@wayai/cli 0.3.227 → 0.3.229

package/dist/index.js

@@ -4706,10 +4706,10 @@ var init_chunk_SXDX4GHS = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-FK6HBXM7.js
+// ../../packages/core/dist/chunk-HENF6YTF.js
 var orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody;
-var init_chunk_FK6HBXM7 = __esm({
-  "../../packages/core/dist/chunk-FK6HBXM7.js"() {
+var init_chunk_HENF6YTF = __esm({
+  "../../packages/core/dist/chunk-HENF6YTF.js"() {
     "use strict";
     init_zod();
     orgResourceIdParam = external_exports.object({
@@ -4736,10 +4736,11 @@ var init_chunk_FK6HBXM7 = __esm({
       organization_id: external_exports.string().uuid(),
       resource_name: external_exports.string().min(1).max(255),
       resource_description: external_exports.string().max(1e3).nullish(),
-      resource_type: external_exports.enum(["knowledge", "skill"]).default("knowledge"),
-      // Skill-only fields. Required for `resource_type = 'skill'` (validated in
+      // `knowledge` parses so the route can refuse it with its reason (wayai-pro/wayai#5142 step 5).
+      resource_type: external_exports.enum(["knowledge", "skill"]).default("skill"),
+      // Skill-only fields. `skill_name` is required for a skill (validated in
       // the route layer since cross-field refinement complicates the inferred
-      // input type for callers). Ignored for `knowledge`.
+      // input type for callers).
       skill_name: external_exports.string().min(1).max(255).nullish(),
       skill_version: external_exports.string().max(50).nullish(),
       folder_metadata_schema: external_exports.record(external_exports.unknown()).optional(),
@@ -4896,10 +4897,10 @@ var init_chunk_HZ6CADSY = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-TIZ57ZBA.js
+// ../../packages/core/dist/chunk-DYI3BRJ3.js
 var resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery;
-var init_chunk_TIZ57ZBA = __esm({
-  "../../packages/core/dist/chunk-TIZ57ZBA.js"() {
+var init_chunk_DYI3BRJ3 = __esm({
+  "../../packages/core/dist/chunk-DYI3BRJ3.js"() {
     "use strict";
     init_chunk_HZ6CADSY();
     init_zod();
@@ -5288,6 +5289,149 @@ var init_chunk_GK27ENTT = __esm({
   }
 });
 
+// ../../packages/core/dist/chunk-IPDOHAZ5.js
+var reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody;
+var init_chunk_IPDOHAZ5 = __esm({
+  "../../packages/core/dist/chunk-IPDOHAZ5.js"() {
+    "use strict";
+    init_chunk_HZ6CADSY();
+    init_zod();
+    reportSourceSchema = external_exports.enum(["sentry", "cli", "review", "security_audit"]);
+    intakeReportSourceSchema = external_exports.enum(["cli", "review", "security_audit"]);
+    reportClassificationSchema = external_exports.enum(["bug", "flaky_test", "security", "enhancement"]);
+    reportStatusSchema = external_exports.enum([
+      "pending",
+      "grouped",
+      "escalated",
+      "shipped",
+      "contested",
+      "addressed",
+      "dismissed"
+    ]);
+    reportLocaleSchema = external_exports.enum(["en", "pt", "es"]);
+    reportMessageAuthorRoleSchema = external_exports.enum(["reporter", "triage", "fixer", "system"]);
+    reportMessageSchema = external_exports.object({
+      message_id: external_exports.string(),
+      author_role: reportMessageAuthorRoleSchema,
+      /** The status transition this note accompanied (e.g. 'shipped'); null for a free/system note. */
+      transition: external_exports.string().nullable(),
+      body: external_exports.string(),
+      created_at: timestampSchema,
+      /**
+       * Visibility: `false` = reporter-facing (the default for every narrative entry); `true` =
+       * triage-internal (e.g. a `hold` rationale) — surfaced to platform admins only and NEVER
+       * returned on the reporter read path. The reporter's `GET /api/reports/:id` filters these out.
+       */
+      internal: external_exports.boolean()
+    });
+    sentryRefStatusSchema = external_exports.enum(["valid", "not_found", "mismatch", "unverified"]);
+    createReportBody = external_exports.object({
+      title: external_exports.string().min(5).max(256),
+      description: external_exports.string().min(10).max(5e3),
+      steps_to_reproduce: external_exports.string().max(3e3).optional(),
+      error_message: external_exports.string().max(2e3).optional(),
+      // Taxonomy (server defaults: source=cli, classification=bug when absent).
+      source: intakeReportSourceSchema.optional(),
+      classification: reportClassificationSchema.optional(),
+      // Stable dedup key (e.g. "<file>::<test>" for flaky, "<file>:<line>" for
+      // security). When present, the fingerprint uses it instead of the body hash.
+      dedup_key: external_exports.string().min(1).max(256).optional(),
+      // Context fields (auto-captured by the CLI)
+      organization_id: external_exports.string().optional(),
+      hub_id: external_exports.string().uuid().optional(),
+      hub_name: external_exports.string().max(256).optional(),
+      conversation_id: external_exports.string().uuid().optional(),
+      agent_id: external_exports.string().uuid().optional(),
+      agent_name: external_exports.string().max(256).optional(),
+      client_version: external_exports.string().max(64).optional(),
+      additional_context: external_exports.string().max(2e3).optional()
+    });
+    editReportBody = external_exports.object({
+      title: external_exports.string().min(5).max(256).optional(),
+      description: external_exports.string().min(10).max(5e3).optional(),
+      steps_to_reproduce: external_exports.string().max(3e3).optional(),
+      error_message: external_exports.string().max(2e3).optional(),
+      additional_context: external_exports.string().max(2e3).optional()
+    }).strict().refine((b) => Object.keys(b).length > 0, {
+      message: "at least one field must be provided"
+    });
+    reporterReportSummarySchema = external_exports.object({
+      report_id: external_exports.string(),
+      title: external_exports.string(),
+      description: external_exports.string(),
+      classification: reportClassificationSchema,
+      status: reportStatusSchema,
+      created_at: timestampSchema,
+      triaged_at: timestampSchema.nullable(),
+      resolved_at: timestampSchema.nullable(),
+      /** How many times the reporter has contested (gates the hard cap). */
+      contest_count: external_exports.number(),
+      /** True once triage issued a non-contestable (final) dismissal. */
+      dismissal_final: external_exports.boolean()
+    });
+    reporterListResponseSchema = external_exports.object({
+      data: external_exports.array(reporterReportSummarySchema)
+    });
+    getReportResponseSchema = external_exports.object({
+      report: reporterReportSummarySchema,
+      messages: external_exports.array(reportMessageSchema)
+    });
+    reporterTransitionResponseSchema = external_exports.object({
+      report: reporterReportSummarySchema
+    });
+    contestReportBody = external_exports.object({
+      reason: external_exports.string().min(1).max(5e3)
+    });
+    reporterListQuery = external_exports.object({
+      status: reportStatusSchema.optional()
+    });
+    listReportsQuery = external_exports.object({
+      status: reportStatusSchema.optional(),
+      source: reportSourceSchema.optional(),
+      limit: external_exports.coerce.number().int().min(1).max(200).optional(),
+      offset: external_exports.coerce.number().int().min(0).optional(),
+      /** ISO 8601 lower bound on created_at. */
+      since: external_exports.string().datetime().optional(),
+      /**
+       * ISO 8601 lower bound on resolution time — "what did we resolve recently", which `since`
+       * (a created_at filter) cannot answer for a long-lived report resolved yesterday. Implies
+       * a terminal status (`addressed`/`dismissed`) and orders on that same axis.
+       */
+      resolved_since: external_exports.string().datetime().optional()
+    });
+    GITHUB_ISSUE_URL_REGEX = /^https:\/\/github\.com\/[^/]+\/[^/]+\/issues\/\d+(?:[/?#]|$)/;
+    githubIssueUrlSchema = external_exports.string().url().refine((u) => GITHUB_ISSUE_URL_REGEX.test(u), {
+      message: "must be an https://github.com/<owner>/<repo>/issues/<number> URL"
+    });
+    transitionReportBody = external_exports.discriminatedUnion("target", [
+      external_exports.object({
+        target: external_exports.literal("escalated"),
+        gh_issue_url: githubIssueUrlSchema,
+        ai_verdict: external_exports.string().max(2e3).optional()
+      }),
+      external_exports.object({
+        target: external_exports.literal("shipped"),
+        note: external_exports.string().min(1).max(2e3).optional()
+      }),
+      external_exports.object({
+        target: external_exports.literal("addressed")
+      }),
+      external_exports.object({
+        target: external_exports.literal("dismissed"),
+        dismissal_reason: external_exports.string().min(1).max(5e3),
+        ai_verdict: external_exports.string().max(2e3).optional(),
+        final: external_exports.boolean().optional()
+      })
+    ]);
+    groupReportsBody = external_exports.object({
+      member_ids: external_exports.array(external_exports.string().uuid()).min(1).max(100)
+    });
+    holdReportBody = external_exports.object({
+      reason: external_exports.string().min(1).max(5e3)
+    });
+  }
+});
+
 // ../../packages/core/dist/chunk-GPM7PE44.js
 var bootstrapQuery;
 var init_chunk_GPM7PE44 = __esm({
@@ -5622,7 +5766,7 @@ var init_chunk_5XEJSR22 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-ISFDR7SP.js
+// ../../packages/core/dist/chunk-KJXJKAYT.js
 function matchPath(pattern, path42) {
   const normalizedPath = path42.replace(/\/$/, "");
   if (pattern.endsWith("/*")) {
@@ -5650,8 +5794,8 @@ function getEndpointConfig(path42) {
   return { tier: "STANDARD" };
 }
 var ENDPOINT_CONFIGS, EXCLUDED_PATHS;
-var init_chunk_ISFDR7SP = __esm({
-  "../../packages/core/dist/chunk-ISFDR7SP.js"() {
+var init_chunk_KJXJKAYT = __esm({
+  "../../packages/core/dist/chunk-KJXJKAYT.js"() {
     "use strict";
     init_chunk_5XEJSR22();
     ENDPOINT_CONFIGS = {
@@ -5808,8 +5952,10 @@ var init_chunk_ISFDR7SP = __esm({
       // platform's egress addresses carry many tenants' deliveries. The per-automation budget is
       // `AUTOMATION_WEBHOOK_PER_AUTOMATION_LIMIT`, counted after the delivery is verified.
