@wayai/cli 0.3.222 → 0.3.224

package/dist/index.js

@@ -488,6 +488,67 @@ var init_sentry = __esm({
   }
 });
 
+// ../../packages/core/dist/chunk-DHPUPI4Y.js
+function normalizeAuthType(raw) {
+  if (VALID_AUTH_TYPES.has(raw)) return raw;
+  return LEGACY_AUTH_TYPE_MAP[raw] ?? raw;
+}
+var AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, PILOT_TRACK_ROLES, COPILOT_TRACK_ROLES, CUSTOMER_FACING_AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, SKILL_INSTALL_COMMAND;
+var init_chunk_DHPUPI4Y = __esm({
+  "../../packages/core/dist/chunk-DHPUPI4Y.js"() {
+    "use strict";
+    AUTH_TYPE = {
+      OAUTH: "oauth",
+      API_KEY: "api_key",
+      BASIC_AUTH: "basic_auth",
+      BEARER: "bearer",
+      NONE: "none"
+    };
+    ORG_CREDENTIAL_AUTH_TYPES = [
+      AUTH_TYPE.API_KEY,
+      AUTH_TYPE.BEARER,
+      AUTH_TYPE.BASIC_AUTH
+    ];
+    AUTH_TYPE_DISPLAY = {
+      [AUTH_TYPE.OAUTH]: "OAuth",
+      [AUTH_TYPE.API_KEY]: "API Key",
+      [AUTH_TYPE.BASIC_AUTH]: "Basic Auth",
+      [AUTH_TYPE.BEARER]: "Bearer Token",
+      [AUTH_TYPE.NONE]: "No Authentication"
+    };
+    LEGACY_AUTH_TYPE_MAP = {
+      "OAuth": AUTH_TYPE.OAUTH,
+      "API Key": AUTH_TYPE.API_KEY,
+      "Basic Auth": AUTH_TYPE.BASIC_AUTH,
+      "Bearer Token": AUTH_TYPE.BEARER,
+      "No authentication": AUTH_TYPE.NONE,
+      // Also handle the old DISPLAY_TO_CODE bug where 'basic' was used instead of 'basic_auth'
+      "basic": AUTH_TYPE.BASIC_AUTH
+    };
+    VALID_AUTH_TYPES = new Set(Object.values(AUTH_TYPE));
+    AGENT_ROLES = [
+      "pilot",
+      "copilot",
+      "pilot_specialist",
+      "copilot_specialist",
+      "pilot_advisor",
+      "copilot_advisor",
+      "monitor",
+      "conversation_evaluator",
+      "message_evaluator",
+      "summarizer",
+      "consultant",
+      "pilot_voice"
+    ];
+    PILOT_TRACK_ROLES = ["pilot", "pilot_specialist"];
+    COPILOT_TRACK_ROLES = ["copilot", "copilot_specialist"];
+    CUSTOMER_FACING_AGENT_ROLES = [...PILOT_TRACK_ROLES, "pilot_advisor"];
+    SAFE_USER_ID_REGEX = /^[A-Za-z0-9_-]{1,64}$/;
+    SUPPORTED_LOCALES = ["en", "pt", "es"];
+    SKILL_INSTALL_COMMAND = "mkdir -p .claude && npx skills add wayai-pro/wayai-skill -y";
+  }
+});
+
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js
 var util, objectUtil, ZodParsedType, getParsedType;
 var init_util = __esm({
@@ -4604,6 +4665,146 @@ var init_zod = __esm({
   }
 });
 
+// ../../packages/core/dist/chunk-SXDX4GHS.js
+var orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody;
+var init_chunk_SXDX4GHS = __esm({
+  "../../packages/core/dist/chunk-SXDX4GHS.js"() {
+    "use strict";
+    init_chunk_DHPUPI4Y();
+    init_zod();
+    orgCredentialIdParam = external_exports.object({
+      id: external_exports.string().uuid()
+    });
+    listOrgCredentialsQuery = external_exports.object({
+      organization_id: external_exports.string().uuid(),
+      hub_id: external_exports.string().uuid().optional()
+    });
+    createOrgCredentialBody = external_exports.object({
+      organization_id: external_exports.string().uuid(),
+      credential_display_name: external_exports.string().min(1).max(255),
+      credential_description: external_exports.string().max(1e3).nullish(),
+      authentication_type: external_exports.enum(["api_key", "bearer", "basic_auth"]).or(
+        external_exports.enum(["API Key", "Bearer Token", "Basic Auth"]).transform((v) => normalizeAuthType(v))
+      ),
+      api_key: external_exports.string().optional(),
+      access_token: external_exports.string().optional(),
+      username: external_exports.string().optional(),
+      password: external_exports.string().optional(),
+      tags: external_exports.array(external_exports.string().uuid()).optional(),
+      environment: external_exports.enum(["preview", "production", "all"]).optional()
+    });
+    updateOrgCredentialBody = external_exports.object({
+      credential_display_name: external_exports.string().min(1).max(255).optional(),
+      credential_description: external_exports.string().max(1e3).nullish(),
+      api_key: external_exports.string().optional(),
+      access_token: external_exports.string().optional(),
+      username: external_exports.string().optional(),
+      password: external_exports.string().optional(),
+      tags: external_exports.array(external_exports.string().uuid()).optional(),
+      environment: external_exports.enum(["preview", "production", "all"]).optional()
+    });
+  }
+});
+
+// ../../packages/core/dist/chunk-FK6HBXM7.js
+var orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody;
+var init_chunk_FK6HBXM7 = __esm({
+  "../../packages/core/dist/chunk-FK6HBXM7.js"() {
+    "use strict";
+    init_zod();
+    orgResourceIdParam = external_exports.object({
+      id: external_exports.string().uuid()
+    });
+    orgResourceFileIdParam = external_exports.object({
+      file_id: external_exports.string().uuid()
+    });
+    orgResourceFolderIdParam = external_exports.object({
+      folder_id: external_exports.string().uuid()
+    });
+    hubOrgResourceParam = external_exports.object({
+      id: external_exports.string().uuid(),
+      org_resource_id: external_exports.string().uuid()
+    });
+    listOrgResourcesQuery = external_exports.object({
+      organization_id: external_exports.string().uuid(),
+      hub_id: external_exports.string().uuid().optional()
+    });
+    orgIdQuery = external_exports.object({
+      organization_id: external_exports.string().uuid()
+    });
+    createOrgResourceBody = external_exports.object({
+      organization_id: external_exports.string().uuid(),
+      resource_name: external_exports.string().min(1).max(255),
+      resource_description: external_exports.string().max(1e3).nullish(),
+      resource_type: external_exports.enum(["knowledge", "skill"]).default("knowledge"),
+      // Skill-only fields. Required for `resource_type = 'skill'` (validated in
+      // the route layer since cross-field refinement complicates the inferred
+      // input type for callers). Ignored for `knowledge`.
+      skill_name: external_exports.string().min(1).max(255).nullish(),
+      skill_version: external_exports.string().max(50).nullish(),
+      folder_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
+      file_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
+      enabled: external_exports.boolean().optional(),
+      tags: external_exports.array(external_exports.string().uuid()).optional(),
+      environment: external_exports.enum(["preview", "production", "all"]).optional()
+    });
+    updateOrgResourceBody = external_exports.object({
+      resource_name: external_exports.string().min(1).max(255).optional(),
+      resource_description: external_exports.string().max(1e3).nullish(),
+      skill_name: external_exports.string().min(1).max(255).nullish(),
+      skill_version: external_exports.string().max(50).nullish(),
+      folder_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
+      file_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
+      enabled: external_exports.boolean().optional(),
+      tags: external_exports.array(external_exports.string().uuid()).optional(),
+      environment: external_exports.enum(["preview", "production", "all"]).optional()
+    });
+    createOrgResourceFolderBody = external_exports.object({
+      org_resource_id: external_exports.string().uuid(),
+      folder_name: external_exports.string().min(1).max(255),
+      folder_description: external_exports.string().max(1e3).nullish(),
+      parent_folder_id: external_exports.string().uuid().nullish(),
+      order_index: external_exports.number().int().nonnegative().optional(),
+      enabled: external_exports.boolean().optional(),
+      metadata: external_exports.record(external_exports.unknown()).optional()
+    });
+    updateOrgResourceFolderBody = external_exports.object({
+      folder_name: external_exports.string().min(1).max(255).optional(),
+      folder_description: external_exports.string().max(1e3).nullish(),
+      parent_folder_id: external_exports.string().uuid().nullish(),
+      order_index: external_exports.number().int().nonnegative().optional(),
+      enabled: external_exports.boolean().optional(),
+      metadata: external_exports.record(external_exports.unknown()).optional()
+    });
+    uploadOrgResourceFileBody = external_exports.object({
+      org_resource_id: external_exports.string().uuid(),
+      folder_id: external_exports.string().uuid().nullish(),
+      file_name: external_exports.string().min(1).max(255),
+      file_data: external_exports.string(),
+      // base64
+      mime_type: external_exports.string().optional(),
+      file_size: external_exports.number().int().nonnegative().optional(),
+      resource_file_tags: external_exports.array(external_exports.string()).optional(),
+      metadata: external_exports.record(external_exports.unknown()).optional()
+    });
+    updateOrgResourceFileBody = external_exports.object({
+      resource_file_title: external_exports.string().min(1).max(255).optional(),
+      folder_id: external_exports.string().uuid().nullish(),
+      order_index: external_exports.number().int().nonnegative().optional(),
+      enabled: external_exports.boolean().optional(),
+      resource_file_tags: external_exports.array(external_exports.string()).optional(),
+      metadata: external_exports.record(external_exports.unknown()).optional()
+    });
+    uploadOrgSkillZipBody = external_exports.object({
+      zip_data: external_exports.string().min(1),
+      replace_existing: external_exports.boolean().optional()
+    });
+    linkOrgResourceBody = external_exports.object({
+      org_resource_id: external_exports.string().uuid()
+    });
+  }
+});
+
 // ../../packages/core/dist/chunk-VXEAR36B.js
 var orgTagIdParam, listOrgTagsQuery, ORG_TAG_NAME_REGEX, ORG_TAG_NAME_MAX_LENGTH, createOrgTagBody, updateOrgTagBody;
 var init_chunk_VXEAR36B = __esm({
@@ -4912,10 +5113,10 @@ var init_chunk_Q7KIQHAZ = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-2U4BTOR7.js
+// ../../packages/core/dist/chunk-QUGQIL47.js
 var connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery;
-var init_chunk_2U4BTOR7 = __esm({
-  "../../packages/core/dist/chunk-2U4BTOR7.js"() {
+var init_chunk_QUGQIL47 = __esm({
+  "../../packages/core/dist/chunk-QUGQIL47.js"() {
     "use strict";
     init_chunk_HZ6CADSY();
     init_zod();
@@ -4959,8 +5160,10 @@ var init_chunk_2U4BTOR7 = __esm({
       webhook_signing_secret: external_exports.string().optional()
     }).strict().superRefine((data, ctx) => {
       const hasOrgLink = !!data.organization_credential_id || !!data.organization_credential_token_id;
-      const hasDirect = PRODUCTION_DIRECT_FIELDS.some((f) => data[f] != null);
-      if (hasOrgLink && hasDirect) {
+      const sets = (f) => data[f] != null && data[f] !== `__USE_EXISTING_${f.toUpperCase()}__`;
+      const hasDirect = PRODUCTION_DIRECT_FIELDS.some(sets);
+      const hasDirectBesideLink = PRODUCTION_DIRECT_FIELDS.some((f) => f !== "webhook_secret_token" && sets(f));
+      if (hasOrgLink && hasDirectBesideLink) {
         ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: "Provide either an organization credential link or direct credential fields, not both" });
       }
       if (!hasOrgLink && !hasDirect) {
@@ -5082,207 +5285,6 @@ var init_chunk_GK27ENTT = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-DHPUPI4Y.js
-function normalizeAuthType(raw) {
-  if (VALID_AUTH_TYPES.has(raw)) return raw;
-  return LEGACY_AUTH_TYPE_MAP[raw] ?? raw;
-}
-var AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, PILOT_TRACK_ROLES, COPILOT_TRACK_ROLES, CUSTOMER_FACING_AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, SKILL_INSTALL_COMMAND;
-var init_chunk_DHPUPI4Y = __esm({
-  "../../packages/core/dist/chunk-DHPUPI4Y.js"() {
-    "use strict";
-    AUTH_TYPE = {
-      OAUTH: "oauth",
-      API_KEY: "api_key",
-      BASIC_AUTH: "basic_auth",
-      BEARER: "bearer",
-      NONE: "none"
-    };
-    ORG_CREDENTIAL_AUTH_TYPES = [
-      AUTH_TYPE.API_KEY,
-      AUTH_TYPE.BEARER,
-      AUTH_TYPE.BASIC_AUTH
-    ];
-    AUTH_TYPE_DISPLAY = {
-      [AUTH_TYPE.OAUTH]: "OAuth",
-      [AUTH_TYPE.API_KEY]: "API Key",
-      [AUTH_TYPE.BASIC_AUTH]: "Basic Auth",
-      [AUTH_TYPE.BEARER]: "Bearer Token",
-      [AUTH_TYPE.NONE]: "No Authentication"
-    };
-    LEGACY_AUTH_TYPE_MAP = {
-      "OAuth": AUTH_TYPE.OAUTH,
-      "API Key": AUTH_TYPE.API_KEY,
-      "Basic Auth": AUTH_TYPE.BASIC_AUTH,
-      "Bearer Token": AUTH_TYPE.BEARER,
-      "No authentication": AUTH_TYPE.NONE,
-      // Also handle the old DISPLAY_TO_CODE bug where 'basic' was used instead of 'basic_auth'
-      "basic": AUTH_TYPE.BASIC_AUTH
-    };
-    VALID_AUTH_TYPES = new Set(Object.values(AUTH_TYPE));
-    AGENT_ROLES = [
-      "pilot",
-      "copilot",
-      "pilot_specialist",
-      "copilot_specialist",
-      "pilot_advisor",
-      "copilot_advisor",
-      "monitor",
-      "conversation_evaluator",
-      "message_evaluator",
-      "summarizer",
-      "consultant",
-      "pilot_voice"
-    ];
-    PILOT_TRACK_ROLES = ["pilot", "pilot_specialist"];
-    COPILOT_TRACK_ROLES = ["copilot", "copilot_specialist"];
-    CUSTOMER_FACING_AGENT_ROLES = [...PILOT_TRACK_ROLES, "pilot_advisor"];
-    SAFE_USER_ID_REGEX = /^[A-Za-z0-9_-]{1,64}$/;
-    SUPPORTED_LOCALES = ["en", "pt", "es"];
-    SKILL_INSTALL_COMMAND = "mkdir -p .claude && npx skills add wayai-pro/wayai-skill -y";
-  }
-});
-
-// ../../packages/core/dist/chunk-SXDX4GHS.js
-var orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody;
-var init_chunk_SXDX4GHS = __esm({
-  "../../packages/core/dist/chunk-SXDX4GHS.js"() {
-    "use strict";
-    init_chunk_DHPUPI4Y();
-    init_zod();
-    orgCredentialIdParam = external_exports.object({
-      id: external_exports.string().uuid()
-    });
-    listOrgCredentialsQuery = external_exports.object({
-      organization_id: external_exports.string().uuid(),
-      hub_id: external_exports.string().uuid().optional()
-    });
-    createOrgCredentialBody = external_exports.object({
-      organization_id: external_exports.string().uuid(),
-      credential_display_name: external_exports.string().min(1).max(255),
-      credential_description: external_exports.string().max(1e3).nullish(),
-      authentication_type: external_exports.enum(["api_key", "bearer", "basic_auth"]).or(
-        external_exports.enum(["API Key", "Bearer Token", "Basic Auth"]).transform((v) => normalizeAuthType(v))
-      ),
-      api_key: external_exports.string().optional(),
-      access_token: external_exports.string().optional(),
-      username: external_exports.string().optional(),
-      password: external_exports.string().optional(),
-      tags: external_exports.array(external_exports.string().uuid()).optional(),
-      environment: external_exports.enum(["preview", "production", "all"]).optional()
-    });
-    updateOrgCredentialBody = external_exports.object({
-      credential_display_name: external_exports.string().min(1).max(255).optional(),
-      credential_description: external_exports.string().max(1e3).nullish(),
-      api_key: external_exports.string().optional(),
-      access_token: external_exports.string().optional(),
-      username: external_exports.string().optional(),
-      password: external_exports.string().optional(),
-      tags: external_exports.array(external_exports.string().uuid()).optional(),
-      environment: external_exports.enum(["preview", "production", "all"]).optional()
-    });
-  }
-});
-
-// ../../packages/core/dist/chunk-FK6HBXM7.js
-var orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody;
-var init_chunk_FK6HBXM7 = __esm({
-  "../../packages/core/dist/chunk-FK6HBXM7.js"() {
-    "use strict";
-    init_zod();
-    orgResourceIdParam = external_exports.object({
-      id: external_exports.string().uuid()
-    });
-    orgResourceFileIdParam = external_exports.object({
-      file_id: external_exports.string().uuid()
-    });
-    orgResourceFolderIdParam = external_exports.object({
-      folder_id: external_exports.string().uuid()
-    });
-    hubOrgResourceParam = external_exports.object({
-      id: external_exports.string().uuid(),
-      org_resource_id: external_exports.string().uuid()
-    });
-    listOrgResourcesQuery = external_exports.object({
-      organization_id: external_exports.string().uuid(),
-      hub_id: external_exports.string().uuid().optional()
-    });
-    orgIdQuery = external_exports.object({
-      organization_id: external_exports.string().uuid()
-    });
-    createOrgResourceBody = external_exports.object({
-      organization_id: external_exports.string().uuid(),
-      resource_name: external_exports.string().min(1).max(255),
-      resource_description: external_exports.string().max(1e3).nullish(),
-      resource_type: external_exports.enum(["knowledge", "skill"]).default("knowledge"),
-      // Skill-only fields. Required for `resource_type = 'skill'` (validated in
-      // the route layer since cross-field refinement complicates the inferred
-      // input type for callers). Ignored for `knowledge`.
-      skill_name: external_exports.string().min(1).max(255).nullish(),
-      skill_version: external_exports.string().max(50).nullish(),
-      folder_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
-      file_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
-      enabled: external_exports.boolean().optional(),
-      tags: external_exports.array(external_exports.string().uuid()).optional(),
-      environment: external_exports.enum(["preview", "production", "all"]).optional()
-    });
-    updateOrgResourceBody = external_exports.object({
-      resource_name: external_exports.string().min(1).max(255).optional(),
-      resource_description: external_exports.string().max(1e3).nullish(),
-      skill_name: external_exports.string().min(1).max(255).nullish(),
-      skill_version: external_exports.string().max(50).nullish(),
-      folder_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
-      file_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
-      enabled: external_exports.boolean().optional(),
-      tags: external_exports.array(external_exports.string().uuid()).optional(),
-      environment: external_exports.enum(["preview", "production", "all"]).optional()
-    });
-    createOrgResourceFolderBody = external_exports.object({
-      org_resource_id: external_exports.string().uuid(),
-      folder_name: external_exports.string().min(1).max(255),
-      folder_description: external_exports.string().max(1e3).nullish(),
-      parent_folder_id: external_exports.string().uuid().nullish(),
-      order_index: external_exports.number().int().nonnegative().optional(),
-      enabled: external_exports.boolean().optional(),
-      metadata: external_exports.record(external_exports.unknown()).optional()
-    });
-    updateOrgResourceFolderBody = external_exports.object({
-      folder_name: external_exports.string().min(1).max(255).optional(),
-      folder_description: external_exports.string().max(1e3).nullish(),
-      parent_folder_id: external_exports.string().uuid().nullish(),
-      order_index: external_exports.number().int().nonnegative().optional(),
-      enabled: external_exports.boolean().optional(),
-      metadata: external_exports.record(external_exports.unknown()).optional()
-    });
-    uploadOrgResourceFileBody = external_exports.object({
-      org_resource_id: external_exports.string().uuid(),
-      folder_id: external_exports.string().uuid().nullish(),
-      file_name: external_exports.string().min(1).max(255),
-      file_data: external_exports.string(),
-      // base64
-      mime_type: external_exports.string().optional(),
-      file_size: external_exports.number().int().nonnegative().optional(),
-      resource_file_tags: external_exports.array(external_exports.string()).optional(),
-      metadata: external_exports.record(external_exports.unknown()).optional()
-    });
-    updateOrgResourceFileBody = external_exports.object({
-      resource_file_title: external_exports.string().min(1).max(255).optional(),
-      folder_id: external_exports.string().uuid().nullish(),
-      order_index: external_exports.number().int().nonnegative().optional(),
-      enabled: external_exports.boolean().optional(),
-      resource_file_tags: external_exports.array(external_exports.string()).optional(),
-      metadata: external_exports.record(external_exports.unknown()).optional()
-    });
-    uploadOrgSkillZipBody = external_exports.object({
-      zip_data: external_exports.string().min(1),
-      replace_existing: external_exports.boolean().optional()
-    });
-    linkOrgResourceBody = external_exports.object({
-      org_resource_id: external_exports.string().uuid()
-    });
-  }
-});
-
 // ../../packages/core/dist/chunk-GPM7PE44.js
 var bootstrapQuery;
 var init_chunk_GPM7PE44 = __esm({
@@ -5517,6 +5519,34 @@ var init_chunk_ZVXO3XL6 = __esm({
   }
 });
 
