@wayai/cli 0.3.219 → 0.3.220

package/dist/index.js

@@ -5283,25 +5283,6 @@ var init_chunk_VXEAR36B = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-GPM7PE44.js
-var bootstrapQuery;
-var init_chunk_GPM7PE44 = __esm({
-  "../../packages/core/dist/chunk-GPM7PE44.js"() {
-    "use strict";
-    init_zod();
-    bootstrapQuery = external_exports.object({
-      active_hub_id: external_exports.string().uuid().optional(),
-      active_conversation_id: external_exports.string().uuid().optional(),
-      active_nav: external_exports.enum(["chat", "task", "support"]).optional(),
-      /**
-       * The people thread the URL names (`/chat/threads/:threadId`, gh #4661): the snapshot
-       * preloads it as `people.active_thread` when the viewer is a member.
-       */
-      active_thread_id: external_exports.string().uuid().optional()
-    });
-  }
-});
-
 // ../../packages/core/dist/chunk-VORPHGDT.js
 var PERMISSIONS;
 var init_chunk_VORPHGDT = __esm({
@@ -5517,34 +5498,6 @@ var init_chunk_ZVXO3XL6 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-ZXK6N2HN.js
-var PEOPLE_MODERATION_NOTE_MAX_LENGTH, ADMIN_PEOPLE_REPORTS_PAGE_MAX, ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT, PEOPLE_SUSPENDED_REASON, peopleModerationActionSchema, moderationNoteSchema, adminPeopleReportListQuery, adminPeopleReportIdParam, adminPeopleMessageRemovalBody, adminPeopleSuspendBody, adminPeopleNoteBody;
-var init_chunk_ZXK6N2HN = __esm({
-  "../../packages/core/dist/chunk-ZXK6N2HN.js"() {
-    "use strict";
-    init_chunk_ZVXO3XL6();
-    init_chunk_HZ6CADSY();
-    init_zod();
-    PEOPLE_MODERATION_NOTE_MAX_LENGTH = 500;
-    ADMIN_PEOPLE_REPORTS_PAGE_MAX = 100;
-    ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT = 50;
-    PEOPLE_SUSPENDED_REASON = "suspended";
-    peopleModerationActionSchema = external_exports.enum(["remove_message", "suspend", "unsuspend", "dismiss"]);
-    moderationNoteSchema = optionalTrimmedText(PEOPLE_MODERATION_NOTE_MAX_LENGTH);
-    adminPeopleReportListQuery = external_exports.object({
-      pending: external_exports.enum(["true", "false"]).optional().transform((value) => value === "true"),
-      /** Lower bound on `created_at`. */
-      since: timestampSchema.optional(),
-      limit: external_exports.coerce.number().int().min(1).max(ADMIN_PEOPLE_REPORTS_PAGE_MAX).default(ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT),
-      offset: external_exports.coerce.number().int().min(0).default(0)
-    });
-    adminPeopleReportIdParam = external_exports.object({ reportId: uuidSchema });
-    adminPeopleMessageRemovalBody = external_exports.object({ report_id: uuidSchema, message_id: uuidSchema.optional(), note: moderationNoteSchema }).strict();
-    adminPeopleSuspendBody = external_exports.object({ report_id: uuidSchema.optional(), note: moderationNoteSchema }).strict();
-    adminPeopleNoteBody = external_exports.object({ note: moderationNoteSchema }).strict();
-  }
-});
-
 // ../../packages/core/dist/chunk-Y7CFCYX4.js
 var PEOPLE_REPORT_DETAILS_MAX_LENGTH, peopleReportReasonSchema, reportDetailsSchema, reportFields, peopleReportBody;
 var init_chunk_Y7CFCYX4 = __esm({
@@ -5947,57 +5900,21 @@ var init_chunk_IPDOHAZ5 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-SY6PLCPK.js
-var jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse;
-var init_chunk_SY6PLCPK = __esm({
-  "../../packages/core/dist/chunk-SY6PLCPK.js"() {
+// ../../packages/core/dist/chunk-GPM7PE44.js
+var bootstrapQuery;
+var init_chunk_GPM7PE44 = __esm({
+  "../../packages/core/dist/chunk-GPM7PE44.js"() {
     "use strict";
-    init_chunk_6TSQ5HXC();
     init_zod();
-    jsonSchemaSchema = external_exports.record(external_exports.unknown());
-    hubUserIdentity = external_exports.object({
-      user_id: external_exports.string().nullable(),
-      user_name: external_exports.string().nullable(),
-      user_email: external_exports.string().nullable(),
-      user_name_locked: external_exports.boolean(),
-      created_at: external_exports.string(),
-      updated_at: external_exports.string().nullable(),
-      hub_user_id: external_exports.string().optional(),
-      enabled: external_exports.boolean().optional(),
-      hub_team_id: external_exports.string().nullable().optional(),
-      source: external_exports.enum(["grant", "auto"]).optional()
-    });
-    stateValueEntry = external_exports.object({
-      state_slug: external_exports.string(),
-      state_name: external_exports.string(),
-      state_description: external_exports.string().nullable().optional(),
-      scope: external_exports.enum(["user", "conversation"]),
-      json_schema: jsonSchemaSchema,
-      initial_value: external_exports.unknown(),
-      value: external_exports.unknown(),
-      is_reserved: external_exports.boolean()
-    });
-    getHubUserContextResponse = external_exports.object({
-      user: hubUserIdentity,
-      user_states: external_exports.array(stateValueEntry),
-      conversation_states: external_exports.array(stateValueEntry)
-    });
-    updateHubUserBody = external_exports.object({
-      // Non-empty, non-null. `.nullable()` here would bypass `.min(1)` and let an
-      // admin arm the lock on a null name — see hub-do.ts updateHubUser null-guard.
-      user_name: external_exports.string().min(1).max(120)
-    });
-    updateHubUserResponse = external_exports.object({
-      user: hubUserIdentity
-    });
-    unlockHubUserNameResponse = external_exports.object({
-      user: hubUserIdentity
-    });
-    stateResetParams = external_exports.object({
-      stateSlug: slugSchema
-    });
-    stateResetResponse = external_exports.object({
-      ok: external_exports.literal(true)
+    bootstrapQuery = external_exports.object({
+      active_hub_id: external_exports.string().uuid().optional(),
+      active_conversation_id: external_exports.string().uuid().optional(),
+      active_nav: external_exports.enum(["chat", "task", "support"]).optional(),
+      /**
+       * The people thread the URL names (`/chat/threads/:threadId`, gh #4661): the snapshot
+       * preloads it as `people.active_thread` when the viewer is a member.
+       */
+      active_thread_id: external_exports.string().uuid().optional()
     });
   }
 });
@@ -6106,98 +6023,31 @@ var init_chunk_FPSDNS2E = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-LKBSHANA.js
-var DESKTOP_SHELL_VERSION_RE, DESKTOP_PLATFORMS, DESKTOP_FLAVORS, desktopShellInfoSchema, DESKTOP_PRESENCE_STATES, desktopPresenceSchema, desktopUpdateSchema, DESKTOP_SIGN_IN_URL_MAX_LENGTH, DESKTOP_APP_PATH_MAX_LENGTH, desktopAppPathSchema, DESKTOP_NOTIFICATION_KINDS, DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH, DESKTOP_NOTIFICATION_BODY_MAX_LENGTH, notificationTitleSchema, notificationBodySchema, desktopNotificationSchema, DESKTOP_BADGE_MAX_COUNT, DESKTOP_BADGE_LABEL_MAX_LENGTH, desktopBadgeSchema, desktopNavigateSchema, desktopSettingsSchema, desktopSettingsChangeSchema, desktopBridgeArgsSchemas;
-var init_chunk_LKBSHANA = __esm({
-  "../../packages/core/dist/chunk-LKBSHANA.js"() {
+// ../../packages/core/dist/chunk-ZXK6N2HN.js
+var PEOPLE_MODERATION_NOTE_MAX_LENGTH, ADMIN_PEOPLE_REPORTS_PAGE_MAX, ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT, PEOPLE_SUSPENDED_REASON, peopleModerationActionSchema, moderationNoteSchema, adminPeopleReportListQuery, adminPeopleReportIdParam, adminPeopleMessageRemovalBody, adminPeopleSuspendBody, adminPeopleNoteBody;
+var init_chunk_ZXK6N2HN = __esm({
+  "../../packages/core/dist/chunk-ZXK6N2HN.js"() {
     "use strict";
+    init_chunk_ZVXO3XL6();
+    init_chunk_HZ6CADSY();
     init_zod();
-    DESKTOP_SHELL_VERSION_RE = /^(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})(-[0-9A-Za-z.-]{1,32})?$/;
-    DESKTOP_PLATFORMS = ["darwin", "win32"];
-    DESKTOP_FLAVORS = ["production", "development"];
-    desktopShellInfoSchema = external_exports.object({
-      /** The shell's own release version, independent of the web deploy. */
-      shellVersion: external_exports.string().regex(DESKTOP_SHELL_VERSION_RE),
-      /** The Electron runtime the shell was built with. */
-      electronVersion: external_exports.string().regex(/^\d{1,4}\.\d{1,4}\.\d{1,4}(-[0-9A-Za-z.-]{1,32})?$/),
-      platform: external_exports.enum(DESKTOP_PLATFORMS),
-      /** CPU architecture as Node reports it (`arm64`, `x64`). */
-      arch: external_exports.string().regex(/^[a-z0-9_]{1,16}$/),
-      flavor: external_exports.enum(DESKTOP_FLAVORS),
-      /**
-       * Present, and true, when the shell runs from the Microsoft Store's package: the Store updates it,
-       * and Windows alone opens it at login (the package's startup task, which the person turns on in
-       * Windows' settings). An optional field, so no new `bridgeVersion`: an older page ignores it, and
-       * its absence is every other shell.
-       */
-      store: external_exports.literal(true).optional()
-    });
-    DESKTOP_PRESENCE_STATES = ["present", "away"];
-    desktopPresenceSchema = external_exports.object({
-      presence: external_exports.enum(DESKTOP_PRESENCE_STATES),
-      mainWindow: external_exports.object({
-        shown: external_exports.boolean(),
-        focused: external_exports.boolean()
-      })
-    });
-    desktopUpdateSchema = external_exports.object({
-      ready: external_exports.object({
-        version: external_exports.string().regex(DESKTOP_SHELL_VERSION_RE),
-        offerRestart: external_exports.boolean()
-      }).nullable()
-    });
-    DESKTOP_SIGN_IN_URL_MAX_LENGTH = 4096;
-    DESKTOP_APP_PATH_MAX_LENGTH = 512;
-    desktopAppPathSchema = external_exports.string().max(DESKTOP_APP_PATH_MAX_LENGTH).regex(/^\/(?![/\\])[^\s\\]*$/);
-    DESKTOP_NOTIFICATION_KINDS = ["handoff", "message", "summary"];
-    DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH = 200;
-    DESKTOP_NOTIFICATION_BODY_MAX_LENGTH = 500;
-    notificationTitleSchema = external_exports.string().min(1).max(DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH);
-    notificationBodySchema = external_exports.string().max(DESKTOP_NOTIFICATION_BODY_MAX_LENGTH);
-    desktopNotificationSchema = external_exports.object({
-      kind: external_exports.enum(DESKTOP_NOTIFICATION_KINDS),
-      title: notificationTitleSchema,
-      body: notificationBodySchema,
-      path: desktopAppPathSchema,
-      withoutPreview: external_exports.object({ title: notificationTitleSchema, body: notificationBodySchema }).optional()
-    });
-    DESKTOP_BADGE_MAX_COUNT = 1e6;
-    DESKTOP_BADGE_LABEL_MAX_LENGTH = 200;
-    desktopBadgeSchema = external_exports.object({
-      count: external_exports.number().int().min(0).max(DESKTOP_BADGE_MAX_COUNT),
-      label: external_exports.string().max(DESKTOP_BADGE_LABEL_MAX_LENGTH)
-    });
-    desktopNavigateSchema = external_exports.object({
-      path: desktopAppPathSchema
-    });
-    desktopSettingsSchema = external_exports.object({
-      /** The app opens when the person logs in to the computer: the operating system's own login item. */
-      openAtLogin: external_exports.boolean(),
-      /** Closing the window keeps the app running in the tray (true), or quits it (false). */
-      closeToTray: external_exports.boolean(),
-      /** The shell shows notifications (true), or none (false). The badge is not a notification. */
-      notifications: external_exports.boolean(),
-      /**
-       * A customer message's notification shows the customer's name and words, where the platform
-       * allows them at all (`desktopShowsCustomerWords`: macOS); elsewhere the shell never shows them.