       [`${AUTOMATION_WEBHOOK_MOUNT}/*`]: { tier: "HIGH" },
-      // Managed Agents session events (#5083 Phase 4): HIGH, one vendor address carries many tenants'.
-      [`${MANAGED_AGENTS_WEBHOOK_MOUNT}/*`]: { tier: "HIGH" },
+      // Managed Agents session events (#5083 Phase 4): one delivery per hosted tool round, and one
+      // vendor address carries every tenant's, so BULK. The per-connection budget is
+      // `MANAGED_AGENTS_WEBHOOK_PER_CONNECTION_LIMIT`, counted after the delivery is verified.
+      [`${MANAGED_AGENTS_WEBHOOK_MOUNT}/*`]: { tier: "BULK" },
       // Reports (CLI → platform_report triage queue). One per-user budget covers intake
       // (POST), the content edit (PATCH /:id), the reporter read-back (GET, GET /:id), and the
       // verification loop (POST /:id/accept, /:id/contest). The limiter is path-based, so a
@@ -6118,7 +6264,7 @@ var init_chunk_ISFDR7SP = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-FNNHGL7K.js
+// ../../packages/core/dist/chunk-4QBKRQMM.js
 function fileSnapshotChanged(run) {
   return run.written + run.removed > 0;
 }
@@ -6159,10 +6305,10 @@ async function sendWithRetry(opts, cursor) {
   }
 }
 var rekorFileSnapshotAnswerSchema, FILE_SNAPSHOT_MAX_PAGES, FILE_SNAPSHOT_CONFLICT_ATTEMPTS, FILE_SNAPSHOT_PAGE_SPACING_MS, FILE_SNAPSHOT_CONFLICT_STATUS;
-var init_chunk_FNNHGL7K = __esm({
-  "../../packages/core/dist/chunk-FNNHGL7K.js"() {
+var init_chunk_4QBKRQMM = __esm({
+  "../../packages/core/dist/chunk-4QBKRQMM.js"() {
     "use strict";
-    init_chunk_ISFDR7SP();
+    init_chunk_KJXJKAYT();
     init_chunk_5XEJSR22();
     init_zod();
     rekorFileSnapshotAnswerSchema = external_exports.object({
@@ -6395,145 +6541,57 @@ var init_chunk_4MRBBR5L = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-IPDOHAZ5.js
-var reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody;
-var init_chunk_IPDOHAZ5 = __esm({
-  "../../packages/core/dist/chunk-IPDOHAZ5.js"() {
+// ../../packages/core/dist/chunk-SY6PLCPK.js
+var jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse;
+var init_chunk_SY6PLCPK = __esm({
+  "../../packages/core/dist/chunk-SY6PLCPK.js"() {
     "use strict";
-    init_chunk_HZ6CADSY();
+    init_chunk_6TSQ5HXC();
     init_zod();
-    reportSourceSchema = external_exports.enum(["sentry", "cli", "review", "security_audit"]);
-    intakeReportSourceSchema = external_exports.enum(["cli", "review", "security_audit"]);
-    reportClassificationSchema = external_exports.enum(["bug", "flaky_test", "security", "enhancement"]);
-    reportStatusSchema = external_exports.enum([
-      "pending",
-      "grouped",
-      "escalated",
-      "shipped",
-      "contested",
-      "addressed",
-      "dismissed"
-    ]);
-    reportLocaleSchema = external_exports.enum(["en", "pt", "es"]);
-    reportMessageAuthorRoleSchema = external_exports.enum(["reporter", "triage", "fixer", "system"]);
-    reportMessageSchema = external_exports.object({
-      message_id: external_exports.string(),
-      author_role: reportMessageAuthorRoleSchema,
-      /** The status transition this note accompanied (e.g. 'shipped'); null for a free/system note. */
-      transition: external_exports.string().nullable(),
-      body: external_exports.string(),
-      created_at: timestampSchema,
-      /**
-       * Visibility: `false` = reporter-facing (the default for every narrative entry); `true` =
-       * triage-internal (e.g. a `hold` rationale) — surfaced to platform admins only and NEVER
-       * returned on the reporter read path. The reporter's `GET /api/reports/:id` filters these out.
-       */
-      internal: external_exports.boolean()
-    });
-    sentryRefStatusSchema = external_exports.enum(["valid", "not_found", "mismatch", "unverified"]);
-    createReportBody = external_exports.object({
-      title: external_exports.string().min(5).max(256),
-      description: external_exports.string().min(10).max(5e3),
-      steps_to_reproduce: external_exports.string().max(3e3).optional(),
-      error_message: external_exports.string().max(2e3).optional(),
-      // Taxonomy (server defaults: source=cli, classification=bug when absent).
-      source: intakeReportSourceSchema.optional(),
-      classification: reportClassificationSchema.optional(),
-      // Stable dedup key (e.g. "<file>::<test>" for flaky, "<file>:<line>" for
-      // security). When present, the fingerprint uses it instead of the body hash.
-      dedup_key: external_exports.string().min(1).max(256).optional(),
-      // Context fields (auto-captured by the CLI)
-      organization_id: external_exports.string().optional(),
-      hub_id: external_exports.string().uuid().optional(),
-      hub_name: external_exports.string().max(256).optional(),
-      conversation_id: external_exports.string().uuid().optional(),
-      agent_id: external_exports.string().uuid().optional(),
-      agent_name: external_exports.string().max(256).optional(),
-      client_version: external_exports.string().max(64).optional(),
-      additional_context: external_exports.string().max(2e3).optional()
-    });
-    editReportBody = external_exports.object({
-      title: external_exports.string().min(5).max(256).optional(),
-      description: external_exports.string().min(10).max(5e3).optional(),
-      steps_to_reproduce: external_exports.string().max(3e3).optional(),
-      error_message: external_exports.string().max(2e3).optional(),
-      additional_context: external_exports.string().max(2e3).optional()
-    }).strict().refine((b) => Object.keys(b).length > 0, {
-      message: "at least one field must be provided"
-    });
-    reporterReportSummarySchema = external_exports.object({
-      report_id: external_exports.string(),
-      title: external_exports.string(),
-      description: external_exports.string(),
-      classification: reportClassificationSchema,
-      status: reportStatusSchema,
-      created_at: timestampSchema,
-      triaged_at: timestampSchema.nullable(),
-      resolved_at: timestampSchema.nullable(),
-      /** How many times the reporter has contested (gates the hard cap). */
-      contest_count: external_exports.number(),
-      /** True once triage issued a non-contestable (final) dismissal. */
-      dismissal_final: external_exports.boolean()
-    });
-    reporterListResponseSchema = external_exports.object({
-      data: external_exports.array(reporterReportSummarySchema)
-    });
-    getReportResponseSchema = external_exports.object({
-      report: reporterReportSummarySchema,
-      messages: external_exports.array(reportMessageSchema)
+    jsonSchemaSchema = external_exports.record(external_exports.unknown());
+    hubUserIdentity = external_exports.object({
+      user_id: external_exports.string().nullable(),
+      user_name: external_exports.string().nullable(),
+      user_email: external_exports.string().nullable(),
+      user_name_locked: external_exports.boolean(),
+      created_at: external_exports.string(),
+      updated_at: external_exports.string().nullable(),
+      hub_user_id: external_exports.string().optional(),
+      enabled: external_exports.boolean().optional(),
+      hub_team_id: external_exports.string().nullable().optional(),
+      source: external_exports.enum(["grant", "auto"]).optional()
     });
-    reporterTransitionResponseSchema = external_exports.object({
-      report: reporterReportSummarySchema
+    stateValueEntry = external_exports.object({
+      state_slug: external_exports.string(),
+      state_name: external_exports.string(),
+      state_description: external_exports.string().nullable().optional(),
+      scope: external_exports.enum(["user", "conversation"]),
+      json_schema: jsonSchemaSchema,
+      initial_value: external_exports.unknown(),
+      value: external_exports.unknown(),
+      is_reserved: external_exports.boolean()
     });
-    contestReportBody = external_exports.object({
-      reason: external_exports.string().min(1).max(5e3)
+    getHubUserContextResponse = external_exports.object({
+      user: hubUserIdentity,
+      user_states: external_exports.array(stateValueEntry),
+      conversation_states: external_exports.array(stateValueEntry)
     });
-    reporterListQuery = external_exports.object({
-      status: reportStatusSchema.optional()
+    updateHubUserBody = external_exports.object({
+      // Non-empty, non-null. `.nullable()` here would bypass `.min(1)` and let an
+      // admin arm the lock on a null name — see hub-do.ts updateHubUser null-guard.