+// ../../packages/core/dist/chunk-ZXK6N2HN.js
+var PEOPLE_MODERATION_NOTE_MAX_LENGTH, ADMIN_PEOPLE_REPORTS_PAGE_MAX, ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT, PEOPLE_SUSPENDED_REASON, peopleModerationActionSchema, moderationNoteSchema, adminPeopleReportListQuery, adminPeopleReportIdParam, adminPeopleMessageRemovalBody, adminPeopleSuspendBody, adminPeopleNoteBody;
+var init_chunk_ZXK6N2HN = __esm({
+  "../../packages/core/dist/chunk-ZXK6N2HN.js"() {
+    "use strict";
+    init_chunk_ZVXO3XL6();
+    init_chunk_HZ6CADSY();
+    init_zod();
+    PEOPLE_MODERATION_NOTE_MAX_LENGTH = 500;
+    ADMIN_PEOPLE_REPORTS_PAGE_MAX = 100;
+    ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT = 50;
+    PEOPLE_SUSPENDED_REASON = "suspended";
+    peopleModerationActionSchema = external_exports.enum(["remove_message", "suspend", "unsuspend", "dismiss"]);
+    moderationNoteSchema = optionalTrimmedText(PEOPLE_MODERATION_NOTE_MAX_LENGTH);
+    adminPeopleReportListQuery = external_exports.object({
+      pending: external_exports.enum(["true", "false"]).optional().transform((value) => value === "true"),
+      /** Lower bound on `created_at`. */
+      since: timestampSchema.optional(),
+      limit: external_exports.coerce.number().int().min(1).max(ADMIN_PEOPLE_REPORTS_PAGE_MAX).default(ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT),
+      offset: external_exports.coerce.number().int().min(0).default(0)
+    });
+    adminPeopleReportIdParam = external_exports.object({ reportId: uuidSchema });
+    adminPeopleMessageRemovalBody = external_exports.object({ report_id: uuidSchema, message_id: uuidSchema.optional(), note: moderationNoteSchema }).strict();
+    adminPeopleSuspendBody = external_exports.object({ report_id: uuidSchema.optional(), note: moderationNoteSchema }).strict();
+    adminPeopleNoteBody = external_exports.object({ note: moderationNoteSchema }).strict();
+  }
+});
+
 // ../../packages/core/dist/chunk-Y7CFCYX4.js
 var PEOPLE_REPORT_DETAILS_MAX_LENGTH, peopleReportReasonSchema, reportDetailsSchema, reportFields, peopleReportBody;
 var init_chunk_Y7CFCYX4 = __esm({
@@ -5572,10 +5602,10 @@ var init_chunk_5DGHIY7L = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-F3JHI4Y4.js
-var DATA_PROXY_MOUNT, DATA_PROXY_PREFIX, BASE_DESTRUCTION_MOUNT, BASE_DESTRUCTION_PREFIX, BASE_DESTRUCTION_CONFIRM_PATH, COMMUNITY_EMAIL_UNSUBSCRIBE_PATH, CONTACT_BOOK_EMAIL_UNSUBSCRIBE_PATH, AUTOMATION_WEBHOOK_MOUNT;
-var init_chunk_F3JHI4Y4 = __esm({
-  "../../packages/core/dist/chunk-F3JHI4Y4.js"() {
+// ../../packages/core/dist/chunk-5XEJSR22.js
+var DATA_PROXY_MOUNT, DATA_PROXY_PREFIX, BASE_DESTRUCTION_MOUNT, BASE_DESTRUCTION_PREFIX, BASE_DESTRUCTION_CONFIRM_PATH, COMMUNITY_EMAIL_UNSUBSCRIBE_PATH, CONTACT_BOOK_EMAIL_UNSUBSCRIBE_PATH, AUTOMATION_WEBHOOK_MOUNT, MANAGED_AGENTS_WEBHOOK_MOUNT;
+var init_chunk_5XEJSR22 = __esm({
+  "../../packages/core/dist/chunk-5XEJSR22.js"() {
     "use strict";
     DATA_PROXY_MOUNT = "/data";
     DATA_PROXY_PREFIX = `/api${DATA_PROXY_MOUNT}`;
@@ -5585,10 +5615,11 @@ var init_chunk_F3JHI4Y4 = __esm({
     COMMUNITY_EMAIL_UNSUBSCRIBE_PATH = "/api/communities/email-unsubscribe";
     CONTACT_BOOK_EMAIL_UNSUBSCRIBE_PATH = "/api/contact-book/email-unsubscribe";
     AUTOMATION_WEBHOOK_MOUNT = "/webhooks/automations";
+    MANAGED_AGENTS_WEBHOOK_MOUNT = "/webhooks/managed-agents";
   }
 });
 
-// ../../packages/core/dist/chunk-IEWJ5MZH.js
+// ../../packages/core/dist/chunk-ISFDR7SP.js
 function matchPath(pattern, path42) {
   const normalizedPath = path42.replace(/\/$/, "");
   if (pattern.endsWith("/*")) {
@@ -5616,10 +5647,10 @@ function getEndpointConfig(path42) {
   return { tier: "STANDARD" };
 }
 var ENDPOINT_CONFIGS, EXCLUDED_PATHS;
-var init_chunk_IEWJ5MZH = __esm({
-  "../../packages/core/dist/chunk-IEWJ5MZH.js"() {
+var init_chunk_ISFDR7SP = __esm({
+  "../../packages/core/dist/chunk-ISFDR7SP.js"() {
     "use strict";
-    init_chunk_F3JHI4Y4();
+    init_chunk_5XEJSR22();
     ENDPOINT_CONFIGS = {
       // OAuth callbacks - strict, fail-closed (prevent brute force)
       "/oauth/callback/*": { tier: "STRICT", failClosed: true },
@@ -5774,6 +5805,8 @@ var init_chunk_IEWJ5MZH = __esm({
       // platform's egress addresses carry many tenants' deliveries. The per-automation budget is
       // `AUTOMATION_WEBHOOK_PER_AUTOMATION_LIMIT`, counted after the delivery is verified.
       [`${AUTOMATION_WEBHOOK_MOUNT}/*`]: { tier: "HIGH" },
+      // Managed Agents session events (#5083 Phase 4): HIGH, one vendor address carries many tenants'.
+      [`${MANAGED_AGENTS_WEBHOOK_MOUNT}/*`]: { tier: "HIGH" },
       // Reports (CLI → platform_report triage queue). One per-user budget covers intake
       // (POST), the content edit (PATCH /:id), the reporter read-back (GET, GET /:id), and the
       // verification loop (POST /:id/accept, /:id/contest). The limiter is path-based, so a
@@ -6082,7 +6115,7 @@ var init_chunk_IEWJ5MZH = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-CGOLULK2.js
+// ../../packages/core/dist/chunk-FNNHGL7K.js
 function fileSnapshotChanged(run) {
   return run.written + run.removed > 0;
 }
@@ -6123,11 +6156,11 @@ async function sendWithRetry(opts, cursor) {
   }
 }
 var rekorFileSnapshotAnswerSchema, FILE_SNAPSHOT_MAX_PAGES, FILE_SNAPSHOT_CONFLICT_ATTEMPTS, FILE_SNAPSHOT_PAGE_SPACING_MS, FILE_SNAPSHOT_CONFLICT_STATUS;
-var init_chunk_CGOLULK2 = __esm({
-  "../../packages/core/dist/chunk-CGOLULK2.js"() {
+var init_chunk_FNNHGL7K = __esm({
+  "../../packages/core/dist/chunk-FNNHGL7K.js"() {
     "use strict";
-    init_chunk_IEWJ5MZH();
-    init_chunk_F3JHI4Y4();
+    init_chunk_ISFDR7SP();
+    init_chunk_5XEJSR22();
     init_zod();
     rekorFileSnapshotAnswerSchema = external_exports.object({
       data: external_exports.object({
@@ -6193,13 +6226,19 @@ var init_chunk_BEOHBREG = __esm({
 });
 
 // ../../packages/core/dist/chunk-4MRBBR5L.js
-var TOOLSET_SLUG_PATTERN, REKOR_STRUCTURAL_ID_PATTERN, baseEnvironmentSchema, TOOLSET_FILE_OPERATIONS, toolsetFileToolSchema, toolsetSurfaceSchema, toolsetConnectionBindingSchema, rekorToolsetToolsSchema, rekorBoundAttestation, rekorResolvedToolsetSchema, resolvedFileToolSchema, rekorToolsetFileSchema, rekorToolsetFileListSchema, rekorToolsetFileGetSchema, rekorToolsetFilePutSchema, TOOLSET_CUSTOMER_FACING_REFUSAL_MARK, TOOLSET_CUSTOMER_FACING_REFUSAL;
+function toolsetFileToolName(entry, op) {
+  const names = entry.names;
+  const stated = names?.[op];
+  return stated !== void 0 && stated !== null ? String(stated) : `${op}_${entry.name ?? entry.file_type}`;
+}
+var TOOLSET_SLUG_SETTING, TOOLSET_SLUG_PATTERN, REKOR_STRUCTURAL_ID_PATTERN, baseEnvironmentSchema, TOOLSET_FILE_OPERATIONS, toolsetFileToolSchema, toolsetSurfaceSchema, toolsetConnectionBindingSchema, rekorToolsetToolsSchema, rekorBoundAttestation, rekorResolvedToolsetSchema, resolvedFileToolSchema, rekorToolsetFileSchema, rekorToolsetFileListSchema, rekorToolsetFileGetSchema, rekorToolsetFilePutSchema, TOOLSET_CUSTOMER_FACING_REFUSAL_MARK, TOOLSET_CUSTOMER_FACING_REFUSAL;
 var init_chunk_4MRBBR5L = __esm({
   "../../packages/core/dist/chunk-4MRBBR5L.js"() {
     "use strict";
     init_chunk_BEOHBREG();
     init_chunk_DHPUPI4Y();
     init_zod();
+    TOOLSET_SLUG_SETTING = "toolset";
     TOOLSET_SLUG_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
     REKOR_STRUCTURAL_ID_PATTERN = TOOLSET_SLUG_PATTERN;
     baseEnvironmentSchema = external_exports.enum(["preview", "production"]);
@@ -6525,6 +6564,20 @@ var init_chunk_YUZFHVB2 = __esm({
   }
 });
 
+// ../../packages/core/dist/chunk-I3O2RACG.js
+var managedAgentsWebhookParams, MANAGED_AGENTS_WEBHOOK_BODY_MAX_BYTES;
+var init_chunk_I3O2RACG = __esm({
+  "../../packages/core/dist/chunk-I3O2RACG.js"() {
+    "use strict";
+    init_zod();
+    managedAgentsWebhookParams = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      connection_id: external_exports.string().uuid()
+    });
+    MANAGED_AGENTS_WEBHOOK_BODY_MAX_BYTES = 16 * 1024;
+  }
+});
+
 // ../../packages/core/dist/chunk-34LE6P7E.js
 var templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody;
 var init_chunk_34LE6P7E = __esm({
@@ -6600,34 +6653,6 @@ var init_chunk_FPSDNS2E = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-ZXK6N2HN.js
-var PEOPLE_MODERATION_NOTE_MAX_LENGTH, ADMIN_PEOPLE_REPORTS_PAGE_MAX, ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT, PEOPLE_SUSPENDED_REASON, peopleModerationActionSchema, moderationNoteSchema, adminPeopleReportListQuery, adminPeopleReportIdParam, adminPeopleMessageRemovalBody, adminPeopleSuspendBody, adminPeopleNoteBody;
-var init_chunk_ZXK6N2HN = __esm({
-  "../../packages/core/dist/chunk-ZXK6N2HN.js"() {
-    "use strict";
-    init_chunk_ZVXO3XL6();
-    init_chunk_HZ6CADSY();
-    init_zod();
-    PEOPLE_MODERATION_NOTE_MAX_LENGTH = 500;
-    ADMIN_PEOPLE_REPORTS_PAGE_MAX = 100;
-    ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT = 50;
-    PEOPLE_SUSPENDED_REASON = "suspended";
-    peopleModerationActionSchema = external_exports.enum(["remove_message", "suspend", "unsuspend", "dismiss"]);
-    moderationNoteSchema = optionalTrimmedText(PEOPLE_MODERATION_NOTE_MAX_LENGTH);
-    adminPeopleReportListQuery = external_exports.object({
-      pending: external_exports.enum(["true", "false"]).optional().transform((value) => value === "true"),
-      /** Lower bound on `created_at`. */
-      since: timestampSchema.optional(),
-      limit: external_exports.coerce.number().int().min(1).max(ADMIN_PEOPLE_REPORTS_PAGE_MAX).default(ADMIN_PEOPLE_REPORTS_PAGE_DEFAULT),
-      offset: external_exports.coerce.number().int().min(0).default(0)
-    });
-    adminPeopleReportIdParam = external_exports.object({ reportId: uuidSchema });
-    adminPeopleMessageRemovalBody = external_exports.object({ report_id: uuidSchema, message_id: uuidSchema.optional(), note: moderationNoteSchema }).strict();
-    adminPeopleSuspendBody = external_exports.object({ report_id: uuidSchema.optional(), note: moderationNoteSchema }).strict();
-    adminPeopleNoteBody = external_exports.object({ note: moderationNoteSchema }).strict();
-  }
-});
-
 // ../../packages/core/dist/chunk-MIWZOSPI.js
 function toIso(epochMs) {
   return new Date(epochMs).toISOString();
@@ -6783,7 +6808,7 @@ var init_chunk_E4DIIOOE = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-FMXFEZN4.js
+// ../../packages/core/dist/chunk-GMWMQ4YA.js
 function spokenLineField(label, description2) {
   return { type: "text", label, maxLength: SPOKEN_LINE_MAX_CHARS, default: "", description: description2 };
 }
@@ -6793,8 +6818,8 @@ function byLowercaseName(a, b) {
   return x < y ? -1 : x > y ? 1 : 0;
 }
 var CALLER_LANGUAGE, TTS_VOICE_REPLY_ENABLED_FIELD, COPILOT_TRIGGER_FIELD, SANDBOX_AGENT_FIELDS, AUDIO_LANGUAGE_OPTIONS, whatsapp, instagram, resend, telegram, API_CHANNEL_DELIVERY_EVENTS, apiChannel, OPENAI_REASONING_MODELS, openai, anthropic, googleAiStudio, openRouter, xai, groqStt, openaiStt, elevenLabsStt, openaiTts, groqTts, elevenLabsTts, GEMINI_TTS_VOICES, googleTts, wayai, externalResources, restApiTool, mcpServer, REKOR_TOOLSET_SERVICE_NAME, rekorToolset, CLAUDE_HARNESS_MODELS, CLAUDE_HARNESS_MODEL_OPTIONS, HARNESS_MCP_SERVERS_FIELD, HARNESS_EGRESS_FIELDS, claudeManagedAgents, SPOKEN_LINE_MAX_CHARS, gptLive, CONNECTORS;
-var init_chunk_FMXFEZN4 = __esm({
-  "../../packages/core/dist/chunk-FMXFEZN4.js"() {
+var init_chunk_GMWMQ4YA = __esm({
+  "../../packages/core/dist/chunk-GMWMQ4YA.js"() {
     "use strict";
     CALLER_LANGUAGE = "caller";
     TTS_VOICE_REPLY_ENABLED_FIELD = {
@@ -6822,7 +6847,17 @@ var init_chunk_FMXFEZN4 = __esm({
         type: "toggle",
         label: "Code Execution Sandbox",
         default: false,
-        description: "Let this agent run code in a WayAI sandbox with the sandbox tools, bash, copy_to_sandbox and copy_from_sandbox (add them under Tools): one disposable Linux container per conversation, started on first use and ended after 10 minutes without use or 60 minutes in all."
+        description: "Let this agent run code in a WayAI sandbox with the sandbox tools, bash, copy_to_sandbox and copy_from_sandbox (add them under Tools): a disposable Linux container, shared with the conversation's other agents or private to this agent (Sandbox Scope), started on first use and ended after 10 minutes without use, 60 minutes in all, or when the conversation closes."
+      },
+      sandbox_scope: {
+        type: "select",
+        label: "Sandbox Scope",
+        options: [
+          { value: "conversation", label: "Conversation (shared with the conversation's other agents)" },
+          { value: "agent", label: "Agent (private to this agent)" }
+        ],
+        default: "conversation",
+        description: "Whose sandbox this agent uses. Conversation: shared with the conversation's other agents; every agent sharing it sees its files, and agents sharing it need the same Sandbox Network setting, or a command from one ends the sandbox and starts a new one, which keeps its /workspace files but none of its running processes. Agent: private to this agent; no other agent sees its files. Set Agent for an agent that handles files others must not see, such as a copilot with internal documents. Each agent sandbox is its own container, counts toward the organization's limit on running sandboxes, and ends with the conversation."
       },
       sandbox_network: {
         type: "select",
@@ -7662,7 +7697,8 @@ var init_chunk_FMXFEZN4 = __esm({
         api_key: {
           connection_display_name: { type: "text", label: "Connection Name", placeholder: "Enter a name for this connection", description: "This name will be used to identify the connection in the system", required: true },
           api_key: { type: "password", label: "API Key", placeholder: "Enter your Anthropic API key", description: "Anthropic API key for the Managed Agents API. Used only from the WayAI Worker \u2014 no sandbox ever sees it.", required: true, maskInEdit: true, useExistingPlaceholder: "__USE_EXISTING_API_KEY__" },
-          access_token: { type: "password", label: "GitHub Token (Optional)", placeholder: "Enter a GitHub personal access token", description: "Optional: personal access token for the repo_url checkout. Anthropic's git proxy injects it after requests leave the sandbox \u2014 it never enters the sandbox.", maskInEdit: true, useExistingPlaceholder: "__USE_EXISTING_ACCESS_TOKEN__" }
+          access_token: { type: "password", label: "GitHub Token (Optional)", placeholder: "Enter a GitHub personal access token", description: "Optional: personal access token for the repo_url checkout. Anthropic's git proxy injects it after requests leave the sandbox \u2014 it never enters the sandbox.", maskInEdit: true, useExistingPlaceholder: "__USE_EXISTING_ACCESS_TOKEN__" },
+          webhook_secret_token: { type: "password", label: "Webhook Signing Secret", placeholder: "whsec_\u2026", description: "Signing secret of this connection's webhook endpoint in the Claude Console. Without it, a finished turn is picked up only by a check every 5 minutes.", maskInEdit: true, useExistingPlaceholder: "__USE_EXISTING_WEBHOOK_SECRET_TOKEN__" }
         }
       },
       token_refresh_config: { api_key: { strategy: "none" } },
@@ -7748,13 +7784,13 @@ var init_chunk_FMXFEZN4 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-VOC3AGY4.js
+// ../../packages/core/dist/chunk-PEXTNF6S.js
 var evalCallInstant, EVAL_CALL_MIN_SECONDS, EVAL_CALL_MAX_SECONDS, EVAL_CALL_SPOKEN_LINE_MAX_CHARS, hubScoped2, createEvalCallBody, createEvalCallResponse, evalCallConversationQuery, evalCallRecordQuery, evalCallSpeaker, evalCallUtterance, evalCallTurn, evalCallRecording, evalCallRecordResponse, evalCallFinishResponse;
-var init_chunk_VOC3AGY4 = __esm({
-  "../../packages/core/dist/chunk-VOC3AGY4.js"() {
+var init_chunk_PEXTNF6S = __esm({
+  "../../packages/core/dist/chunk-PEXTNF6S.js"() {
     "use strict";
     init_chunk_E4DIIOOE();
-    init_chunk_FMXFEZN4();
+    init_chunk_GMWMQ4YA();
     init_chunk_HZ6CADSY();
     init_chunk_MIWZOSPI();
     init_zod();
@@ -8121,15 +8157,15 @@ var init_chunk_MH4O3YEX = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-HX2LNKHX.js
+// ../../packages/core/dist/chunk-UZ7SPBM3.js
 function catalogToolSideEffects(toolName) {
   const sideEffects = CATALOG_SIDE_EFFECTS.get(toolName);
   if (sideEffects === void 0) return "unknown";
   return sideEffects ? "side_effects" : "none";
 }
 var NATIVE_TOOL_SCHEMAS, WAYAI_CONNECTOR, SANDBOX_AGENT_ROLES, BASE_NATIVE_TOOLS, NATIVE_TOOLS, CATALOG_SIDE_EFFECTS;
-var init_chunk_HX2LNKHX = __esm({
-  "../../packages/core/dist/chunk-HX2LNKHX.js"() {
+var init_chunk_UZ7SPBM3 = __esm({
+  "../../packages/core/dist/chunk-UZ7SPBM3.js"() {
     "use strict";
     init_chunk_DHPUPI4Y();
     NATIVE_TOOL_SCHEMAS = {
@@ -8450,7 +8486,7 @@ var init_chunk_HX2LNKHX = __esm({
       "bash": {
         "tool_config": {
           "name": "bash",
-          "description": "Run a Bash command in this conversation's sandbox: a disposable Linux container (Debian, with Python 3, curl, jq, zip and other common tools) whose working directory is /workspace. The sandbox starts on the first command and keeps its files between commands in this conversation, but it ends after 10 minutes without use or 60 minutes in all; the next command then starts an empty one, and its result says so. What the sandbox can reach over the network is set for this agent by a hub admin; with no network, nothing leaves it. A command runs for at most timeout_seconds and never past the turn's own time limit. Long output keeps only its first and last parts. The result gives the exit code, stdout and stderr.",
+          "description": "Run a Bash command in this conversation's sandbox: a disposable Linux container (Debian, with Python 3, curl, jq, zip and other common tools) whose working directory is /workspace. The sandbox starts on the first command and keeps its files between commands in this conversation, but it ends after 10 minutes without use or 60 minutes in all; the next command then starts a new one with the /workspace files from the last save, made when a sandbox stopped and at the end of each turn that ran a command, and its result says what came back. Only files under /workspace are kept, never a running process: a long job should write its progress to files under /workspace, so the work can go on from them. HOME is /workspace, so a pip install --user, or a virtual environment under /workspace, is kept too; a plain pip install is not. Installs count toward the saved workspace's size, and when it is too large to keep, what is under /workspace/.local is left out first. What the sandbox can reach over the network is set for this agent by a hub admin; with no network, nothing leaves it. A command runs for at most timeout_seconds and never past the turn's own time limit. Long output keeps only its first and last parts. The result gives the exit code, stdout and stderr.",
           "strict": false,
           "parameters": {
             "type": "object",
@@ -8477,7 +8513,7 @@ var init_chunk_HX2LNKHX = __esm({
       "copy_to_sandbox": {
         "tool_config": {
           "name": "copy_to_sandbox",
-          "description": `Copy one of this conversation's files, or one of your documents, into the code sandbox, so commands run with bash can read or edit it there. path names the file as read_file does: this conversation's attachments under "conversation/" (e.g. "conversation/report.xlsx"), an earlier conversation's under "conversations/<conversation_id>/<name>", or a document under "data/<file-type>/" (e.g. "data/contracts/acme/msa.docx"), whose result gives the version you copied: pass it to copy_from_sandbox to copy the document back. Hub resource files cannot be copied. The copy lands at sandbox_path, replacing any file there; a file larger than 25 MiB is refused, and a document larger than 1 MiB. If no sandbox is running, the copy starts an empty one.`,
+          "description": `Copy one of this conversation's files, or one of your documents, into the code sandbox, so commands run with bash can read or edit it there. path names the file as read_file does: this conversation's attachments under "conversation/" (e.g. "conversation/report.xlsx"), an earlier conversation's under "conversations/<conversation_id>/<name>", or a document under "data/<file-type>/" (e.g. "data/contracts/acme/msa.docx"), whose result gives the version you copied: pass it to copy_from_sandbox to copy the document back. Hub resource files cannot be copied. The copy lands at sandbox_path, replacing any file there; a file larger than 25 MiB is refused, and a document larger than 1 MiB. If no sandbox is running, the copy starts one, with the /workspace files from the last save.`,
           "strict": false,
           "parameters": {
             "type": "object",
@@ -9110,9 +9146,10 @@ var init_chunk_HX2LNKHX = __esm({
       // code it runs can send data out of the conversation.
       { tool_native_id: "nt-030", tool_name: "bash", tool_display_name: "Run Code (Bash)", tool_description: "Run a Bash command in the conversation's code sandbox", connector_id: WAYAI_CONNECTOR, operation: "bash", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", assignable_roles: SANDBOX_AGENT_ROLES },
       // Copies a conversation file, or a toolset document (`data/`, read through the toolset's `get`),
-      // INTO the sandbox: the sandbox is conversation state, so nothing leaves the conversation. It is
-      // shared by the conversation's agents that use it, so a document copied in is there for each of
-      // them, as anything else an agent leaves in it.
+      // INTO the sandbox: the sandbox is conversation state, so nothing leaves the conversation. The
+      // conversation's sandbox is shared by its agents whose `sandbox_scope` is `conversation`, so a
+      // document copied in is there for each of them, as anything else an agent leaves in it; an agent
+      // set to `agent` copies into its own, which no other agent reaches (decision 147).
       { tool_native_id: "nt-031", tool_name: "copy_to_sandbox", tool_display_name: "Copy File to Sandbox", tool_description: "Copy one of the conversation's files into its code sandbox", connector_id: WAYAI_CONNECTOR, operation: "copy_to_sandbox", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", assignable_roles: SANDBOX_AGENT_ROLES },
       // Copies a sandbox file OUT into the conversation, as an internal note for the team: nothing
       // reaches the customer until `send_files` sends it. With `path`, it writes a toolset document
@@ -9160,11 +9197,104 @@ var init_chunk_IBL7FANV = __esm({
 });
 