-       */
-      messagePreview: external_exports.boolean()
-    });
-    desktopSettingsChangeSchema = desktopSettingsSchema.partial().strict().refine((change) => Object.values(change).every((value) => typeof value === "boolean"), {
-      message: "each setting changed is true or false"
+    PEOPLE_MODERATION_NOTE_MAX_LENGTH = 500;
+    ADMIN_PEOPLE_REPORTS_PAGE_MAX = 100;
+    ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT = 50;
+    PEOPLE_SUSPENDED_REASON = "suspended";
+    peopleModerationActionSchema = external_exports.enum(["remove_message", "suspend", "unsuspend", "dismiss"]);
+    moderationNoteSchema = optionalTrimmedText(PEOPLE_MODERATION_NOTE_MAX_LENGTH);
+    adminPeopleReportListQuery = external_exports.object({
+      pending: external_exports.enum(["true", "false"]).optional().transform((value) => value === "true"),
+      /** Lower bound on `created_at`. */
+      since: timestampSchema.optional(),
+      limit: external_exports.coerce.number().int().min(1).max(ADMIN_PEOPLE_REPORTS_PAGE_MAX).default(ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT),
+      offset: external_exports.coerce.number().int().min(0).default(0)
     });
-    desktopBridgeArgsSchemas = {
-      getShellInfo: external_exports.tuple([]),
-      getPresence: external_exports.tuple([]),
-      openSignIn: external_exports.tuple([external_exports.string().max(DESKTOP_SIGN_IN_URL_MAX_LENGTH)]),
-      getUpdate: external_exports.tuple([]),
-      restartToUpdate: external_exports.tuple([]),
-      notify: external_exports.tuple([desktopNotificationSchema]),
-      setBadge: external_exports.tuple([desktopBadgeSchema]),
-      clearAll: external_exports.tuple([]),
-      getSettings: external_exports.tuple([]),
-      setSettings: external_exports.tuple([desktopSettingsChangeSchema])
-    };
+    adminPeopleReportIdParam = external_exports.object({ reportId: uuidSchema });
+    adminPeopleMessageRemovalBody = external_exports.object({ report_id: uuidSchema, message_id: uuidSchema.optional(), note: moderationNoteSchema }).strict();
+    adminPeopleSuspendBody = external_exports.object({ report_id: uuidSchema.optional(), note: moderationNoteSchema }).strict();
+    adminPeopleNoteBody = external_exports.object({ note: moderationNoteSchema }).strict();
   }
 });
 
@@ -7582,58 +7432,58 @@ var init_chunk_EA23LSDS = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-3O5XTDI2.js
-var CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS;
-var init_chunk_3O5XTDI2 = __esm({
-  "../../packages/core/dist/chunk-3O5XTDI2.js"() {
+// ../../packages/core/dist/chunk-SY6PLCPK.js
+var jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse;
+var init_chunk_SY6PLCPK = __esm({
+  "../../packages/core/dist/chunk-SY6PLCPK.js"() {
     "use strict";
+    init_chunk_6TSQ5HXC();
     init_zod();
-    CONSULT_THREAD_STATUSES = ["open", "awaiting", "resolved", "cancelled_at_close"];
-    consultThreadStatus = external_exports.enum(CONSULT_THREAD_STATUSES);
-    CONSULT_THREAD_TITLE_MAX = 120;
-    consultThreadTitle = external_exports.string().trim().min(1).max(CONSULT_THREAD_TITLE_MAX);
-    consultThreadSummary = external_exports.object({
-      consult_thread_id: external_exports.string(),
-      conversation_id: external_exports.string(),
-      initiator_type: external_exports.enum(["team", "agent"]),
-      initiator_id: external_exports.string(),
-      engaged_agent_id: external_exports.string().nullable(),
-      engaged_agent_name: external_exports.string().nullable(),
-      title: external_exports.string().nullable(),
-      status: consultThreadStatus,
-      created_at: external_exports.string()
+    jsonSchemaSchema = external_exports.record(external_exports.unknown());
+    hubUserIdentity = external_exports.object({
+      user_id: external_exports.string().nullable(),
+      user_name: external_exports.string().nullable(),
+      user_email: external_exports.string().nullable(),
+      user_name_locked: external_exports.boolean(),
+      created_at: external_exports.string(),
+      updated_at: external_exports.string().nullable(),
+      hub_user_id: external_exports.string().optional(),
+      enabled: external_exports.boolean().optional(),
+      hub_team_id: external_exports.string().nullable().optional(),
+      source: external_exports.enum(["grant", "auto"]).optional()
     });
-    listConsultThreadsQuery = external_exports.object({
-      hub_id: external_exports.string().uuid()
+    stateValueEntry = external_exports.object({
+      state_slug: external_exports.string(),
+      state_name: external_exports.string(),
+      state_description: external_exports.string().nullable().optional(),
+      scope: external_exports.enum(["user", "conversation"]),
+      json_schema: jsonSchemaSchema,
+      initial_value: external_exports.unknown(),
+      value: external_exports.unknown(),
+      is_reserved: external_exports.boolean()
     });
-    listConsultThreadsResponse = external_exports.object({
-      threads: external_exports.array(consultThreadSummary)
+    getHubUserContextResponse = external_exports.object({
+      user: hubUserIdentity,
+      user_states: external_exports.array(stateValueEntry),
+      conversation_states: external_exports.array(stateValueEntry)
     });
-    createConsultThreadBody = external_exports.object({
-      hub_id: external_exports.string().uuid(),
-      title: consultThreadTitle.optional(),
-      // Optionally engage a consultant on creation. Validated server-side against the
-      // hub's `consultant`-role agents; a non-consultant / unknown id is rejected.
-      engaged_agent_id: external_exports.string().uuid().optional()
+    updateHubUserBody = external_exports.object({
+      // Non-empty, non-null. `.nullable()` here would bypass `.min(1)` and let an
+      // admin arm the lock on a null name — see hub-do.ts updateHubUser null-guard.
+      user_name: external_exports.string().min(1).max(120)
     });
-    createConsultThreadResponse = external_exports.object({
-      thread: consultThreadSummary
+    updateHubUserResponse = external_exports.object({
+      user: hubUserIdentity
     });
-    consultThreadIdParam = external_exports.object({
-      id: external_exports.string().uuid(),
-      threadId: external_exports.string().uuid()
+    unlockHubUserNameResponse = external_exports.object({
+      user: hubUserIdentity
     });
-    updateConsultThreadBody = external_exports.object({
-      hub_id: external_exports.string().uuid(),
-      title: consultThreadTitle.optional(),
-      engaged_agent_id: external_exports.string().uuid().optional()
-    }).refine((v) => v.title !== void 0 || v.engaged_agent_id !== void 0, {
-      message: "Provide a title and/or an engaged_agent_id to update"
+    stateResetParams = external_exports.object({
+      stateSlug: slugSchema
     });
-    updateConsultThreadResponse = external_exports.object({
-      thread: consultThreadSummary
+    stateResetResponse = external_exports.object({
+      ok: external_exports.literal(true)
     });
-    CONSULT_AWAIT_TIMEOUT_MS = 15 * 6e4;
   }
 });
 
@@ -7694,15 +7544,15 @@ var init_chunk_MH4O3YEX = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-VBUWGVFY.js
+// ../../packages/core/dist/chunk-QCQUZL4L.js
 function catalogToolSideEffects(toolName) {
   const sideEffects = CATALOG_SIDE_EFFECTS.get(toolName);
   if (sideEffects === void 0) return "unknown";
   return sideEffects ? "side_effects" : "none";
 }
 var NATIVE_TOOL_SCHEMAS, WAYAI_CONNECTOR, SANDBOX_AGENT_ROLES, BASE_NATIVE_TOOLS, NATIVE_TOOLS, CATALOG_SIDE_EFFECTS;
-var init_chunk_VBUWGVFY = __esm({
-  "../../packages/core/dist/chunk-VBUWGVFY.js"() {
+var init_chunk_QCQUZL4L = __esm({
+  "../../packages/core/dist/chunk-QCQUZL4L.js"() {
     "use strict";
     init_chunk_DHPUPI4Y();
     NATIVE_TOOL_SCHEMAS = {
@@ -8582,8 +8432,8 @@ var init_chunk_VBUWGVFY = __esm({
     SANDBOX_AGENT_ROLES = [...PILOT_TRACK_ROLES, ...COPILOT_TRACK_ROLES];
     BASE_NATIVE_TOOLS = [
       // --- Wayai core tools ---
-      { tool_native_id: "nt-001", tool_name: "transfer_to_agent", tool_display_name: "Transfer to Agent", tool_description: "Transfer the conversation to another AI agent", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "reconcile" },
-      { tool_native_id: "nt-002", tool_name: "transfer_to_team", tool_display_name: "Transfer to Team", tool_description: "Escalate conversation to a human support team", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_team", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "reconcile" },
+      { tool_native_id: "nt-001", tool_name: "transfer_to_agent", tool_display_name: "Transfer to Agent", tool_description: "Transfer the conversation to another AI agent", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed" },
+      { tool_native_id: "nt-002", tool_name: "transfer_to_team", tool_display_name: "Transfer to Team", tool_description: "Escalate conversation to a human support team", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_team", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed" },
       { tool_native_id: "nt-003", tool_name: "close_conversation", tool_display_name: "Close Conversation", tool_description: "Close and end the current conversation", connector_id: WAYAI_CONNECTOR, operation: "close_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed" },
       { tool_native_id: "nt-004", tool_name: "update_kanban_status", tool_display_name: "Update Kanban Status", tool_description: "Update the kanban status of the conversation", connector_id: WAYAI_CONNECTOR, operation: "update_kanban_status", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
       { tool_native_id: "nt-005", tool_name: "schedule_followup", tool_display_name: "Schedule Follow-up", tool_description: "Schedule a follow-up message for the conversation", connector_id: WAYAI_CONNECTOR, operation: "schedule_followup", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: true, execution_config: null, side_effects: true, replay: "keyed" },
@@ -8914,7 +8764,7 @@ var init_chunk_T7KQKDET = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-6WCPZ26B.js
+// ../../packages/core/dist/chunk-BQWVW6JO.js
 function resolveMonitorTrigger(monitorConfig) {
   if (!monitorConfig || typeof monitorConfig !== "object") return "idle";
   const raw = monitorConfig.trigger;
@@ -9220,10 +9070,10 @@ function refineMonitorRulesStructuredOutput(body, ctx) {
   if (refusal2) ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["response_format"], message: refusal2 });
 }
 var NATIVE_TOOL_NAMES, previousConversationsCountField, summarizationThresholdField, flagConditionSchema, MONITOR_TRIGGERS, monitorTriggerSchema, AUTOMATION_GATE_TRIGGERS, NON_FIRING_TRIGGERS, MONITOR_FIRING_TRIGGERS, MONITOR_DELAY_SECONDS_MIN, MONITOR_IDLE_DELAY_REQUIRED_MESSAGE, MONITOR_HISTORY_MESSAGES_MAX, monitorHistoryMessagesSchema, monitorIncludeToolResultsSchema, MONITOR_INPUT_SHAPING_KEYS, MONITOR_INPUT_SHAPING_SCHEMAS, MONITOR_INPUT_SHAPING_IDLE_MESSAGE, monitorArgumentSourceSchema, MONITOR_NOTE_TEMPLATE_MAX, MONITOR_STEER_NOTE_MAX, MONITOR_GATE_AGENT_NAME_MAX, monitorActionSchema, monitorRuleSchema, MONITOR_RULE_KEYS, MONITOR_RULE_SCHEMAS, MONITOR_RULE_TRIGGERS, MONITOR_RULE_TRIGGER_MESSAGE, CALL_UTTERANCE_SPEAKERS, callUtteranceSpeakerSchema, MONITOR_CALL_KEYS, MONITOR_CALL_SCHEMAS, MONITOR_CALL_KEY_MESSAGE, CALL_STEERING_MIN_CONFIDENCE, CALL_UTTERANCE_RULE_NOT_CONFIDENT_MESSAGE, CALL_UTTERANCE_FALLBACK_MESSAGE, CALL_UTTERANCE_FLAG_CONDITIONS_MESSAGE, CALL_STEER_NOTE_BLANK_MESSAGE, MONITOR_USER_MESSAGE_ACTION_KINDS, MONITOR_ASSISTANT_REPLY_ACTION_KINDS, MONITOR_CALL_UTTERANCE_ACTION_KINDS, MONITOR_AUTOMATION_FIRE_ACTION_KINDS, MONITOR_AUTOMATION_ITEM_ACTION_KINDS, INSERT_NOTE_TOOL_NAME, RUN_MONITOR_TOOL_NAME, MONITOR_RULE_ALLOWED_NATIVE_TOOLS, MONITOR_RULE_REENTRY_TOOLS, MONITOR_RULE_REENTRY_TRACKS, AUTOMATION_FIRE_FLAG_CONDITIONS_MESSAGE, AUTOMATION_FIRE_INPUT_SHAPING_MESSAGE, AUTOMATION_ITEM_FLAG_CONDITIONS_MESSAGE, AUTOMATION_ITEM_INPUT_SHAPING_MESSAGE, AUTOMATION_GATE_KEY_MESSAGES, monitorConfigField, flagConditionsField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody;
-var init_chunk_6WCPZ26B = __esm({
-  "../../packages/core/dist/chunk-6WCPZ26B.js"() {
+var init_chunk_BQWVW6JO = __esm({
+  "../../packages/core/dist/chunk-BQWVW6JO.js"() {
     "use strict";
-    init_chunk_VBUWGVFY();
+    init_chunk_QCQUZL4L();
     init_chunk_IBL7FANV();
     init_chunk_PFDZEKDE();
     init_chunk_HZ6CADSY();