+      user_name: external_exports.string().min(1).max(120)
     });
-    listReportsQuery = external_exports.object({
-      status: reportStatusSchema.optional(),
-      source: reportSourceSchema.optional(),
-      limit: external_exports.coerce.number().int().min(1).max(200).optional(),
-      offset: external_exports.coerce.number().int().min(0).optional(),
-      /** ISO 8601 lower bound on created_at. */
-      since: external_exports.string().datetime().optional(),
-      /**
-       * ISO 8601 lower bound on resolution time — "what did we resolve recently", which `since`
-       * (a created_at filter) cannot answer for a long-lived report resolved yesterday. Implies
-       * a terminal status (`addressed`/`dismissed`) and orders on that same axis.
-       */
-      resolved_since: external_exports.string().datetime().optional()
+    updateHubUserResponse = external_exports.object({
+      user: hubUserIdentity
     });
-    GITHUB_ISSUE_URL_REGEX = /^https:\/\/github\.com\/[^/]+\/[^/]+\/issues\/\d+(?:[/?#]|$)/;
-    githubIssueUrlSchema = external_exports.string().url().refine((u) => GITHUB_ISSUE_URL_REGEX.test(u), {
-      message: "must be an https://github.com/<owner>/<repo>/issues/<number> URL"
+    unlockHubUserNameResponse = external_exports.object({
+      user: hubUserIdentity
     });
-    transitionReportBody = external_exports.discriminatedUnion("target", [
-      external_exports.object({
-        target: external_exports.literal("escalated"),
-        gh_issue_url: githubIssueUrlSchema,
-        ai_verdict: external_exports.string().max(2e3).optional()
-      }),
-      external_exports.object({
-        target: external_exports.literal("shipped"),
-        note: external_exports.string().min(1).max(2e3).optional()
-      }),
-      external_exports.object({
-        target: external_exports.literal("addressed")
-      }),
-      external_exports.object({
-        target: external_exports.literal("dismissed"),
-        dismissal_reason: external_exports.string().min(1).max(5e3),
-        ai_verdict: external_exports.string().max(2e3).optional(),
-        final: external_exports.boolean().optional()
-      })
-    ]);
-    groupReportsBody = external_exports.object({
-      member_ids: external_exports.array(external_exports.string().uuid()).min(1).max(100)
+    stateResetParams = external_exports.object({
+      stateSlug: slugSchema
     });
-    holdReportBody = external_exports.object({
-      reason: external_exports.string().min(1).max(5e3)
+    stateResetResponse = external_exports.object({
+      ok: external_exports.literal(true)
     });
   }
 });
@@ -6656,6 +6714,101 @@ var init_chunk_FPSDNS2E = __esm({
   }
 });
 
+// ../../packages/core/dist/chunk-LKBSHANA.js
+var DESKTOP_SHELL_VERSION_RE, DESKTOP_PLATFORMS, DESKTOP_FLAVORS, desktopShellInfoSchema, DESKTOP_PRESENCE_STATES, desktopPresenceSchema, desktopUpdateSchema, DESKTOP_SIGN_IN_URL_MAX_LENGTH, DESKTOP_APP_PATH_MAX_LENGTH, desktopAppPathSchema, DESKTOP_NOTIFICATION_KINDS, DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH, DESKTOP_NOTIFICATION_BODY_MAX_LENGTH, notificationTitleSchema, notificationBodySchema, desktopNotificationSchema, DESKTOP_BADGE_MAX_COUNT, DESKTOP_BADGE_LABEL_MAX_LENGTH, desktopBadgeSchema, desktopNavigateSchema, desktopSettingsSchema, desktopSettingsChangeSchema, desktopBridgeArgsSchemas;
+var init_chunk_LKBSHANA = __esm({
+  "../../packages/core/dist/chunk-LKBSHANA.js"() {
+    "use strict";
+    init_zod();
+    DESKTOP_SHELL_VERSION_RE = /^(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})(-[0-9A-Za-z.-]{1,32})?$/;
+    DESKTOP_PLATFORMS = ["darwin", "win32"];
+    DESKTOP_FLAVORS = ["production", "development"];
+    desktopShellInfoSchema = external_exports.object({
+      /** The shell's own release version, independent of the web deploy. */
+      shellVersion: external_exports.string().regex(DESKTOP_SHELL_VERSION_RE),
+      /** The Electron runtime the shell was built with. */
+      electronVersion: external_exports.string().regex(/^\d{1,4}\.\d{1,4}\.\d{1,4}(-[0-9A-Za-z.-]{1,32})?$/),
+      platform: external_exports.enum(DESKTOP_PLATFORMS),
+      /** CPU architecture as Node reports it (`arm64`, `x64`). */
+      arch: external_exports.string().regex(/^[a-z0-9_]{1,16}$/),
+      flavor: external_exports.enum(DESKTOP_FLAVORS),
+      /**
+       * Present, and true, when the shell runs from the Microsoft Store's package: the Store updates it,
+       * and Windows alone opens it at login (the package's startup task, which the person turns on in
+       * Windows' settings). An optional field, so no new `bridgeVersion`: an older page ignores it, and
+       * its absence is every other shell.
+       */
+      store: external_exports.literal(true).optional()
+    });
+    DESKTOP_PRESENCE_STATES = ["present", "away"];
+    desktopPresenceSchema = external_exports.object({
+      presence: external_exports.enum(DESKTOP_PRESENCE_STATES),
+      mainWindow: external_exports.object({
+        shown: external_exports.boolean(),
+        focused: external_exports.boolean()
+      })
+    });
+    desktopUpdateSchema = external_exports.object({
+      ready: external_exports.object({
+        version: external_exports.string().regex(DESKTOP_SHELL_VERSION_RE),
+        offerRestart: external_exports.boolean()
+      }).nullable()
+    });
+    DESKTOP_SIGN_IN_URL_MAX_LENGTH = 4096;
+    DESKTOP_APP_PATH_MAX_LENGTH = 512;
+    desktopAppPathSchema = external_exports.string().max(DESKTOP_APP_PATH_MAX_LENGTH).regex(/^\/(?![/\\])[^\s\\]*$/);
+    DESKTOP_NOTIFICATION_KINDS = ["handoff", "message", "summary"];
+    DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH = 200;
+    DESKTOP_NOTIFICATION_BODY_MAX_LENGTH = 500;
+    notificationTitleSchema = external_exports.string().min(1).max(DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH);
+    notificationBodySchema = external_exports.string().max(DESKTOP_NOTIFICATION_BODY_MAX_LENGTH);
+    desktopNotificationSchema = external_exports.object({
+      kind: external_exports.enum(DESKTOP_NOTIFICATION_KINDS),
+      title: notificationTitleSchema,
+      body: notificationBodySchema,
+      path: desktopAppPathSchema,
+      withoutPreview: external_exports.object({ title: notificationTitleSchema, body: notificationBodySchema }).optional()
+    });
+    DESKTOP_BADGE_MAX_COUNT = 1e6;
+    DESKTOP_BADGE_LABEL_MAX_LENGTH = 200;
+    desktopBadgeSchema = external_exports.object({
+      count: external_exports.number().int().min(0).max(DESKTOP_BADGE_MAX_COUNT),
+      label: external_exports.string().max(DESKTOP_BADGE_LABEL_MAX_LENGTH)
+    });
+    desktopNavigateSchema = external_exports.object({
+      path: desktopAppPathSchema
+    });
+    desktopSettingsSchema = external_exports.object({
+      /** The app opens when the person logs in to the computer: the operating system's own login item. */
+      openAtLogin: external_exports.boolean(),
+      /** Closing the window keeps the app running in the tray (true), or quits it (false). */
+      closeToTray: external_exports.boolean(),
+      /** The shell shows notifications (true), or none (false). The badge is not a notification. */
+      notifications: external_exports.boolean(),
+      /**
+       * A customer message's notification shows the customer's name and words, where the platform
+       * allows them at all (`desktopShowsCustomerWords`: macOS); elsewhere the shell never shows them.