 // ../../packages/core/dist/chunk-PFDZEKDE.js
-var PREVIOUS_CONVERSATIONS_MAX;
+function parseExpr(expr) {
+  const fnMatch = expr.match(/^([a-zA-Z_][a-zA-Z0-9_]*)\s*\((.*?)\)\s*(?:\.(.*))?$/);
+  if (!fnMatch) return null;
+  const [, fn, rawArgs, rawPath] = fnMatch;
+  const args2 = splitArgs(rawArgs);
+  const path42 = rawPath ? rawPath.split(".").flatMap((seg) => {
+    const indexed = [];
+    seg.replace(/([^\[\]]+)|\[(\d+)\]/g, (_, prop, idx) => {
+      if (prop) indexed.push(prop);
+      else if (idx !== void 0) indexed.push(idx);
+      return "";
+    });
+    return indexed;
+  }) : [];
+  return { fn, args: args2, path: path42 };
+}
+function splitArgs(rawArgs) {
+  const trimmed = rawArgs.trim();
+  return trimmed ? trimmed.split(",").map((s) => stripQuotes(s.trim())) : [];
+}
+function stripQuotes(s) {
+  if (s.startsWith('"') && s.endsWith('"') || s.startsWith("'") && s.endsWith("'")) {
+    return s.slice(1, -1);
+  }
+  return s;
+}
+function parseCatalogArgs(args2) {
+  let kind = null;
+  let tree = false;
+  for (const token of args2) {
+    if (token === "tree") tree = true;
+    else if ((token === "kb" || token === "skill") && kind === null) kind = token;
+  }
+  return { kind, tree };
+}
+function widenKinds(kinds) {
+  if (kinds.has("all") || kinds.size > 1) return "all";
+  return [...kinds][0] ?? null;
+}
+function* parseCalls(template) {
+  for (const match of template.matchAll(PLACEHOLDER_RE)) {
+    const parsed = parseExpr(match[1].trim());
+    if (parsed) yield parsed;
+  }
+}
+function scanTemplateResources(template) {
+  if (!template || !template.includes("{{")) return EMPTY_SCAN;
+  const scan = { ...EMPTY_SCAN };
+  const names = /* @__PURE__ */ new Set();
+  const paths = /* @__PURE__ */ new Set();
+  const treeKinds = /* @__PURE__ */ new Set();
+  const legacyKinds = /* @__PURE__ */ new Set();
+  for (const { fn, args: args2 } of parseCalls(template)) {
+    switch (fn) {
+      case CATALOG_FN:
+      case LEGACY_CATALOG_FN: {
+        scan.needs_catalog = true;
+        scan.has_catalog_call = true;
+        const { kind, tree } = parseCatalogArgs(args2);
+        if (fn === LEGACY_CATALOG_FN) legacyKinds.add(kind ?? "all");
+        if (tree) treeKinds.add(kind ?? "all");
+        break;
+      }
+      case "agent_skills":
+        scan.needs_catalog = true;
+        break;
+      case "resource_content":
+        if (args2[0]) names.add(args2[0]);
+        break;
+      case "file_content":
+        if (args2[0]) paths.add(args2[0]);
+        break;
+      default:
+        break;
+    }
+  }
+  scan.tree_kinds = widenKinds(treeKinds);
+  scan.legacy_kinds = widenKinds(legacyKinds);
+  scan.resource_content_names = [...names];
+  scan.file_content_paths = [...paths];
+  return scan;
+}
+var PREVIOUS_CONVERSATIONS_MAX, PLACEHOLDER_RE, CATALOG_FN, LEGACY_CATALOG_FN, EMPTY_SCAN;
 var init_chunk_PFDZEKDE = __esm({
   "../../packages/core/dist/chunk-PFDZEKDE.js"() {
     "use strict";
     PREVIOUS_CONVERSATIONS_MAX = 20;
+    PLACEHOLDER_RE = /\{\{\s*([^{}]+?)\s*\}\}/g;
+    CATALOG_FN = "files";
+    LEGACY_CATALOG_FN = "resources";
+    EMPTY_SCAN = {
+      needs_catalog: false,
+      has_catalog_call: false,
+      legacy_kinds: null,
+      tree_kinds: null,
+      resource_content_names: [],
+      file_content_paths: []
+    };
   }
 });
 
