AUTOMATION_BLOCKED_ALERT_CATEGORY, automationEventSubscriberParam;
-var init_chunk_FAVLH62F = __esm({
-  "../../packages/core/dist/chunk-FAVLH62F.js"() {
+var init_chunk_MTQ6G7VB = __esm({
+  "../../packages/core/dist/chunk-MTQ6G7VB.js"() {
     "use strict";
-    init_chunk_WNWIYFR3();
-    init_chunk_STST7XWM();
-    init_chunk_JR2ITK6N();
+    init_chunk_LQY2OCQL();
+    init_chunk_BQWVW6JO();
+    init_chunk_3HSB6J4J();
     init_chunk_F3JHI4Y4();
     init_chunk_DHPUPI4Y();
     init_chunk_T7KQKDET();
@@ -14182,15 +14236,15 @@ var init_contracts = __esm({
     init_chunk_ACKF2MVU();
     init_chunk_Y7CFCYX4();
     init_chunk_5DGHIY7L();
-    init_chunk_4I3WSYXD();
-    init_chunk_KWBAMM7C();
+    init_chunk_BVQE66I2();
+    init_chunk_BEOHBREG();
     init_chunk_IPDOHAZ5();
     init_chunk_GPM7PE44();
     init_chunk_YUZFHVB2();
     init_chunk_34LE6P7E();
     init_chunk_FPSDNS2E();
     init_chunk_ZXK6N2HN();
-    init_chunk_73J42LZ3();
+    init_chunk_VOC3AGY4();
     init_chunk_C4HEZ7ZI();
     init_chunk_IR2NOSI3();
     init_chunk_EA23LSDS();
@@ -14198,25 +14252,25 @@ var init_contracts = __esm({
     init_chunk_LWMLR2WI();
     init_chunk_ACGAI25T();
     init_chunk_MH4O3YEX();
-    init_chunk_RKJYFGBO();
+    init_chunk_SPE6FAYO();
     init_chunk_KSTYTQ7I();
     init_chunk_LKBSHANA();
     init_chunk_BPCNB5RT();
-    init_chunk_UBTZT3O4();
-    init_chunk_L3SN4B6Q();
-    init_chunk_KVO4NTS2();
+    init_chunk_54QBGDXF();
+    init_chunk_GEYJNCIJ();
+    init_chunk_7MRZJN4O();
     init_chunk_JDJ4EUOL();
-    init_chunk_QAWIPRNA();
-    init_chunk_EA2IJGKN();
+    init_chunk_3KYTITOR();
+    init_chunk_XCDUP42J();
     init_chunk_6J742GLA();
     init_chunk_ZVXO3XL6();
     init_chunk_YULHXJ5M();
     init_chunk_3O5XTDI2();
     init_chunk_ZHJEQBXJ();
-    init_chunk_FAVLH62F();
-    init_chunk_WNWIYFR3();
-    init_chunk_STST7XWM();
-    init_chunk_JR2ITK6N();
+    init_chunk_MTQ6G7VB();
+    init_chunk_LQY2OCQL();
+    init_chunk_BQWVW6JO();
+    init_chunk_3HSB6J4J();
     init_chunk_IG6QBZMA();
     init_chunk_ZJJ5ODOD();
     init_chunk_PZPOUXJR();
@@ -14224,9 +14278,9 @@ var init_contracts = __esm({
     init_chunk_4LXDRTO4();
     init_chunk_E4DIIOOE();
     init_chunk_7CYHPF35();
-    init_chunk_LR5WDVCH();
-    init_chunk_OMZEKMYZ();
-    init_chunk_45TIBJK6();
+    init_chunk_FMXFEZN4();
+    init_chunk_LM3FU67F();
+    init_chunk_QCQUZL4L();
     init_chunk_NVKU5PPQ();
     init_chunk_2FCLSQSQ();
     init_chunk_FECLIZTY();
@@ -14430,6 +14484,19 @@ var init_api_client = __esm({
       }
       // The org-admin community routes (gh #5003, `wayai communities`): an owner or admin of the
       // community's org, on an interactive session only — a scoped token is refused with 403.
+      /**
+       * Link a contact to its customer record, a root record of one of the org's bases (#5083 RK2 A3).
+       * A browser sign-in only: the route refuses an API token.