+       */
+      messagePreview: external_exports.boolean()
+    });
+    desktopSettingsChangeSchema = desktopSettingsSchema.partial().strict().refine((change) => Object.values(change).every((value) => typeof value === "boolean"), {
+      message: "each setting changed is true or false"
+    });
+    desktopBridgeArgsSchemas = {
+      getShellInfo: external_exports.tuple([]),
+      getPresence: external_exports.tuple([]),
+      openSignIn: external_exports.tuple([external_exports.string().max(DESKTOP_SIGN_IN_URL_MAX_LENGTH)]),
+      getUpdate: external_exports.tuple([]),
+      restartToUpdate: external_exports.tuple([]),
+      notify: external_exports.tuple([desktopNotificationSchema]),
+      setBadge: external_exports.tuple([desktopBadgeSchema]),
+      clearAll: external_exports.tuple([]),
+      getSettings: external_exports.tuple([]),
+      setSettings: external_exports.tuple([desktopSettingsChangeSchema])
+    };
+  }
+});
+
 // ../../packages/core/dist/chunk-MIWZOSPI.js
 function toIso(epochMs) {
   return new Date(epochMs).toISOString();
@@ -6811,7 +6964,16 @@ var init_chunk_E4DIIOOE = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-OGXIPFQY.js
+// ../../packages/core/dist/chunk-A4JC7DXB.js
+var GIT_CHECKOUT_MAX_LENGTH;
+var init_chunk_A4JC7DXB = __esm({
+  "../../packages/core/dist/chunk-A4JC7DXB.js"() {
+    "use strict";
+    GIT_CHECKOUT_MAX_LENGTH = 255;
+  }
+});
+
+// ../../packages/core/dist/chunk-23UZ2IKU.js
 function spokenLineField(label, description2) {
   return { type: "text", label, maxLength: SPOKEN_LINE_MAX_CHARS, default: "", description: description2 };
 }
@@ -6821,9 +6983,10 @@ function byLowercaseName(a, b) {
   return x < y ? -1 : x > y ? 1 : 0;
 }
 var CALLER_LANGUAGE, TTS_VOICE_REPLY_ENABLED_FIELD, COPILOT_TRIGGER_FIELD, SANDBOX_AGENT_FIELDS, AUDIO_LANGUAGE_OPTIONS, whatsapp, instagram, resend, telegram, API_CHANNEL_DELIVERY_EVENTS, apiChannel, OPENAI_REASONING_MODELS, openai, anthropic, googleAiStudio, openRouter, xai, groqStt, openaiStt, elevenLabsStt, openaiTts, groqTts, elevenLabsTts, GEMINI_TTS_VOICES, googleTts, wayai, externalResources, restApiTool, mcpServer, REKOR_TOOLSET_SERVICE_NAME, rekorToolset, CLAUDE_HARNESS_MODELS, CLAUDE_HARNESS_MODEL_OPTIONS, HARNESS_MCP_SERVERS_FIELD, HARNESS_EGRESS_FIELDS, claudeManagedAgents, SPOKEN_LINE_MAX_CHARS, gptLive, CONNECTORS;
-var init_chunk_OGXIPFQY = __esm({
-  "../../packages/core/dist/chunk-OGXIPFQY.js"() {
+var init_chunk_23UZ2IKU = __esm({
+  "../../packages/core/dist/chunk-23UZ2IKU.js"() {
     "use strict";
+    init_chunk_A4JC7DXB();
     CALLER_LANGUAGE = "caller";
     TTS_VOICE_REPLY_ENABLED_FIELD = {
       voice_reply_enabled: {
@@ -7686,12 +7849,12 @@ var init_chunk_OGXIPFQY = __esm({
         // The managed session is conversation-lifetime and is NOT reaped at this deadline.
         max_session_minutes: { type: "number", label: "Max Turn (minutes)", min: 1, max: 480, default: 60, description: "Hard cap on a single turn's drain wall-clock, and the bound on the per-turn harness token TTL. The managed session itself lives for the conversation \u2014 it is not reaped at this deadline." },
         ...HARNESS_EGRESS_FIELDS,
-        // repo_url only, with no `repo_branch`: the session clones the default branch. The
-        // vendor's `github_repository` resource now takes a `checkout` (branch or commit,
-        // platform.claude.com/docs/en/managed-agents/github, 2026-10-19); a branch setting is
-        // left to the "work on a repository" agent template (wayai-pro/wayai#5083 Phase 4).
-        // Until then, working on another branch is an agent-instruction concern.
-        repo_url: { type: "text", label: "Repository URL", description: "Optional GitHub repository (https://github.com/<owner>/<repo>) cloned into the managed workspace at session start. Needs the connection's GitHub App installed on it. The DEFAULT branch is cloned \u2014 to work on another branch, instruct the agent to check it out." },
+        repo_url: { type: "text", label: "Repository URL", description: "Optional GitHub repository (https://github.com/<owner>/<repo>) cloned into the managed workspace at session start. Needs the connection's GitHub App installed on it." },
+        // The vendor's `checkout` on the session's `github_repository` resource (a branch, or a
+        // commit: platform.claude.com/docs/en/managed-agents/github, checked 2026-10-19). It is
+        // fixed at session create, so a change recreates the session (`config-hash.ts`). Checked
+        // at write (`format: 'git_checkout'`); a full commit hash is read as a commit.
+        repo_checkout: { type: "text", format: "git_checkout", maxLength: GIT_CHECKOUT_MAX_LENGTH, label: "Branch or Commit", description: "Optional: the branch, or the full commit hash, cloned from the Repository URL. Empty clones the repository's default branch." },
         ...COPILOT_TRIGGER_FIELD
       },
       channel_settings_schema: null,
@@ -7788,13 +7951,13 @@ var init_chunk_OGXIPFQY = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-QZZ3OHLV.js
+// ../../packages/core/dist/chunk-23ESQLLF.js
 var evalCallInstant, EVAL_CALL_MIN_SECONDS, EVAL_CALL_MAX_SECONDS, EVAL_CALL_SPOKEN_LINE_MAX_CHARS, hubScoped2, createEvalCallBody, createEvalCallResponse, evalCallConversationQuery, evalCallRecordQuery, evalCallSpeaker, evalCallUtterance, evalCallTurn, evalCallRecording, evalCallRecordResponse, evalCallFinishResponse;
-var init_chunk_QZZ3OHLV = __esm({
-  "../../packages/core/dist/chunk-QZZ3OHLV.js"() {
+var init_chunk_23ESQLLF = __esm({
+  "../../packages/core/dist/chunk-23ESQLLF.js"() {
     "use strict";
     init_chunk_E4DIIOOE();
-    init_chunk_OGXIPFQY();
+    init_chunk_23UZ2IKU();
     init_chunk_HZ6CADSY();
     init_chunk_MIWZOSPI();
     init_zod();
@@ -8049,58 +8212,58 @@ var init_chunk_EA23LSDS = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-SY6PLCPK.js
-var jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse;
-var init_chunk_SY6PLCPK = __esm({
-  "../../packages/core/dist/chunk-SY6PLCPK.js"() {
+// ../../packages/core/dist/chunk-V4FRPRH5.js
+var CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS;
+var init_chunk_V4FRPRH5 = __esm({
+  "../../packages/core/dist/chunk-V4FRPRH5.js"() {
     "use strict";
-    init_chunk_6TSQ5HXC();
     init_zod();
-    jsonSchemaSchema = external_exports.record(external_exports.unknown());
-    hubUserIdentity = external_exports.object({
-      user_id: external_exports.string().nullable(),
-      user_name: external_exports.string().nullable(),
-      user_email: external_exports.string().nullable(),
-      user_name_locked: external_exports.boolean(),
-      created_at: external_exports.string(),
-      updated_at: external_exports.string().nullable(),
-      hub_user_id: external_exports.string().optional(),
-      enabled: external_exports.boolean().optional(),
-      hub_team_id: external_exports.string().nullable().optional(),
-      source: external_exports.enum(["grant", "auto"]).optional()
+    CONSULT_THREAD_STATUSES = ["open", "awaiting", "resolved", "cancelled_at_close"];
+    consultThreadStatus = external_exports.enum(CONSULT_THREAD_STATUSES);
+    CONSULT_THREAD_TITLE_MAX = 120;
+    consultThreadTitle = external_exports.string().trim().min(1).max(CONSULT_THREAD_TITLE_MAX);
+    consultThreadSummary = external_exports.object({
+      consult_thread_id: external_exports.string(),
+      conversation_id: external_exports.string(),
+      initiator_type: external_exports.enum(["team", "agent"]),
+      initiator_id: external_exports.string(),
+      engaged_agent_id: external_exports.string().nullable(),
+      engaged_agent_name: external_exports.string().nullable(),
+      title: external_exports.string().nullable(),
+      status: consultThreadStatus,
+      created_at: external_exports.string()
     });
-    stateValueEntry = external_exports.object({
-      state_slug: external_exports.string(),
-      state_name: external_exports.string(),
-      state_description: external_exports.string().nullable().optional(),
-      scope: external_exports.enum(["user", "conversation"]),
-      json_schema: jsonSchemaSchema,
-      initial_value: external_exports.unknown(),
-      value: external_exports.unknown(),
-      is_reserved: external_exports.boolean()
+    listConsultThreadsQuery = external_exports.object({
+      hub_id: external_exports.string().uuid()
     });
-    getHubUserContextResponse = external_exports.object({
-      user: hubUserIdentity,
-      user_states: external_exports.array(stateValueEntry),
-      conversation_states: external_exports.array(stateValueEntry)
+    listConsultThreadsResponse = external_exports.object({
+      threads: external_exports.array(consultThreadSummary)
     });
-    updateHubUserBody = external_exports.object({
-      // Non-empty, non-null. `.nullable()` here would bypass `.min(1)` and let an
-      // admin arm the lock on a null name — see hub-do.ts updateHubUser null-guard.