@@ -9355,7 +9485,7 @@ var init_chunk_T7KQKDET = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-BUXNYLB7.js
+// ../../packages/core/dist/chunk-XOGFONTQ.js
 function resolveMonitorTrigger(monitorConfig) {
   if (!monitorConfig || typeof monitorConfig !== "object") return "idle";
   const raw = monitorConfig.trigger;
@@ -9661,10 +9791,10 @@ function refineMonitorRulesStructuredOutput(body, ctx) {
   if (refusal2) ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["response_format"], message: refusal2 });
 }
 var NATIVE_TOOL_NAMES, previousConversationsCountField, summarizationThresholdField, flagConditionSchema, MONITOR_TRIGGERS, monitorTriggerSchema, AUTOMATION_GATE_TRIGGERS, NON_FIRING_TRIGGERS, MONITOR_FIRING_TRIGGERS, MONITOR_DELAY_SECONDS_MIN, MONITOR_IDLE_DELAY_REQUIRED_MESSAGE, MONITOR_HISTORY_MESSAGES_MAX, monitorHistoryMessagesSchema, monitorIncludeToolResultsSchema, MONITOR_INPUT_SHAPING_KEYS, MONITOR_INPUT_SHAPING_SCHEMAS, MONITOR_INPUT_SHAPING_IDLE_MESSAGE, monitorArgumentSourceSchema, MONITOR_NOTE_TEMPLATE_MAX, MONITOR_STEER_NOTE_MAX, MONITOR_GATE_AGENT_NAME_MAX, monitorActionSchema, monitorRuleSchema, MONITOR_RULE_KEYS, MONITOR_RULE_SCHEMAS, MONITOR_RULE_TRIGGERS, MONITOR_RULE_TRIGGER_MESSAGE, CALL_UTTERANCE_SPEAKERS, callUtteranceSpeakerSchema, MONITOR_CALL_KEYS, MONITOR_CALL_SCHEMAS, MONITOR_CALL_KEY_MESSAGE, CALL_STEERING_MIN_CONFIDENCE, CALL_UTTERANCE_RULE_NOT_CONFIDENT_MESSAGE, CALL_UTTERANCE_FALLBACK_MESSAGE, CALL_UTTERANCE_FLAG_CONDITIONS_MESSAGE, CALL_STEER_NOTE_BLANK_MESSAGE, MONITOR_USER_MESSAGE_ACTION_KINDS, MONITOR_ASSISTANT_REPLY_ACTION_KINDS, MONITOR_CALL_UTTERANCE_ACTION_KINDS, MONITOR_AUTOMATION_FIRE_ACTION_KINDS, MONITOR_AUTOMATION_ITEM_ACTION_KINDS, INSERT_NOTE_TOOL_NAME, RUN_MONITOR_TOOL_NAME, MONITOR_RULE_ALLOWED_NATIVE_TOOLS, MONITOR_RULE_REENTRY_TOOLS, MONITOR_RULE_REENTRY_TRACKS, AUTOMATION_FIRE_FLAG_CONDITIONS_MESSAGE, AUTOMATION_FIRE_INPUT_SHAPING_MESSAGE, AUTOMATION_ITEM_FLAG_CONDITIONS_MESSAGE, AUTOMATION_ITEM_INPUT_SHAPING_MESSAGE, AUTOMATION_GATE_KEY_MESSAGES, monitorConfigField, flagConditionsField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody;
-var init_chunk_BUXNYLB7 = __esm({
-  "../../packages/core/dist/chunk-BUXNYLB7.js"() {
+var init_chunk_XOGFONTQ = __esm({
+  "../../packages/core/dist/chunk-XOGFONTQ.js"() {
     "use strict";
-    init_chunk_HX2LNKHX();
+    init_chunk_UZ7SPBM3();
     init_chunk_IBL7FANV();
     init_chunk_PFDZEKDE();
     init_chunk_HZ6CADSY();
@@ -9887,12 +10017,12 @@ var init_chunk_BUXNYLB7 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-7YJWGPAR.js
+// ../../packages/core/dist/chunk-TUP5Y6ZB.js
 var conversationIdParam, conversationHubQuery, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody;
-var init_chunk_7YJWGPAR = __esm({
-  "../../packages/core/dist/chunk-7YJWGPAR.js"() {
+var init_chunk_TUP5Y6ZB = __esm({
+  "../../packages/core/dist/chunk-TUP5Y6ZB.js"() {
     "use strict";
-    init_chunk_BUXNYLB7();
+    init_chunk_XOGFONTQ();
     init_chunk_HZ6CADSY();
     init_chunk_DHPUPI4Y();
     init_zod();
@@ -10348,7 +10478,7 @@ var init_chunk_BPCNB5RT = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-AR73HGPH.js
+// ../../packages/core/dist/chunk-LQSENJ26.js
 function idempotencyHeaderRefusal(value) {
   if (typeof value !== "string" || !/^[A-Za-z0-9][A-Za-z0-9-]{0,63}$/.test(value)) {
     return "idempotency_header must be a header name: letters, digits and dashes, at most 64";
@@ -10359,10 +10489,10 @@ function idempotencyHeaderRefusal(value) {
   return null;
 }
 var CATALOG_REPLAY, REPLAY_OVERRIDES, RESERVED_HEADERS;
-var init_chunk_AR73HGPH = __esm({
-  "../../packages/core/dist/chunk-AR73HGPH.js"() {
+var init_chunk_LQSENJ26 = __esm({
+  "../../packages/core/dist/chunk-LQSENJ26.js"() {
     "use strict";
-    init_chunk_HX2LNKHX();
+    init_chunk_UZ7SPBM3();
     CATALOG_REPLAY = new Map(
       NATIVE_TOOLS.map((tool) => [tool.tool_name, tool.replay])
     );
@@ -10595,7 +10725,7 @@ var init_chunk_WEXVYJ5H = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-MK6D4I2Q.js
+// ../../packages/core/dist/chunk-KRGVB7U6.js
 function refineToolConfig(value, ctx) {
   const raw = value.tool_config;
   if (raw == null) return;
@@ -10631,10 +10761,10 @@ function refineToolConfig(value, ctx) {
   }
 }
 var toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, toolReplaySettingsFields, toolReplaySettingsSchema, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody;
-var init_chunk_MK6D4I2Q = __esm({
-  "../../packages/core/dist/chunk-MK6D4I2Q.js"() {
+var init_chunk_KRGVB7U6 = __esm({
+  "../../packages/core/dist/chunk-KRGVB7U6.js"() {
     "use strict";
-    init_chunk_AR73HGPH();
+    init_chunk_LQSENJ26();
     init_chunk_WEXVYJ5H();
     init_chunk_HZ6CADSY();
     init_zod();
@@ -12006,7 +12136,7 @@ var init_chunk_6NI5RAM4 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-EAT2SP4E.js
+// ../../packages/core/dist/chunk-RT35VFUY.js
 function refineHubAsCodeCustomTools(config, ctx) {
   const agents = config.agents;
   if (!Array.isArray(agents)) return;
@@ -12542,12 +12672,12 @@ function refineHubAsCodeMonitorRulesOutput(config, ctx) {
   });
 }
 var MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, MAX_CALL_OPENING_CARRIERS, MAX_CALL_OPENING_AGGREGATE_ENCODED_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema;
-var init_chunk_EAT2SP4E = __esm({
-  "../../packages/core/dist/chunk-EAT2SP4E.js"() {
+var init_chunk_RT35VFUY = __esm({
+  "../../packages/core/dist/chunk-RT35VFUY.js"() {
     "use strict";
-    init_chunk_MK6D4I2Q();
+    init_chunk_KRGVB7U6();
     init_chunk_623SRYWZ();
-    init_chunk_BUXNYLB7();
+    init_chunk_XOGFONTQ();
     init_chunk_LBDH7LCG();
     init_chunk_4LXDRTO4();
     init_chunk_T4Q5COKJ();
@@ -13556,15 +13686,15 @@ var init_chunk_LQY2OCQL = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-6N2QIHHQ.js
+// ../../packages/core/dist/chunk-2VTDOH67.js
 var AUTOMATION_TRIGGER_TYPES, AUTOMATION_EVENT_TYPES, AUTOMATION_TARGET_TYPES, AUTOMATION_ACTION_TYPES, AUTOMATION_CHANNEL_TYPES, AUTOMATION_PURPOSES, AUTOMATION_NAME_MAX, AUTOMATION_DESCRIPTION_MAX, AUTOMATION_INSTRUCTIONS_MAX, AUTOMATION_TEXT_MAX, AUTOMATION_CRON_MAX, AUTOMATION_WEBHOOK_AUTHS, AUTOMATION_WEBHOOK_HEADERS, AUTOMATION_WEBHOOK_BODY_MAX_BYTES, AUTOMATION_WEBHOOK_HEADER_NAME_MAX, WEBHOOK_RESERVED_HEADERS, automationTriggerSchema, automationTargetSchema, automationActionSchema, automationGateSchema, automationName, automationDescription, automationIdParam, automationHubQuery, automationWebhookParams, AUTOMATION_RUNS_PAGE_MAX, listAutomationRunsQuery, createAutomationBody, updateAutomationBody, AUTOMATION_ALERT_CATEGORIES, AUTOMATION_BLOCKED_ALERT_CATEGORY, automationEventSubscriberParam;
-var init_chunk_6N2QIHHQ = __esm({
-  "../../packages/core/dist/chunk-6N2QIHHQ.js"() {
+var init_chunk_2VTDOH67 = __esm({
+  "../../packages/core/dist/chunk-2VTDOH67.js"() {
     "use strict";
     init_chunk_LQY2OCQL();
-    init_chunk_BUXNYLB7();
+    init_chunk_XOGFONTQ();
     init_chunk_3HSB6J4J();
-    init_chunk_F3JHI4Y4();
+    init_chunk_5XEJSR22();
     init_chunk_DHPUPI4Y();
     init_chunk_T7KQKDET();
     init_zod();
@@ -14807,29 +14937,30 @@ var init_chunk_TS4EYU3W = __esm({
 var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
     "use strict";
+    init_chunk_SXDX4GHS();
+    init_chunk_FK6HBXM7();
     init_chunk_VXEAR36B();
     init_chunk_TIZ57ZBA();
     init_chunk_Q7KIQHAZ();
-    init_chunk_2U4BTOR7();
+    init_chunk_QUGQIL47();
     init_chunk_IPXBFWUU();
     init_chunk_GK27ENTT();
-    init_chunk_SXDX4GHS();
-    init_chunk_FK6HBXM7();
     init_chunk_GPM7PE44();
     init_chunk_DGKMMFIR();
     init_chunk_ZC6YGHNX();
     init_chunk_ACKF2MVU();
+    init_chunk_ZXK6N2HN();
     init_chunk_Y7CFCYX4();
     init_chunk_5DGHIY7L();
-    init_chunk_CGOLULK2();
+    init_chunk_FNNHGL7K();
     init_chunk_4MRBBR5L();
     init_chunk_BEOHBREG();
     init_chunk_IPDOHAZ5();
     init_chunk_YUZFHVB2();
+    init_chunk_I3O2RACG();
     init_chunk_34LE6P7E();
     init_chunk_FPSDNS2E();
-    init_chunk_ZXK6N2HN();
-    init_chunk_VOC3AGY4();
+    init_chunk_PEXTNF6S();
     init_chunk_C4HEZ7ZI();
     init_chunk_IR2NOSI3();
     init_chunk_EA23LSDS();
@@ -14837,12 +14968,12 @@ var init_contracts = __esm({
     init_chunk_LWMLR2WI();
     init_chunk_ACGAI25T();
     init_chunk_MH4O3YEX();
-    init_chunk_7YJWGPAR();
+    init_chunk_TUP5Y6ZB();
     init_chunk_KSTYTQ7I();
     init_chunk_LKBSHANA();
     init_chunk_BPCNB5RT();
-    init_chunk_EAT2SP4E();
-    init_chunk_MK6D4I2Q();
+    init_chunk_RT35VFUY();
+    init_chunk_KRGVB7U6();
     init_chunk_623SRYWZ();
     init_chunk_JDJ4EUOL();
     init_chunk_3KYTITOR();
@@ -14852,9 +14983,9 @@ var init_contracts = __esm({
     init_chunk_YULHXJ5M();
     init_chunk_V4FRPRH5();
     init_chunk_ZHJEQBXJ();
-    init_chunk_6N2QIHHQ();
+    init_chunk_2VTDOH67();
     init_chunk_LQY2OCQL();
-    init_chunk_BUXNYLB7();
+    init_chunk_XOGFONTQ();
     init_chunk_3HSB6J4J();
     init_chunk_IG6QBZMA();
     init_chunk_ZJJ5ODOD();
@@ -14863,9 +14994,9 @@ var init_contracts = __esm({
     init_chunk_4LXDRTO4();
     init_chunk_E4DIIOOE();
     init_chunk_7CYHPF35();
-    init_chunk_FMXFEZN4();
-    init_chunk_AR73HGPH();
-    init_chunk_HX2LNKHX();
+    init_chunk_GMWMQ4YA();
+    init_chunk_LQSENJ26();
+    init_chunk_UZ7SPBM3();
     init_chunk_NVKU5PPQ();
     init_chunk_2FCLSQSQ();
     init_chunk_FECLIZTY();
@@ -14878,11 +15009,11 @@ var init_contracts = __esm({
     init_chunk_OMPT4ZHR();
     init_chunk_2PZIF56U();
     init_chunk_UEJOG2Q7();
-    init_chunk_IEWJ5MZH();
+    init_chunk_ISFDR7SP();
     init_chunk_SOJMWM63();
     init_chunk_WEXVYJ5H();
     init_chunk_LZDVDC2S();
-    init_chunk_F3JHI4Y4();
+    init_chunk_5XEJSR22();
     init_chunk_IBL7FANV();
     init_chunk_PFDZEKDE();
     init_chunk_VORPHGDT();
@@ -15286,6 +15417,61 @@ var init_api_client = __esm({
         }
         return new Uint8Array(await response.arrayBuffer());
       }
+      // ---- A preview hub's knowledge cut-over (`wayai knowledge cut-over`) ----
+      //
+      // The setup routes the web console writes through, so each write takes the same checks: the
+      // as-code push never sees a hub's copies of organization resources or their agent links.
+      async listAgents(hubId) {
+        const params = new URLSearchParams({ hub_id: hubId });
+        return this.request("GET", `/api/setup/agents?${params}`);
+      }
+      /** Patch an agent of a preview hub: the text it reads (`updateAgentBody` takes more). */
+      async updateAgent(hubId, agentId, patch) {
+        const params = new URLSearchParams({ hub_id: hubId });
+        await this.request("PATCH", `/api/setup/agents/${encodeURIComponent(agentId)}?${params}`, patch);
+      }
+      async listAgentResources(hubId, agentId) {
+        const params = new URLSearchParams({ hub_id: hubId, agent_id: agentId });
+        return this.request("GET", `/api/setup/resources/agent-resources?${params}`);
+      }
+      async updateAgentResource(body) {
+        return this.request("PATCH", "/api/setup/resources/agent-resources", body);
+      }
+      /** An agent's tools, and the native and connection tools it could add (`available_action: 'Add'`). */
+      async listAgentTools(hubId, agentId) {
+        const params = new URLSearchParams({ hub_id: hubId, agent_id: agentId });
+        return this.request("GET", `/api/setup/tools?${params}`);
+      }
+      async addNativeTool(hubId, agentId, toolNativeId) {
+        return this.request("POST", "/api/setup/tools/native", {
+          hub_id: hubId,
+          agent_id: agentId,
+          tool_native_id: toolNativeId
+        });
+      }
+      async addMcpTool(hubId, agentId, mcpToolId) {
+        return this.request("POST", "/api/setup/tools/mcp", { hub_id: hubId, agent_id: agentId, mcp_tool_id: mcpToolId });
+      }
+      async enableTool(hubId, agentId, toolId) {
+        const params = new URLSearchParams({ hub_id: hubId, agent_id: agentId });
+        await this.request("POST", `/api/setup/tools/${encodeURIComponent(toolId)}/enable?${params}`);
+      }
+      /** Add a token-holding connection (a Base Toolset's) to a preview hub; the answer lists the hub's connections. */
+      async addConnection(body) {
+        return this.request("POST", "/api/setup/connections", body);
+      }
+      async listAutomations(hubId) {
+        const params = new URLSearchParams({ hub_id: hubId });
+        return this.request("GET", `/api/automations?${params}`);
+      }
+      async updateAutomation(hubId, automationId, body) {
+        const params = new URLSearchParams({ hub_id: hubId });
+        await this.request("PATCH", `/api/automations/${encodeURIComponent(automationId)}?${params}`, body);
+      }
+      /** Record one knowledge resource's move into the org's knowledge base (#5142 step 4). */
+      async recordKnowledgeMove(body) {
+        return this.request("POST", "/api/setup/knowledge/moves", body);
+      }
       async me() {
         return this.request("GET", "/api/auth/me");
       }
@@ -16151,11 +16337,11 @@ var UUID_RE2, WAYAI_WORKSPACE_LAYOUT;
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
     "use strict";
-    init_chunk_IEWJ5MZH();
+    init_chunk_ISFDR7SP();
     init_chunk_SOJMWM63();
     init_chunk_WEXVYJ5H();
     init_chunk_LZDVDC2S();
-    init_chunk_F3JHI4Y4();
+    init_chunk_5XEJSR22();
     init_chunk_IBL7FANV();
     init_chunk_PFDZEKDE();
     init_chunk_P3AWZG3N();
@@ -21694,6 +21880,7 @@ var init_types2 = __esm({
     ENTITY_KINDS = [
       "record_types",
       "relationship_types",
+      "file_types",
       "inbound_webhooks",
       "triggers",
       "toolsets",
@@ -21703,6 +21890,7 @@ var init_types2 = __esm({
     ENTITY_DIRS = {
       record_types: "record-types",
       relationship_types: "relationship-types",
+      file_types: "file-types",
       inbound_webhooks: "inbound-webhooks",
       triggers: "triggers",
       toolsets: "toolsets",
@@ -21839,6 +22027,7 @@ var init_config_writer = __esm({
         "target_record_types",
         "cascade"
       ],
+      file_types: ["id", "name", "description", "icon", "color", "max_size", "allowed_content_types", "metadata_schema"],
       inbound_webhooks: [
         "id",
         "name",
@@ -21992,9 +22181,12 @@ function parseBaseFolder(folder) {
     );
   }
   const read = (kind) => readEntityDir(folder, path22.join(folder, ENTITY_DIRS[kind]));
+  const fileTypesDir = path22.join(folder, ENTITY_DIRS.file_types);
+  const fileTypes = readEntityDir(folder, fileTypesDir);
   const config = {
     record_types: read("record_types"),
     relationship_types: read("relationship_types"),
+    ...isDirectory(fileTypesDir) ? { file_types: fileTypes } : {},
     inbound_webhooks: read("inbound_webhooks"),
     triggers: read("triggers"),
     toolsets: read("toolsets"),
@@ -22024,10 +22216,15 @@ function isEmptyBucket(b) {
 function isDiffEmpty(diff) {
   return ENTITY_KINDS.every((kind) => isEmptyBucket(bucket(diff, kind)));
 }
+function isPrunable(id) {
+  return isPathSafeId(id);
+}
 function collectRemovals(diff) {
   const out = [];
   for (const kind of ENTITY_KINDS) {
-    for (const entity of bucket(diff, kind)?.removed ?? []) out.push({ kind, id: entity.id });
+    for (const entity of bucket(diff, kind)?.removed ?? []) {
+      if (isPrunable(entity.id)) out.push({ kind, id: entity.id });
+    }
   }
   return out;
 }
@@ -22040,7 +22237,7 @@ function countChanges(diff) {
     if (!b) continue;
     added += b.added.length;
     modified += b.modified.length;
-    removed += b.removed.length;
+    removed += b.removed.filter((e) => isPrunable(e.id)).length;
   }
   return { added, modified, removed };
 }
@@ -22052,7 +22249,11 @@ function renderDiff(diff) {
     lines.push(`${BOLD}${LABELS[kind]}s${RESET}`);
     for (const e of b.added) lines.push(`${GREEN}  + ${sanitizeTerminalText(e.id)}${RESET}`);
     for (const m of b.modified) lines.push(`${YELLOW}  ~ ${sanitizeTerminalText(m.after.id)}${RESET}`);
-    for (const e of b.removed) lines.push(`${RED}  - ${sanitizeTerminalText(e.id)}${RESET}`);
+    for (const e of b.removed) {
+      lines.push(
+        isPrunable(e.id) ? `${RED}  - ${sanitizeTerminalText(e.id)}${RESET}` : `${YELLOW}  = ${sanitizeTerminalText(e.id)} (kept: pull cannot write its id to a file)${RESET}`
+      );
+    }
   }
   const { added, modified, removed } = countChanges(diff);
   lines.push("");
@@ -22061,7 +22262,7 @@ function renderDiff(diff) {
   );
   if (removed > 0) {
     lines.push(
-      `${RED}  ${removed} entit${removed === 1 ? "y" : "ies"} exist on the base but not in your files \u2014 re-run with --prune to delete (record types cascade to their records).${RESET}`
+      `${RED}  ${removed} entit${removed === 1 ? "y" : "ies"} exist on the base but not in your files \u2014 re-run with --prune to delete (record types cascade to their records, file types to their files).${RESET}`
     );
   }
   return lines.join("\n");
@@ -22071,10 +22272,12 @@ var init_diff_format = __esm({
   "src/data/config-as-code/diff-format.ts"() {
     "use strict";
     init_terminal_output();
+    init_base_id();
     init_types2();
     LABELS = {
       record_types: "record type",
       relationship_types: "relationship type",
+      file_types: "file type",
       inbound_webhooks: "inbound webhook",
       triggers: "trigger",
       toolsets: "toolset",
@@ -22296,7 +22499,7 @@ ${RED}${removals.length} ${word} not in your files were left on the base. Re-run
       );
     } else if (autoConfirm || await confirm(
       `
-Delete ${removals.length} server ${word} not in your files? Record types cascade to their records.`
+Delete ${removals.length} server ${word} not in your files? Record types cascade to their records, file types to their files.`
     )) {
       for (const removal of removals) {
         await deleteEntity(client, baseId2, removal.kind, removal.id);
@@ -33543,6 +33746,12 @@ var init_resource_paths = __esm({
 });
 
 // src/knowledge/source.ts
+function orgSourceKey(orgResourceId) {
+  return `organization resource ${orgResourceId}`;
+}
+function hubSourceKey(productionHubId, resourceId) {
+  return `hub ${productionHubId} resource ${resourceId}`;
+}
 function movesFromOrg(resource) {
   return resource.resource_type === "knowledge";
 }
@@ -33592,7 +33801,7 @@ function orgSources(resources, rows) {
       skill_name: r.skill_name,
       resource_type: r.resource_type,
       created_at: r.created_at,
-      sourceKey: `organization resource ${r.org_resource_id}`,
+      sourceKey: orgSourceKey(r.org_resource_id),
       description: r.resource_description ?? "",
       folderSchema: r.folder_metadata_schema,
       fileSchema: r.file_metadata_schema,
@@ -33641,7 +33850,7 @@ function hubSources(hubId, resources, rows) {
       skill_name: r.skill_name,
       resource_type: r.resource_type,
       created_at: r.created_at,
-      sourceKey: `hub ${hubId} resource ${r.resource_id}`,
+      sourceKey: hubSourceKey(hubId, r.resource_id),
       description: r.resource_description ?? "",
       folderSchema: r.folder_metadata_schema,
       fileSchema: r.file_metadata_schema,
@@ -33712,7 +33921,10 @@ function orgFileTypeId(resource) {
   return resource.slug;
 }
 function hubFileTypeId(hubSlug, resource) {
-  return `${hubSlug}--${resource.slug}`;
+  return `${hubSlug}${HUB_PART_SEPARATOR}${resource.slug}`;
+}
+function hubPartOf(fileTypeId) {
+  return fileTypeId.split(HUB_PART_SEPARATOR)[0];
 }
 function toolAlias(id) {
   const hash = createHash5("sha256").update(id).digest("hex").slice(0, 6);
@@ -34251,7 +34463,7 @@ function describeSkip(skip) {
       return `${skip.fileType}: folder "${skip.folder}" has a description but no path, so it gets no ${INDEX_FILE}.`;
   }
 }
-var MAX_TOOL_BASE_LENGTH, INDEX_FILE, PROVENANCE_PREFIX, MAX_NAME_LENGTH3, MAX_PATH_LENGTH, TITLE_SCHEMA, TAGS_SCHEMA, MAX_NOTE_VALUES, DEFINITION_KEYS, DRAFT, MAX_PATTERNED_VALUE_LENGTH, SUBSCHEMA_KEYS, SUBSCHEMA_MAP_KEYS;
+var MAX_TOOL_BASE_LENGTH, INDEX_FILE, PROVENANCE_PREFIX, MAX_NAME_LENGTH3, MAX_PATH_LENGTH, TITLE_SCHEMA, TAGS_SCHEMA, MAX_NOTE_VALUES, HUB_PART_SEPARATOR, DEFINITION_KEYS, DRAFT, MAX_PATTERNED_VALUE_LENGTH, SUBSCHEMA_KEYS, SUBSCHEMA_MAP_KEYS;
 var init_plan = __esm({
   "src/knowledge/plan.ts"() {
     "use strict";
@@ -34266,6 +34478,7 @@ var init_plan = __esm({
     TITLE_SCHEMA = { type: "string" };
     TAGS_SCHEMA = { type: "array", items: { type: "string" } };
     MAX_NOTE_VALUES = 3;
+    HUB_PART_SEPARATOR = "--";
     DEFINITION_KEYS = ["$defs", "definitions"];
     DRAFT = "2020-12";
     MAX_PATTERNED_VALUE_LENGTH = 1024;
@@ -34373,17 +34586,17 @@ function sameFileType(remote, spec) {
 function isObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function promotionProblems(result, ids) {
+function promotionProblems(result, ids, section = "file_types") {
   const answer = isObject(result) ? result : {};
   const problems2 = [];
-  for (const [section, bucket2] of Object.entries(isObject(answer.diff) ? answer.diff : {})) {
+  for (const [kind, bucket2] of Object.entries(isObject(answer.diff) ? answer.diff : {})) {
     if (!isObject(bucket2)) continue;
     for (const change of ["added", "modified", "removed"]) {
       for (const entry of Array.isArray(bucket2[change]) ? bucket2[change] : []) {
         const row = isObject(entry) ? isObject(entry.after) ? entry.after : entry : {};
         const id = typeof row.id === "string" ? row.id : JSON.stringify(row).slice(0, 80);
-        if (section === "file_types" && change !== "removed" && ids.has(id)) continue;
-        problems2.push(`it would also apply ${section} ${change}: "${id}"`);
+        if (kind === section && change !== "removed" && ids.has(id)) continue;
+        problems2.push(`it would also apply ${kind} ${change}: "${id}"`);
       }
     }
   }
@@ -34641,6 +34854,7 @@ function metadataValue(value) {
 function fileWriteHeaders(opts) {
   const headers = {};
   if (opts.ifMatch !== void 0) headers["If-Match"] = ifMatchValue(opts.ifMatch);
+  if (opts.createOnly) headers["If-None-Match"] = "*";
   if (opts.label !== void 0) headers["X-Data-Label"] = labelValue(opts.label);
   if (opts.metadata !== void 0) headers["X-Data-Metadata"] = metadataValue(opts.metadata);
   return headers;
@@ -34652,6 +34866,253 @@ var init_headers = __esm({
   }
 });
 