+       */
+      async linkContactCustomer(orgId, contactId, body) {
+        const qs = new URLSearchParams({ organization_id: orgId });
+        return this.request("PUT", `/api/contact-book/contacts/${encodeURIComponent(contactId)}/customer?${qs}`, body);
+      }
+      /** Unlink a contact from its customer record in one base (owner decision 142). A browser sign-in only. */
+      async unlinkContactCustomer(orgId, contactId, baseId2) {
+        const qs = new URLSearchParams({ organization_id: orgId, base_id: baseId2 });
+        return this.request("DELETE", `/api/contact-book/contacts/${encodeURIComponent(contactId)}/customer?${qs}`);
+      }
       async listOrgCommunities(orgId) {
         return this.request("GET", `/api/communities/orgs/${encodeURIComponent(orgId)}`);
       }
@@ -17263,6 +17330,7 @@ var init_utils = __esm({
       "conversations",
       "alerts",
       "communities",
+      "contacts",
       "knowledge"
     ]);
     HELP_AND_VERSION = ["help", "--help", "-h", "--version", "-v"];
@@ -17270,6 +17338,7 @@ var init_utils = __esm({
       ["pull", "all"],
       ["push", "all"],
       ["communities", "all"],
+      ["contacts", "all"],
       ["knowledge", "all"],
       ["use", "selectors"],
       ["unbind", "selectors"],
@@ -20217,6 +20286,13 @@ function parseEvalYaml(filePath2, relPath, setName, hubFolder, bytesByHash) {
   if (targetBase) evalEntry.target_base = targetBase;
   const initialState = parseInitialStateField(data.initial_state, `Eval "${evalName}" in ${relPath}`);
   if (initialState) evalEntry.initial_state = initialState;
+  const customer = parseFixtureField(
+    data.customer_contact_id,
+    `Eval "${evalName}" in ${relPath}`,
+    "customer_contact_id",
+    "the customer's contact id"
+  );
+  if (customer) evalEntry.customer_contact_id = customer;
   return evalEntry;
 }
 function parseInitialStateField(raw, label) {
@@ -20253,10 +20329,10 @@ function parseVariablesMap(raw, label) {
   }
   return vars;
 }
-function parseFixtureField(raw, label, key) {
+function parseFixtureField(raw, label, key, hint = "the Rekor fixture name") {
   if (raw === void 0 || raw === null) return void 0;
   if (typeof raw !== "string") {
-    throw expected(`${label}: "${key}" must be a string (the Rekor fixture name).`);
+    throw expected(`${label}: "${key}" must be a string (${hint}).`);
   }
   const trimmed = raw.trim();
   return trimmed.length > 0 ? trimmed : void 0;
@@ -20506,6 +20582,9 @@ function buildEvalYamlObject(evalEntry, slug) {
   if (Array.isArray(evalEntry.initial_state) && evalEntry.initial_state.length > 0) {
     out.initial_state = evalEntry.initial_state;
   }
+  if (typeof evalEntry.customer_contact_id === "string" && evalEntry.customer_contact_id) {
+    out.customer_contact_id = evalEntry.customer_contact_id;
+  }
   assertAttachmentsAreLocalPaths(evalEntry.input, `eval "${evalEntry.name}" input`);
   out.input = evalEntry.input;
   out.expected = evalEntry.expected;
@@ -21611,12 +21690,12 @@ function writeBaseFolder(folder, meta, config) {
   }
   return delta;
 }
-function markProductionMirror(folder, baseId) {
+function markProductionMirror(folder, baseId2) {
   const file = path21.join(folder, BASE_META_FILE);
   try {
     const body = readFileNoFollow(folder, file)?.toString("utf-8");
     if (body === void 0 || body.startsWith(MIRROR_MARKER_PREFIX)) return;
-    const banner = `${MIRROR_MARKER_PREFIX} "${baseId}". Edits are ignored; \`wayai push\` refuses it. Edit the linked preview instead.
+    const banner = `${MIRROR_MARKER_PREFIX} "${baseId2}". Edits are ignored; \`wayai push\` refuses it. Edit the linked preview instead.