-      user_name: external_exports.string().min(1).max(120)
+    createConsultThreadBody = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      title: consultThreadTitle.optional(),
+      // Optionally engage a consultant on creation. Validated server-side against the
+      // hub's `consultant`-role agents; a non-consultant / unknown id is rejected.
+      engaged_agent_id: external_exports.string().uuid().optional()
     });
-    updateHubUserResponse = external_exports.object({
-      user: hubUserIdentity
+    createConsultThreadResponse = external_exports.object({
+      thread: consultThreadSummary
     });
-    unlockHubUserNameResponse = external_exports.object({
-      user: hubUserIdentity
+    consultThreadIdParam = external_exports.object({
+      id: external_exports.string().uuid(),
+      threadId: external_exports.string().uuid()
     });
-    stateResetParams = external_exports.object({
-      stateSlug: slugSchema
+    updateConsultThreadBody = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      title: consultThreadTitle.optional(),
+      engaged_agent_id: external_exports.string().uuid().optional()
+    }).refine((v) => v.title !== void 0 || v.engaged_agent_id !== void 0, {
+      message: "Provide a title and/or an engaged_agent_id to update"
     });
-    stateResetResponse = external_exports.object({
-      ok: external_exports.literal(true)
+    updateConsultThreadResponse = external_exports.object({
+      thread: consultThreadSummary
     });
+    CONSULT_AWAIT_TIMEOUT_MS = 15 * 6e4;
   }
 });
 
@@ -8161,15 +8324,15 @@ var init_chunk_MH4O3YEX = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-UZ7SPBM3.js
+// ../../packages/core/dist/chunk-UFYIBL66.js
 function catalogToolSideEffects(toolName) {
   const sideEffects = CATALOG_SIDE_EFFECTS.get(toolName);
   if (sideEffects === void 0) return "unknown";
   return sideEffects ? "side_effects" : "none";
 }
 var NATIVE_TOOL_SCHEMAS, WAYAI_CONNECTOR, SANDBOX_AGENT_ROLES, BASE_NATIVE_TOOLS, NATIVE_TOOLS, CATALOG_SIDE_EFFECTS;
-var init_chunk_UZ7SPBM3 = __esm({
-  "../../packages/core/dist/chunk-UZ7SPBM3.js"() {
+var init_chunk_UFYIBL66 = __esm({
+  "../../packages/core/dist/chunk-UFYIBL66.js"() {
     "use strict";
     init_chunk_DHPUPI4Y();
     NATIVE_TOOL_SCHEMAS = {
@@ -8390,15 +8553,15 @@ var init_chunk_UZ7SPBM3 = __esm({
             "properties": {
               "path": {
                 "type": "string",
-                "description": 'Path to the file. Documents of your knowledge base live under "data/<file-type>/", exactly as list_files lists them \u2014 e.g. "data/policies/eu/refunds.md" \u2014 always written in full, and come back with the version the file is at: as text, or as base64 when the file is not text. Knowledge and skill files live under "resources/", exactly as listed in your resource structure or in a file listing \u2014 e.g. "resources/product-docs/references/menu.md", where the segment after "resources/" names the resource. Files attached to this conversation live under "conversation/" and are announced in the transcript by that path \u2014 e.g. "conversation/report.pdf". A shorter form also works for those two and is matched across everything you can read, preferring an exact path over one that merely ends with what you wrote ("references/menu.md", or just "menu.md"); dropping a middle segment does not resolve, and a bare name carried by both a resource and this conversation is reported as ambiguous so you can retry with the full path. Files from an EARLIER conversation with the same user live under "conversations/<conversation_id>/" \u2014 e.g. "conversations/1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed/receipt.pdf", exactly as the transcript of that conversation announces them (get_conversation). That form takes no shortening: write the mount, the conversation id and the file name in full. Prefer this over file_id: paths are stable, while IDs are regenerated whenever a hub is published.'
+                "description": 'Path to the file. Documents of your knowledge base live under "data/<file-type>/", exactly as list_files lists them \u2014 e.g. "data/policies/eu/refunds.md" \u2014 always written in full, and come back with the version the file is at: as text, or as base64 when the file is not text. Skill files live under "skills/" and knowledge files under "resources/", exactly as listed in your resource structure or in a file listing \u2014 e.g. "skills/order-processing/references/menu.md", where the segment after "skills/" names the skill, or "resources/product-docs/menu.md", where the segment after "resources/" names the knowledge resource. Files attached to this conversation live under "conversation/" and are announced in the transcript by that path \u2014 e.g. "conversation/report.pdf". A shorter form also works for those and is matched across everything you can read, preferring an exact path over one that merely ends with what you wrote ("references/menu.md", or just "menu.md"); dropping a middle segment does not resolve, and a bare name carried by both a skill or resource and this conversation is reported as ambiguous so you can retry with the full path. Files from an EARLIER conversation with the same user live under "conversations/<conversation_id>/" \u2014 e.g. "conversations/1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed/receipt.pdf", exactly as the transcript of that conversation announces them (get_conversation). That form takes no shortening: write the mount, the conversation id and the file name in full. Prefer this over file_id: paths are stable, while IDs are regenerated whenever a hub is published.'
               },
               "file_id": {
                 "type": "string",
                 "description": "The file ID to retrieve, from a conversation message or a file listing. Still supported, but prefer path for resource files."
               },
-              "resource_id": {
+              "skill_id": {
                 "type": "string",
-                "description": "Optional. Restricts a path to one resource \u2014 use it when the same file name exists in more than one resource and the tool reports the reference as ambiguous. Must be a resource linked to this agent."
+                "description": "Optional. Restricts a path to one skill, named by its id or its slug \u2014 use it when the same file name exists in more than one skill and the tool reports the reference as ambiguous. Must be a skill linked to this agent."
               },
               "view_range": {
                 "type": "array",
@@ -8585,7 +8748,7 @@ var init_chunk_UZ7SPBM3 = __esm({
                 "items": {
                   "type": "string"
                 },
-                "description": 'Files to send to the user, each named by path (preferred) or by ID. Paths are the addresses announced in the transcript and in your resource structure \u2014 "conversation/report.pdf" for a file attached to this conversation, "conversations/<conversation_id>/receipt.pdf" for one attached to an earlier conversation with the same user, "resources/product-docs/price-list.pdf" for a knowledge or skill file. IDs remain accepted, but they are regenerated whenever a hub is published, so a path is the stable address.'
+                "description": 'Files to send to the user, each named by path (preferred) or by ID. Paths are the addresses announced in the transcript and in your resource structure \u2014 "conversation/report.pdf" for a file attached to this conversation, "conversations/<conversation_id>/receipt.pdf" for one attached to an earlier conversation with the same user, "skills/order-processing/price-list.pdf" for a skill file, "resources/product-docs/price-list.pdf" for a knowledge file. IDs remain accepted, but they are regenerated whenever a hub is published, so a path is the stable address.'
               },
               "folder_ids": {
                 "type": "array",
@@ -8615,7 +8778,7 @@ var init_chunk_UZ7SPBM3 = __esm({
             "properties": {
               "path": {
                 "type": "string",
-                "description": 'What to list. Omit it (or pass "") for the mounts you can browse \u2014 the available mounts are listed here at runtime. "conversation" lists the files attached to this conversation. "resources" lists every resource mount. "resources/<resource-slug>" lists the top level of a knowledge resource or skill, and "resources/<resource-slug>/<folder>/<subfolder>" lists that folder. Folder rows come back with their own path, so you drill down by passing back the path of the row you want. "data" lists your document mounts, and "data/<file-type>" or "data/<file-type>/<folder>" lists every document beneath it, a page at a time.'
+                "description": 'What to list. Omit it (or pass "") for the mounts you can browse \u2014 the available mounts are listed here at runtime. "conversation" lists the files attached to this conversation. "skills" lists every skill mount, and "resources" every knowledge resource mount. "skills/<skill-slug>" lists the top level of a skill and "resources/<resource-slug>" that of a knowledge resource; "skills/<skill-slug>/<folder>/<subfolder>" (or the same under "resources/") lists that folder. Folder rows come back with their own path, so you drill down by passing back the path of the row you want. "data" lists your document mounts, and "data/<file-type>" or "data/<file-type>/<folder>" lists every document beneath it, a page at a time.'
               },
               "query": {
                 "type": "string",
@@ -8645,7 +8808,7 @@ var init_chunk_UZ7SPBM3 = __esm({
             "additionalProperties": false
           }
         },
-        "tool_instructions": 'Use to find out which files exist before reading one. Call it with no path first: that returns the mounts \u2014 "conversation" for what the user attached here, and one "resources/<slug>" per knowledge resource or skill linked to you. Then pass a mount or folder path back to list its contents. Every row carries a `path`; pass that path to read_file to open the file, or (outside "data/") to send_files to deliver it. Pass query, tags or metadata_filter to search a whole resource or data/ file type at once instead of walking it folder by folder. Files from EARLIER conversations are not listed here \u2014 the transcript of each past conversation announces its own files by path (get_conversation).'