@@ -9446,12 +9296,12 @@ var init_chunk_6WCPZ26B = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-YVHDDEQV.js
+// ../../packages/core/dist/chunk-SPE6FAYO.js
 var conversationIdParam, conversationHubQuery, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody;
-var init_chunk_YVHDDEQV = __esm({
-  "../../packages/core/dist/chunk-YVHDDEQV.js"() {
+var init_chunk_SPE6FAYO = __esm({
+  "../../packages/core/dist/chunk-SPE6FAYO.js"() {
     "use strict";
-    init_chunk_6WCPZ26B();
+    init_chunk_BQWVW6JO();
     init_chunk_HZ6CADSY();
     init_chunk_DHPUPI4Y();
     init_zod();
@@ -9748,115 +9598,98 @@ var init_chunk_KSTYTQ7I = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-7CYHPF35.js
-var appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse;
-var init_chunk_7CYHPF35 = __esm({
-  "../../packages/core/dist/chunk-7CYHPF35.js"() {
+// ../../packages/core/dist/chunk-LKBSHANA.js
+var DESKTOP_SHELL_VERSION_RE, DESKTOP_PLATFORMS, DESKTOP_FLAVORS, desktopShellInfoSchema, DESKTOP_PRESENCE_STATES, desktopPresenceSchema, desktopUpdateSchema, DESKTOP_SIGN_IN_URL_MAX_LENGTH, DESKTOP_APP_PATH_MAX_LENGTH, desktopAppPathSchema, DESKTOP_NOTIFICATION_KINDS, DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH, DESKTOP_NOTIFICATION_BODY_MAX_LENGTH, notificationTitleSchema, notificationBodySchema, desktopNotificationSchema, DESKTOP_BADGE_MAX_COUNT, DESKTOP_BADGE_LABEL_MAX_LENGTH, desktopBadgeSchema, desktopNavigateSchema, desktopSettingsSchema, desktopSettingsChangeSchema, desktopBridgeArgsSchemas;
+var init_chunk_LKBSHANA = __esm({
+  "../../packages/core/dist/chunk-LKBSHANA.js"() {
     "use strict";
-    init_chunk_HZ6CADSY();
     init_zod();
-    appMessageSenderType = external_exports.enum(["user", "team"]);
-    appMessageReceiverType = external_exports.enum(["user", "team", "agent", "assistant"]).transform((v) => v === "assistant" ? "agent" : v);
-    apiChannelMessage = external_exports.object({
-      text: clientOptionalString,
-      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0)
-    }).refine((m) => m.text && m.text.length > 0 || m.attachments && m.attachments.length > 0, {
-      message: "message must have text or at least one attachment"
+    DESKTOP_SHELL_VERSION_RE = /^(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})(-[0-9A-Za-z.-]{1,32})?$/;
+    DESKTOP_PLATFORMS = ["darwin", "win32"];
+    DESKTOP_FLAVORS = ["production", "development"];
+    desktopShellInfoSchema = external_exports.object({
+      /** The shell's own release version, independent of the web deploy. */
+      shellVersion: external_exports.string().regex(DESKTOP_SHELL_VERSION_RE),
+      /** The Electron runtime the shell was built with. */
+      electronVersion: external_exports.string().regex(/^\d{1,4}\.\d{1,4}\.\d{1,4}(-[0-9A-Za-z.-]{1,32})?$/),
+      platform: external_exports.enum(DESKTOP_PLATFORMS),
+      /** CPU architecture as Node reports it (`arm64`, `x64`). */
+      arch: external_exports.string().regex(/^[a-z0-9_]{1,16}$/),
+      flavor: external_exports.enum(DESKTOP_FLAVORS),
+      /**
+       * Present, and true, when the shell runs from the Microsoft Store's package: the Store updates it,
+       * and Windows alone opens it at login (the package's startup task, which the person turns on in
+       * Windows' settings). An optional field, so no new `bridgeVersion`: an older page ignores it, and
+       * its absence is every other shell.
+       */
+      store: external_exports.literal(true).optional()
     });
-    apiChannelMessageBody = external_exports.object({
-      // Correlation id (task hubs): new → new conversation, repeat → continue. min 1 so an
-      // empty string can't masquerade as a ref. Mutually exclusive with conversation_id.
-      external_ref: external_exports.string().min(1).max(256).optional(),
-      // Continue a specific WayAI conversation (authorized against the hub/channel + owner).
-      // UUID-validated here (unlike the app channel, whose client we control): allocation
-      // only treats a UUID-shaped id as a provided conversation, so a malformed id would
-      // otherwise skip the owner guard and silently MINT a new conversation instead of
-      // rejecting. A format 400 is shape-only — not an existence oracle (a valid-but-unknown
-      // UUID still collapses to the opaque authorization error downstream).
-      conversation_id: external_exports.string().uuid().optional(),
-      // On-behalf-of end-user identity. Absent → per-connection service principal (task-hub
-      // only; chat hub rejects with 422 in the route).
-      user: external_exports.object({
-        id: external_exports.string().min(1),
-        email: clientOptionalString,
-        name: clientOptionalString
-      }).optional(),
-      message: apiChannelMessage,
-      // Idempotency key: maps to channel_message_sid, deduped within one conversation
-      // (ConversationDO.storeMessage). A retried POST resolves to the same conversation (a chat
-      // hub's user, the external_ref, the conversation_id, or on a task hub with neither, this key
-      // scoped by the sender), so it echoes the original message_id and skips billing / turn
-      // dispatch. A failed store answers a retryable 503 only when this key is set; without it a
-      // retry could store the message twice, so it answers 400.
-      client_message_id: external_exports.string().min(1).max(256).optional()
-    }).refine((b) => !(b.external_ref && b.conversation_id), {
-      message: "provide external_ref or conversation_id, not both",
-      path: ["external_ref"]
+    DESKTOP_PRESENCE_STATES = ["present", "away"];
+    desktopPresenceSchema = external_exports.object({
+      presence: external_exports.enum(DESKTOP_PRESENCE_STATES),
+      mainWindow: external_exports.object({
+        shown: external_exports.boolean(),
+        focused: external_exports.boolean()
+      })
     });
-    appMessageBody = external_exports.object({
-      // Message content — three historical aliases. All optional: an attachment-only
-      // or voice-only message carries no text.
-      content: clientOptionalString,
-      message_text: clientOptionalString,
-      message_body: clientOptionalString,
-      // Conversation context. Ids are plain strings rather than `.uuid()` on purpose:
-      // they are AUTHORIZED downstream, which is the stronger guarantee — a well-formed
-      // uuid belonging to another tenant must fail just as hard as junk. `hub_id` is
-      // gated by `assertHubEndUserAccess` (gh #3286) and `conversation_id` by HubDO's
-      // conversation_index owner check (gh #2781, #3281). The route's own falsy guards
-      // ('hub_id is required') still reject an empty one.
-      hub_id: clientOptionalString,
-      channel_id: clientOptionalString,
-      conversation_id: clientOptionalString,
-      hub_type: external_exports.enum(["chat", "task"]).nullish().transform((v) => v ?? void 0),
-      // Stable idempotency key for one explicit task-hub launcher. HubDO scopes it
-      // to the authenticated user and resolves retries/tabs to one conversation.
-      task_start_id: external_exports.string().uuid().nullish().transform((v) => v ?? void 0),
-      // Routing.
-      sender_type: appMessageSenderType.nullish().transform((v) => v ?? void 0),
-      receiver_type: appMessageReceiverType.nullish().transform((v) => v ?? void 0),
-      // Only meaningful on a team send, where `validateAppTeamSendContext` proves the
-      // caller may send to this receiver. Absent on a team send to a conversation with no
-      // person, which names its `conversation_id` instead. The end-user branch ignores it —
-      // see the receiver derivation in the route.
-      user_receiver_id: clientOptionalString,
-      // ── Internal consult (consultant-agents PR 2 — H1.0) ──────────────────────
-      // A team member handling a customer conversation can tag a `consultant`-role
-      // agent for a PRIVATE, team-only exchange that never reaches the customer. A
-      // consult send is a team send with `receiver_type: 'agent'` targeting the
-      // consultant; `user_receiver_id` identifies the customer whose conversation this is
-      // (and is authorized by `validateAppTeamSendContext`, exactly as a team→user send is),
-      // and is absent, as on a team→user send, when the conversation has no person. The consultant is resolved from `agent_receiver_id`
-      // when supplied, else from an `@mention` parsed out of the message text against
-      // the hub's consultant agents. `consult_thread_id` continues an existing thread;
-      // absent, the route creates/reuses the single implicit thread. These fields are
-      // inert on every non-consult send (end-user send, team→user send).
-      agent_receiver_id: clientOptionalString,
-      consult_thread_id: clientOptionalString,
-      is_first_message: clientOptionalBoolean,
-      end_conversation: clientOptionalBoolean,
-      // Pre-generated by the client so the optimistic bubble and the stored row share
-      // a key (transcription live-updates land on the same row instead of duplicating).
-      message_id: clientOptionalString,
-      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0),
-      // Base64-encoded audio for STT. Size-capped in the route (the cap is a byte
-      // budget tied to the /channels/* bodyLimit, not a shape rule).
-      audio_file: clientOptionalString
+    desktopUpdateSchema = external_exports.object({
+      ready: external_exports.object({
+        version: external_exports.string().regex(DESKTOP_SHELL_VERSION_RE),
+        offerRestart: external_exports.boolean()
+      }).nullable()
     });
-    appMessageResponse = external_exports.object({
-      success: external_exports.boolean(),
-      message: external_exports.string(),
-      result: external_exports.object({
-        conversation_id: external_exports.string().optional(),
-        message_id: external_exports.string().optional(),
-        status: external_exports.string().optional(),
-        files: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).optional(),
-        // True when this request reused a task-start/message id already accepted by
-        // the server. Clients must replace their optimistic payload with a fresh
-        // authoritative read because another tab may have won with different text.
-        deduped: external_exports.boolean().optional()
-      }).optional()
+    DESKTOP_SIGN_IN_URL_MAX_LENGTH = 4096;
+    DESKTOP_APP_PATH_MAX_LENGTH = 512;
+    desktopAppPathSchema = external_exports.string().max(DESKTOP_APP_PATH_MAX_LENGTH).regex(/^\/(?![/\\])[^\s\\]*$/);
+    DESKTOP_NOTIFICATION_KINDS = ["handoff", "message", "summary"];
+    DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH = 200;
+    DESKTOP_NOTIFICATION_BODY_MAX_LENGTH = 500;
+    notificationTitleSchema = external_exports.string().min(1).max(DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH);
+    notificationBodySchema = external_exports.string().max(DESKTOP_NOTIFICATION_BODY_MAX_LENGTH);
+    desktopNotificationSchema = external_exports.object({
+      kind: external_exports.enum(DESKTOP_NOTIFICATION_KINDS),
+      title: notificationTitleSchema,
+      body: notificationBodySchema,
+      path: desktopAppPathSchema,
+      withoutPreview: external_exports.object({ title: notificationTitleSchema, body: notificationBodySchema }).optional()
+    });
+    DESKTOP_BADGE_MAX_COUNT = 1e6;
+    DESKTOP_BADGE_LABEL_MAX_LENGTH = 200;
+    desktopBadgeSchema = external_exports.object({
+      count: external_exports.number().int().min(0).max(DESKTOP_BADGE_MAX_COUNT),
+      label: external_exports.string().max(DESKTOP_BADGE_LABEL_MAX_LENGTH)
+    });
+    desktopNavigateSchema = external_exports.object({
+      path: desktopAppPathSchema
     });
+    desktopSettingsSchema = external_exports.object({
+      /** The app opens when the person logs in to the computer: the operating system's own login item. */
+      openAtLogin: external_exports.boolean(),
+      /** Closing the window keeps the app running in the tray (true), or quits it (false). */
+      closeToTray: external_exports.boolean(),
+      /** The shell shows notifications (true), or none (false). The badge is not a notification. */
+      notifications: external_exports.boolean(),
+      /**
+       * A customer message's notification shows the customer's name and words, where the platform
+       * allows them at all (`desktopShowsCustomerWords`: macOS); elsewhere the shell never shows them.