 `;
     writeFileNoFollow(folder, file, Buffer.from(banner + body, "utf-8"));
   } catch {
@@ -21742,10 +21821,10 @@ function createPreview(client, originId, opts) {
     ...opts.analytics ? { analytics: opts.analytics } : {}
   });
 }
-function deleteEntity(client, baseId, kind, id) {
+function deleteEntity(client, baseId2, kind, id) {
   return client.request(
     "DELETE",
-    `/v1/${pathSegment(baseId, "base id")}/${ENTITY_DIRS[kind]}/${pathSegment(id, `${kind} id`)}`
+    `/v1/${pathSegment(baseId2, "base id")}/${ENTITY_DIRS[kind]}/${pathSegment(id, `${kind} id`)}`
   );
 }
 var init_api = __esm({
@@ -21944,40 +22023,40 @@ async function pullBase(gitRootOrNull, selector, args2) {
   const gitRoot = requireGitRoot(gitRootOrNull);
   const target = resolveBaseTarget(gitRoot, selector);
   const basesDir = resolveBasesDir(gitRoot);
-  const baseId = targetBaseId(target, selector);
-  if (!baseId) {
+  const baseId2 = targetBaseId(target, selector);
+  if (!baseId2) {
     throw expected(
       `Could not determine the base id for ${target.folder}. Pass the base id explicitly.`
     );
   }
   const client = await createDataClient();
   console.log("Fetching base configuration...");
-  const record = await getBaseRecord(client, baseId);
+  const record = await getBaseRecord(client, baseId2);
   if (record.environment === "production") {
-    const folder = await writeProductionMirror(client, basesDir, record.id ?? baseId, record);
+    const folder = await writeProductionMirror(client, basesDir, record.id ?? baseId2, record);
     console.log(`Production base mirrored (read-only) \u2192 ${folder}`);
     return;
   }
-  assertInScope("bases", baseId);
+  assertInScope("bases", baseId2);
   if (target.exists && !autoConfirm) {
     const ok = await confirm(
-      `Overwrite local files in ${path23.relative(gitRoot, target.folder)} with the server config for "${sanitizeTerminalText(baseId)}"?`
+      `Overwrite local files in ${path23.relative(gitRoot, target.folder)} with the server config for "${sanitizeTerminalText(baseId2)}"?`
     );
     if (!ok) {
       console.log("Cancelled.");
       return;
     }
   }
-  const config = await getConfig(client, baseId);
+  const config = await getConfig(client, baseId2);
   const isFirstPull = !target.exists;
-  const delta = writeBaseFolder(target.folder, metaFromRecord(record, baseId), config);
+  const delta = writeBaseFolder(target.folder, metaFromRecord(record, baseId2), config);
   console.log(`Base configuration written to ${target.folder}`);
   console.log(
     `  ${ENTITY_KINDS.map((kind) => `${(config[kind] ?? []).length} ${kind}`).join(", ")}`
   );
   if (!isFirstPull) printLocalFileChanges(delta);
   console.log("  Credential values are not written. Manage them with `wayai bases credentials`.");
-  seedScopeIfEmpty("bases", baseId);
+  seedScopeIfEmpty("bases", baseId2);
   if (record.origin_base_id) {
     await mirrorLinkedProduction(client, basesDir, record.origin_base_id);
   }
@@ -22047,25 +22126,25 @@ async function pushBase(gitRootOrNull, selector, args2) {
     return;
   }
   const client = await createDataClient();
-  let baseId = meta.base_id;
-  if (!baseId) {
+  let baseId2 = meta.base_id;
+  if (!baseId2) {
     const created = await createDeclaredPreview(client, target, parsed, autoConfirm);
     if (!created) return;
-    baseId = created;
+    baseId2 = created;
   } else {
-    const record = await getBaseRecord(client, baseId);
+    const record = await getBaseRecord(client, baseId2);
     if (record.environment && record.environment !== "preview") {
       throw expected(
-        `"${sanitizeTerminalText(baseId)}" is a ${sanitizeTerminalText(record.environment)} base. Push operates on previews \u2014 promote with \`wayai bases promote\`.`
+        `"${sanitizeTerminalText(baseId2)}" is a ${sanitizeTerminalText(record.environment)} base. Push operates on previews \u2014 promote with \`wayai bases promote\`.`
       );
     }
-    assertInScope("bases", baseId);
+    assertInScope("bases", baseId2);
   }
-  const diff = await diffConfig(client, baseId, config);
+  const diff = await diffConfig(client, baseId2, config);
   printLintWarnings(diff.warnings);