+        "tool_instructions": 'Use to find out which files exist before reading one. Call it with no path first: that returns the mounts \u2014 "conversation" for what the user attached here, one "skills/<slug>" per skill and one "resources/<slug>" per knowledge resource linked to you. Then pass a mount or folder path back to list its contents. Every row carries a `path`; pass that path to read_file to open the file, or (outside "data/") to send_files to deliver it. Pass query, tags or metadata_filter to search a whole skill, resource or data/ file type at once instead of walking it folder by folder. Files from EARLIER conversations are not listed here \u2014 the transcript of each past conversation announces its own files by path (get_conversation).'
       },
       "list_resource_folders": {
         "tool_config": {
@@ -9057,20 +9220,20 @@ var init_chunk_UZ7SPBM3 = __esm({
     SANDBOX_AGENT_ROLES = [...PILOT_TRACK_ROLES, ...COPILOT_TRACK_ROLES];
     BASE_NATIVE_TOOLS = [
       // --- Wayai core tools ---
-      { tool_native_id: "nt-001", tool_name: "transfer_to_agent", tool_display_name: "Transfer to Agent", tool_description: "Transfer the conversation to another AI agent", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed" },
-      { tool_native_id: "nt-002", tool_name: "transfer_to_team", tool_display_name: "Transfer to Team", tool_description: "Escalate conversation to a human support team", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_team", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed" },
-      { tool_native_id: "nt-003", tool_name: "close_conversation", tool_display_name: "Close Conversation", tool_description: "Close and end the current conversation", connector_id: WAYAI_CONNECTOR, operation: "close_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed" },
-      { tool_native_id: "nt-004", tool_name: "update_kanban_status", tool_display_name: "Update Kanban Status", tool_description: "Update the kanban status of the conversation", connector_id: WAYAI_CONNECTOR, operation: "update_kanban_status", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-005", tool_name: "schedule_followup", tool_display_name: "Schedule Follow-up", tool_description: "Schedule a follow-up message for the conversation", connector_id: WAYAI_CONNECTOR, operation: "schedule_followup", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: true, execution_config: null, side_effects: true, replay: "keyed" },
-      { tool_native_id: "nt-006", tool_name: "send_files", tool_display_name: "Send Files", tool_description: "Send files to the user", connector_id: WAYAI_CONNECTOR, operation: "send_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed" },
-      { tool_native_id: "nt-007", tool_name: "update_state", tool_display_name: "Update State", tool_description: "Update conversation or user state variables", connector_id: WAYAI_CONNECTOR, operation: "update_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-008", tool_name: "get_state", tool_display_name: "Get State", tool_description: "Retrieve conversation or user state values", connector_id: WAYAI_CONNECTOR, operation: "get_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-009", tool_name: "reset_state", tool_display_name: "Reset State", tool_description: "Reset conversation or user state to initial values", connector_id: WAYAI_CONNECTOR, operation: "reset_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-010", tool_name: "set_state_path", tool_display_name: "Set State Path", tool_description: "Set a specific path within state object", connector_id: WAYAI_CONNECTOR, operation: "set_state_path", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-011", tool_name: "consult_agent", tool_display_name: "Consult Agent", tool_description: "Consult an advisor agent for advice without transferring", connector_id: WAYAI_CONNECTOR, operation: "consult_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed" },
-      { tool_native_id: "nt-013", tool_name: "read_skill", tool_display_name: "Read Skill", tool_description: "Read the full specification of a skill", connector_id: WAYAI_CONNECTOR, operation: "read_skill", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-014", tool_name: "read_skill_file", tool_display_name: "Read Skill File", tool_description: "Read a specific file within a skill", connector_id: WAYAI_CONNECTOR, operation: "read_skill_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-015", tool_name: "read_file", tool_display_name: "Read File", tool_description: "Read the contents of a resource file", connector_id: WAYAI_CONNECTOR, operation: "read_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
+      { tool_native_id: "nt-001", tool_name: "transfer_to_agent", tool_display_name: "Transfer to Agent", tool_description: "Transfer the conversation to another AI agent", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed", hosted: true },
+      { tool_native_id: "nt-002", tool_name: "transfer_to_team", tool_display_name: "Transfer to Team", tool_description: "Escalate conversation to a human support team", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_team", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed", hosted: true },
+      { tool_native_id: "nt-003", tool_name: "close_conversation", tool_display_name: "Close Conversation", tool_description: "Close and end the current conversation", connector_id: WAYAI_CONNECTOR, operation: "close_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed", hosted: true },
+      { tool_native_id: "nt-004", tool_name: "update_kanban_status", tool_display_name: "Update Kanban Status", tool_description: "Update the kanban status of the conversation", connector_id: WAYAI_CONNECTOR, operation: "update_kanban_status", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: true },
+      { tool_native_id: "nt-005", tool_name: "schedule_followup", tool_display_name: "Schedule Follow-up", tool_description: "Schedule a follow-up message for the conversation", connector_id: WAYAI_CONNECTOR, operation: "schedule_followup", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: true, execution_config: null, side_effects: true, replay: "keyed", hosted: true },
+      { tool_native_id: "nt-006", tool_name: "send_files", tool_display_name: "Send Files", tool_description: "Send files to the user", connector_id: WAYAI_CONNECTOR, operation: "send_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed", hosted: false },
+      { tool_native_id: "nt-007", tool_name: "update_state", tool_display_name: "Update State", tool_description: "Update conversation or user state variables", connector_id: WAYAI_CONNECTOR, operation: "update_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: true },
+      { tool_native_id: "nt-008", tool_name: "get_state", tool_display_name: "Get State", tool_description: "Retrieve conversation or user state values", connector_id: WAYAI_CONNECTOR, operation: "get_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: true },
+      { tool_native_id: "nt-009", tool_name: "reset_state", tool_display_name: "Reset State", tool_description: "Reset conversation or user state to initial values", connector_id: WAYAI_CONNECTOR, operation: "reset_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: true },
+      { tool_native_id: "nt-010", tool_name: "set_state_path", tool_display_name: "Set State Path", tool_description: "Set a specific path within state object", connector_id: WAYAI_CONNECTOR, operation: "set_state_path", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: true },
+      { tool_native_id: "nt-011", tool_name: "consult_agent", tool_display_name: "Consult Agent", tool_description: "Consult an advisor agent for advice without transferring", connector_id: WAYAI_CONNECTOR, operation: "consult_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed", hosted: false },
+      { tool_native_id: "nt-013", tool_name: "read_skill", tool_display_name: "Read Skill", tool_description: "Read the full specification of a skill", connector_id: WAYAI_CONNECTOR, operation: "read_skill", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false },
+      { tool_native_id: "nt-014", tool_name: "read_skill_file", tool_display_name: "Read Skill File", tool_description: "Read a specific file within a skill", connector_id: WAYAI_CONNECTOR, operation: "read_skill_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false },
+      { tool_native_id: "nt-015", tool_name: "read_file", tool_display_name: "Read File", tool_description: "Read the contents of a resource file", connector_id: WAYAI_CONNECTOR, operation: "read_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false },
       // Superseded by `list_files` (nt-027), which browses the same resource files
       // by PATH plus this conversation's attachments.
       //
@@ -9084,13 +9247,13 @@ var init_chunk_UZ7SPBM3 = __esm({
       // name, and `wayai pull` / `push` still round-trips the YAML. There is no
       // auto-provisioning anywhere in the platform, so an existing agent is never
       // migrated for free — an author swaps the tool deliberately.