+       */
+      messagePreview: external_exports.boolean()
+    });
+    desktopSettingsChangeSchema = desktopSettingsSchema.partial().strict().refine((change) => Object.values(change).every((value) => typeof value === "boolean"), {
+      message: "each setting changed is true or false"
+    });
+    desktopBridgeArgsSchemas = {
+      getShellInfo: external_exports.tuple([]),
+      getPresence: external_exports.tuple([]),
+      openSignIn: external_exports.tuple([external_exports.string().max(DESKTOP_SIGN_IN_URL_MAX_LENGTH)]),
+      getUpdate: external_exports.tuple([]),
+      restartToUpdate: external_exports.tuple([]),
+      notify: external_exports.tuple([desktopNotificationSchema]),
+      setBadge: external_exports.tuple([desktopBadgeSchema]),
+      clearAll: external_exports.tuple([]),
+      getSettings: external_exports.tuple([]),
+      setSettings: external_exports.tuple([desktopSettingsChangeSchema])
+    };
   }
 });
 
@@ -9924,7 +9757,7 @@ var init_chunk_BPCNB5RT = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-5KFFZX2J.js
+// ../../packages/core/dist/chunk-LM3FU67F.js
 function idempotencyHeaderRefusal(value) {
   if (typeof value !== "string" || !/^[A-Za-z0-9][A-Za-z0-9-]{0,63}$/.test(value)) {
     return "idempotency_header must be a header name: letters, digits and dashes, at most 64";
@@ -9935,10 +9768,10 @@ function idempotencyHeaderRefusal(value) {
   return null;
 }
 var CATALOG_REPLAY, REPLAY_OVERRIDES, RESERVED_HEADERS;
-var init_chunk_5KFFZX2J = __esm({
-  "../../packages/core/dist/chunk-5KFFZX2J.js"() {
+var init_chunk_LM3FU67F = __esm({
+  "../../packages/core/dist/chunk-LM3FU67F.js"() {
     "use strict";
-    init_chunk_VBUWGVFY();
+    init_chunk_QCQUZL4L();
     CATALOG_REPLAY = new Map(
       NATIVE_TOOLS.map((tool) => [tool.tool_name, tool.replay])
     );
@@ -10171,7 +10004,7 @@ var init_chunk_WEXVYJ5H = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-D26NGKIY.js
+// ../../packages/core/dist/chunk-GEYJNCIJ.js
 function refineToolConfig(value, ctx) {
   const raw = value.tool_config;
   if (raw == null) return;
@@ -10207,10 +10040,10 @@ function refineToolConfig(value, ctx) {
   }
 }
 var toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, toolReplaySettingsFields, toolReplaySettingsSchema, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody;
-var init_chunk_D26NGKIY = __esm({
-  "../../packages/core/dist/chunk-D26NGKIY.js"() {
+var init_chunk_GEYJNCIJ = __esm({
+  "../../packages/core/dist/chunk-GEYJNCIJ.js"() {
     "use strict";
-    init_chunk_5KFFZX2J();
+    init_chunk_LM3FU67F();
     init_chunk_WEXVYJ5H();
     init_chunk_HZ6CADSY();
     init_zod();
@@ -11582,7 +11415,7 @@ var init_chunk_6NI5RAM4 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-DBQLPVOO.js
+// ../../packages/core/dist/chunk-54QBGDXF.js
 function refineHubAsCodeCustomTools(config, ctx) {
   const agents = config.agents;
   if (!Array.isArray(agents)) return;
@@ -12110,12 +11943,12 @@ function refineHubAsCodeMonitorRulesOutput(config, ctx) {
   });
 }
 var MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, MAX_CALL_OPENING_CARRIERS, MAX_CALL_OPENING_AGGREGATE_ENCODED_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema;
-var init_chunk_DBQLPVOO = __esm({
-  "../../packages/core/dist/chunk-DBQLPVOO.js"() {
+var init_chunk_54QBGDXF = __esm({
+  "../../packages/core/dist/chunk-54QBGDXF.js"() {
     "use strict";
-    init_chunk_D26NGKIY();
+    init_chunk_GEYJNCIJ();
     init_chunk_7MRZJN4O();
-    init_chunk_6WCPZ26B();
+    init_chunk_BQWVW6JO();
     init_chunk_LBDH7LCG();
     init_chunk_4LXDRTO4();
     init_chunk_T4Q5COKJ();
@@ -12551,7 +12384,7 @@ var init_chunk_6J742GLA = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-JR2ITK6N.js
+// ../../packages/core/dist/chunk-3HSB6J4J.js
 function normalizeContactPhone(raw) {
   const compact = raw.trim().replace(/[\s\-.()]/g, "");
   const withPlus = compact.startsWith("00") ? `+${compact.slice(2)}` : compact;
@@ -12563,9 +12396,9 @@ function normalizeContactLabel(raw) {
 function importRowLabels(row, batchLabels) {
   return [.../* @__PURE__ */ new Set([...row.labels ?? [], ...batchLabels ?? []])];
 }
-var CONTACT_ENVIRONMENTS, CONTACT_NAME_MAX, CONTACT_EMAIL_MAX, CONTACT_PHONE_INPUT_MAX, CONTACT_INSTAGRAM_SID_MAX, CONTACT_METADATA_MAX_BYTES, CONTACT_LABEL_MAX, CONTACT_LABELS_MAX, CONTACT_SCOPE_TAGS_MAX, CONTACT_PAGE_MAX, CONTACT_IMPORT_BATCH_MAX, CONTACT_SEARCH_MAX, CONTACT_LIST_NAME_MAX, CONTACT_LIST_NAME_REGEX, CONTACT_LIST_DESCRIPTION_MAX, CONTACT_LIST_FILTER_MAX, CONTACT_LIST_PINS_PER_REQUEST_MAX, SUPPRESSION_SCOPES, SUPPRESSION_ID_REGEX, contactName, contactPhone, contactEmail, contactInstagramSid, contactLabel, contactLabels, contactMetadata, scopeTagIds, contactVisibilitySchema, hasIdentity, IDENTITY_REQUIRED, contactBookOrgQuery, contactBookContactParam, contactBookListParam, contactBookHubParam, contactBookPageQuery, listContactBookContactsQuery, listHubContactBookContactsQuery, contactBookLinkCandidatesQuery, listContactBookListMembersQuery, contactRowFields, createContactBookContactBody, updateContactBookContactBody, contactImportRowSchema, importContactBookContactsBody, linkContactBookContactBody, listName, contactListFilterSchema, createContactBookListBody, updateContactBookListBody, updateContactBookListPinsBody, suppressionIdentitySchema, createContactBookSuppressionBody, contactBookSuppressionParam, listContactBookSuppressionsQuery, contactBookEmailUnsubscribeTokenSchema, contactBookEmailUnsubscribeQuery, orgListReferenceSchema;
-var init_chunk_JR2ITK6N = __esm({
-  "../../packages/core/dist/chunk-JR2ITK6N.js"() {
+var CONTACT_ENVIRONMENTS, CONTACT_NAME_MAX, CONTACT_EMAIL_MAX, CONTACT_PHONE_INPUT_MAX, CONTACT_INSTAGRAM_SID_MAX, CONTACT_METADATA_MAX_BYTES, CONTACT_LABEL_MAX, CONTACT_LABELS_MAX, CONTACT_SCOPE_TAGS_MAX, CONTACT_PAGE_MAX, CONTACT_IMPORT_BATCH_MAX, CONTACT_SEARCH_MAX, CONTACT_LIST_NAME_MAX, CONTACT_LIST_NAME_REGEX, CONTACT_LIST_DESCRIPTION_MAX, CONTACT_LIST_FILTER_MAX, CONTACT_LIST_PINS_PER_REQUEST_MAX, SUPPRESSION_SCOPES, SUPPRESSION_ID_REGEX, contactName, contactPhone, contactEmail, contactInstagramSid, contactLabel, contactLabels, contactMetadata, scopeTagIds, contactVisibilitySchema, hasIdentity, IDENTITY_REQUIRED, contactBookOrgQuery, contactBookContactParam, contactBookListParam, contactBookHubParam, contactBookPageQuery, listContactBookContactsQuery, listHubContactBookContactsQuery, contactBookLinkCandidatesQuery, listContactBookListMembersQuery, contactRowFields, createContactBookContactBody, updateContactBookContactBody, contactImportRowSchema, importContactBookContactsBody, linkContactBookContactBody, CONTACT_CUSTOMER_BASE_ID_PATTERN, baseId, recordId, linkContactCustomerBody, unlinkContactCustomerQuery, listName, contactListFilterSchema, createContactBookListBody, updateContactBookListBody, updateContactBookListPinsBody, suppressionIdentitySchema, createContactBookSuppressionBody, contactBookSuppressionParam, listContactBookSuppressionsQuery, contactBookEmailUnsubscribeTokenSchema, contactBookEmailUnsubscribeQuery, orgListReferenceSchema;
+var init_chunk_3HSB6J4J = __esm({
+  "../../packages/core/dist/chunk-3HSB6J4J.js"() {
     "use strict";
     init_zod();
     CONTACT_ENVIRONMENTS = ["production", "preview", "all"];
@@ -12684,6 +12517,16 @@ var init_chunk_JR2ITK6N = __esm({
     linkContactBookContactBody = external_exports.object({
       user_id: external_exports.string().min(1).max(128)
     }).strict();
+    CONTACT_CUSTOMER_BASE_ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
+    baseId = external_exports.string().regex(CONTACT_CUSTOMER_BASE_ID_PATTERN, { message: "Must be a base id" });
+    recordId = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_\-.:]{0,254}$/, { message: "Must be a record id" });
+    linkContactCustomerBody = external_exports.object({
+      base_id: baseId,
+      record_id: recordId
+    }).strict();
+    unlinkContactCustomerQuery = contactBookOrgQuery.extend({
+      base_id: baseId
+    });
     listName = external_exports.string().trim().min(1).max(CONTACT_LIST_NAME_MAX).regex(CONTACT_LIST_NAME_REGEX, {
       message: 'Must be lowercase alphanumeric with hyphens (e.g. "vip-customers")'
     });
@@ -12726,14 +12569,14 @@ var init_chunk_JR2ITK6N = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-EA2IJGKN.js
+// ../../packages/core/dist/chunk-XCDUP42J.js
 var COMMUNITIES_PER_ORG_MAX, COMMUNITY_NAME_MAX_LENGTH, COMMUNITY_REGISTRY_CLOSED_REASON, COMMUNITY_MEMBERS_MAX, COMMUNITY_ADMISSIONS, COMMUNITY_ACCESS_MAX, COMMUNITY_ACCESS_ADD_MAX, COMMUNITY_ACCESS_FULL_REASON, COMMUNITY_JOIN_SOURCE_MAX_LENGTH, COMMUNITY_JOIN_FLOW_TOKEN_MAX_LENGTH, COMMUNITY_ROOMS_MAX, COMMUNITY_ROOM_NAME_MAX_LENGTH, COMMUNITY_MESSAGE_MAX_LENGTH, COMMUNITY_MESSAGES_PAGE_SIZE, COMMUNITY_ATTACHMENT_URLS_MAX, COMMUNITY_POST_TITLE_MAX_LENGTH, COMMUNITY_POST_SEARCH_MAX_LENGTH, COMMUNITY_MEMBER_STATUSES, COMMUNITY_RULES_MAX_LENGTH, COMMUNITY_SLOW_MODE_MAX_SECONDS, COMMUNITY_COURSES_LABEL_MAX_LENGTH, COMMUNITY_LIVE_TICKET_PREFIX, COMMUNITY_STATS_DAYS, communityNameSchema, adminCreateCommunityBody, communityIdParam, communityJoinTokenSchema, communityJoinSourceSchema, communityJoinPreviewQuery, communityJoinBody, communityRoomKindSchema, communityRoomNameSchema, communityRoomIdParam, communityMessageIdParam, communityRoomCreateBody, communityRoomUpdateBody, communityMessagesQuery, communityMessageBodySchema, communityPostTitleSchema, communityAttachmentUploadSchema, communitySendBody, communityEditBody, communityPostIdParam, communityPostsQuery, communityAnswerBody, communityReadBody, communityAttachmentUrlsBody, communityPersonParam, communityOrgParam, communityPeopleQuery, communityCoursesLabelSchema, communityAdmissionSchema, communitySettingsBody, communityAccessEmailSchema, communityAccessAddBody, communityAccessQuery, communityAccessIdParam, communityBanBody, communityLockBody, communityPinBody, communityModLogQuery, communityReportsQuery, communityReportIdParam, communityLiveTicketSchema, communityLiveQuery, communityMuteBody, communityEmailUnsubscribeTokenSchema, communityEmailUnsubscribeQuery;
-var init_chunk_EA2IJGKN = __esm({
-  "../../packages/core/dist/chunk-EA2IJGKN.js"() {
+var init_chunk_XCDUP42J = __esm({
+  "../../packages/core/dist/chunk-XCDUP42J.js"() {
     "use strict";
     init_chunk_6J742GLA();
     init_chunk_ZVXO3XL6();
-    init_chunk_JR2ITK6N();
+    init_chunk_3HSB6J4J();
     init_chunk_HZ6CADSY();