   if (isDiffEmpty(diff)) {
-    console.log(`No changes \u2014 preview "${sanitizeTerminalText(baseId)}" already matches your files.`);
-    if (!dryRun) seedScopeIfEmpty("bases", baseId);
+    console.log(`No changes \u2014 preview "${sanitizeTerminalText(baseId2)}" already matches your files.`);
+    if (!dryRun) seedScopeIfEmpty("bases", baseId2);
     return;
   }
   console.log(renderDiff(diff));
@@ -22075,13 +22154,13 @@ async function pushBase(gitRootOrNull, selector, args2) {
   }
   if (!autoConfirm) {
     const ok = await confirm(`
-Apply these changes to preview "${sanitizeTerminalText(baseId)}"?`);
+Apply these changes to preview "${sanitizeTerminalText(baseId2)}"?`);
     if (!ok) {
       console.log("Cancelled.");
       return;
     }
   }
-  const result = await applyConfig(client, baseId, config);
+  const result = await applyConfig(client, baseId2, config);
   const secretGroups = [
     ["trigger", result.new_trigger_secrets],
     ["inbound webhook", result.new_inbound_webhook_secrets]
@@ -22108,7 +22187,7 @@ ${RED}${removals.length} ${word} not in your files were left on the base. Re-run
 Delete ${removals.length} server ${word} not in your files? Record types cascade to their records.`
     )) {
       for (const removal of removals) {
-        await deleteEntity(client, baseId, removal.kind, removal.id);
+        await deleteEntity(client, baseId2, removal.kind, removal.id);
         console.log(`  - deleted ${removal.kind} ${sanitizeTerminalText(removal.id)}`);
       }
     } else {
@@ -22116,8 +22195,8 @@ Delete ${removals.length} server ${word} not in your files? Record types cascade
     }
   }
   console.log(`
-Pushed to preview "${sanitizeTerminalText(baseId)}".`);
-  seedScopeIfEmpty("bases", baseId);
+Pushed to preview "${sanitizeTerminalText(baseId2)}".`);
+  seedScopeIfEmpty("bases", baseId2);
 }
 var init_sync = __esm({
   "src/data/config-as-code/sync.ts"() {
@@ -27518,9 +27597,9 @@ async function conversationsCommand(args2) {
       if (result.partial || result.hubs_queried === 0) process.exit(1);
       return;
     }
-    for (const failure of result.errors) {
-      const where = failure.scope_kind === "hub" ? `hub ${sanitizeTerminalText(failure.hub_name || failure.hub_id || "")} (${failure.hub_id})` : `organization ${failure.organization_id}`;
-      console.error(`Could not read ${where}: ${sanitizeTerminalText(failure.error)}`);
+    for (const failure2 of result.errors) {
+      const where = failure2.scope_kind === "hub" ? `hub ${sanitizeTerminalText(failure2.hub_name || failure2.hub_id || "")} (${failure2.hub_id})` : `organization ${failure2.organization_id}`;
+      console.error(`Could not read ${where}: ${sanitizeTerminalText(failure2.error)}`);
     }
     if (result.hubs_queried === 0) {
       console.error(
@@ -33017,12 +33096,128 @@ These commands need a browser sign-in (\`wayai login\`). An API token
   }
 });
 
+// src/commands/contacts.ts
+var contacts_exports = {};
+__export(contacts_exports, {
+  contactsCommand: () => contactsCommand
+});
+import { parseArgs as parseArgs22 } from "util";
+function usageError2(message) {
+  return expected(`${message}
+
+${USAGE3}`);
+}
+function parse2(args2) {
+  try {
+    return parseArgs22({
+      args: args2,
+      options: {
+        org: { type: "string" },
+        base: { type: "string" },
+        record: { type: "string" },
+        json: { type: "boolean" }
+      },
+      allowPositionals: true,
+      strict: true
+    });
+  } catch (err) {
+    throw usageError2(err instanceof Error ? err.message : String(err));
+  }
+}
+function resolveOrgId2(flag) {
+  if (flag !== void 0) {
+    if (!UUID_RE3.test(flag)) throw expected(`Invalid --org ${JSON.stringify(flag)}: expected an organization id (a UUID).`);
+    return flag;
+  }
+  const bound = readRepoConfigUnlessBlocked()?.organization_id;
+  if (bound) return bound;
+  throw expected("No organization: pass --org <org_id>, or run this inside a workspace scoped with `wayai init`.");
+}
+function failure(err, accessToken) {
+  if (!(err instanceof ApiError)) return err;
+  if (err.status === 403 && identifyTokenType(accessToken) === "way_token") {