-      { tool_native_id: "nt-016", tool_name: "list_resource_files", tool_display_name: "List Resource Files", tool_description: "(deprecated \u2014 use list_files) List files in a resource folder", connector_id: WAYAI_CONNECTOR, operation: "list_resource_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", ui_assignable: false },
-      { tool_native_id: "nt-017", tool_name: "list_resource_folders", tool_display_name: "List Resource Folders", tool_description: "(deprecated \u2014 use list_files) List all resource folders", connector_id: WAYAI_CONNECTOR, operation: "list_resource_folders", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", ui_assignable: false },
-      { tool_native_id: "nt-018", tool_name: "get_conversations_summary", tool_display_name: "Get Conversations Summary", tool_description: "Get a summary of recent conversations", connector_id: WAYAI_CONNECTOR, operation: "get_conversations_summary", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-019", tool_name: "get_conversation", tool_display_name: "Get Conversation", tool_description: "Retrieve full conversation history", connector_id: WAYAI_CONNECTOR, operation: "get_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-020", tool_name: "get_tool_schema", tool_display_name: "Get Tool Schema", tool_description: "Retrieve the JSON schema for a tool", connector_id: WAYAI_CONNECTOR, operation: "get_tool_schema", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
-      { tool_native_id: "nt-021", tool_name: "execute_tool", tool_display_name: "Execute Tool", tool_description: "Execute any available tool by name", connector_id: WAYAI_CONNECTOR, operation: "execute_tool", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "reconcile" },
-      { tool_native_id: "nt-022", tool_name: "expand_summary", tool_display_name: "Expand Summary", tool_description: "Retrieve the original messages of a section in the conversation summary", connector_id: WAYAI_CONNECTOR, operation: "expand_summary", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
+      { tool_native_id: "nt-016", tool_name: "list_resource_files", tool_display_name: "List Resource Files", tool_description: "(deprecated \u2014 use list_files) List files in a resource folder", connector_id: WAYAI_CONNECTOR, operation: "list_resource_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false, ui_assignable: false },
+      { tool_native_id: "nt-017", tool_name: "list_resource_folders", tool_display_name: "List Resource Folders", tool_description: "(deprecated \u2014 use list_files) List all resource folders", connector_id: WAYAI_CONNECTOR, operation: "list_resource_folders", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false, ui_assignable: false },
+      { tool_native_id: "nt-018", tool_name: "get_conversations_summary", tool_display_name: "Get Conversations Summary", tool_description: "Get a summary of recent conversations", connector_id: WAYAI_CONNECTOR, operation: "get_conversations_summary", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: true },
+      { tool_native_id: "nt-019", tool_name: "get_conversation", tool_display_name: "Get Conversation", tool_description: "Retrieve full conversation history", connector_id: WAYAI_CONNECTOR, operation: "get_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: true },
+      { tool_native_id: "nt-020", tool_name: "get_tool_schema", tool_display_name: "Get Tool Schema", tool_description: "Retrieve the JSON schema for a tool", connector_id: WAYAI_CONNECTOR, operation: "get_tool_schema", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false },
+      { tool_native_id: "nt-021", tool_name: "execute_tool", tool_display_name: "Execute Tool", tool_description: "Execute any available tool by name", connector_id: WAYAI_CONNECTOR, operation: "execute_tool", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "reconcile", hosted: false },
+      { tool_native_id: "nt-022", tool_name: "expand_summary", tool_display_name: "Expand Summary", tool_description: "Retrieve the original messages of a section in the conversation summary", connector_id: WAYAI_CONNECTOR, operation: "expand_summary", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false },
       // Hub-as-agent delegation (consultant-agents H1.5). UN-GATED in PR 7 (H1.5b): the
       // spawn + cross-DO completion callback shipped, so the tool is live across the
       // catalog listing, CI push, the config snapshot, and the handler. (PR 6 shipped it
@@ -9103,7 +9266,7 @@ var init_chunk_UZ7SPBM3 = __esm({
       // delegation dialog, clicking Add would submit no delegation params and the write
       // path would reject it — a live button that only ever errors. Assign it via
       // `wayai push` until the picker + boundary control ship.
-      { tool_native_id: "nt-025", tool_name: "delegate_to_hub", tool_display_name: "Delegate to Hub", tool_description: "Delegate a request to another hub as a task, and receive the result asynchronously", connector_id: WAYAI_CONNECTOR, operation: "delegate_to_hub", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", ui_assignable: false },
+      { tool_native_id: "nt-025", tool_name: "delegate_to_hub", tool_display_name: "Delegate to Hub", tool_description: "Delegate a request to another hub as a task, and receive the result asynchronously", connector_id: WAYAI_CONNECTOR, operation: "delegate_to_hub", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", hosted: false, ui_assignable: false },
       // Agent-initiated consults (consultant-agents H1.7b). A delegation tool like the
       // three above: the TARGET is admin configuration (`delegated_agent_id` for a
       // same-hub consultant, `delegated_hub_id` for a partner hub) and the model supplies
@@ -9115,13 +9278,13 @@ var init_chunk_UZ7SPBM3 = __esm({
       // collect (and, for a consultant target, the `allow_consultant_chain` opt-in). A
       // live button that only ever errors is worse than no button. Assign via `wayai push`
       // until the picker ships.
-      { tool_native_id: "nt-026", tool_name: "start_consult_thread", tool_display_name: "Start Consult Thread", tool_description: "Ask a configured consultant (or partner hub) a question in a visible consult thread", connector_id: WAYAI_CONNECTOR, operation: "start_consult_thread", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed", ui_assignable: false },
+      { tool_native_id: "nt-026", tool_name: "start_consult_thread", tool_display_name: "Start Consult Thread", tool_description: "Ask a configured consultant (or partner hub) a question in a visible consult thread", connector_id: WAYAI_CONNECTOR, operation: "start_consult_thread", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, side_effects: true, replay: "keyed", hosted: false, ui_assignable: false },
       // One drill-down listing for every file namespace, replacing `list_resource_files`
       // (nt-016) and `list_resource_folders` (nt-017). Fully visible: it needs no
       // configuration the Add dialog cannot collect — the mounts an agent may browse
       // come from its existing resource links and its own conversation, and the only
       // model-supplied input is a path.
-      { tool_native_id: "nt-027", tool_name: "list_files", tool_display_name: "List Files", tool_description: "Browse the files this agent can reach, by path", connector_id: WAYAI_CONNECTOR, operation: "list_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun" },
+      { tool_native_id: "nt-027", tool_name: "list_files", tool_display_name: "List Files", tool_description: "Browse the files this agent can reach, by path", connector_id: WAYAI_CONNECTOR, operation: "list_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false },
       // TWO gates, and BOTH are load-bearing — the first shipped alone and was not
       // enough. `assignable_roles: ['monitor']` says only a monitor may HOLD it,
       // because the tool has no meaning off a monitor: a rule SELECTS it and the note
@@ -9131,7 +9294,7 @@ var init_chunk_UZ7SPBM3 = __esm({
       // and a re-roled agent keeps the tools it holds. Offered and called, it reaches
       // the native dispatcher's `default:` branch: a Sentry event and a provider
       // re-call. See `NativeTool.model_callable`.
-      { tool_native_id: "nt-028", tool_name: "insert_note", tool_display_name: "Insert Note", tool_description: "Brief the answering agent with an admin-authored note before it replies", connector_id: WAYAI_CONNECTOR, operation: "insert_note", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", assignable_roles: ["monitor"], model_callable: false },
+      { tool_native_id: "nt-028", tool_name: "insert_note", tool_display_name: "Insert Note", tool_description: "Brief the answering agent with an admin-authored note before it replies", connector_id: WAYAI_CONNECTOR, operation: "insert_note", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false, assignable_roles: ["monitor"], model_callable: false },
       // TWO gates, same pair and same reasons as `insert_note` above — this is the
       // second tool to need both, which is why they are catalog fields rather than a
       // check at one site. `assignable_roles: ['monitor']`: only a monitor may hold it,
@@ -9144,32 +9307,32 @@ var init_chunk_UZ7SPBM3 = __esm({
       // would need remapping on both branching mechanisms and normalizing on both CI
       // directions. `action.tool_name`, one key away in the same object, is the
       // precedent.
-      { tool_native_id: "nt-029", tool_name: "run_monitor", tool_display_name: "Run Monitor", tool_description: "Run another monitor on this hub and let it act on its own rules", connector_id: WAYAI_CONNECTOR, operation: "run_monitor", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", assignable_roles: ["monitor"], model_callable: false },
+      { tool_native_id: "nt-029", tool_name: "run_monitor", tool_display_name: "Run Monitor", tool_description: "Run another monitor on this hub and let it act on its own rules", connector_id: WAYAI_CONNECTOR, operation: "run_monitor", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", hosted: false, assignable_roles: ["monitor"], model_callable: false },
       // The code sandbox (wayai#5083 Phase 3): runs only for an agent whose `code_execution_enabled`
       // setting is on, on any provider. Side effects: under an Allowlist or Web network setting, the
       // code it runs can send data out of the conversation.
-      { tool_native_id: "nt-030", tool_name: "bash", tool_display_name: "Run Code (Bash)", tool_description: "Run a Bash command in the conversation's code sandbox", connector_id: WAYAI_CONNECTOR, operation: "bash", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", assignable_roles: SANDBOX_AGENT_ROLES },
+      { tool_native_id: "nt-030", tool_name: "bash", tool_display_name: "Run Code (Bash)", tool_description: "Run a Bash command in the conversation's code sandbox", connector_id: WAYAI_CONNECTOR, operation: "bash", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", hosted: false, assignable_roles: SANDBOX_AGENT_ROLES },
       // Copies a conversation file, or a toolset document (`data/`, read through the toolset's `get`),
       // INTO the sandbox: the sandbox is conversation state, so nothing leaves the conversation. The
       // conversation's sandbox is shared by its agents whose `sandbox_scope` is `conversation`, so a
       // document copied in is there for each of them, as anything else an agent leaves in it; an agent
       // set to `agent` copies into its own, which no other agent reaches (decision 147).
-      { tool_native_id: "nt-031", tool_name: "copy_to_sandbox", tool_display_name: "Copy File to Sandbox", tool_description: "Copy one of the conversation's files into its code sandbox", connector_id: WAYAI_CONNECTOR, operation: "copy_to_sandbox", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", assignable_roles: SANDBOX_AGENT_ROLES },
+      { tool_native_id: "nt-031", tool_name: "copy_to_sandbox", tool_display_name: "Copy File to Sandbox", tool_description: "Copy one of the conversation's files into its code sandbox", connector_id: WAYAI_CONNECTOR, operation: "copy_to_sandbox", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "rerun", hosted: false, assignable_roles: SANDBOX_AGENT_ROLES },
       // Copies a sandbox file OUT into the conversation, as an internal note for the team: nothing
       // reaches the customer until `send_files` sends it. With `path`, it writes a toolset document
       // instead, through the toolset's `put` with its version check: such a call is `reconcile`, not
       // `keyed`, as `write_file` is (`toolCallReplay` reads its arguments). Its side effects stay `false`:
       // only an agent holding a toolset `put` can write one, never a customer-facing role (premise 8),
       // and a voice call's turns, which read this flag, run the pilot track, which is customer-facing.