     init_zod();
     COMMUNITIES_PER_ORG_MAX = 10;
@@ -12834,7 +12677,7 @@ var init_chunk_EA2IJGKN = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-QAWIPRNA.js
+// ../../packages/core/dist/chunk-3KYTITOR.js
 function parseCommunityLessonVideoUrl(url) {
   const parts = /^https?:\/\/([^/?#]+)([^?#]*)(?:\?([^#]*))?(?:#.*)?$/i.exec(url.trim());
   if (!parts) return null;
@@ -12860,10 +12703,10 @@ function communityLessonVideoWatchUrl(video) {
   }
 }
 var COMMUNITY_COURSES_MAX, COMMUNITY_COURSE_MODULES_MAX, COMMUNITY_COURSE_LESSONS_MAX, COMMUNITY_LESSONS_MAX, COMMUNITY_COURSE_TITLE_MAX_LENGTH, COMMUNITY_COURSE_DESCRIPTION_MAX_LENGTH, COMMUNITY_LESSON_BODY_MAX_LENGTH, COMMUNITY_LESSON_LINKS_MAX, COMMUNITY_LESSON_URL_MAX_LENGTH, YOUTUBE_ID, YOUTUBE_HOSTS, YOUTU_BE, YOUTUBE_ID_PATH, communityCourseIdParam, communityCourseModuleIdParam, communityLessonIdParam, communityCourseTitleSchema, communityCourseDescriptionSchema, communityCoursePositionSchema, communityLessonVideoUrlSchema, communityLessonLinkSchema, communityLessonLinksSchema, communityLessonBodySchema, communityCourseCreateBody, communityCourseUpdateBody, communityModuleCreateBody, communityModuleUpdateBody, communityLessonCreateBody, communityLessonUpdateBody;
-var init_chunk_QAWIPRNA = __esm({
-  "../../packages/core/dist/chunk-QAWIPRNA.js"() {
+var init_chunk_3KYTITOR = __esm({
+  "../../packages/core/dist/chunk-3KYTITOR.js"() {
     "use strict";
-    init_chunk_EA2IJGKN();
+    init_chunk_XCDUP42J();
     init_chunk_HZ6CADSY();
     init_zod();
     COMMUNITY_COURSES_MAX = 20;
@@ -12945,29 +12788,58 @@ var init_chunk_YULHXJ5M = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-UEJOG2Q7.js
-var archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams;
-var init_chunk_UEJOG2Q7 = __esm({
-  "../../packages/core/dist/chunk-UEJOG2Q7.js"() {
+// ../../packages/core/dist/chunk-3O5XTDI2.js
+var CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS;
+var init_chunk_3O5XTDI2 = __esm({
+  "../../packages/core/dist/chunk-3O5XTDI2.js"() {
     "use strict";
     init_zod();
-    archiveHubIdParam = external_exports.object({
-      hubId: external_exports.string().uuid()
+    CONSULT_THREAD_STATUSES = ["open", "awaiting", "resolved", "cancelled_at_close"];
+    consultThreadStatus = external_exports.enum(CONSULT_THREAD_STATUSES);
+    CONSULT_THREAD_TITLE_MAX = 120;
+    consultThreadTitle = external_exports.string().trim().min(1).max(CONSULT_THREAD_TITLE_MAX);
+    consultThreadSummary = external_exports.object({
+      consult_thread_id: external_exports.string(),
+      conversation_id: external_exports.string(),
+      initiator_type: external_exports.enum(["team", "agent"]),
+      initiator_id: external_exports.string(),
+      engaged_agent_id: external_exports.string().nullable(),
+      engaged_agent_name: external_exports.string().nullable(),
+      title: external_exports.string().nullable(),
+      status: consultThreadStatus,
+      created_at: external_exports.string()
     });
-    archiveConversationParams = external_exports.object({
-      hubId: external_exports.string().uuid(),
-      conversationId: external_exports.string().uuid()
+    listConsultThreadsQuery = external_exports.object({
+      hub_id: external_exports.string().uuid()
     });
-    archiveListQuery = external_exports.object({
-      user_id: external_exports.string().optional(),
-      start: external_exports.string().optional(),
-      end: external_exports.string().optional(),
-      page: external_exports.string().regex(/^\d+$/).optional(),
-      page_size: external_exports.string().regex(/^\d+$/).optional()
+    listConsultThreadsResponse = external_exports.object({
+      threads: external_exports.array(consultThreadSummary)
     });
-    archiveMessageObservabilityParams = archiveConversationParams.extend({
-      messageId: external_exports.string().uuid()
+    createConsultThreadBody = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      title: consultThreadTitle.optional(),
+      // Optionally engage a consultant on creation. Validated server-side against the
+      // hub's `consultant`-role agents; a non-consultant / unknown id is rejected.
+      engaged_agent_id: external_exports.string().uuid().optional()
+    });
+    createConsultThreadResponse = external_exports.object({
+      thread: consultThreadSummary
+    });
+    consultThreadIdParam = external_exports.object({
+      id: external_exports.string().uuid(),
+      threadId: external_exports.string().uuid()
+    });
+    updateConsultThreadBody = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      title: consultThreadTitle.optional(),
+      engaged_agent_id: external_exports.string().uuid().optional()
+    }).refine((v) => v.title !== void 0 || v.engaged_agent_id !== void 0, {
+      message: "Provide a title and/or an engaged_agent_id to update"
     });
+    updateConsultThreadResponse = external_exports.object({
+      thread: consultThreadSummary
+    });
+    CONSULT_AWAIT_TIMEOUT_MS = 15 * 6e4;
   }
 });
 
@@ -13050,15 +12922,15 @@ var init_chunk_ZHJEQBXJ = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-WNWIYFR3.js
+// ../../packages/core/dist/chunk-LQY2OCQL.js
 function filterNamesAnything(filter) {
   return filter.labels.length + filter.scope_tag_ids.length > 0;
 }
 var hubListNameSchema, HUB_LIST_FILTER_REQUIRED, hubContactListFilterSchema, hubContactListIdParam, hubContactListHubQuery, description, createHubContactListBody, updateHubContactListBody;
-var init_chunk_WNWIYFR3 = __esm({
-  "../../packages/core/dist/chunk-WNWIYFR3.js"() {
+var init_chunk_LQY2OCQL = __esm({
+  "../../packages/core/dist/chunk-LQY2OCQL.js"() {
     "use strict";
-    init_chunk_JR2ITK6N();
+    init_chunk_3HSB6J4J();
     init_zod();
     hubListNameSchema = orgListReferenceSchema;
     HUB_LIST_FILTER_REQUIRED = "A hub list names at least one label or scope tag";
@@ -13100,14 +12972,14 @@ var init_chunk_F3JHI4Y4 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-ALUW3KZS.js
+// ../../packages/core/dist/chunk-MTQ6G7VB.js
 var AUTOMATION_TRIGGER_TYPES, AUTOMATION_EVENT_TYPES, AUTOMATION_TARGET_TYPES, AUTOMATION_ACTION_TYPES, AUTOMATION_CHANNEL_TYPES, AUTOMATION_PURPOSES, AUTOMATION_NAME_MAX, AUTOMATION_DESCRIPTION_MAX, AUTOMATION_INSTRUCTIONS_MAX, AUTOMATION_TEXT_MAX, AUTOMATION_CRON_MAX, AUTOMATION_WEBHOOK_AUTHS, AUTOMATION_WEBHOOK_HEADERS, AUTOMATION_WEBHOOK_BODY_MAX_BYTES, AUTOMATION_WEBHOOK_HEADER_NAME_MAX, WEBHOOK_RESERVED_HEADERS, automationTriggerSchema, automationTargetSchema, automationActionSchema, automationGateSchema, automationName, automationDescription, automationIdParam, automationHubQuery, automationWebhookParams, AUTOMATION_RUNS_PAGE_MAX, listAutomationRunsQuery, createAutomationBody, updateAutomationBody, AUTOMATION_ALERT_CATEGORIES, AUTOMATION_BLOCKED_ALERT_CATEGORY, automationEventSubscriberParam;
-var init_chunk_ALUW3KZS = __esm({
-  "../../packages/core/dist/chunk-ALUW3KZS.js"() {
+var init_chunk_MTQ6G7VB = __esm({
+  "../../packages/core/dist/chunk-MTQ6G7VB.js"() {
     "use strict";
-    init_chunk_WNWIYFR3();
-    init_chunk_6WCPZ26B();
-    init_chunk_JR2ITK6N();
+    init_chunk_LQY2OCQL();
+    init_chunk_BQWVW6JO();
+    init_chunk_3HSB6J4J();
     init_chunk_F3JHI4Y4();
     init_chunk_DHPUPI4Y();
     init_chunk_T7KQKDET();
@@ -13357,6 +13229,118 @@ var init_chunk_ZJJ5ODOD = __esm({
   }
 });
 
+// ../../packages/core/dist/chunk-7CYHPF35.js
+var appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse;
+var init_chunk_7CYHPF35 = __esm({
+  "../../packages/core/dist/chunk-7CYHPF35.js"() {
+    "use strict";
+    init_chunk_HZ6CADSY();
+    init_zod();
+    appMessageSenderType = external_exports.enum(["user", "team"]);
+    appMessageReceiverType = external_exports.enum(["user", "team", "agent", "assistant"]).transform((v) => v === "assistant" ? "agent" : v);
+    apiChannelMessage = external_exports.object({
+      text: clientOptionalString,
+      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0)
+    }).refine((m) => m.text && m.text.length > 0 || m.attachments && m.attachments.length > 0, {
+      message: "message must have text or at least one attachment"
+    });
+    apiChannelMessageBody = external_exports.object({
+      // Correlation id (task hubs): new → new conversation, repeat → continue. min 1 so an
+      // empty string can't masquerade as a ref. Mutually exclusive with conversation_id.
+      external_ref: external_exports.string().min(1).max(256).optional(),
+      // Continue a specific WayAI conversation (authorized against the hub/channel + owner).
+      // UUID-validated here (unlike the app channel, whose client we control): allocation
+      // only treats a UUID-shaped id as a provided conversation, so a malformed id would
+      // otherwise skip the owner guard and silently MINT a new conversation instead of
+      // rejecting. A format 400 is shape-only — not an existence oracle (a valid-but-unknown
+      // UUID still collapses to the opaque authorization error downstream).
+      conversation_id: external_exports.string().uuid().optional(),
+      // On-behalf-of end-user identity. Absent → per-connection service principal (task-hub
+      // only; chat hub rejects with 422 in the route).
+      user: external_exports.object({
+        id: external_exports.string().min(1),
+        email: clientOptionalString,
+        name: clientOptionalString
+      }).optional(),
+      message: apiChannelMessage,
+      // Idempotency key: maps to channel_message_sid, deduped within one conversation
+      // (ConversationDO.storeMessage). A retried POST resolves to the same conversation (a chat
+      // hub's user, the external_ref, the conversation_id, or on a task hub with neither, this key
+      // scoped by the sender), so it echoes the original message_id and skips billing / turn
+      // dispatch. A failed store answers a retryable 503 only when this key is set; without it a
+      // retry could store the message twice, so it answers 400.
+      client_message_id: external_exports.string().min(1).max(256).optional()
+    }).refine((b) => !(b.external_ref && b.conversation_id), {
+      message: "provide external_ref or conversation_id, not both",
+      path: ["external_ref"]
+    });
+    appMessageBody = external_exports.object({
+      // Message content — three historical aliases. All optional: an attachment-only
+      // or voice-only message carries no text.