+    const override2 = envTokenOverride() ? " WAYAI_TOKEN is set in this shell and is sent instead of your sign-in: unset it first." : "";
+    return expected(
+      `A contact's customer record is linked from a browser sign-in only, and this login is an API token. Run \`wayai login\` (without --token).${override2}`
+    );
+  }
+  if (err.status >= 400 && err.status < 500) return expected(sanitizeTerminalText(extractApiMessage(err)));
+  return err;
+}
+async function contactsCommand(args2) {
+  if (wantsHelp(args2) || args2.length === 0) {
+    console.log(USAGE3);
+    return;
+  }
+  const { values, positionals } = parse2(args2);
+  const [sub, contactId, ...extra] = positionals;
+  if (!SUBCOMMANDS2.includes(sub)) throw usageError2(`Unknown subcommand ${JSON.stringify(sub)}.`);
+  if (contactId === void 0 || extra.length > 0) throw usageError2(`${sub} takes one <contact_id>.`);
+  if (!UUID_RE3.test(contactId)) throw usageError2(`Invalid <contact_id> ${JSON.stringify(contactId)}: expected a contact id (a UUID).`);
+  if (!values.base) throw usageError2(`${sub} needs --base <base_id>.`);
+  if (!isValidBaseId(values.base)) throw usageError2(`Invalid --base ${JSON.stringify(values.base)}: a base id is ${BASE_ID_RULE}.`);
+  if (sub === "link-customer" && !values.record) throw usageError2("link-customer needs --record <record_id>.");
+  if (sub === "unlink-customer" && values.record !== void 0) throw usageError2("--record applies only to link-customer.");
+  const orgId = resolveOrgId2(values.org);
+  const { config, accessToken } = await requireAuth();
+  const api = new ApiClient({ apiUrl: config.api_url, accessToken, onUnauthorized: () => getAccessToken(config) });
+  let customer;
+  try {
+    ({ customer } = sub === "link-customer" ? await api.linkContactCustomer(orgId, contactId, { base_id: values.base, record_id: values.record }) : await api.unlinkContactCustomer(orgId, contactId, values.base));
+  } catch (err) {
+    throw failure(err, accessToken);
+  }
+  if (values.json) {
+    console.log(JSON.stringify(customer, null, 2));
+    return;
+  }
+  const where = `base ${sanitizeTerminalText(customer.base_id)} (${sanitizeTerminalText(customer.record_type)})`;
+  console.log(sub === "link-customer" ? `Contact ${customer.contact_id} is linked to customer record ${sanitizeTerminalText(customer.record_id)} in ${where}.` : `Contact ${customer.contact_id} is unlinked from customer record ${sanitizeTerminalText(customer.record_id)} in ${where}; the record keeps the contact id under ${customer.external_source}.`);
+}
+var USAGE3, SUBCOMMANDS2;
+var init_contacts = __esm({
+  "src/commands/contacts.ts"() {
+    "use strict";
+    init_auth();
+    init_api_client();
+    init_errors2();
+    init_expected();
+    init_repo_config();
+    init_terminal_output();
+    init_token_store();
+    init_base_id();
+    init_utils();
+    USAGE3 = `
+wayai contacts \u2014 a contact's customer record in one of the organization's bases
+
+Usage:
+  wayai contacts link-customer <contact_id> --base <base_id> --record <record_id> [--org <org_id>] [--json]
+  wayai contacts unlink-customer <contact_id> --base <base_id> [--org <org_id>] [--json]
+
+link-customer    Make the record the contact's customer record: a conversation with the
+                 contact (its WhatsApp phone, Instagram id or app account) then serves that
+                 customer through a customer-scoped toolset. The record is one of the base's
+                 customer record type (x-customer-scope role root), holding no external key
+                 or the contact id under another source. A record keyed under another
+                 external_id is refused: re-keying it would orphan its owned records.
+unlink-customer  Unlink the contact's customer record in the base. The record keeps the
+                 contact id under the source wayai_contact_unlinked, so its owned records stay
+                 its own, and link-customer on the same record links it again.
+
+The organization is --org, else this repo's (wayai-ws/wayai.yaml). You must be an
+organization admin. These commands need a browser sign-in (\`wayai login\`): an API
+token (\`wayai login --token\`, or WAYAI_TOKEN) is refused.