+// src/data/commands/tokens.ts
+import { Command } from "commander";
+function rawTokenFrom(data) {
+  const token = typeof data === "object" && data !== null && "token" in data ? data.token : void 0;
+  if (typeof token !== "string" || !RAW_TOKEN_PATTERN.test(token)) {
+    throw new Error("Token creation response did not contain a valid rec_ token");
+  }
+  return token;
+}
+function addTokenLifecycleOptions(cmd) {
+  return cmd.option("--expires-at <date>", "Expiration date (ISO 8601, e.g. 2026-06-01T00:00:00Z)").option(
+    "--ttl <duration>",
+    "Relative expiry, e.g. 10m, 2h, 7d (use for disposable probe/test tokens)"
+  ).option(
+    "--description <text>",
+    'What holds this token (e.g. "behind credential X"); shown in list and revoke warnings'
+  ).addHelpText("after", TOKEN_OUTPUT_HELP);
+}
+function tokenCreationOutput(cmd, opts) {
+  return opts.tokenOnly ? "token" : outputFormat(cmd);
+}
+function printCreatedToken(data, output) {
+  if (output !== "token") {
+    printOutput(data, output);
+    return;
+  }
+  console.log(rawTokenFrom(data));
+}
+function resolveExpiresAt(opts) {
+  if (opts.ttl && opts.expiresAt) {
+    throw expected("--ttl and --expires-at are mutually exclusive \u2014 pass one.");
+  }
+  if (opts.ttl) return new Date(Date.now() + parseDuration(opts.ttl, "--ttl")).toISOString();
+  return opts.expiresAt;
+}
+function applyTokenLifecycleOpts(body, opts) {
+  const expiresAt = resolveExpiresAt(opts);
+  if (expiresAt) body.expires_at = expiresAt;
+  if (opts.description) body.description = opts.description;
+}
+function listAllTokens(client) {
+  return client.collectPages(
+    (cursor) => `/v1/tokens?limit=${TOKEN_LIST_PAGE_LIMIT}${cursor ? `&cursor=${encodeURIComponent(cursor)}` : ""}`
+  );
+}
+function pruneRow(t, reason) {
+  return {
+    token_id: t.token_id,
+    name: t.name,
+    reason,
+    last_used: t.last_used_at ?? "never"
+  };
+}
+function buildBasesTokensCommand() {
+  const tokens2 = new Command("tokens").description("Manage API tokens");
+  addTokenLifecycleOptions(
+    tokens2.command("create").description("Create a scoped API token").requiredOption("--name <name>", "Token name").requiredOption("--grants <json>", "Grant definitions as JSON array").option(
+      "--token-only",
+      "Print only the raw rec_ token for secure command substitution (shown once)"
+    )
+  ).action(async function(opts) {
+    const grants = parseData(opts.grants, "--grants");
+    const body = { name: opts.name, grants };
+    applyTokenLifecycleOpts(body, opts);
+    const client = await createDataClient();
+    const data = await client.request("POST", "/v1/tokens", body);
+    printCreatedToken(data, tokenCreationOutput(this, opts));
+  });
+  addTokenLifecycleOptions(
+    // The only token verb that addresses a base, so it alone declares `--base`.
+    // Putting it on the `tokens` group would advertise a flag that does nothing
+    // on `list`, `revoke` and `prune` — the defect `withBaseOption` exists to
+    // avoid.
+    withBaseOption(tokens2.command("create-for-toolset <slug>")).description(
+      "Create a toolset-bound (consumer) token whose authorization IS the toolset tool surface \u2014 it can call exactly the tools that toolset exposes (those record types + operations, relationships, batch, and sql only if enabled) and nothing else. Binds to the configured --base."
+    ).option("--name <name>", 'Token name (default: "<slug> consumer")').option(
+      "--token-only",
+      "Print only the raw rec_ token for secure command substitution (shown once)"
+    )
+  ).action(async function(slug, opts) {
+    const base = requireBase(this);
+    const body = {
+      name: opts.name ?? `${slug} consumer`,
+      toolset_binding: { base_id: base, toolset_id: slug }
+    };
+    applyTokenLifecycleOpts(body, opts);
+    const client = await createDataClient();
+    const data = await client.request("POST", "/v1/tokens", body);
+    const output = tokenCreationOutput(this, opts);
+    printCreatedToken(data, output);
+    if (output === "table") {
+      console.log(`
+MCP URL: ${toolsetMcpUrl(slug)}`);
+    }
+  });
+  tokens2.command("list").description("List API tokens (status, last_used_at, expires_at, description)").action(async function() {
+    const client = await createDataClient();
+    printOutput(await listAllTokens(client), outputFormat(this));
+  });
+  tokens2.command("revoke <token_id>").description(
+    "Revoke an API token (permanent). A recently-used or toolset-bound token requires --force."
+  ).option("--force", "Revoke even if the token appears to be in live use").action(async function(tokenId, opts) {
+    const client = await createDataClient();
+    const id = pathSegment(tokenId, "token id");
+    const path42 = (force) => `/v1/tokens/${id}${force ? "?force=true" : ""}`;
+    const format = outputFormat(this);
+    const revoked = (forced) => printOutput({ token_id: tokenId, revoked: true, forced }, format);
+    if (opts.force) {
+      await client.request("DELETE", path42(true));
+      revoked(true);
+      return;
+    }
+    try {
+      await client.request("DELETE", path42(false));
+      revoked(false);
+    } catch (err) {
+      if (!(err instanceof ApiError) || err.status !== 409 || dataErrorDetails(err)?.requires_force !== true) {
+        throw err;
+      }
+      console.error(err.message);
+      if (!isInteractive()) {
+        console.error("\nRe-run with --force to revoke anyway.");
+        return process.exit(1);
+      }
+      if (!await confirm("Revoke anyway?")) {
+        console.error("Aborted.");
+        return process.exit(1);
+      }
+      await client.request("DELETE", path42(true));
+      revoked(true);
+    }
+  });
+  tokens2.command("prune").description(
+    "Revoke stale tokens, selected by staleness only (expired, or unused past --unused-since) \u2014 never by name. Previews by default; revoking requires --yes or an interactive confirmation."
+  ).option(
+    "--unused-since <duration>",
+    "Also prune tokens with no activity for this long (e.g. 30d). Skips toolset-bound and legacy usage-untracked tokens."
+  ).option("--include-bound", "Allow pruning stale toolset-bound (consumer) tokens").option("-y, --yes", "Revoke without prompting (required when non-interactive)").action(async function(opts) {
+    const staleMs = opts.unusedSince ? parseDuration(opts.unusedSince, "--unused-since") : void 0;
+    const client = await createDataClient();
+    const allTokens = await listAllTokens(client);
+    const now = Date.now();
+    const targets = [];
+    const skipped = [];
+    for (const t of allTokens) {
+      const expired = t.status ? t.status === "expired" : !!t.expires_at && Date.parse(t.expires_at) <= now;
+      if (expired) {
+        targets.push(pruneRow(t, "expired"));
+        continue;
+      }
+      if (staleMs === void 0) continue;
+      const lastActivity = Date.parse(t.last_used_at ?? t.created_at);
+      if (!(now - lastActivity > staleMs)) continue;
+      if (t.usage_tracked !== true) {
+        skipped.push(
+          pruneRow(
+            t,
+            "usage untracked (legacy token) \u2014 revoke individually if truly unused"
+          )
+        );
+      } else if (t.toolset_binding && !opts.includeBound) {
+        skipped.push(
+          pruneRow(
+            t,
+            `toolset-bound ('${t.toolset_binding.toolset_id}') \u2014 pass --include-bound to prune`
+          )
+        );
+      } else {
+        targets.push(pruneRow(t, `unused for over ${opts.unusedSince}`));
+      }
+    }
+    const format = outputFormat(this);
+    const json = format === "json";
+    const note = (line) => json ? console.error(line) : console.log(line);
+    const printPreview = () => {
+      if (targets.length === 0) {
+        note("Nothing to prune.");
+      } else {
+        note(`Would revoke ${targets.length} token(s):`);
+        if (!json) printOutput(targets, format);
+      }
+      if (skipped.length === 0) return;
+      note(`
+Skipped ${skipped.length} stale token(s):`);
+      if (!json) printOutput(skipped, format);
+    };
+    printPreview();
+    if (targets.length === 0) {
+      if (json) printOutput({ revoked: 0, failed: 0, targets, skipped }, format);
+      return;
+    }
+    if (!opts.yes) {
+      if (!isInteractive()) {
+        console.error("\nPreview only \u2014 re-run with --yes to revoke these tokens.");
+        if (json) printOutput({ preview: true, revoked: 0, failed: 0, targets, skipped }, format);
+        return process.exit(1);
+      }
+      if (!await confirm(`
+Revoke ${targets.length} token(s)?`)) {
+        console.error("Aborted.");
+        return process.exit(1);
+      }
+    }
+    let revoked = 0;
+    let failed = 0;
+    for (const t of targets) {
+      try {
+        await client.request(
+          "DELETE",
+          `/v1/tokens/${pathSegment(t.token_id, "token id")}?force=true`
+        );
+        revoked++;
+      } catch (err) {
+        failed++;
+        console.error(
+          `Failed to revoke ${t.token_id} ('${sanitizeTerminalText(t.name)}'): ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
+    if (json) printOutput({ revoked, failed, targets, skipped }, format);
+    else console.log(`Revoked ${revoked} token(s)${failed > 0 ? `, ${failed} failed` : ""}.`);
+    if (failed > 0) return process.exit(1);
+  });
+  return tokens2;
+}
+var RAW_TOKEN_PATTERN, TOKEN_OUTPUT_HELP, TOKEN_LIST_PAGE_LIMIT;
+var init_tokens = __esm({
+  "src/data/commands/tokens.ts"() {
+    "use strict";
+    init_client();
+    init_output();
+    init_helpers();
+    init_api_client();
+    init_terminal_output();
+    init_utils();
+    init_expected();
+    RAW_TOKEN_PATTERN = /^rec_[A-Za-z0-9_-]{43}$/;
+    TOKEN_OUTPUT_HELP = `
+Output:
+  --json prints the unwrapped response object; the secret is at top-level .token, never .data.token.
+  --token-only prints only a validated rec_ token and overrides table/JSON formatting.
+  The raw token is shown once. Capture it securely and do not log it.
+`;
+    TOKEN_LIST_PAGE_LIMIT = 250;
+  }
+});
+
 // src/knowledge/remote.ts
 function pacedRequestsPerMinute(path42, fallback) {
   const budget = getEndpointConfig(path42)?.userLimit;
@@ -34702,6 +35163,14 @@ function knowledgeBase(client) {
   const request = (method, path42, body) => pacer.run(() => client.request(method, path42, body));
   const baseSeg = (id) => pathSegment(id, "--base");
   const typeSeg = (id) => pathSegment(id, "file type");
+  const toolsetSeg = (id) => pathSegment(id, "toolset slug");
+  const promoteOnly = (production, preview, section, ids, dryRun) => request("POST", `/v1/${baseSeg(production)}/promote`, {
+    source_base_id: preview,
+    dry_run: dryRun,
+    ...Object.fromEntries(ENTITY_KINDS.map((kind) => [kind, []])),
+    file_types: [],
+    [section]: ids
+  });
   return {
     getBase: (id) => unlessMissing(() => pacer.run(() => getBaseRecord(client, id))),
     listPreviews: (id) => pacer.run(
@@ -34713,14 +35182,7 @@ function knowledgeBase(client) {
       const { id, ...body } = spec;
       await request("PUT", `/v1/${baseSeg(base)}/file-types/${typeSeg(id)}`, body);
     },
-    async promoteFileTypes(production, preview, ids, dryRun) {
-      return request("POST", `/v1/${baseSeg(production)}/promote`, {
-        source_base_id: preview,
-        dry_run: dryRun,
-        ...Object.fromEntries(ENTITY_KINDS.map((kind) => [kind, []])),
-        file_types: ids
-      });
-    },
+    promoteFileTypes: (production, preview, ids, dryRun) => promoteOnly(production, preview, "file_types", ids, dryRun),
     async listFiles(base, fileType) {
       const rows = [];
       for (let page = 0; page < MAX_LIST_PAGES; page++) {
@@ -34731,6 +35193,13 @@ function knowledgeBase(client) {
       }
       throw expected(`The listing of file type "${fileType}" on base "${base}" did not end after ${MAX_LIST_PAGES} pages.`);
     },
+    getToolset: (base, slug) => unlessMissing(() => request("GET", `/v1/${baseSeg(base)}/toolsets/${toolsetSeg(slug)}`)),
+    async putToolset(base, spec) {
+      const { id, ...body } = spec;
+      await request("PUT", `/v1/${baseSeg(base)}/toolsets/${toolsetSeg(id)}`, { ...body, actions: [] });
+    },
+    promoteToolsets: (production, preview, slugs, dryRun) => promoteOnly(production, preview, "toolsets", slugs, dryRun),
+    mintToolsetToken: async (base, slug, name) => rawTokenFrom(await request("POST", "/v1/tokens", { name, toolset_binding: { base_id: base, toolset_id: slug } })),
     // `requestRaw`: the page is read whole, `{ data: … }`, as WayAI's copy of its answer declares it
     // (`@wayai/core/contracts` `rekorFileSnapshotAnswerSchema`).
     snapshotPage: (preview, cursor) => pacer.run(() => client.requestRaw("POST", `/v1/${baseSeg(preview)}/files/snapshot`, cursor === void 0 ? {} : { cursor })),
@@ -34746,7 +35215,70 @@ function knowledgeBase(client) {
     }
   };
 }
-var LIST_PAGE, MAX_LIST_PAGES, MIGRATION_LABEL, READER_BUDGETS;
+function connectionsOf(rows) {
+  return (rows ?? []).flatMap(
+    (c) => c.connection_id ? [{ connection_id: c.connection_id, connection_display_name: c.connection_display_name, connector_id: c.connector_id, settings: c.settings }] : []
+  );
+}
+function hubSetup(api, orgId, pacers = {
+  setup: pacerFor(CUT_OVER_BUDGETS.setup, "setup"),
+  automations: pacerFor(CUT_OVER_BUDGETS.automations, "automations")
+}) {
+  const run = (send) => pacers.setup.run(send);
+  const auto = (send) => pacers.automations.run(send);
+  return {
+    listHubs: async () => hubsOf(await run(() => api.getUserSchema()), orgId),
+    hubDiff: async (hubId) => (await run(() => api.getHubDiff(hubId))).data,
+    // The rows are the hub's `resource` rows whole, the move's mark (`moved_file_type`) among them.
+    listResources: async (hubId) => (await run(() => api.listHubResources(hubId))).data ?? [],
+    listAgents: async (hubId) => (await run(() => api.listAgents(hubId))).data ?? [],
+    listAgentLinks: async (hubId, agentId) => (await run(() => api.listAgentResources(hubId, agentId))).resources ?? [],
+    listAgentTools: async (hubId, agentId) => {
+      const tools = await run(() => api.listAgentTools(hubId, agentId));
+      return { native: tools.tools ?? [], connection: (tools.mcp_tools ?? []).map((t) => ({ ...t, tool_id: t.tool_id ?? null })) };
+    },
+    listConnections: async (hubId) => connectionsOf((await run(() => api.listConnections(hubId))).connections),
+    listAutomations: async (hubId) => (await auto(() => api.listAutomations(hubId))).automations ?? [],
+    // The answer lists the hub's connections, the new one among them.
+    addToolsetConnection: async (hubId, input) => connectionsOf(
+      (await run(
+        () => api.addConnection({
+          hub_id: hubId,
+          connector_id: input.connectorId,
+          connection_display_name: input.name,
+          settings: { [TOOLSET_SLUG_SETTING]: input.toolset },
+          access_token: input.token
+        })
+      )).connections
+    ),
+    async syncConnection(hubId, connectionId) {
+      const answer = await run(() => api.syncMcp(hubId, connectionId));
+      if (!answer.success) {
+        throw expected(`Syncing connection ${connectionId}'s tools failed: ${sanitizeTerminalText(answer.message ?? "no reason given")}`);
+      }
+    },
+    async addNativeTool(hubId, agentId, toolNativeId) {
+      await run(() => api.addNativeTool(hubId, agentId, toolNativeId));
+    },
+    async addConnectionTool(hubId, agentId, mcpToolId) {
+      await run(() => api.addMcpTool(hubId, agentId, mcpToolId));
+    },
+    async enableTool(hubId, agentId, toolId) {
+      await run(() => api.enableTool(hubId, agentId, toolId));
+    },
+    async updateAgentText(hubId, agentId, patch) {
+      await run(() => api.updateAgent(hubId, agentId, patch));
+    },
+    async updateAutomationAction(hubId, automationId, action) {
+      await auto(() => api.updateAutomation(hubId, automationId, { action }));
+    },
+    async disableLink(hubId, agentId, resourceId) {
+      await run(() => api.updateAgentResource({ hub_id: hubId, agent_id: agentId, resource_id: resourceId, enabled: false }));
+    },
+    recordMove: async (body) => (await run(() => api.recordKnowledgeMove(body))).data.recorded
+  };
+}
+var LIST_PAGE, MAX_LIST_PAGES, MIGRATION_LABEL, READER_BUDGETS, CUT_OVER_BUDGETS;
 var init_remote = __esm({
   "src/knowledge/remote.ts"() {
     "use strict";
@@ -34759,10 +35291,14 @@ var init_remote = __esm({
     init_types2();
     init_headers();
     init_helpers();
+    init_terminal_output();
+    init_tokens();
+    init_rekor_toolset();
     LIST_PAGE = 1e3;
     MAX_LIST_PAGES = 1e3;
     MIGRATION_LABEL = "wayai knowledge migrate";
     READER_BUDGETS = { setup: "/api/setup/organization-resources", sign: "/api/files/sign" };
+    CUT_OVER_BUDGETS = { setup: "/api/setup/agents", automations: "/api/automations" };
   }
 });
 
@@ -34797,6 +35333,520 @@ var init_refresh_preview = __esm({
   }
 });
 