+      content: clientOptionalString,
+      message_text: clientOptionalString,
+      message_body: clientOptionalString,
+      // Conversation context. Ids are plain strings rather than `.uuid()` on purpose:
+      // they are AUTHORIZED downstream, which is the stronger guarantee — a well-formed
+      // uuid belonging to another tenant must fail just as hard as junk. `hub_id` is
+      // gated by `assertHubEndUserAccess` (gh #3286) and `conversation_id` by HubDO's
+      // conversation_index owner check (gh #2781, #3281). The route's own falsy guards
+      // ('hub_id is required') still reject an empty one.
+      hub_id: clientOptionalString,
+      channel_id: clientOptionalString,
+      conversation_id: clientOptionalString,
+      hub_type: external_exports.enum(["chat", "task"]).nullish().transform((v) => v ?? void 0),
+      // Stable idempotency key for one explicit task-hub launcher. HubDO scopes it
+      // to the authenticated user and resolves retries/tabs to one conversation.
+      task_start_id: external_exports.string().uuid().nullish().transform((v) => v ?? void 0),
+      // Routing.
+      sender_type: appMessageSenderType.nullish().transform((v) => v ?? void 0),
+      receiver_type: appMessageReceiverType.nullish().transform((v) => v ?? void 0),
+      // Only meaningful on a team send, where `validateAppTeamSendContext` proves the
+      // caller may send to this receiver. Absent on a team send to a conversation with no
+      // person, which names its `conversation_id` instead. The end-user branch ignores it —
+      // see the receiver derivation in the route.
+      user_receiver_id: clientOptionalString,
+      // ── Internal consult (consultant-agents PR 2 — H1.0) ──────────────────────
+      // A team member handling a customer conversation can tag a `consultant`-role
+      // agent for a PRIVATE, team-only exchange that never reaches the customer. A
+      // consult send is a team send with `receiver_type: 'agent'` targeting the
+      // consultant; `user_receiver_id` identifies the customer whose conversation this is
+      // (and is authorized by `validateAppTeamSendContext`, exactly as a team→user send is),
+      // and is absent, as on a team→user send, when the conversation has no person. The consultant is resolved from `agent_receiver_id`
+      // when supplied, else from an `@mention` parsed out of the message text against
+      // the hub's consultant agents. `consult_thread_id` continues an existing thread;
+      // absent, the route creates/reuses the single implicit thread. These fields are
+      // inert on every non-consult send (end-user send, team→user send).
+      agent_receiver_id: clientOptionalString,
+      consult_thread_id: clientOptionalString,
+      is_first_message: clientOptionalBoolean,
+      end_conversation: clientOptionalBoolean,
+      // Pre-generated by the client so the optimistic bubble and the stored row share
+      // a key (transcription live-updates land on the same row instead of duplicating).
+      message_id: clientOptionalString,
+      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0),
+      // Base64-encoded audio for STT. Size-capped in the route (the cap is a byte
+      // budget tied to the /channels/* bodyLimit, not a shape rule).
+      audio_file: clientOptionalString
+    });
+    appMessageResponse = external_exports.object({
+      success: external_exports.boolean(),
+      message: external_exports.string(),
+      result: external_exports.object({
+        conversation_id: external_exports.string().optional(),
+        message_id: external_exports.string().optional(),
+        status: external_exports.string().optional(),
+        files: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).optional(),
+        // True when this request reused a task-start/message id already accepted by
+        // the server. Clients must replace their optimistic payload with a fresh
+        // authoritative read because another tab may have won with different text.
+        deduped: external_exports.boolean().optional()
+      }).optional()
+    });
+  }
+});
+
 // ../../packages/core/dist/chunk-NVKU5PPQ.js
 var ADMIN_SKILL_NAME_REGEX, adminSkillNameParam;
 var init_chunk_NVKU5PPQ = __esm({
@@ -13999,6 +13983,32 @@ var init_chunk_2PZIF56U = __esm({
   }
 });
 
+// ../../packages/core/dist/chunk-UEJOG2Q7.js
+var archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams;
+var init_chunk_UEJOG2Q7 = __esm({
+  "../../packages/core/dist/chunk-UEJOG2Q7.js"() {
+    "use strict";
+    init_zod();
+    archiveHubIdParam = external_exports.object({
+      hubId: external_exports.string().uuid()
+    });
+    archiveConversationParams = external_exports.object({
+      hubId: external_exports.string().uuid(),
+      conversationId: external_exports.string().uuid()
+    });
+    archiveListQuery = external_exports.object({
+      user_id: external_exports.string().optional(),
+      start: external_exports.string().optional(),
+      end: external_exports.string().optional(),
+      page: external_exports.string().regex(/^\d+$/).optional(),
+      page_size: external_exports.string().regex(/^\d+$/).optional()
+    });
+    archiveMessageObservabilityParams = archiveConversationParams.extend({
+      messageId: external_exports.string().uuid()
+    });
+  }
+});
+
 // ../../packages/core/dist/chunk-SOJMWM63.js
 var init_chunk_SOJMWM63 = __esm({
   "../../packages/core/dist/chunk-SOJMWM63.js"() {
@@ -14221,57 +14231,56 @@ var init_contracts = __esm({
     init_chunk_SXDX4GHS();
     init_chunk_FK6HBXM7();
     init_chunk_VXEAR36B();
-    init_chunk_GPM7PE44();
     init_chunk_DGKMMFIR();
     init_chunk_ZC6YGHNX();
     init_chunk_ACKF2MVU();
-    init_chunk_ZXK6N2HN();
     init_chunk_Y7CFCYX4();
     init_chunk_5DGHIY7L();
     init_chunk_BVQE66I2();
     init_chunk_BEOHBREG();
     init_chunk_IPDOHAZ5();
-    init_chunk_SY6PLCPK();
+    init_chunk_GPM7PE44();
     init_chunk_YUZFHVB2();
     init_chunk_34LE6P7E();
     init_chunk_FPSDNS2E();
-    init_chunk_LKBSHANA();
+    init_chunk_ZXK6N2HN();
     init_chunk_VOC3AGY4();
     init_chunk_C4HEZ7ZI();
     init_chunk_IR2NOSI3();
     init_chunk_EA23LSDS();
-    init_chunk_3O5XTDI2();
+    init_chunk_SY6PLCPK();
     init_chunk_LWMLR2WI();
     init_chunk_ACGAI25T();
     init_chunk_MH4O3YEX();
-    init_chunk_YVHDDEQV();
+    init_chunk_SPE6FAYO();
     init_chunk_KSTYTQ7I();
-    init_chunk_7CYHPF35();
+    init_chunk_LKBSHANA();
     init_chunk_BPCNB5RT();
-    init_chunk_DBQLPVOO();
-    init_chunk_D26NGKIY();
+    init_chunk_54QBGDXF();
+    init_chunk_GEYJNCIJ();
     init_chunk_7MRZJN4O();
     init_chunk_JDJ4EUOL();
-    init_chunk_QAWIPRNA();
-    init_chunk_EA2IJGKN();
+    init_chunk_3KYTITOR();
+    init_chunk_XCDUP42J();
     init_chunk_6J742GLA();
     init_chunk_ZVXO3XL6();
     init_chunk_YULHXJ5M();
-    init_chunk_UEJOG2Q7();
+    init_chunk_3O5XTDI2();
     init_chunk_ZHJEQBXJ();
-    init_chunk_ALUW3KZS();
-    init_chunk_WNWIYFR3();
-    init_chunk_6WCPZ26B();
-    init_chunk_JR2ITK6N();
+    init_chunk_MTQ6G7VB();
+    init_chunk_LQY2OCQL();
+    init_chunk_BQWVW6JO();
+    init_chunk_3HSB6J4J();
     init_chunk_IG6QBZMA();
     init_chunk_ZJJ5ODOD();
     init_chunk_PZPOUXJR();
     init_chunk_LBDH7LCG();
     init_chunk_4LXDRTO4();
     init_chunk_E4DIIOOE();
+    init_chunk_7CYHPF35();
     init_chunk_FMXFEZN4();
-    init_chunk_5KFFZX2J();
-    init_chunk_VBUWGVFY();
+    init_chunk_LM3FU67F();
+    init_chunk_QCQUZL4L();
     init_chunk_NVKU5PPQ();
     init_chunk_2FCLSQSQ();
     init_chunk_FECLIZTY();
@@ -14283,6 +14292,7 @@ var init_contracts = __esm({
     init_chunk_ACN6GXU6();
     init_chunk_OMPT4ZHR();
     init_chunk_2PZIF56U();
+    init_chunk_UEJOG2Q7();
     init_chunk_SOJMWM63();
     init_chunk_WEXVYJ5H();
     init_chunk_LZDVDC2S();
@@ -14474,6 +14484,19 @@ var init_api_client = __esm({
       }
       // The org-admin community routes (gh #5003, `wayai communities`): an owner or admin of the
       // community's org, on an interactive session only — a scoped token is refused with 403.
+      /**
+       * Link a contact to its customer record, a root record of one of the org's bases (#5083 RK2 A3).
+       * A browser sign-in only: the route refuses an API token.
+       */
+      async linkContactCustomer(orgId, contactId, body) {
+        const qs = new URLSearchParams({ organization_id: orgId });
+        return this.request("PUT", `/api/contact-book/contacts/${encodeURIComponent(contactId)}/customer?${qs}`, body);
+      }
+      /** Unlink a contact from its customer record in one base (owner decision 142). A browser sign-in only. */
+      async unlinkContactCustomer(orgId, contactId, baseId2) {
+        const qs = new URLSearchParams({ organization_id: orgId, base_id: baseId2 });
+        return this.request("DELETE", `/api/contact-book/contacts/${encodeURIComponent(contactId)}/customer?${qs}`);
+      }
       async listOrgCommunities(orgId) {
         return this.request("GET", `/api/communities/orgs/${encodeURIComponent(orgId)}`);
       }
@@ -17307,6 +17330,7 @@ var init_utils = __esm({
       "conversations",
       "alerts",
       "communities",
+      "contacts",
       "knowledge"
     ]);
     HELP_AND_VERSION = ["help", "--help", "-h", "--version", "-v"];
@@ -17314,6 +17338,7 @@ var init_utils = __esm({
       ["pull", "all"],
       ["push", "all"],
       ["communities", "all"],
+      ["contacts", "all"],
       ["knowledge", "all"],
       ["use", "selectors"],
       ["unbind", "selectors"],
@@ -21665,12 +21690,12 @@ function writeBaseFolder(folder, meta, config) {
   }
   return delta;
 }
-function markProductionMirror(folder, baseId) {
+function markProductionMirror(folder, baseId2) {
   const file = path21.join(folder, BASE_META_FILE);
   try {
     const body = readFileNoFollow(folder, file)?.toString("utf-8");
     if (body === void 0 || body.startsWith(MIRROR_MARKER_PREFIX)) return;
-    const banner = `${MIRROR_MARKER_PREFIX} "${baseId}". Edits are ignored; \`wayai push\` refuses it. Edit the linked preview instead.
+    const banner = `${MIRROR_MARKER_PREFIX} "${baseId2}". Edits are ignored; \`wayai push\` refuses it. Edit the linked preview instead.