+`.trim();
+    SUBCOMMANDS2 = ["link-customer", "unlink-customer"];
+  }
+});
+
 // ../../packages/core/dist/contracts/rekor-toolset.js
 var init_rekor_toolset = __esm({
   "../../packages/core/dist/contracts/rekor-toolset.js"() {
     "use strict";
-    init_chunk_4I3WSYXD();
-    init_chunk_KWBAMM7C();
+    init_chunk_BVQE66I2();
+    init_chunk_BEOHBREG();
     init_chunk_DHPUPI4Y();
   }
 });
@@ -33986,14 +34181,14 @@ var init_plan = __esm({
 
 // src/knowledge/migrate.ts
 import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
-async function resolveBases(kb, baseId) {
-  const base = await kb.getBase(baseId);
-  if (!base || base.deleted) throw expected(`Base "${safe(baseId)}" not found in this organization.`);
+async function resolveBases(kb, baseId2) {
+  const base = await kb.getBase(baseId2);
+  if (!base || base.deleted) throw expected(`Base "${safe(baseId2)}" not found in this organization.`);
   if (base.environment === "preview") {
     const origin = base.origin_base_id ? await kb.getBase(base.origin_base_id) : null;
     if (!origin || origin.deleted || origin.environment !== "production") {
       throw expected(
-        `Base "${safe(baseId)}" is a preview with no production origin, so its file types can never be promoted. Name the production knowledge base, or a preview created from it.`
+        `Base "${safe(baseId2)}" is a preview with no production origin, so its file types can never be promoted. Name the production knowledge base, or a preview created from it.`
       );
     }
     return { production: origin.id, preview: base.id };
@@ -34006,7 +34201,7 @@ async function resolveBases(kb, baseId) {
   }
   if (previews.length !== 1) {
     throw expected(
-      previews.length === 0 ? `Base "${safe(baseId)}" has no preview to write its file types in. Create one with \`wayai bases create-preview ${safe(baseId)} --name <name>\`.` : `Base "${safe(baseId)}" has ${previews.length} previews (${previews.map(safe).join(", ")}). Pass the one to write its file types in as --base.`
+      previews.length === 0 ? `Base "${safe(baseId2)}" has no preview to write its file types in. Create one with \`wayai bases create-preview ${safe(baseId2)} --name <name>\`.` : `Base "${safe(baseId2)}" has ${previews.length} previews (${previews.map(safe).join(", ")}). Pass the one to write its file types in as --base.`
     );
   }
   return { production: base.id, preview: previews[0] };
@@ -34459,28 +34654,28 @@ __export(knowledge_exports, {
   knowledgeCommand: () => knowledgeCommand,
   parseKnowledgeArgs: () => parseKnowledgeArgs
 });
-import { parseArgs as parseArgs22 } from "util";
-function usageError2(message) {
+import { parseArgs as parseArgs23 } from "util";
+function usageError3(message) {
   return expected(`${message}
-${USAGE3}`);
+${USAGE4}`);
 }
 function readArgs(args2) {
   try {
-    return parseArgs22({ args: args2, options: OPTIONS, allowPositionals: true, strict: true });
+    return parseArgs23({ args: args2, options: OPTIONS, allowPositionals: true, strict: true });
   } catch (err) {
-    throw usageError2(err instanceof Error ? err.message : String(err));
+    throw usageError3(err instanceof Error ? err.message : String(err));
   }
 }
 function parseKnowledgeArgs(args2) {
   const { values, positionals } = readArgs(args2);
   const [verb, ...extra] = positionals;
-  if (verb !== "migrate") throw usageError2(verb === void 0 ? "No subcommand given." : `Unknown subcommand ${JSON.stringify(verb)}.`);
-  if (extra.length > 0) throw usageError2(`Unexpected argument ${JSON.stringify(extra[0])}.`);
-  if (!values.org) throw usageError2("--org <org_id> is required.");
-  if (!UUID_RE3.test(values.org)) throw usageError2(`Invalid --org ${JSON.stringify(values.org)}: expected an organization id (a UUID).`);
-  if (!values.base) throw usageError2("--base <knowledge base> is required.");
+  if (verb !== "migrate") throw usageError3(verb === void 0 ? "No subcommand given." : `Unknown subcommand ${JSON.stringify(verb)}.`);
+  if (extra.length > 0) throw usageError3(`Unexpected argument ${JSON.stringify(extra[0])}.`);
+  if (!values.org) throw usageError3("--org <org_id> is required.");
+  if (!UUID_RE3.test(values.org)) throw usageError3(`Invalid --org ${JSON.stringify(values.org)}: expected an organization id (a UUID).`);