+// ../../packages/core/dist/catalog/index.js
+function getConnectors(filter) {
+  if (!filter?.connector_type && !filter?.service_name) return CONNECTORS;
+  return CONNECTORS.filter(
+    (c) => (!filter.connector_type || c.connector_type === filter.connector_type) && (!filter.service_name || c.service_name === filter.service_name)
+  );
+}
+function getConnectorById(id) {
+  return connectorById.get(id) ?? null;
+}
+function isRekorToolsetConnector(connector) {
+  return connector?.service_name === REKOR_TOOLSET_SERVICE_NAME;
+}
+function isRekorToolsetConnectorId(connectorId) {
+  return typeof connectorId === "string" && isRekorToolsetConnector(connectorById.get(connectorId));
+}
+var COUNTER_KEYS, STT_PRICING, CONTAINER_PRICING, connectorById, nativeToolById;
+var init_catalog = __esm({
+  "../../packages/core/dist/catalog/index.js"() {
+    "use strict";
+    init_chunk_GMWMQ4YA();
+    init_chunk_LQSENJ26();
+    init_chunk_UZ7SPBM3();
+    init_chunk_MIWZOSPI();
+    init_chunk_DHPUPI4Y();
+    COUNTER_KEYS = Object.keys({
+      input_tokens: true,
+      output_tokens: true,
+      cache_read_input_tokens: true,
+      cache_creation_input_tokens: true,
+      cache_creation_1h_input_tokens: true
+    });
+    STT_PRICING = {
+      "Openai/whisper-1": { per_second: 6e-3 / 60 },
+      "Openai/gpt-4o-mini-transcribe": { per_second: 3e-3 / 60 },
+      "Groq/whisper-large-v3-turbo": { per_second: 0.04 / 3600 },
+      "ElevenLabs/scribe_v2": { per_second: 0.22 / 3600 }
+    };
+    CONTAINER_PRICING = {
+      anthropic_per_request_usd: 0.05 * 10 / 3600,
+      // $0.05/hr × ~10s/request ≈ $0.000139
+      openai_per_session_usd: 0.03
+      // 1GB tier, 20-min session
+    };
+    connectorById = new Map(CONNECTORS.map((c) => [c.connector_id, c]));
+    nativeToolById = new Map(NATIVE_TOOLS.map((t) => [t.tool_native_id, t]));
+  }
+});
+
+// src/knowledge/cut-over.ts
+import { createHash as createHash6 } from "crypto";
+import { isDeepStrictEqual as isDeepStrictEqual4 } from "util";
+function toolsetSlug(productionHubId, fileTypes) {
+  const hash = createHash6("sha256").update([productionHubId, ...fileTypes].join("\n")).digest("hex").slice(0, 12);
+  return `${CUT_OVER_TOOLSET_PREFIX}${hash}`;
+}
+function toolsetEntry(fileType) {
+  const base = toolBase(fileType);
+  return { file_type: fileType, operations: [...FILE_OPERATIONS], ...base === fileType ? {} : { name: base } };
+}
+function toolsetToolName(op, fileType) {
+  return toolsetFileToolName(toolsetEntry(fileType), op);
+}
+function rewriteCitations(text, fileTypeBySlug) {
+  return text.replace(CITATION_RE, (whole, slash, slug) => {
+    const fileType = fileTypeBySlug.get(slug.toLowerCase());
+    return fileType ? `${slash}${DATA_NAMESPACE}/${fileType}` : whole;
+  });
+}
+function knowledgePlaceholders(template, losing) {
+  if (losing.length === 0 || !template.includes("{{")) return [];
+  const scan = scanTemplateResources(template);
+  const kinds = scanTemplateResources(template.replace(/\{\{(\s*)files(\s*\()/g, "{{$1resources$2")).legacy_kinds;
+  const uses = [];
+  if (kinds === "all" || kinds === "kb") uses.push("a {{files()}} catalog that lists knowledge");
+  const names = new Set(losing.map((r) => r.name));
+  for (const name of scan.resource_content_names) if (names.has(name)) uses.push(`{{resource_content(${name})}}`);
+  const slugs = new Set(losing.map((r) => r.slug));
+  for (const path42 of scan.file_content_paths) {
+    const [namespace, slug] = cleanRelativePath(path42).split("/");
+    if (namespace?.toLowerCase() === RESOURCE_NAMESPACE && slug && slugs.has(slug.toLowerCase())) {
+      uses.push(`{{file_content(${path42})}}`);
+    }
+  }
+  return uses;
+}
+function sameToolset(remote, spec) {
+  if (!remote) return false;
+  const files = (entries) => [...entries ?? []].map((e) => ({ file_type: e.file_type, operations: [...e.operations].sort(), name: e.name ?? null, path_prefix: e.path_prefix || null })).sort((a, b) => a.file_type.localeCompare(b.file_type));
+  return remote.name === spec.name && (remote.description ?? "") === spec.description && (remote.actions ?? []).length === 0 && (remote.relationships ?? []).length === 0 && !remote.batch && !remote.sql_query && isDeepStrictEqual4(files(remote.files), files(spec.files));
+}
+function toolsetConnectorId() {
+  const connector = getConnectors().find((c) => isRekorToolsetConnector(c));
+  if (!connector) throw new Error("The Base Toolset connector is missing from the catalog");
+  return connector.connector_id;
+}
+function cutOverToolsetOf(connection) {
+  const toolset = connection.settings?.[TOOLSET_SLUG_SETTING];
+  return isRekorToolsetConnectorId(connection.connector_id) && typeof toolset === "string" && CUT_OVER_TOOLSET_RE.test(toolset) ? toolset : null;
+}
+function wantedConnectionTools(fileTypes) {
+  return fileTypes.flatMap((ft) => FILE_OPERATIONS.map((op) => toolsetToolName(op, ft)));
+}
+function toolWork(tools, wanted, connectionId) {
+  const native = [];
+  const unavailable = [];
+  for (const name of MOUNT_TOOLS) {
+    const row = tools.native.find((t) => t.tool_name === name);
+    if (!row) unavailable.push(name);
+    else if (row.available_action !== "Disable") native.push(row);
+  }
+  const connection = [];
+  const uncatalogued = [];
+  for (const name of wanted) {
+    const row = connectionId ? tools.connection.find((t) => t.connection_id === connectionId && t.tool_name === name) : void 0;
+    if (!row) uncatalogued.push(name);
+    else if (row.available_action !== "Disable") connection.push(row);
+  }
+  return { native, connection, uncatalogued, unavailable };
+}
+function describeToolWork(work) {
+  return [
+    ...work.native.map((t) => `${t.available_action === "Enable" ? "enable" : "add"} ${t.tool_name}`),
+    ...work.connection.map((t) => `${t.available_action === "Enable" ? "enable" : "add"} ${t.tool_name}`),
+    ...work.uncatalogued.map((name) => `add ${name}`)
+  ];
+}
+async function cutOverHub(hub, kb, opts, io) {
+  const { production, preview } = await resolveBases(kb, opts.base, opts.orgId);
+  const stops = [];
+  const hubs = await hub.listHubs();
+  const previewHub = hubs.find((h) => h.hub_id === opts.hubId);
+  if (!previewHub) throw expected(`Hub ${safe2(opts.hubId)} not found in this organization, or you cannot read it.`);
+  if (previewHub.hub_environment !== "preview") {
+    throw expected(`Hub ${safe2(opts.hubId)} is a production hub. A hub is cut over on its preview; publishing carries it to production.`);
+  }
+  const productionHub2 = previewHub.production_hub_id ? hubs.find((h) => h.hub_id === previewHub.production_hub_id) : void 0;
+  if (!productionHub2) {
+    throw expected(`Hub ${safe2(opts.hubId)} has not been published, and its knowledge moved from its production hub. Publish it, then migrate its knowledge first.`);
+  }
+  const productionHubId = productionHub2.hub_id;
+  const fileTypes = await kb.listFileTypes(production);
+  const fileTypeBySource = /* @__PURE__ */ new Map();
+  for (const ft of fileTypes) {
+    const source = provenanceOf(ft.metadata_schema);
+    if (source) fileTypeBySource.set(source, ft.id);
+  }
+  const resources = await hub.listResources(opts.hubId);
+  const ownKnowledge = (rows) => rows.filter((r) => r.resource_type === "knowledge" && !r.org_resource_id);
+  const productionOwn = ownKnowledge(await hub.listResources(productionHubId));
+  const previewOwn = ownKnowledge(resources);
+  const diff = await hub.hubDiff(opts.hubId);
+  const marked = new Set(previewOwn.filter((r) => r.moved_file_type).map((r) => r.resource_name));
+  const knowledgeNames = new Set([...previewOwn, ...productionOwn].map((r) => r.resource_name).filter((name) => !marked.has(name)));
+  const changed = [
+    ...diff.resources.filter((e) => knowledgeNames.has(e.name)).map((e) => `resource "${e.name}" (${e.status})`),
+    ...(diff.resource_folders ?? []).filter((e) => e.type && knowledgeNames.has(e.type)).map((e) => `a folder of "${e.type}"`),
+    ...(diff.resource_files ?? []).filter((e) => e.type && knowledgeNames.has(e.type)).map((e) => `a file of "${e.type}"`)
+  ];
+  if (changed.length > 0) {
+    stops.push(
+      `The preview's knowledge resources differ from production's, which moved (${[...new Set(changed)].join(", ")}): sync or discard those changes first, so its agents are cut over to what they read.`
+    );
+  }
+  const fileTypeOf = /* @__PURE__ */ new Map();
+  for (const resource of resources) {
+    if (resource.resource_type !== "knowledge") continue;
+    if (resource.org_resource_id) {
+      const ft2 = fileTypeBySource.get(orgSourceKey(resource.org_resource_id));
+      if (ft2) fileTypeOf.set(resource.resource_id, ft2);
+      continue;
+    }
+    if (resource.moved_file_type) {
+      fileTypeOf.set(resource.resource_id, resource.moved_file_type);
+      continue;
+    }
+    const twins = productionOwn.filter((r) => r.resource_name === resource.resource_name);
+    const previewTwins = previewOwn.filter((r) => r.resource_name === resource.resource_name);
+    if (twins.length > 1 || previewTwins.length > 1) {
+      stops.push(`Two knowledge resources are named "${resource.resource_name}": rename one (in the preview, then sync), so each pairs with its production copy.`);
+      continue;
+    }
+    const ft = twins[0] ? fileTypeBySource.get(hubSourceKey(productionHubId, twins[0].resource_id)) : void 0;
+    if (ft) fileTypeOf.set(resource.resource_id, ft);
+  }
+  const productionHubs = hubs.filter((h) => h.hub_environment === "production");
+  for (const resource of previewOwn) {
+    const ft = fileTypeOf.get(resource.resource_id);
+    if (!ft || resource.moved_file_type) continue;
+    const hubPart = hubPartOf(ft);
+    const holders = productionHubs.filter((h) => slugifySkillName(h.hub_name) === hubPart);
+    if (holders.length > 1) {
+      stops.push(
+        `File type "${ft}" names the hub slug "${hubPart}", which ${holders.length} production hubs share (${holders.map((h) => `"${h.hub_name}"`).join(", ")}): its move can't be recorded until all but one are renamed.`
+      );
+    }
+  }
+  const slugById = buildResourceSlugMap(resources);
+  const fileTypeBySlug = /* @__PURE__ */ new Map();
+  for (const [resourceId, ft] of fileTypeOf) {
+    const slug = slugById.get(resourceId);
+    if (slug) fileTypeBySlug.set(slug, ft);
+  }
+  const byId = new Map(resources.map((r) => [r.resource_id, r]));
+  const connections = await hub.listConnections(opts.hubId);
+  const previewToolsets = /* @__PURE__ */ new Map();
+  const connectionBySlug = /* @__PURE__ */ new Map();
+  for (const connection of connections) {
+    const slug = cutOverToolsetOf(connection);
+    if (!slug) continue;
+    connectionBySlug.set(slug, connection);
+    if (!previewToolsets.has(slug)) previewToolsets.set(slug, await kb.getToolset(preview, slug));
+  }
+  const toolsetTypes = (slug) => (previewToolsets.get(slug)?.files ?? []).map((e) => e.file_type);
+  const slugByConnection = new Map([...connectionBySlug].map(([slug, c]) => [c.connection_id, slug]));
+  const agents = await hub.listAgents(opts.hubId);
+  const plans = [];
+  for (const agent of agents) {
+    const links2 = (await hub.listAgentLinks(opts.hubId, agent.agent_id)).filter((l) => l.resource_type === "knowledge");
+    const enabled = links2.filter((l) => l.enabled);
+    const tools = await hub.listAgentTools(opts.hubId, agent.agent_id);
+    const set = /* @__PURE__ */ new Set();
+    for (const link of enabled) {
+      const ft = fileTypeOf.get(link.resource_id);
+      const resource = byId.get(link.resource_id);
+      if (!ft) {
+        stops.push(
+          `Agent "${agent.agent_name}" reads knowledge resource "${resource?.resource_name ?? link.resource_id}", which has not moved: move it first (\`wayai knowledge migrate --org ${opts.orgId} --base ${opts.base}${resource?.org_resource_id ? "" : ` --hub ${productionHubId}`}\`).`
+        );
+        continue;
+      }
+      set.add(ft);
+    }
+    for (const tool of tools.connection) {
+      const slug = tool.connection_id ? slugByConnection.get(tool.connection_id) : void 0;
+      if (slug && tool.available_action === "Disable") for (const ft of toolsetTypes(slug)) set.add(ft);
+    }
+    const runner = connections.find((c) => c.connection_id === agent.connection_id);
+    if (enabled.length > 0 && runner && getConnectorById(runner.connector_id)?.is_harness === true) {
+      stops.push(
+        `Agent "${agent.agent_name}" runs on a hosted harness, which takes no Base Toolset's tools yet, so it would lose its knowledge: connect it to a toolset through an MCP Server connection, or detach its knowledge links, then run again.`
+      );
+    }
+    const losing = enabled.flatMap((link) => {
+      const resource = byId.get(link.resource_id);
+      const slug = slugById.get(link.resource_id);
+      return resource && slug ? [{ slug, name: resourceDisplayName(resource) }] : [];
+    });
+    for (const [field, template] of [
+      ["instructions", agent.instructions],
+      ["additional context", agent.additional_context_template]
+    ]) {
+      for (const use of knowledgePlaceholders(template ?? "", losing)) {
+        stops.push(
+          `Agent "${agent.agent_name}" uses ${use} in its ${field}, which reads nothing once its knowledge moves (K19): move that text into its instructions or a skill, then run again.`
+        );
+      }
+    }
+    if (set.size > 0 || enabled.length > 0) plans.push({ agent, fileTypes: [...set].sort(), linksToDisable: enabled, tools });
+  }
+  const groups = /* @__PURE__ */ new Map();
+  for (const plan of plans) {
+    if (plan.fileTypes.length === 0) continue;
+    const slug = toolsetSlug(productionHubId, plan.fileTypes);
+    const group = groups.get(slug);
+    if (group) {
+      group.agents.push(plan.agent);
+      plan.group = group;
+      continue;
+    }
+    plan.group = {
+      slug,
+      fileTypes: plan.fileTypes,
+      agents: [plan.agent],
+      connection: connectionBySlug.get(slug),
+      created: !connectionBySlug.has(slug),
+      spec: {
+        id: slug,
+        name: `Knowledge of ${previewHub.hub_name}`.slice(0, 200),
+        description: `Read-only knowledge for agents of hub ${productionHubId}, written by wayai knowledge cut-over: list and get on ${plan.fileTypes.join(", ")}.`,
+        files: plan.fileTypes.map(toolsetEntry)
+      }
+    };
+    groups.set(slug, plan.group);
+  }
+  const plannedTypes = [...new Set([...groups.values()].flatMap((g) => g.fileTypes))].sort();
+  const missing = [];
+  for (const ft of plannedTypes) {
+    const [inProduction, inPreview] = await Promise.all([kb.listFiles(production, ft), filesOrNone(kb, preview, ft)]);
+    const there = new Set(inPreview.map((f) => f.path));
+    for (const file of inProduction) if (!there.has(file.path)) missing.push(`${ft}/${file.path}`);
+  }
+  if (missing.length > 0) {
+    stops.push(
+      `The preview base "${preview}" lacks ${missing.length} file(s) production holds (${missing.slice(0, 5).join(", ")}${missing.length > 5 ? ", \u2026" : ""}), so the preview's agents would read none of them: copy them in with \`${refreshPreviewCommand(opts.orgId, opts.base)}\`, then run again.`
+    );
+  }
+  const toolsetsToWrite = [];
+  const toolsetsToPromote = [];
+  for (const group of groups.values()) {
+    const [inPreview, inProduction] = await Promise.all([
+      previewToolsets.has(group.slug) ? previewToolsets.get(group.slug) : kb.getToolset(preview, group.slug),
+      kb.getToolset(production, group.slug)
+    ]);
+    if (!sameToolset(inPreview, group.spec)) toolsetsToWrite.push(group.spec);
+    if (!sameToolset(inProduction, group.spec)) toolsetsToPromote.push(group.spec);
+  }
+  const connectionsToCreate = [...groups.values()].filter((g) => g.created);
+  const toolLines = [];
+  let toolWrites = 0;
+  for (const plan of plans) {
+    const group = plan.group;
+    if (!group) continue;
+    const work = toolWork(plan.tools, wantedConnectionTools(group.fileTypes), group.connection?.connection_id);
+    for (const name of work.unavailable) stops.push(`Agent "${plan.agent.agent_name}" can't be given ${name}: the hub offers it no such tool.`);
+    const lines = describeToolWork(work);
+    toolWrites += lines.length;
+    if (lines.length > 0) toolLines.push(`  ${safe2(plan.agent.agent_name)}: ${lines.map(safe2).join(", ")} (${group.slug})`);
+  }
+  const agentRewrites = [];
+  for (const agent of agents) {
+    const patch = {};
+    const instructions = rewriteCitations(agent.instructions ?? "", fileTypeBySlug);
+    if (instructions !== (agent.instructions ?? "")) patch.instructions = instructions;
+    const context = rewriteCitations(agent.additional_context_template ?? "", fileTypeBySlug);
+    if (context !== (agent.additional_context_template ?? "")) patch.additional_context_template = context;
+    if (Object.keys(patch).length > 0) agentRewrites.push({ agent, patch });
+  }
+  const automationRewrites = [];
+  for (const automation of await hub.listAutomations(opts.hubId)) {
+    const text = automation.action.type === "run_agent" ? automation.action.instructions : null;
+    if (!text) continue;
+    const rewritten = rewriteCitations(text, fileTypeBySlug);
+    if (rewritten !== text) automationRewrites.push({ automation, action: { ...automation.action, instructions: rewritten } });
+  }
+  const moves = [];
+  for (const resource of previewOwn) {
+    const ft = fileTypeOf.get(resource.resource_id);
+    if (!ft || resource.moved_file_type) continue;
+    moves.push({
+      body: { scope: "hub", hub_id: opts.hubId, resource_id: resource.resource_id, file_type: ft, base_id: production },
+      label: `hub resource "${resource.resource_name}" \u2192 ${ft}`
+    });
+  }
+  const orgRecorded = /* @__PURE__ */ new Set();
+  for (const plan of plans) {
+    for (const link of plan.linksToDisable) {
+      const resource = byId.get(link.resource_id);
+      const ft = fileTypeOf.get(link.resource_id);
+      if (!resource?.org_resource_id || !ft || orgRecorded.has(resource.org_resource_id)) continue;
+      orgRecorded.add(resource.org_resource_id);
+      moves.push({
+        body: { scope: "organization", organization_id: opts.orgId, org_resource_id: resource.org_resource_id, file_type: ft, base_id: production },
+        label: `organization resource "${resource.resource_name}" \u2192 ${ft}`
+      });
+    }
+  }
+  const links = plans.flatMap((plan) => plan.linksToDisable.map((link) => ({ plan, link })));
+  const result = {
+    toolsets: [...groups.values()].map((g) => ({ slug: g.slug, fileTypes: g.fileTypes, agents: g.agents.map((a) => a.agent_name) })),
+    toolsetsWritten: toolsetsToWrite.map((s) => s.id),
+    toolsetsPromoted: toolsetsToPromote.map((s) => s.id),
+    connectionsCreated: connectionsToCreate.map((g) => g.slug),
+    toolsAssigned: toolLines,
+    agentsRewritten: agentRewrites.map((r) => r.agent.agent_name),
+    automationsRewritten: automationRewrites.map((r) => r.automation.name),
+    movesRecorded: moves.map((m) => m.label),
+    linksDisabled: links.map(({ plan, link }) => `${plan.agent.agent_name}: ${byId.get(link.resource_id)?.resource_name ?? link.resource_id}`),
+    written: false
+  };
+  io.log(`Cut-over of hub "${safe2(previewHub.hub_name)}" (${opts.hubId}) to base "${safe2(production)}" (toolsets written in "${safe2(preview)}")`);
+  io.log("\nToolsets (read-only: list and get):");
+  if (groups.size === 0) io.log("  (none: no agent reads moved knowledge)");
+  for (const group of groups.values()) {
+    const mark = toolsetsToPromote.includes(group.spec) || toolsetsToWrite.includes(group.spec) ? "+" : "=";
+    io.log(`  ${mark} ${group.slug}: ${group.fileTypes.map(safe2).join(", ")} \u2014 ${group.agents.map((a) => safe2(a.agent_name)).join(", ")}`);
+  }
+  io.log("\nConnections:");
+  for (const group of groups.values()) {
+    io.log(`  ${group.connection ? "=" : "+"} Base Toolset "${group.slug}"${group.connection ? "" : ", with a new token bound to it on the preview base"}`);
+  }
+  io.log("\nAgent tools:");
+  if (toolLines.length === 0) io.log("  (nothing to assign)");
+  for (const line of toolLines) io.log(line);
+  io.log("\nPaths rewritten to data/ (K13):");
+  if (agentRewrites.length + automationRewrites.length === 0) io.log("  (none)");
+  for (const { agent, patch } of agentRewrites) io.log(`  agent "${safe2(agent.agent_name)}": ${Object.keys(patch).join(", ")}`);
+  for (const { automation } of automationRewrites) io.log(`  automation "${safe2(automation.name)}": instructions`);
+  io.log("\nMoves recorded:");
+  if (moves.length === 0) io.log("  (none)");
+  for (const move of moves) io.log(`  + ${safe2(move.label)}`);
+  io.log("\nKnowledge links disabled:");
+  if (links.length === 0) io.log("  (none)");
+  for (const line of result.linksDisabled) io.log(`  - ${safe2(line)}`);
+  if (stops.length > 0) {
+    io.log("\nStopped:");
+    for (const stop of stops) io.log(`  ${safe2(stop)}`);
+    throw expected(`The cut-over stops on ${stops.length} reason(s) above; nothing was written.`);
+  }
+  const writes = toolsetsToWrite.length + toolsetsToPromote.length + connectionsToCreate.length + toolWrites + agentRewrites.length + automationRewrites.length + moves.length + links.length;
+  const printProduction = () => printProductionSteps(io, opts, production, productionHubId, [...groups.values()]);
+  if (opts.dryRun) {
+    io.log(`
+Dry run: nothing written (${writes === 0 ? "nothing to write" : `${writes} write(s) planned`}).`);
+    printProduction();
+    return result;
+  }
+  if (writes === 0) {
+    io.log("\nNothing to write: this hub is cut over.");
+    printProduction();
+    return result;
+  }
+  if (!opts.yes && !await io.confirm(`Make these ${writes} change(s) to the preview hub and its knowledge base?`)) {
+    io.log("Cancelled.");
+    return result;
+  }
+  for (const move of moves) await hub.recordMove(move.body);
+  for (const spec of toolsetsToWrite) await kb.putToolset(preview, spec);
+  if (toolsetsToPromote.length > 0) {
+    const slugs = toolsetsToPromote.map((s) => s.id);
+    const problems2 = promotionProblems(await kb.promoteToolsets(production, preview, slugs, true), new Set(slugs), "toolsets");
+    if (problems2.length > 0) {
+      throw expected(
+        `The promotion into "${safe2(production)}" would not apply as planned (${problems2.map(safe2).join("; ")}). The toolsets are written in "${safe2(preview)}"; nothing reached production, and the hub's agents are unchanged.`
+      );
+    }
+    await kb.promoteToolsets(production, preview, slugs, false);
+  }
+  if (connectionsToCreate.length > 0) {
+    const connectorId = toolsetConnectorId();
+    for (const group of connectionsToCreate) {
+      const token = await kb.mintToolsetToken(preview, group.slug, `${group.slug} (hub ${opts.hubId})`);
+      const after = await hub.addToolsetConnection(opts.hubId, { connectorId, name: group.slug, toolset: group.slug, token });
+      group.connection = after.find((c) => cutOverToolsetOf(c) === group.slug);
+      if (!group.connection) throw new Error(`The Base Toolset connection "${group.slug}" was not found after it was created.`);
+    }
+  }
+  const synced2 = /* @__PURE__ */ new Set();
+  for (const plan of plans) {
+    const group = plan.group;
+    if (!group?.connection) continue;
+    const connectionId = group.connection.connection_id;
+    const wanted = wantedConnectionTools(group.fileTypes);
+    const stale = group.created || synced2.has(connectionId);
+    let tools = stale ? await hub.listAgentTools(opts.hubId, plan.agent.agent_id) : plan.tools;
+    let work = toolWork(tools, wanted, connectionId);
+    if (work.uncatalogued.length > 0 && !synced2.has(connectionId)) {
+      await hub.syncConnection(opts.hubId, connectionId);
+      synced2.add(connectionId);
+      tools = await hub.listAgentTools(opts.hubId, plan.agent.agent_id);
+      work = toolWork(tools, wanted, connectionId);
+    }
+    if (work.uncatalogued.length > 0) {
+      throw new Error(
+        `Connection "${group.slug}" catalogs no ${safe2(work.uncatalogued.join(", "))} after a sync, so agent "${safe2(plan.agent.agent_name)}" can't be given them.`
+      );
+    }
+    for (const tool of [...work.native, ...work.connection]) {
+      if (tool.available_action === "Enable" && tool.tool_id) await hub.enableTool(opts.hubId, plan.agent.agent_id, tool.tool_id);
+      else if (tool.tool_native_id) await hub.addNativeTool(opts.hubId, plan.agent.agent_id, tool.tool_native_id);
+      else if (tool.mcp_tool_id) await hub.addConnectionTool(opts.hubId, plan.agent.agent_id, tool.mcp_tool_id);
+    }
+  }
+  for (const { agent, patch } of agentRewrites) await hub.updateAgentText(opts.hubId, agent.agent_id, patch);
+  for (const { automation, action } of automationRewrites) await hub.updateAutomationAction(opts.hubId, automation.automation_id, action);
+  for (const { plan, link } of links) await hub.disableLink(opts.hubId, plan.agent.agent_id, link.resource_id);
+  io.log(`
+Done: the preview hub's agents read their knowledge from "${safe2(preview)}" through ${groups.size} toolset(s).`);
+  printProduction();
+  return { ...result, written: true };
+}
+async function filesOrNone(kb, base, fileType) {
+  try {
+    return await kb.listFiles(base, fileType);
+  } catch (err) {
+    if (err instanceof ApiError && err.status === 404) return [];
+    throw err;
+  }
+}
+function printProductionSteps(io, opts, production, productionHubId, groups) {
+  if (groups.length === 0) return;
+  io.log("\nProduction (not run by this command), once the preview passes its evals:");
+  io.log(`  1. Publish the preview: wayai publish --hub ${opts.hubId}`);
+  io.log("  2. For each toolset, mint a token bound to it on the production base, and save it on production's connection:");
+  for (const group of groups) {
+    io.log(
+      `     wayai bases tokens create-for-toolset ${group.slug} --base ${safe2(production)} --token-only | wayai set-connection-credential --hub ${productionHubId} --connection "${group.slug}" --field access_token --stdin`
+    );
+  }
+}
+var CUT_OVER_TOOLSET_PREFIX, CUT_OVER_TOOLSET_RE, FILE_OPERATIONS, MOUNT_TOOLS, DATA_NAMESPACE, safe2, CITATION_RE;
+var init_cut_over = __esm({
+  "src/knowledge/cut-over.ts"() {
+    "use strict";
+    init_dist();
+    init_catalog();
+    init_rekor_toolset();
+    init_resource_paths();
+    init_expected();
+    init_terminal_output();
+    init_api_client();
+    init_migrate2();
+    init_plan();
+    init_source();
+    CUT_OVER_TOOLSET_PREFIX = "knowledge-";
+    CUT_OVER_TOOLSET_RE = /^knowledge-[0-9a-f]{12}$/;
+    FILE_OPERATIONS = ["list", "get"];
+    MOUNT_TOOLS = ["list_files", "read_file"];
+    DATA_NAMESPACE = "data";
+    safe2 = (text) => sanitizeTerminalText(text);
+    CITATION_RE = /(?<![\w./-])(\/?)resources\/([a-z0-9]+(?:-[a-z0-9]+)*)(?![a-z0-9_]|-[a-z0-9]|\.\w)/gi;
+  }
+});
+
 // src/commands/knowledge.ts
 var knowledge_exports = {};
 __export(knowledge_exports, {
@@ -34818,7 +35868,7 @@ function readArgs(args2) {
 function parseKnowledgeArgs(args2) {
   const { values, positionals } = readArgs(args2);
   const [verb, ...extra] = positionals;
-  if (verb !== "migrate" && verb !== "refresh-preview") {
+  if (verb !== "migrate" && verb !== "refresh-preview" && verb !== "cut-over") {
     throw usageError3(verb === void 0 ? "No subcommand given." : `Unknown subcommand ${JSON.stringify(verb)}.`);
   }
   if (extra.length > 0) throw usageError3(`Unexpected argument ${JSON.stringify(extra[0])}.`);
@@ -34826,13 +35876,17 @@ function parseKnowledgeArgs(args2) {
   if (!UUID_RE3.test(values.org)) throw usageError3(`Invalid --org ${JSON.stringify(values.org)}: expected an organization id (a UUID).`);
   if (!values.base) throw usageError3("--base <knowledge base> is required.");
   if (verb === "refresh-preview") {
-    if (values.hub !== void 0) throw usageError3("--hub is migrate's: a refresh copies the whole knowledge base.");
-    if (values["dry-run"] !== void 0) throw usageError3("--dry-run is migrate's: a refresh has none.");
+    if (values.hub !== void 0) throw usageError3("--hub is migrate's and cut-over's: a refresh copies the whole knowledge base.");
+    if (values["dry-run"] !== void 0) throw usageError3("--dry-run is migrate's and cut-over's: a refresh has none.");
     return { verb, orgId: values.org, base: values.base, yes: values.yes === true };
   }
   if (values.hub !== void 0 && !UUID_RE3.test(values.hub)) {
     throw usageError3(`Invalid --hub ${JSON.stringify(values.hub)}: expected a hub id (a UUID).`);
   }
+  if (verb === "cut-over") {
+    if (values.hub === void 0) throw usageError3("--hub <preview hub_id> is required: a cut-over is one preview hub's.");
+    return { verb, orgId: values.org, base: values.base, hubId: values.hub, dryRun: values["dry-run"] === true, yes: values.yes === true };
+  }
   return {
     verb,
     orgId: values.org,
@@ -34860,10 +35914,12 @@ async function knowledgeCommand(args2) {
   const { config, accessToken } = await requireAuth();
   const api = new ApiClient({ apiUrl: config.api_url, accessToken, onUnauthorized: () => getAccessToken(config) });
   const data = await createDataClient(options.orgId, { refreshLogin: true });
-  await migrateKnowledge(knowledgeReader(api, options.orgId), knowledgeBase(data), options, {
-    log: (line) => console.log(line),
-    confirm
-  });
+  const io = { log: (line) => console.log(line), confirm };
+  if (options.verb === "cut-over") {
+    await cutOverHub(hubSetup(api, options.orgId), knowledgeBase(data), options, io);
+    return;
+  }
+  await migrateKnowledge(knowledgeReader(api, options.orgId), knowledgeBase(data), options, io);
 }
 var USAGE4, OPTIONS;
 var init_knowledge = __esm({
@@ -34878,12 +35934,14 @@ var init_knowledge = __esm({
     init_migrate2();
     init_remote();
     init_refresh_preview();
+    init_cut_over();
     USAGE4 = `
 wayai knowledge \u2014 the organization's knowledge base
 