 `;
     writeFileNoFollow(folder, file, Buffer.from(banner + body, "utf-8"));
   } catch {
@@ -21796,10 +21821,10 @@ function createPreview(client, originId, opts) {
     ...opts.analytics ? { analytics: opts.analytics } : {}
   });
 }
-function deleteEntity(client, baseId, kind, id) {
+function deleteEntity(client, baseId2, kind, id) {
   return client.request(
     "DELETE",
-    `/v1/${pathSegment(baseId, "base id")}/${ENTITY_DIRS[kind]}/${pathSegment(id, `${kind} id`)}`
+    `/v1/${pathSegment(baseId2, "base id")}/${ENTITY_DIRS[kind]}/${pathSegment(id, `${kind} id`)}`
   );
 }
 var init_api = __esm({
@@ -21998,40 +22023,40 @@ async function pullBase(gitRootOrNull, selector, args2) {
   const gitRoot = requireGitRoot(gitRootOrNull);
   const target = resolveBaseTarget(gitRoot, selector);
   const basesDir = resolveBasesDir(gitRoot);
-  const baseId = targetBaseId(target, selector);
-  if (!baseId) {
+  const baseId2 = targetBaseId(target, selector);
+  if (!baseId2) {
     throw expected(
       `Could not determine the base id for ${target.folder}. Pass the base id explicitly.`
     );
   }
   const client = await createDataClient();
   console.log("Fetching base configuration...");
-  const record = await getBaseRecord(client, baseId);
+  const record = await getBaseRecord(client, baseId2);
   if (record.environment === "production") {
-    const folder = await writeProductionMirror(client, basesDir, record.id ?? baseId, record);
+    const folder = await writeProductionMirror(client, basesDir, record.id ?? baseId2, record);
     console.log(`Production base mirrored (read-only) \u2192 ${folder}`);
     return;
   }
-  assertInScope("bases", baseId);
+  assertInScope("bases", baseId2);
   if (target.exists && !autoConfirm) {
     const ok = await confirm(
-      `Overwrite local files in ${path23.relative(gitRoot, target.folder)} with the server config for "${sanitizeTerminalText(baseId)}"?`
+      `Overwrite local files in ${path23.relative(gitRoot, target.folder)} with the server config for "${sanitizeTerminalText(baseId2)}"?`
     );
     if (!ok) {
       console.log("Cancelled.");
       return;
     }
   }
-  const config = await getConfig(client, baseId);
+  const config = await getConfig(client, baseId2);
   const isFirstPull = !target.exists;
-  const delta = writeBaseFolder(target.folder, metaFromRecord(record, baseId), config);
+  const delta = writeBaseFolder(target.folder, metaFromRecord(record, baseId2), config);
   console.log(`Base configuration written to ${target.folder}`);
   console.log(
     `  ${ENTITY_KINDS.map((kind) => `${(config[kind] ?? []).length} ${kind}`).join(", ")}`
   );
   if (!isFirstPull) printLocalFileChanges(delta);
   console.log("  Credential values are not written. Manage them with `wayai bases credentials`.");
-  seedScopeIfEmpty("bases", baseId);
+  seedScopeIfEmpty("bases", baseId2);
   if (record.origin_base_id) {
     await mirrorLinkedProduction(client, basesDir, record.origin_base_id);
   }
@@ -22101,25 +22126,25 @@ async function pushBase(gitRootOrNull, selector, args2) {
     return;
   }
   const client = await createDataClient();
-  let baseId = meta.base_id;
-  if (!baseId) {
+  let baseId2 = meta.base_id;
+  if (!baseId2) {
     const created = await createDeclaredPreview(client, target, parsed, autoConfirm);
     if (!created) return;
-    baseId = created;
+    baseId2 = created;
   } else {
-    const record = await getBaseRecord(client, baseId);
+    const record = await getBaseRecord(client, baseId2);
     if (record.environment && record.environment !== "preview") {
       throw expected(
-        `"${sanitizeTerminalText(baseId)}" is a ${sanitizeTerminalText(record.environment)} base. Push operates on previews \u2014 promote with \`wayai bases promote\`.`
+        `"${sanitizeTerminalText(baseId2)}" is a ${sanitizeTerminalText(record.environment)} base. Push operates on previews \u2014 promote with \`wayai bases promote\`.`
       );
     }
-    assertInScope("bases", baseId);
+    assertInScope("bases", baseId2);
   }
-  const diff = await diffConfig(client, baseId, config);
+  const diff = await diffConfig(client, baseId2, config);
   printLintWarnings(diff.warnings);
   if (isDiffEmpty(diff)) {
-    console.log(`No changes \u2014 preview "${sanitizeTerminalText(baseId)}" already matches your files.`);
-    if (!dryRun) seedScopeIfEmpty("bases", baseId);
+    console.log(`No changes \u2014 preview "${sanitizeTerminalText(baseId2)}" already matches your files.`);
+    if (!dryRun) seedScopeIfEmpty("bases", baseId2);
     return;
   }
   console.log(renderDiff(diff));
@@ -22129,13 +22154,13 @@ async function pushBase(gitRootOrNull, selector, args2) {
   }
   if (!autoConfirm) {
     const ok = await confirm(`
-Apply these changes to preview "${sanitizeTerminalText(baseId)}"?`);
+Apply these changes to preview "${sanitizeTerminalText(baseId2)}"?`);
     if (!ok) {
       console.log("Cancelled.");
       return;
     }
   }
-  const result = await applyConfig(client, baseId, config);
+  const result = await applyConfig(client, baseId2, config);
   const secretGroups = [
     ["trigger", result.new_trigger_secrets],
     ["inbound webhook", result.new_inbound_webhook_secrets]
@@ -22162,7 +22187,7 @@ ${RED}${removals.length} ${word} not in your files were left on the base. Re-run
 Delete ${removals.length} server ${word} not in your files? Record types cascade to their records.`
     )) {
       for (const removal of removals) {
-        await deleteEntity(client, baseId, removal.kind, removal.id);
+        await deleteEntity(client, baseId2, removal.kind, removal.id);
         console.log(`  - deleted ${removal.kind} ${sanitizeTerminalText(removal.id)}`);
       }
     } else {
@@ -22170,8 +22195,8 @@ Delete ${removals.length} server ${word} not in your files? Record types cascade
     }
   }
   console.log(`
-Pushed to preview "${sanitizeTerminalText(baseId)}".`);
-  seedScopeIfEmpty("bases", baseId);
+Pushed to preview "${sanitizeTerminalText(baseId2)}".`);
+  seedScopeIfEmpty("bases", baseId2);
 }
 var init_sync = __esm({
   "src/data/config-as-code/sync.ts"() {
@@ -27572,9 +27597,9 @@ async function conversationsCommand(args2) {
       if (result.partial || result.hubs_queried === 0) process.exit(1);
       return;
     }
-    for (const failure of result.errors) {
-      const where = failure.scope_kind === "hub" ? `hub ${sanitizeTerminalText(failure.hub_name || failure.hub_id || "")} (${failure.hub_id})` : `organization ${failure.organization_id}`;
-      console.error(`Could not read ${where}: ${sanitizeTerminalText(failure.error)}`);
+    for (const failure2 of result.errors) {
+      const where = failure2.scope_kind === "hub" ? `hub ${sanitizeTerminalText(failure2.hub_name || failure2.hub_id || "")} (${failure2.hub_id})` : `organization ${failure2.organization_id}`;
+      console.error(`Could not read ${where}: ${sanitizeTerminalText(failure2.error)}`);
     }
     if (result.hubs_queried === 0) {
       console.error(
@@ -33071,6 +33096,122 @@ These commands need a browser sign-in (\`wayai login\`). An API token
   }
 });
 
+// src/commands/contacts.ts
+var contacts_exports = {};
+__export(contacts_exports, {
+  contactsCommand: () => contactsCommand
+});
+import { parseArgs as parseArgs22 } from "util";
+function usageError2(message) {
+  return expected(`${message}
+
+${USAGE3}`);
+}
+function parse2(args2) {
+  try {
+    return parseArgs22({
+      args: args2,
+      options: {
+        org: { type: "string" },
+        base: { type: "string" },
+        record: { type: "string" },
+        json: { type: "boolean" }
+      },
+      allowPositionals: true,
+      strict: true
+    });
+  } catch (err) {
+    throw usageError2(err instanceof Error ? err.message : String(err));
+  }
+}
+function resolveOrgId2(flag) {
+  if (flag !== void 0) {
+    if (!UUID_RE3.test(flag)) throw expected(`Invalid --org ${JSON.stringify(flag)}: expected an organization id (a UUID).`);
+    return flag;
+  }
+  const bound = readRepoConfigUnlessBlocked()?.organization_id;
+  if (bound) return bound;
+  throw expected("No organization: pass --org <org_id>, or run this inside a workspace scoped with `wayai init`.");
+}
+function failure(err, accessToken) {
+  if (!(err instanceof ApiError)) return err;
+  if (err.status === 403 && identifyTokenType(accessToken) === "way_token") {
+    const override2 = envTokenOverride() ? " WAYAI_TOKEN is set in this shell and is sent instead of your sign-in: unset it first." : "";
+    return expected(
+      `A contact's customer record is linked from a browser sign-in only, and this login is an API token. Run \`wayai login\` (without --token).${override2}`
+    );
+  }
+  if (err.status >= 400 && err.status < 500) return expected(sanitizeTerminalText(extractApiMessage(err)));
+  return err;
+}
+async function contactsCommand(args2) {
+  if (wantsHelp(args2) || args2.length === 0) {
+    console.log(USAGE3);
+    return;
+  }
+  const { values, positionals } = parse2(args2);
+  const [sub, contactId, ...extra] = positionals;
+  if (!SUBCOMMANDS2.includes(sub)) throw usageError2(`Unknown subcommand ${JSON.stringify(sub)}.`);
+  if (contactId === void 0 || extra.length > 0) throw usageError2(`${sub} takes one <contact_id>.`);
+  if (!UUID_RE3.test(contactId)) throw usageError2(`Invalid <contact_id> ${JSON.stringify(contactId)}: expected a contact id (a UUID).`);
+  if (!values.base) throw usageError2(`${sub} needs --base <base_id>.`);
+  if (!isValidBaseId(values.base)) throw usageError2(`Invalid --base ${JSON.stringify(values.base)}: a base id is ${BASE_ID_RULE}.`);
+  if (sub === "link-customer" && !values.record) throw usageError2("link-customer needs --record <record_id>.");
+  if (sub === "unlink-customer" && values.record !== void 0) throw usageError2("--record applies only to link-customer.");
+  const orgId = resolveOrgId2(values.org);
+  const { config, accessToken } = await requireAuth();
+  const api = new ApiClient({ apiUrl: config.api_url, accessToken, onUnauthorized: () => getAccessToken(config) });
+  let customer;
+  try {
+    ({ customer } = sub === "link-customer" ? await api.linkContactCustomer(orgId, contactId, { base_id: values.base, record_id: values.record }) : await api.unlinkContactCustomer(orgId, contactId, values.base));
+  } catch (err) {
+    throw failure(err, accessToken);
+  }
+  if (values.json) {
+    console.log(JSON.stringify(customer, null, 2));
+    return;
+  }
+  const where = `base ${sanitizeTerminalText(customer.base_id)} (${sanitizeTerminalText(customer.record_type)})`;
+  console.log(sub === "link-customer" ? `Contact ${customer.contact_id} is linked to customer record ${sanitizeTerminalText(customer.record_id)} in ${where}.` : `Contact ${customer.contact_id} is unlinked from customer record ${sanitizeTerminalText(customer.record_id)} in ${where}; the record keeps the contact id under ${customer.external_source}.`);
+}
+var USAGE3, SUBCOMMANDS2;
+var init_contacts = __esm({
+  "src/commands/contacts.ts"() {
+    "use strict";
+    init_auth();
+    init_api_client();
+    init_errors2();
+    init_expected();
+    init_repo_config();
+    init_terminal_output();
+    init_token_store();
+    init_base_id();
+    init_utils();
+    USAGE3 = `
+wayai contacts \u2014 a contact's customer record in one of the organization's bases
+
+Usage:
+  wayai contacts link-customer <contact_id> --base <base_id> --record <record_id> [--org <org_id>] [--json]
+  wayai contacts unlink-customer <contact_id> --base <base_id> [--org <org_id>] [--json]
+
+link-customer    Make the record the contact's customer record: a conversation with the
+                 contact (its WhatsApp phone, Instagram id or app account) then serves that
+                 customer through a customer-scoped toolset. The record is one of the base's
+                 customer record type (x-customer-scope role root), holding no external key
+                 or the contact id under another source. A record keyed under another
+                 external_id is refused: re-keying it would orphan its owned records.
+unlink-customer  Unlink the contact's customer record in the base. The record keeps the
+                 contact id under the source wayai_contact_unlinked, so its owned records stay
+                 its own, and link-customer on the same record links it again.
+
+The organization is --org, else this repo's (wayai-ws/wayai.yaml). You must be an
+organization admin. These commands need a browser sign-in (\`wayai login\`): an API
+token (\`wayai login --token\`, or WAYAI_TOKEN) is refused.