+  if (!values.base) throw usageError3("--base <knowledge base> is required.");
   if (values.hub !== void 0 && !UUID_RE3.test(values.hub)) {
-    throw usageError2(`Invalid --hub ${JSON.stringify(values.hub)}: expected a hub id (a UUID).`);
+    throw usageError3(`Invalid --hub ${JSON.stringify(values.hub)}: expected a hub id (a UUID).`);
   }
   return {
     orgId: values.org,
@@ -34492,12 +34687,12 @@ function parseKnowledgeArgs(args2) {
 }
 async function knowledgeCommand(args2) {
   if (wantsHelp(args2) || args2.length === 0) {
-    console.log(USAGE3);
+    console.log(USAGE4);
     return;
   }
   const options = parseKnowledgeArgs(args2);
   if (!options.dryRun && !options.yes && !isInteractive()) {
-    throw usageError2("It asks before it writes; pass -y when not running in a terminal, or --dry-run.");
+    throw usageError3("It asks before it writes; pass -y when not running in a terminal, or --dry-run.");
   }
   const { config, accessToken } = await requireAuth();
   const api = new ApiClient({ apiUrl: config.api_url, accessToken, onUnauthorized: () => getAccessToken(config) });
@@ -34507,7 +34702,7 @@ async function knowledgeCommand(args2) {
     confirm
   });
 }
-var USAGE3, OPTIONS;
+var USAGE4, OPTIONS;
 var init_knowledge = __esm({
   "src/commands/knowledge.ts"() {
     "use strict";
@@ -34519,7 +34714,7 @@ var init_knowledge = __esm({
     init_helpers();
     init_migrate2();
     init_remote();
-    USAGE3 = `
+    USAGE4 = `
 wayai knowledge migrate \u2014 move knowledge resources into the organization's knowledge base
 
 Usage:
@@ -35190,8 +35385,8 @@ function parseScopedTargetFlags(flagArgs, usage3, opts = {}) {
   return { body: { scope: "hub", hub_id: hubId, dry_run: dryRun }, targetLabel: `hub ${hubId}`, dryRun, yes, jsonOutput };
 }
 async function runRepairTeamOrphans(flagArgs) {
-  const USAGE4 = "wayai admin hubs repair-team-orphans --all | --org <org_id> | --hub <hub_id> [--dry-run] [--yes] [--json]";
-  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(flagArgs, USAGE4);
+  const USAGE5 = "wayai admin hubs repair-team-orphans --all | --org <org_id> | --hub <hub_id> [--dry-run] [--yes] [--json]";
+  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(flagArgs, USAGE5);
   if (!dryRun && !yes && !jsonOutput) {
     console.log(`About to PURGE dangling team references in: ${targetLabel}.`);
     console.log("Memberships pointing at a deleted team are removed (HubDO + UserDO mirror); conversations pinned to one are unassigned.");
@@ -35237,7 +35432,7 @@ async function runRepairTeamOrphans(flagArgs) {
   }
 }
 async function runRepairBranchingOrphans(flagArgs) {
-  const USAGE4 = "wayai admin hubs repair-branching-orphans --all | --org <org_id> | --hub <hub_id> [--id <type>:<id> ...] [--dry-run] [--yes] [--json]";
+  const USAGE5 = "wayai admin hubs repair-branching-orphans --all | --org <org_id> | --hub <hub_id> [--id <type>:<id> ...] [--dry-run] [--yes] [--json]";
   const targets = [];
   const scopeArgs = [];
   for (let i = 0; i < flagArgs.length; i++) {
@@ -35255,10 +35450,10 @@ async function runRepairBranchingOrphans(flagArgs) {
     }
     targets.push({ entity_type: entityType, entity_id: entityId });
   }
-  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(scopeArgs, USAGE4);
+  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(scopeArgs, USAGE5);
   if (targets.length > 0 && body.scope !== "hub") {
     console.error("--id deletes rows of ONE production hub: combine it with --hub <hub_id>.");
-    console.error(USAGE4);
+    console.error(USAGE5);
     process.exit(1);
   }
   if (targets.length > 0 && !dryRun && !yes && !jsonOutput) {
@@ -35320,8 +35515,8 @@ async function runRepairBranchingOrphans(flagArgs) {
   }
 }
 async function runRepairLegacyOrgGrants(flagArgs) {
-  const USAGE4 = "wayai admin orgs repair-legacy-grants --all | --org <org_id> [--dry-run] [--yes] [--json]";
-  const scoped = parseScopedTargetFlags(flagArgs, USAGE4, {
+  const USAGE5 = "wayai admin orgs repair-legacy-grants --all | --org <org_id> [--dry-run] [--yes] [--json]";
+  const scoped = parseScopedTargetFlags(flagArgs, USAGE5, {
     scopes: ["all", "org"],
     allLabel: "ALL organizations (platform-wide)"
   });