 Usage:
   wayai knowledge migrate --org <org_id> --base <knowledge base> [--hub <hub_id>] [--dry-run] [-y]
   wayai knowledge refresh-preview --org <org_id> --base <knowledge base> [-y]
+  wayai knowledge cut-over --org <org_id> --base <knowledge base> --hub <preview hub_id> [--dry-run] [-y]
 
 migrate: move knowledge resources into the organization's knowledge base.
 
@@ -34905,6 +35963,21 @@ refresh-preview: make the knowledge base's preview hold its production base's fi
 
   --base       The production knowledge base, or its preview.
   -y, --yes    Skip the question before copying.
+
+cut-over: switch a preview hub's agents from their knowledge resources to the knowledge base, once
+  its knowledge has moved. Each distinct set of knowledge its agents read gets one read-only
+  toolset on the knowledge base, reached through a Base Toolset connection; each agent is given
+  list_files, read_file and its toolset's list_ and get_ tools, its resources/<slug>/ paths become
+  data/<file type>/, its knowledge links are disabled, and each move is recorded. It changes the
+  preview only, and prints the production steps. The preview base must hold production's files
+  first (refresh-preview): the preview's agents read them there. It stops before writing on a resource placeholder
+  ({{files()}}, {{resource_content()}}, {{file_content()}}) that reads knowledge an agent is about
+  to lose: move that text into its instructions or a skill first.
+
+  --hub        The preview hub.
+  --base       The production knowledge base, or its preview.
+  --dry-run    List every change, and every reason it would stop, without writing.
+  -y, --yes    Skip the question before writing.
 `;
     OPTIONS = {
       org: { type: "string" },
@@ -34960,17 +36033,17 @@ async function adminCommand(args2) {
     process.exit(1);
   }
   if (group === "archive") {
-    const { positional: positional2, flagArgs: flagArgs2 } = splitArgs(afterGroup);
+    const { positional: positional2, flagArgs: flagArgs2 } = splitArgs2(afterGroup);
     await runArchiveRead(positional2, flagArgs2);
     return;
   }
   if (group === "observability") {
-    const { positional: positional2, flagArgs: flagArgs2 } = splitArgs(afterGroup);
+    const { positional: positional2, flagArgs: flagArgs2 } = splitArgs2(afterGroup);
     await runObservabilityRead(positional2, flagArgs2);
     return;
   }
   const [sub, ...rest] = afterGroup;
-  const { positional, flagArgs } = splitArgs(rest);
+  const { positional, flagArgs } = splitArgs2(rest);
   if (group === "do") {
     if (!sub) {
       printHelp2();
@@ -35258,7 +36331,7 @@ async function adminCommand(args2) {
   printHelp2();
   process.exit(1);
 }
-function splitArgs(args2) {
+function splitArgs2(args2) {
   const positional = [];
   const flagArgs = [];
   for (const a of args2) {
@@ -37383,9 +38456,9 @@ var init_update = __esm({
 });
 
 // src/data/commands/actions.ts
-import { Command } from "commander";
+import { Command as Command2 } from "commander";
 function buildActionsCommand() {
-  const actions = new Command("actions").description(
+  const actions = new Command2("actions").description(
     "Manage Actions \u2014 reusable, named definitions: one record_type + one operation, or a composite of atomic write steps (--config with `steps`)"
   );
   actions.command("upsert <id>").description(
@@ -37454,7 +38527,7 @@ var init_actions = __esm({
 });
 
 // src/data/commands/attachments.ts
-import { Command as Command2 } from "commander";
+import { Command as Command3 } from "commander";
 import { readFileSync as readFileSync19 } from "fs";
 function findAttachmentByFilename(attachments, filename) {
   return attachments.find((a) => a.key.endsWith(`/${filename}`)) ?? null;
@@ -37481,7 +38554,7 @@ function uploadPathFrom(uploadUrl) {
   return uploadUrl;
 }
 function buildAttachmentsCommand() {
-  const attachments = new Command2("attachments").description("Manage record attachments");
+  const attachments = new Command3("attachments").description("Manage record attachments");
   attachments.command("upload <record_type> <id>").description(
     "Get a presigned upload URL for a record attachment. With --file, uploads the file content in one step."
   ).requiredOption("--filename <name>", "File name or path (e.g. docs/guide.md)").option("--content-type <type>", "MIME type", "application/octet-stream").option("--file <path>", "Local file to upload (skips presigned URL output, uploads directly)").action(async function(recordType2, id, opts) {
@@ -37561,9 +38634,9 @@ var init_attachments = __esm({
 });
 
 // src/data/commands/batch.ts
-import { Command as Command3 } from "commander";
+import { Command as Command4 } from "commander";
 function buildBasesBatchCommand() {
-  return withBaseOption(new Command3("batch")).description("Execute atomic batch operations (up to 1,000 operations)").requiredOption("--operations <json>", "Operations array (inline JSON or @filename)").action(async function(opts) {
+  return withBaseOption(new Command4("batch")).description("Execute atomic batch operations (up to 1,000 operations)").requiredOption("--operations <json>", "Operations array (inline JSON or @filename)").action(async function(opts) {
     const base = pathSegment(requireBase(this), "--base");
     const operations = parseData(opts.operations, "--operations");
     const client = await createDataClient();
@@ -37592,7 +38665,7 @@ import { createReadStream } from "fs";
 import { access, constants, stat } from "fs/promises";
 import { createInterface as createInterface3 } from "readline";
 import { randomUUID } from "crypto";
-import { Command as Command4 } from "commander";
+import { Command as Command5 } from "commander";
 function isRetryable(err) {
   if (isNetworkError(err)) return true;
   if (!(err instanceof ApiError)) return false;
@@ -37668,7 +38741,7 @@ async function beginSession(state, client, base, recordType2, requestKey) {
   return res.session;
 }
 function buildBasesImportCommand() {
-  const importCmd = withBaseOption(new Command4("import")).description(
+  const importCmd = withBaseOption(new Command5("import")).description(
     "Bulk historical import: load an NDJSON backfill, list sessions, or undo one"
   );
   importCmd.command("run <record_type>").description(
@@ -37895,7 +38968,7 @@ var init_import = __esm({
 });
 
 // src/data/commands/providers.ts
-import { Command as Command5 } from "commander";
+import { Command as Command6 } from "commander";
 import { writeFileSync as writeFileSync10 } from "fs";
 function providerSegment(provider) {
   if (!VALID_PROVIDERS.includes(provider)) {
@@ -37904,7 +38977,7 @@ function providerSegment(provider) {
   return pathSegment(provider, "provider");
 }
 function buildBasesProvidersCommand() {
-  const providers = withBaseOption(new Command5("providers")).description(
+  const providers = withBaseOption(new Command6("providers")).description(
     "Import/export tool definitions between LLM providers and record types"
   );
   providers.command("import <provider>").description(`Import tool definitions as record types. Providers: ${VALID_PROVIDERS_HELP}`).requiredOption("--tools <json>", "Tool definitions (inline JSON or @filename)").action(async function(provider, opts) {
@@ -37975,7 +39048,7 @@ var init_providers = __esm({
 });
 
 // src/data/commands/report.ts
-import { Command as Command6 } from "commander";
+import { Command as Command7 } from "commander";
 import { readFileSync as readFileSync20 } from "fs";
 import { dirname as dirname15, join as join36 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
@@ -38019,7 +39092,7 @@ function reportActionError2(err) {
   throw err;
 }
 function buildBasesReportCommand() {
-  const report2 = new Command6("report").description(
+  const report2 = new Command7("report").description(
     "File a report to the Data triage queue and verify the outcome"
   );
   report2.command("create").description("Submit a report to the Data triage queue (deduplicated)").requiredOption("--title <title>", "Short summary").requiredOption("--description <text>", "What happened").option("--source <source>", "Origin: cli_report (default) | review | security_audit").option("--classification <c>", "Nature: bug (default) | flaky_test | security | enhancement").option(
@@ -38186,7 +39259,7 @@ var init_report3 = __esm({
 });
 
 // src/data/commands/credentials.ts
-import { Command as Command7 } from "commander";
+import { Command as Command8 } from "commander";
 import { readFileSync as readFileSync21 } from "fs";
 function withValueSourceOptions(cmd, what) {
   return cmd.option(
@@ -38221,7 +39294,7 @@ function credentialPath(base, id) {
 }
 function buildBasesCredentialsCommand() {
   const credentials = withBaseOption(
-    new Command7("credentials").description("Manage a base's integration credentials")
+    new Command8("credentials").description("Manage a base's integration credentials")
   );
   withValueSourceOptions(
     credentials.command("create").description("Store a credential on this base (value read from stdin, a masked prompt, or --file)").requiredOption("--name <name>", "Credential name \u2014 what a credential:<name> reference resolves").option("--content-type <mime>", "MIME type of the value (e.g. application/x-pkcs12)").option(
@@ -38348,10 +39421,10 @@ var init_credentials = __esm({
 });
 
 // src/data/commands/sql.ts
-import { Command as Command8 } from "commander";
+import { Command as Command9 } from "commander";
 import { readFileSync as readFileSync22 } from "fs";
 function buildBasesSqlCommand() {
-  return withBaseOption(new Command8("sql")).description("Execute a read-only SQL query against base data").argument("[query]", "SQL query (SELECT only)").option("--file <path>", "Read SQL from a file instead of the argument").option(
+  return withBaseOption(new Command9("sql")).description("Execute a read-only SQL query against base data").argument("[query]", "SQL query (SELECT only)").option("--file <path>", "Read SQL from a file instead of the argument").option(
     "--param <kv...>",
     "Named parameters as key=value pairs (e.g. --param status=issued)"
   ).action(async function(queryArg, opts) {
@@ -38393,250 +39466,6 @@ var init_sql = __esm({
   }
 });
 