+`.trim();
+    SUBCOMMANDS2 = ["link-customer", "unlink-customer"];
+  }
+});
+
 // ../../packages/core/dist/contracts/rekor-toolset.js
 var init_rekor_toolset = __esm({
   "../../packages/core/dist/contracts/rekor-toolset.js"() {
@@ -34040,14 +34181,14 @@ var init_plan = __esm({
 
 // src/knowledge/migrate.ts
 import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
-async function resolveBases(kb, baseId) {
-  const base = await kb.getBase(baseId);
-  if (!base || base.deleted) throw expected(`Base "${safe(baseId)}" not found in this organization.`);
+async function resolveBases(kb, baseId2) {
+  const base = await kb.getBase(baseId2);
+  if (!base || base.deleted) throw expected(`Base "${safe(baseId2)}" not found in this organization.`);
   if (base.environment === "preview") {
     const origin = base.origin_base_id ? await kb.getBase(base.origin_base_id) : null;
     if (!origin || origin.deleted || origin.environment !== "production") {
       throw expected(
-        `Base "${safe(baseId)}" is a preview with no production origin, so its file types can never be promoted. Name the production knowledge base, or a preview created from it.`
+        `Base "${safe(baseId2)}" is a preview with no production origin, so its file types can never be promoted. Name the production knowledge base, or a preview created from it.`
       );
     }
     return { production: origin.id, preview: base.id };
@@ -34060,7 +34201,7 @@ async function resolveBases(kb, baseId) {
   }
   if (previews.length !== 1) {
     throw expected(
-      previews.length === 0 ? `Base "${safe(baseId)}" has no preview to write its file types in. Create one with \`wayai bases create-preview ${safe(baseId)} --name <name>\`.` : `Base "${safe(baseId)}" has ${previews.length} previews (${previews.map(safe).join(", ")}). Pass the one to write its file types in as --base.`
+      previews.length === 0 ? `Base "${safe(baseId2)}" has no preview to write its file types in. Create one with \`wayai bases create-preview ${safe(baseId2)} --name <name>\`.` : `Base "${safe(baseId2)}" has ${previews.length} previews (${previews.map(safe).join(", ")}). Pass the one to write its file types in as --base.`
     );
   }
   return { production: base.id, preview: previews[0] };
@@ -34513,28 +34654,28 @@ __export(knowledge_exports, {
   knowledgeCommand: () => knowledgeCommand,
   parseKnowledgeArgs: () => parseKnowledgeArgs
 });
-import { parseArgs as parseArgs22 } from "util";
-function usageError2(message) {
+import { parseArgs as parseArgs23 } from "util";
+function usageError3(message) {
   return expected(`${message}
-${USAGE3}`);
+${USAGE4}`);
 }
 function readArgs(args2) {
   try {
-    return parseArgs22({ args: args2, options: OPTIONS, allowPositionals: true, strict: true });
+    return parseArgs23({ args: args2, options: OPTIONS, allowPositionals: true, strict: true });
   } catch (err) {
-    throw usageError2(err instanceof Error ? err.message : String(err));
+    throw usageError3(err instanceof Error ? err.message : String(err));
   }
 }
 function parseKnowledgeArgs(args2) {
   const { values, positionals } = readArgs(args2);
   const [verb, ...extra] = positionals;
-  if (verb !== "migrate") throw usageError2(verb === void 0 ? "No subcommand given." : `Unknown subcommand ${JSON.stringify(verb)}.`);
-  if (extra.length > 0) throw usageError2(`Unexpected argument ${JSON.stringify(extra[0])}.`);
-  if (!values.org) throw usageError2("--org <org_id> is required.");
-  if (!UUID_RE3.test(values.org)) throw usageError2(`Invalid --org ${JSON.stringify(values.org)}: expected an organization id (a UUID).`);
-  if (!values.base) throw usageError2("--base <knowledge base> is required.");
+  if (verb !== "migrate") throw usageError3(verb === void 0 ? "No subcommand given." : `Unknown subcommand ${JSON.stringify(verb)}.`);
+  if (extra.length > 0) throw usageError3(`Unexpected argument ${JSON.stringify(extra[0])}.`);
+  if (!values.org) throw usageError3("--org <org_id> is required.");
+  if (!UUID_RE3.test(values.org)) throw usageError3(`Invalid --org ${JSON.stringify(values.org)}: expected an organization id (a UUID).`);
+  if (!values.base) throw usageError3("--base <knowledge base> is required.");
   if (values.hub !== void 0 && !UUID_RE3.test(values.hub)) {
-    throw usageError2(`Invalid --hub ${JSON.stringify(values.hub)}: expected a hub id (a UUID).`);
+    throw usageError3(`Invalid --hub ${JSON.stringify(values.hub)}: expected a hub id (a UUID).`);
   }
   return {
     orgId: values.org,
@@ -34546,12 +34687,12 @@ function parseKnowledgeArgs(args2) {
 }
 async function knowledgeCommand(args2) {
   if (wantsHelp(args2) || args2.length === 0) {
-    console.log(USAGE3);
+    console.log(USAGE4);
     return;
   }
   const options = parseKnowledgeArgs(args2);
   if (!options.dryRun && !options.yes && !isInteractive()) {
-    throw usageError2("It asks before it writes; pass -y when not running in a terminal, or --dry-run.");
+    throw usageError3("It asks before it writes; pass -y when not running in a terminal, or --dry-run.");
   }
   const { config, accessToken } = await requireAuth();
   const api = new ApiClient({ apiUrl: config.api_url, accessToken, onUnauthorized: () => getAccessToken(config) });
@@ -34561,7 +34702,7 @@ async function knowledgeCommand(args2) {
     confirm
   });
 }
-var USAGE3, OPTIONS;
+var USAGE4, OPTIONS;
 var init_knowledge = __esm({
   "src/commands/knowledge.ts"() {
     "use strict";
@@ -34573,7 +34714,7 @@ var init_knowledge = __esm({
     init_helpers();
     init_migrate2();
     init_remote();
-    USAGE3 = `
+    USAGE4 = `
 wayai knowledge migrate \u2014 move knowledge resources into the organization's knowledge base
 
 Usage:
@@ -35244,8 +35385,8 @@ function parseScopedTargetFlags(flagArgs, usage3, opts = {}) {
   return { body: { scope: "hub", hub_id: hubId, dry_run: dryRun }, targetLabel: `hub ${hubId}`, dryRun, yes, jsonOutput };
 }
 async function runRepairTeamOrphans(flagArgs) {
-  const USAGE4 = "wayai admin hubs repair-team-orphans --all | --org <org_id> | --hub <hub_id> [--dry-run] [--yes] [--json]";
-  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(flagArgs, USAGE4);
+  const USAGE5 = "wayai admin hubs repair-team-orphans --all | --org <org_id> | --hub <hub_id> [--dry-run] [--yes] [--json]";
+  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(flagArgs, USAGE5);
   if (!dryRun && !yes && !jsonOutput) {
     console.log(`About to PURGE dangling team references in: ${targetLabel}.`);
     console.log("Memberships pointing at a deleted team are removed (HubDO + UserDO mirror); conversations pinned to one are unassigned.");
@@ -35291,7 +35432,7 @@ async function runRepairTeamOrphans(flagArgs) {
   }
 }
 async function runRepairBranchingOrphans(flagArgs) {
-  const USAGE4 = "wayai admin hubs repair-branching-orphans --all | --org <org_id> | --hub <hub_id> [--id <type>:<id> ...] [--dry-run] [--yes] [--json]";
+  const USAGE5 = "wayai admin hubs repair-branching-orphans --all | --org <org_id> | --hub <hub_id> [--id <type>:<id> ...] [--dry-run] [--yes] [--json]";
   const targets = [];
   const scopeArgs = [];
   for (let i = 0; i < flagArgs.length; i++) {
@@ -35309,10 +35450,10 @@ async function runRepairBranchingOrphans(flagArgs) {
     }
     targets.push({ entity_type: entityType, entity_id: entityId });
   }
-  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(scopeArgs, USAGE4);
+  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(scopeArgs, USAGE5);
   if (targets.length > 0 && body.scope !== "hub") {
     console.error("--id deletes rows of ONE production hub: combine it with --hub <hub_id>.");
-    console.error(USAGE4);
+    console.error(USAGE5);
     process.exit(1);
   }
   if (targets.length > 0 && !dryRun && !yes && !jsonOutput) {
@@ -35374,8 +35515,8 @@ async function runRepairBranchingOrphans(flagArgs) {
   }
 }
 async function runRepairLegacyOrgGrants(flagArgs) {
-  const USAGE4 = "wayai admin orgs repair-legacy-grants --all | --org <org_id> [--dry-run] [--yes] [--json]";
-  const scoped = parseScopedTargetFlags(flagArgs, USAGE4, {
+  const USAGE5 = "wayai admin orgs repair-legacy-grants --all | --org <org_id> [--dry-run] [--yes] [--json]";
+  const scoped = parseScopedTargetFlags(flagArgs, USAGE5, {
     scopes: ["all", "org"],
     allLabel: "ALL organizations (platform-wide)"
   });
@@ -35427,8 +35568,8 @@ async function runRepairLegacyOrgGrants(flagArgs) {
   }
 }
 async function runHarnessMassDestroy(flagArgs) {
-  const USAGE4 = "wayai admin harness mass-destroy --all | --org <org_id> | --hub <hub_id> [--dry-run] [--yes] [--json]";
-  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(flagArgs, USAGE4);
+  const USAGE5 = "wayai admin harness mass-destroy --all | --org <org_id> | --hub <hub_id> [--dry-run] [--yes] [--json]";
+  const { body, targetLabel, dryRun, yes, jsonOutput } = parseScopedTargetFlags(flagArgs, USAGE5);
   if (!dryRun && !yes && !jsonOutput) {
     console.log(`About to REAP every live harness session / token / slot in: ${targetLabel}.`);
     console.log("This destroys running harness sessions and revokes their tokens. Run with --dry-run first to see the blast radius.");
@@ -37722,8 +37863,8 @@ function buildBasesReportCommand() {
     if (opts.errorMessage) body.error_message = opts.errorMessage;
     if (opts.context) body.context = opts.context;
     if (opts.reporterEmail) body.reporter_email = opts.reporterEmail;
-    const baseId = opts.baseId ?? findBase(this) ?? process.env.WAYAI_BASE;
-    if (baseId) body.base_id = baseId;
+    const baseId2 = opts.baseId ?? findBase(this) ?? process.env.WAYAI_BASE;
+    if (baseId2) body.base_id = baseId2;
     if (opts.recordType) body.record_type = opts.recordType;
     if (opts.recordId) body.record_id = opts.recordId;
     if (opts.externalId) body.external_id = opts.externalId;
@@ -38567,28 +38708,28 @@ function buildBasesCommand() {
   bases.command("use <base>").description(
     "Deprecated alias of `wayai use bases/<id>` \u2014 scope this worktree to a base"
   ).action(async function(selector) {
-    const baseId = resolveBaseSelectorToId(findGitRoot(), selector);
+    const baseId2 = resolveBaseSelectorToId(findGitRoot(), selector);
     const previous = readScope().bases;
-    const changed = previous.length !== 1 || previous[0] !== baseId;
+    const changed = previous.length !== 1 || previous[0] !== baseId2;
     if (changed) {
       try {
-        setScopeAxis("bases", [baseId]);
+        setScopeAxis("bases", [baseId2]);
       } catch (err) {
         throw expected(err instanceof Error ? err.message : String(err));
       }
     }
     if (outputFormat(this) === "json") {
       printOutput(
-        { base_id: baseId, previous_base_id: previous[0] ?? null, changed },
+        { base_id: baseId2, previous_base_id: previous[0] ?? null, changed },
         "json"
       );
       return;
     }
     if (!changed) {
-      console.log(`Worktree already bound to base ${baseId}.`);
+      console.log(`Worktree already bound to base ${baseId2}.`);
     } else {
       console.log(
-        previous.length > 0 ? `Worktree rebound: ${previous.join(", ")} -> ${baseId}.` : `Worktree bound to base ${baseId}.`
+        previous.length > 0 ? `Worktree rebound: ${previous.join(", ")} -> ${baseId2}.` : `Worktree bound to base ${baseId2}.`
       );
     }
   });
@@ -41017,6 +41158,11 @@ async function main() {
       await communitiesCommand2(args);
       break;
     }
+    case "contacts": {
+      const { contactsCommand: contactsCommand2 } = await Promise.resolve().then(() => (init_contacts(), contacts_exports));
+      await contactsCommand2(args);
+      break;
+    }
     case "knowledge": {
       const { knowledgeCommand: knowledgeCommand2 } = await Promise.resolve().then(() => (init_knowledge(), knowledge_exports));
       await knowledgeCommand2(args);
@@ -41111,6 +41257,7 @@ Commands:
   sync-mcp           Re-discover an MCP connection's tools (refresh stale schemas)
   list               List organizations and hubs
   communities        An organization's communities: list, join link (get/rotate/off), stats, access list (list/add/remove) \u2014 \`wayai communities --help\`
+  contacts           Link a contact to its customer record in a base, or unlink it (browser sign-in only) \u2014 \`wayai contacts --help\`
   knowledge migrate  Move an organization's knowledge resources, then a hub's (--hub), into its knowledge base as file types and files \u2014 \`wayai knowledge --help\`
   report create      Report a platform bug (submits to the triage queue)
   report edit        Amend your own pending report (title/description/error/steps/context)