@@ -35373,8 +35568,8 @@ async function runRepairLegacyOrgGrants(flagArgs) {
   }
 }
 async function runHarnessMassDestroy(flagArgs) {
-  const USAGE4 = "wayai admin harness mass-destroy --all | --org <org_id> | --hub <hub_id> [--dry-run] [--yes] [--json]";
-  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(flagArgs, USAGE4);
+  const USAGE5 = "wayai admin harness mass-destroy --all | --org <org_id> | --hub <hub_id> [--dry-run] [--yes] [--json]";
+  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(flagArgs, USAGE5);
   if (!dryRun && !yes && !jsonOutput) {
     console.log(`About to REAP every live harness session / token / slot in: ${targetLabel}.`);
     console.log("This destroys running harness sessions and revokes their tokens. Run with --dry-run first to see the blast radius.");
@@ -37668,8 +37863,8 @@ function buildBasesReportCommand() {
     if (opts.errorMessage) body.error_message = opts.errorMessage;
     if (opts.context) body.context = opts.context;
     if (opts.reporterEmail) body.reporter_email = opts.reporterEmail;
-    const baseId = opts.baseId ?? findBase(this) ?? process.env.WAYAI_BASE;
-    if (baseId) body.base_id = baseId;
+    const baseId2 = opts.baseId ?? findBase(this) ?? process.env.WAYAI_BASE;
+    if (baseId2) body.base_id = baseId2;
     if (opts.recordType) body.record_type = opts.recordType;
     if (opts.recordId) body.record_id = opts.recordId;
     if (opts.externalId) body.external_id = opts.externalId;
@@ -38513,28 +38708,28 @@ function buildBasesCommand() {
   bases.command("use <base>").description(
     "Deprecated alias of `wayai use bases/<id>` \u2014 scope this worktree to a base"
   ).action(async function(selector) {
-    const baseId = resolveBaseSelectorToId(findGitRoot(), selector);
+    const baseId2 = resolveBaseSelectorToId(findGitRoot(), selector);
     const previous = readScope().bases;
-    const changed = previous.length !== 1 || previous[0] !== baseId;
+    const changed = previous.length !== 1 || previous[0] !== baseId2;
     if (changed) {
       try {
-        setScopeAxis("bases", [baseId]);
+        setScopeAxis("bases", [baseId2]);
       } catch (err) {
         throw expected(err instanceof Error ? err.message : String(err));
       }
     }
     if (outputFormat(this) === "json") {
       printOutput(
-        { base_id: baseId, previous_base_id: previous[0] ?? null, changed },
+        { base_id: baseId2, previous_base_id: previous[0] ?? null, changed },
         "json"
       );
       return;
     }
     if (!changed) {
-      console.log(`Worktree already bound to base ${baseId}.`);
+      console.log(`Worktree already bound to base ${baseId2}.`);
     } else {
       console.log(
-        previous.length > 0 ? `Worktree rebound: ${previous.join(", ")} -> ${baseId}.` : `Worktree bound to base ${baseId}.`
+        previous.length > 0 ? `Worktree rebound: ${previous.join(", ")} -> ${baseId2}.` : `Worktree bound to base ${baseId2}.`
       );
     }
   });
@@ -40963,6 +41158,11 @@ async function main() {
       await communitiesCommand2(args);
       break;
     }
+    case "contacts": {
+      const { contactsCommand: contactsCommand2 } = await Promise.resolve().then(() => (init_contacts(), contacts_exports));
+      await contactsCommand2(args);
+      break;
+    }
     case "knowledge": {
       const { knowledgeCommand: knowledgeCommand2 } = await Promise.resolve().then(() => (init_knowledge(), knowledge_exports));
       await knowledgeCommand2(args);
@@ -41057,6 +41257,7 @@ Commands:
   sync-mcp           Re-discover an MCP connection's tools (refresh stale schemas)
   list               List organizations and hubs
   communities        An organization's communities: list, join link (get/rotate/off), stats, access list (list/add/remove) \u2014 \`wayai communities --help\`
+  contacts           Link a contact to its customer record in a base, or unlink it (browser sign-in only) \u2014 \`wayai contacts --help\`
   knowledge migrate  Move an organization's knowledge resources, then a hub's (--hub), into its knowledge base as file types and files \u2014 \`wayai knowledge --help\`
   report create      Report a platform bug (submits to the triage queue)
   report edit        Amend your own pending report (title/description/error/steps/context)