-// src/data/commands/tokens.ts
-import { Command as Command9 } from "commander";
-function addTokenLifecycleOptions(cmd) {
-  return cmd.option("--expires-at <date>", "Expiration date (ISO 8601, e.g. 2026-06-01T00:00:00Z)").option(
-    "--ttl <duration>",
-    "Relative expiry, e.g. 10m, 2h, 7d (use for disposable probe/test tokens)"
-  ).option(
-    "--description <text>",
-    'What holds this token (e.g. "behind credential X"); shown in list and revoke warnings'
-  ).addHelpText("after", TOKEN_OUTPUT_HELP);
-}
-function tokenCreationOutput(cmd, opts) {
-  return opts.tokenOnly ? "token" : outputFormat(cmd);
-}
-function printCreatedToken(data, output) {
-  if (output !== "token") {
-    printOutput(data, output);
-    return;
-  }
-  const token = typeof data === "object" && data !== null && "token" in data ? data.token : void 0;
-  if (typeof token !== "string" || !RAW_TOKEN_PATTERN.test(token)) {
-    throw new Error("Token creation response did not contain a valid rec_ token");
-  }
-  console.log(token);
-}
-function resolveExpiresAt(opts) {
-  if (opts.ttl && opts.expiresAt) {
-    throw expected("--ttl and --expires-at are mutually exclusive \u2014 pass one.");
-  }
-  if (opts.ttl) return new Date(Date.now() + parseDuration(opts.ttl, "--ttl")).toISOString();
-  return opts.expiresAt;
-}
-function applyTokenLifecycleOpts(body, opts) {
-  const expiresAt = resolveExpiresAt(opts);
-  if (expiresAt) body.expires_at = expiresAt;
-  if (opts.description) body.description = opts.description;
-}
-function listAllTokens(client) {
-  return client.collectPages(
-    (cursor) => `/v1/tokens?limit=${TOKEN_LIST_PAGE_LIMIT}${cursor ? `&cursor=${encodeURIComponent(cursor)}` : ""}`
-  );
-}
-function pruneRow(t, reason) {
-  return {
-    token_id: t.token_id,
-    name: t.name,
-    reason,
-    last_used: t.last_used_at ?? "never"
-  };
-}
-function buildBasesTokensCommand() {
-  const tokens2 = new Command9("tokens").description("Manage API tokens");
-  addTokenLifecycleOptions(
-    tokens2.command("create").description("Create a scoped API token").requiredOption("--name <name>", "Token name").requiredOption("--grants <json>", "Grant definitions as JSON array").option(
-      "--token-only",
-      "Print only the raw rec_ token for secure command substitution (shown once)"
-    )
-  ).action(async function(opts) {
-    const grants = parseData(opts.grants, "--grants");
-    const body = { name: opts.name, grants };
-    applyTokenLifecycleOpts(body, opts);
-    const client = await createDataClient();
-    const data = await client.request("POST", "/v1/tokens", body);
-    printCreatedToken(data, tokenCreationOutput(this, opts));
-  });
-  addTokenLifecycleOptions(
-    // The only token verb that addresses a base, so it alone declares `--base`.
-    // Putting it on the `tokens` group would advertise a flag that does nothing
-    // on `list`, `revoke` and `prune` — the defect `withBaseOption` exists to
-    // avoid.
-    withBaseOption(tokens2.command("create-for-toolset <slug>")).description(
-      "Create a toolset-bound (consumer) token whose authorization IS the toolset tool surface \u2014 it can call exactly the tools that toolset exposes (those record types + operations, relationships, batch, and sql only if enabled) and nothing else. Binds to the configured --base."
-    ).option("--name <name>", 'Token name (default: "<slug> consumer")').option(
-      "--token-only",
-      "Print only the raw rec_ token for secure command substitution (shown once)"
-    )
-  ).action(async function(slug, opts) {
-    const base = requireBase(this);
-    const body = {
-      name: opts.name ?? `${slug} consumer`,
-      toolset_binding: { base_id: base, toolset_id: slug }
-    };
-    applyTokenLifecycleOpts(body, opts);
-    const client = await createDataClient();
-    const data = await client.request("POST", "/v1/tokens", body);
-    const output = tokenCreationOutput(this, opts);
-    printCreatedToken(data, output);
-    if (output === "table") {
-      console.log(`
-MCP URL: ${toolsetMcpUrl(slug)}`);
-    }
-  });
-  tokens2.command("list").description("List API tokens (status, last_used_at, expires_at, description)").action(async function() {
-    const client = await createDataClient();
-    printOutput(await listAllTokens(client), outputFormat(this));
-  });
-  tokens2.command("revoke <token_id>").description(
-    "Revoke an API token (permanent). A recently-used or toolset-bound token requires --force."
-  ).option("--force", "Revoke even if the token appears to be in live use").action(async function(tokenId, opts) {
-    const client = await createDataClient();
-    const id = pathSegment(tokenId, "token id");
-    const path42 = (force) => `/v1/tokens/${id}${force ? "?force=true" : ""}`;
-    const format = outputFormat(this);
-    const revoked = (forced) => printOutput({ token_id: tokenId, revoked: true, forced }, format);
-    if (opts.force) {
-      await client.request("DELETE", path42(true));
-      revoked(true);
-      return;
-    }
-    try {
-      await client.request("DELETE", path42(false));
-      revoked(false);
-    } catch (err) {
-      if (!(err instanceof ApiError) || err.status !== 409 || dataErrorDetails(err)?.requires_force !== true) {
-        throw err;
-      }
-      console.error(err.message);
-      if (!isInteractive()) {
-        console.error("\nRe-run with --force to revoke anyway.");
-        return process.exit(1);
-      }
-      if (!await confirm("Revoke anyway?")) {
-        console.error("Aborted.");
-        return process.exit(1);
-      }
-      await client.request("DELETE", path42(true));
-      revoked(true);
-    }
-  });
-  tokens2.command("prune").description(
-    "Revoke stale tokens, selected by staleness only (expired, or unused past --unused-since) \u2014 never by name. Previews by default; revoking requires --yes or an interactive confirmation."
-  ).option(
-    "--unused-since <duration>",
-    "Also prune tokens with no activity for this long (e.g. 30d). Skips toolset-bound and legacy usage-untracked tokens."
-  ).option("--include-bound", "Allow pruning stale toolset-bound (consumer) tokens").option("-y, --yes", "Revoke without prompting (required when non-interactive)").action(async function(opts) {
-    const staleMs = opts.unusedSince ? parseDuration(opts.unusedSince, "--unused-since") : void 0;
-    const client = await createDataClient();
-    const allTokens = await listAllTokens(client);
-    const now = Date.now();
-    const targets = [];
-    const skipped = [];
-    for (const t of allTokens) {
-      const expired = t.status ? t.status === "expired" : !!t.expires_at && Date.parse(t.expires_at) <= now;
-      if (expired) {
-        targets.push(pruneRow(t, "expired"));
-        continue;
-      }
-      if (staleMs === void 0) continue;
-      const lastActivity = Date.parse(t.last_used_at ?? t.created_at);
-      if (!(now - lastActivity > staleMs)) continue;
-      if (t.usage_tracked !== true) {
-        skipped.push(
-          pruneRow(
-            t,
-            "usage untracked (legacy token) \u2014 revoke individually if truly unused"
-          )
-        );
-      } else if (t.toolset_binding && !opts.includeBound) {
-        skipped.push(
-          pruneRow(
-            t,
-            `toolset-bound ('${t.toolset_binding.toolset_id}') \u2014 pass --include-bound to prune`
-          )
-        );
-      } else {
-        targets.push(pruneRow(t, `unused for over ${opts.unusedSince}`));
-      }
-    }
-    const format = outputFormat(this);
-    const json = format === "json";
-    const note = (line) => json ? console.error(line) : console.log(line);
-    const printPreview = () => {
-      if (targets.length === 0) {
-        note("Nothing to prune.");
-      } else {
-        note(`Would revoke ${targets.length} token(s):`);
-        if (!json) printOutput(targets, format);
-      }
-      if (skipped.length === 0) return;
-      note(`
-Skipped ${skipped.length} stale token(s):`);
-      if (!json) printOutput(skipped, format);
-    };
-    printPreview();
-    if (targets.length === 0) {
-      if (json) printOutput({ revoked: 0, failed: 0, targets, skipped }, format);
-      return;
-    }
-    if (!opts.yes) {
-      if (!isInteractive()) {
-        console.error("\nPreview only \u2014 re-run with --yes to revoke these tokens.");
-        if (json) printOutput({ preview: true, revoked: 0, failed: 0, targets, skipped }, format);
-        return process.exit(1);
-      }
-      if (!await confirm(`
-Revoke ${targets.length} token(s)?`)) {
-        console.error("Aborted.");
-        return process.exit(1);
-      }
-    }
-    let revoked = 0;
-    let failed = 0;
-    for (const t of targets) {
-      try {
-        await client.request(
-          "DELETE",
-          `/v1/tokens/${pathSegment(t.token_id, "token id")}?force=true`
-        );
-        revoked++;
-      } catch (err) {
-        failed++;
-        console.error(
-          `Failed to revoke ${t.token_id} ('${sanitizeTerminalText(t.name)}'): ${err instanceof Error ? err.message : String(err)}`
-        );
-      }
-    }
-    if (json) printOutput({ revoked, failed, targets, skipped }, format);
-    else console.log(`Revoked ${revoked} token(s)${failed > 0 ? `, ${failed} failed` : ""}.`);
-    if (failed > 0) return process.exit(1);
-  });
-  return tokens2;
-}
-var RAW_TOKEN_PATTERN, TOKEN_OUTPUT_HELP, TOKEN_LIST_PAGE_LIMIT;
-var init_tokens = __esm({
-  "src/data/commands/tokens.ts"() {
-    "use strict";
-    init_client();
-    init_output();
-    init_helpers();
-    init_api_client();
-    init_terminal_output();
-    init_utils();
-    init_expected();
-    RAW_TOKEN_PATTERN = /^rec_[A-Za-z0-9_-]{43}$/;
-    TOKEN_OUTPUT_HELP = `
-Output:
-  --json prints the unwrapped response object; the secret is at top-level .token, never .data.token.
-  --token-only prints only a validated rec_ token and overrides table/JSON formatting.
-  The raw token is shown once. Capture it securely and do not log it.
-`;
-    TOKEN_LIST_PAGE_LIMIT = 250;
-  }
-});
-
 // src/data/base-tags.ts
 async function resolveBaseTags(rawTags, client) {
   const refs = splitList(rawTags);
@@ -39550,7 +40379,7 @@ function isConflict(err) {
   return err instanceof ApiError && (err.status === 409 || err.status === 412);
 }
 function conflictLine(c, texts) {
-  return `${safe2(c.rel)}: ${texts[c.reason]}${c.other === void 0 ? "" : ` "${safe2(c.other)}"`}`;
+  return `${safe3(c.rel)}: ${texts[c.reason]}${c.other === void 0 ? "" : ` "${safe3(c.other)}"`}`;
 }
 function remedy(conflicts, overwriteCommand) {
   const isClash = (c) => c.reason === "case_twin" || c.reason === "file_folder";
@@ -39571,7 +40400,7 @@ async function pullFiles(opts) {
   const plan = planPull({ synced: existing?.files ?? {}, local, remote, overwrite: opts.overwrite });
   if (plan.replacedLocal.length > 0) {
     console.log("These local changes would be replaced with the base's copies:");
-    for (const rel of plan.replacedLocal) console.log(`  ${safe2(rel)}`);
+    for (const rel of plan.replacedLocal) console.log(`  ${safe3(rel)}`);
     if (!await agree(`Replace ${plan.replacedLocal.length} locally changed file(s)?`, opts.yes)) {
       console.log("Cancelled.");
       return;
@@ -39592,7 +40421,7 @@ async function pullFiles(opts) {
       }
       removeLocal(dir, rel);
       delete record.files[rel];
-      changes.push(`${MARK.delete} ${safe2(rel)}`);
+      changes.push(`${MARK.delete} ${safe3(rel)}`);
     }
     for (const w of plan.writes) {
       const clash = diskClash(dir, w.rel);
@@ -39625,7 +40454,7 @@ async function pullFiles(opts) {
       const hash = computeHash(bytes);
       writeLocal(dir, w.rel, bytes);
       record.files[w.rel] = { version, content_sha256: hash };
-      changes.push(`${local.has(w.rel) ? MARK.update : MARK.create} ${safe2(w.rel)}`);
+      changes.push(`${local.has(w.rel) ? MARK.update : MARK.create} ${safe3(w.rel)}`);
     }
   } finally {
     writeRecord(dir, record);
@@ -39633,13 +40462,13 @@ async function pullFiles(opts) {
   const count = Object.keys(record.files).length;
   console.log(sanitizeTerminalText(`Pulled ${describeSync(target)} \u2192 ${dir} (${count} file${count === 1 ? "" : "s"}).`));
   printSection("Changes:", changes);
-  printSection("Kept \u2014 your local changes:", plan.kept.map((k) => `${safe2(k.rel)}: ${PULL_KEPT[k.reason]}`));
+  printSection("Kept \u2014 your local changes:", plan.kept.map((k) => `${safe3(k.rel)}: ${PULL_KEPT[k.reason]}`));
   printSection(
     `Conflicts \u2014 your copy is kept; to settle them, ${remedy(conflicts, pullCommand2(target, opts.dir, true))}:`,
     conflicts.map((c) => conflictLine(c, PULL_CONFLICT))
   );
-  printSection("Changed or deleted on the base while pulling \u2014 left as is; pull again to take it:", changedWhilePulling.map(safe2));
-  printSection(`Not synced \u2014 names a synced folder leaves out (${OUTSIDE_SYNC.join(", ")}):`, excluded.map(safe2));
+  printSection("Changed or deleted on the base while pulling \u2014 left as is; pull again to take it:", changedWhilePulling.map(safe3));
+  printSection(`Not synced \u2014 names a synced folder leaves out (${OUTSIDE_SYNC.join(", ")}):`, excluded.map(safe3));
 }
 function isTextType(contentType) {
   const ct = contentType.split(";")[0].trim().toLowerCase();
@@ -39657,7 +40486,7 @@ function changedLines(before, after) {
 async function describeSteps(client, t, dir, steps) {
   const lines = [];
   for (const step of steps) {
-    const rel = safe2(step.rel);
+    const rel = safe3(step.rel);
     if (step.op === "create") {
       lines.push(`${MARK.create} ${rel} (new, ${step.local.size} bytes)`);
     } else if (step.op === "delete") {
@@ -39684,10 +40513,10 @@ async function describeSteps(client, t, dir, steps) {
   return lines;
 }
 function printPushNotes(plan) {
-  printSection("Changed on the base since your last pull \u2014 left as is; pull to take it:", plan.changedOnBase.map(safe2));
-  printSection("Deleted on the base since your last pull \u2014 left as is; pull to remove your copy:", plan.deletedOnBase.map(safe2));
-  printSection("On the base, not in your files \u2014 left as is; pull to fetch it:", plan.onlyOnBase.map(safe2));
-  printSection("Deleted in your files \u2014 kept on the base; push with --prune to delete it:", plan.keptOnBase.map(safe2));
+  printSection("Changed on the base since your last pull \u2014 left as is; pull to take it:", plan.changedOnBase.map(safe3));
+  printSection("Deleted on the base since your last pull \u2014 left as is; pull to remove your copy:", plan.deletedOnBase.map(safe3));
+  printSection("On the base, not in your files \u2014 left as is; pull to fetch it:", plan.onlyOnBase.map(safe3));
+  printSection("Deleted in your files \u2014 kept on the base; push with --prune to delete it:", plan.keptOnBase.map(safe3));
 }
 async function pushFiles(opts) {
   const label = opts.label === void 0 ? void 0 : labelValue(opts.label);
@@ -39750,14 +40579,14 @@ Push ${n} change${n === 1 ? "" : "s"} to ${describeSync(target)}?`, opts.yes)) {
       } else {
         const bytes = readLocal(dir, step.rel);
         if (computeHash(bytes) !== step.local.content_sha256) {
-          throw expected(`${safe2(step.rel)} changed while the push ran. Nothing more was pushed; run the push again.`);
+          throw expected(`${safe3(step.rel)} changed while the push ran. Nothing more was pushed; run the push again.`);
         }
         const contentType = step.op === "update" ? step.remote.content_type : guessMimeType(step.rel) ?? "application/octet-stream";
         const row = await client.upload(
           path42,
           bytes,
           contentType,
-          fileWriteHeaders({ ifMatch: step.op === "update" ? step.ifMatch : void 0, label })
+          fileWriteHeaders({ ...step.op === "update" ? { ifMatch: step.ifMatch } : { createOnly: true }, label })
         );
         record.files[step.rel] = {
           version: typeof row?.version === "number" ? row.version : 0,
@@ -39765,13 +40594,14 @@ Push ${n} change${n === 1 ? "" : "s"} to ${describeSync(target)}?`, opts.yes)) {
         };
       }
       pushed++;
-      console.log(`  ${MARK[step.op]} ${safe2(step.rel)}`);
+      console.log(`  ${MARK[step.op]} ${safe3(step.rel)}`);
     } catch (err) {
       if (step.op === "delete" && err instanceof ApiError && err.status === 404) {
         delete record.files[step.rel];
       } else if (isConflict(err)) {
         if (step.op === "delete") refusedDeletes.add(step.rel);
-        const conflict = { rel: step.rel, reason: "changed_while_pushing" };
+        const reason = step.op === "create" && err.status === 412 ? "created_while_pushing" : "changed_while_pushing";
+        const conflict = { rel: step.rel, reason };
         conflicts.push(conflict);
         console.log(`  ! ${conflictLine(conflict, PUSH_CONFLICT)}`);
         continue;
@@ -39792,7 +40622,7 @@ function finishWithConflicts(t, dir, conflicts) {
     `${count} conflict${count === 1 ? "" : "s"} not pushed \u2014 the base's copies of those files were left as they are. To settle them, ${remedy(conflicts, pullCommand2(t, dir, true))}, then push again.`
   );
 }
-var LIST_PAGE2, MAX_LIST_PAGES2, MAX_DIFF_BYTES, MARK, safe2, PULL_KEPT, PULL_CONFLICT, PUSH_CONFLICT;
+var LIST_PAGE2, MAX_LIST_PAGES2, MAX_DIFF_BYTES, MARK, safe3, PULL_KEPT, PULL_CONFLICT, PUSH_CONFLICT;
 var init_sync3 = __esm({
   "src/data/files-sync/sync.ts"() {
     "use strict";
@@ -39814,7 +40644,7 @@ var init_sync3 = __esm({
     MAX_LIST_PAGES2 = 1e3;
     MAX_DIFF_BYTES = 256 * 1024;
     MARK = { create: "+", update: "~", delete: "-" };
-    safe2 = (rel) => sanitizeTerminalText(rel);
+    safe3 = (rel) => sanitizeTerminalText(rel);
     PULL_KEPT = {
       edited: "edited in your files, not pushed yet",
       deleted: "deleted in your files, not pushed yet (push --prune deletes it from the base)"
@@ -39834,7 +40664,8 @@ var init_sync3 = __esm({
       exists_on_base: "created on the base since your last pull",
       case_twin: "differs only in case from the base's",
       file_folder: "would make one path both a file and a folder with the base's",
-      changed_while_pushing: "changed on the base while pushing \u2014 not written"
+      changed_while_pushing: "changed on the base while pushing \u2014 not written",
+      created_while_pushing: "created on the base while pushing \u2014 not written"
     };
   }
 });
@@ -40018,7 +40849,7 @@ function buildFilesCommand() {
     });
   });
   files.command("push <file_type>").description(
-    "Push the local changes of a folder pulled with `files pull` to the base, after showing the diff. A file changed, deleted or created on the base since your pull is a conflict, not written; an update or delete also carries the version pulled, so the base refuses it if the file changed meanwhile"
+    "Push the local changes of a folder pulled with `files pull` to the base, after showing the diff. A file changed, deleted or created on the base since your pull is a conflict, not written; an update or delete also carries the version pulled and a new file is sent create-only, so the base refuses a write to a file changed or created meanwhile"
   ).option("--folder <path>", "The folder of the file type the local folder was pulled from").option("--dir <local>", "Local folder to push (default ./<file_type>, or ./<file_type>/<folder>)").option("--dry-run", "Show the diff and push nothing").option("--prune", "Also delete files you deleted locally \u2014 only those unchanged on the base since your pull").option("--label <text>", "Label for every content version the push creates (printable ASCII)").option("-y, --yes", "Push without asking").action(async function(fileType, opts) {
     const base = requireBase(this);
     await pushFiles({
@@ -41436,6 +42267,7 @@ Commands:
   contacts           Link a contact to its customer record in a base, or unlink it (browser sign-in only) \u2014 \`wayai contacts --help\`
   knowledge migrate  Move an organization's knowledge resources, then a hub's (--hub), into its knowledge base as file types and files \u2014 \`wayai knowledge --help\`
   knowledge refresh-preview  Make the knowledge base's preview hold its production base's files \u2014 \`wayai knowledge --help\`
+  knowledge cut-over  Switch a preview hub's agents from their knowledge resources to the knowledge base \u2014 \`wayai knowledge --help\`
   report create      Report a platform bug (submits to the triage queue)
   report edit        Amend your own pending report (title/description/error/steps/context)
   update             Update CLI to the latest version