-      { tool_native_id: "nt-032", tool_name: "copy_from_sandbox", tool_display_name: "Copy File from Sandbox", tool_description: "Copy a file out of the code sandbox into the conversation, for the team", connector_id: WAYAI_CONNECTOR, operation: "copy_from_sandbox", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed", assignable_roles: SANDBOX_AGENT_ROLES },
+      { tool_native_id: "nt-032", tool_name: "copy_from_sandbox", tool_display_name: "Copy File from Sandbox", tool_description: "Copy a file out of the code sandbox into the conversation, for the team", connector_id: WAYAI_CONNECTOR, operation: "copy_from_sandbox", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: false, replay: "keyed", hosted: false, assignable_roles: SANDBOX_AGENT_ROLES },
       // The `data/` mount's writes (#5142 step 2): a document of the agent's Base Toolset, written
       // through the toolset's own `put` tool with its version check. `reconcile`, not `keyed`: a re-run
       // after a first write that changed the file is refused by that check (its version, or the create's
       // path, is taken), so it never writes twice, but it answers a refusal where the first answered the
       // write, which is not the no-op `keyed` re-runs promise (owner decision 74). A first write of the
       // content the file already held kept its version, so its re-run is that same no-op.
-      { tool_native_id: "nt-033", tool_name: "write_file", tool_display_name: "Write File", tool_description: "Create or replace a Base Toolset document under data/, with a version check", connector_id: WAYAI_CONNECTOR, operation: "write_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile" },
-      { tool_native_id: "nt-034", tool_name: "edit_file", tool_display_name: "Edit File", tool_description: "Replace text in a Base Toolset document under data/, with a version check", connector_id: WAYAI_CONNECTOR, operation: "edit_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile" }
+      { tool_native_id: "nt-033", tool_name: "write_file", tool_display_name: "Write File", tool_description: "Create or replace a Base Toolset document under data/, with a version check", connector_id: WAYAI_CONNECTOR, operation: "write_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", hosted: false },
+      { tool_native_id: "nt-034", tool_name: "edit_file", tool_display_name: "Edit File", tool_description: "Replace text in a Base Toolset document under data/, with a version check", connector_id: WAYAI_CONNECTOR, operation: "edit_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, side_effects: true, replay: "reconcile", hosted: false }
     ];
     NATIVE_TOOLS = BASE_NATIVE_TOOLS.map((base) => {
       const schema = NATIVE_TOOL_SCHEMAS[base.tool_name];
@@ -9200,7 +9363,7 @@ var init_chunk_IBL7FANV = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-PFDZEKDE.js
+// ../../packages/core/dist/chunk-Y3S4XX4K.js
 function parseExpr(expr) {
   const fnMatch = expr.match(/^([a-zA-Z_][a-zA-Z0-9_]*)\s*\((.*?)\)\s*(?:\.(.*))?$/);
   if (!fnMatch) return null;
@@ -9284,8 +9447,8 @@ function scanTemplateResources(template) {
   return scan;
 }
 var PREVIOUS_CONVERSATIONS_MAX, PLACEHOLDER_RE, CATALOG_FN, LEGACY_CATALOG_FN, EMPTY_SCAN;
-var init_chunk_PFDZEKDE = __esm({
-  "../../packages/core/dist/chunk-PFDZEKDE.js"() {
+var init_chunk_Y3S4XX4K = __esm({
+  "../../packages/core/dist/chunk-Y3S4XX4K.js"() {
     "use strict";
     PREVIOUS_CONVERSATIONS_MAX = 20;
     PLACEHOLDER_RE = /\{\{\s*([^{}]+?)\s*\}\}/g;
@@ -9489,7 +9652,7 @@ var init_chunk_T7KQKDET = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-XOGFONTQ.js
+// ../../packages/core/dist/chunk-DIBRGYL6.js
 function resolveMonitorTrigger(monitorConfig) {
   if (!monitorConfig || typeof monitorConfig !== "object") return "idle";
   const raw = monitorConfig.trigger;
@@ -9795,12 +9958,12 @@ function refineMonitorRulesStructuredOutput(body, ctx) {
   if (refusal2) ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["response_format"], message: refusal2 });
 }
 var NATIVE_TOOL_NAMES, previousConversationsCountField, summarizationThresholdField, flagConditionSchema, MONITOR_TRIGGERS, monitorTriggerSchema, AUTOMATION_GATE_TRIGGERS, NON_FIRING_TRIGGERS, MONITOR_FIRING_TRIGGERS, MONITOR_DELAY_SECONDS_MIN, MONITOR_IDLE_DELAY_REQUIRED_MESSAGE, MONITOR_HISTORY_MESSAGES_MAX, monitorHistoryMessagesSchema, monitorIncludeToolResultsSchema, MONITOR_INPUT_SHAPING_KEYS, MONITOR_INPUT_SHAPING_SCHEMAS, MONITOR_INPUT_SHAPING_IDLE_MESSAGE, monitorArgumentSourceSchema, MONITOR_NOTE_TEMPLATE_MAX, MONITOR_STEER_NOTE_MAX, MONITOR_GATE_AGENT_NAME_MAX, monitorActionSchema, monitorRuleSchema, MONITOR_RULE_KEYS, MONITOR_RULE_SCHEMAS, MONITOR_RULE_TRIGGERS, MONITOR_RULE_TRIGGER_MESSAGE, CALL_UTTERANCE_SPEAKERS, callUtteranceSpeakerSchema, MONITOR_CALL_KEYS, MONITOR_CALL_SCHEMAS, MONITOR_CALL_KEY_MESSAGE, CALL_STEERING_MIN_CONFIDENCE, CALL_UTTERANCE_RULE_NOT_CONFIDENT_MESSAGE, CALL_UTTERANCE_FALLBACK_MESSAGE, CALL_UTTERANCE_FLAG_CONDITIONS_MESSAGE, CALL_STEER_NOTE_BLANK_MESSAGE, MONITOR_USER_MESSAGE_ACTION_KINDS, MONITOR_ASSISTANT_REPLY_ACTION_KINDS, MONITOR_CALL_UTTERANCE_ACTION_KINDS, MONITOR_AUTOMATION_FIRE_ACTION_KINDS, MONITOR_AUTOMATION_ITEM_ACTION_KINDS, INSERT_NOTE_TOOL_NAME, RUN_MONITOR_TOOL_NAME, MONITOR_RULE_ALLOWED_NATIVE_TOOLS, MONITOR_RULE_REENTRY_TOOLS, MONITOR_RULE_REENTRY_TRACKS, AUTOMATION_FIRE_FLAG_CONDITIONS_MESSAGE, AUTOMATION_FIRE_INPUT_SHAPING_MESSAGE, AUTOMATION_ITEM_FLAG_CONDITIONS_MESSAGE, AUTOMATION_ITEM_INPUT_SHAPING_MESSAGE, AUTOMATION_GATE_KEY_MESSAGES, monitorConfigField, flagConditionsField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody;
-var init_chunk_XOGFONTQ = __esm({
-  "../../packages/core/dist/chunk-XOGFONTQ.js"() {
+var init_chunk_DIBRGYL6 = __esm({
+  "../../packages/core/dist/chunk-DIBRGYL6.js"() {
     "use strict";
-    init_chunk_UZ7SPBM3();
+    init_chunk_UFYIBL66();
     init_chunk_IBL7FANV();
-    init_chunk_PFDZEKDE();
+    init_chunk_Y3S4XX4K();
     init_chunk_HZ6CADSY();
     init_chunk_C2UEA2KW();
     init_chunk_DHPUPI4Y();
@@ -10021,12 +10184,12 @@ var init_chunk_XOGFONTQ = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-TUP5Y6ZB.js
+// ../../packages/core/dist/chunk-6GBBTCME.js
 var conversationIdParam, conversationHubQuery, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody;
-var init_chunk_TUP5Y6ZB = __esm({
-  "../../packages/core/dist/chunk-TUP5Y6ZB.js"() {
+var init_chunk_6GBBTCME = __esm({
+  "../../packages/core/dist/chunk-6GBBTCME.js"() {
     "use strict";
-    init_chunk_XOGFONTQ();
+    init_chunk_DIBRGYL6();
     init_chunk_HZ6CADSY();
     init_chunk_DHPUPI4Y();
     init_zod();
@@ -10323,98 +10486,115 @@ var init_chunk_KSTYTQ7I = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-LKBSHANA.js
-var DESKTOP_SHELL_VERSION_RE, DESKTOP_PLATFORMS, DESKTOP_FLAVORS, desktopShellInfoSchema, DESKTOP_PRESENCE_STATES, desktopPresenceSchema, desktopUpdateSchema, DESKTOP_SIGN_IN_URL_MAX_LENGTH, DESKTOP_APP_PATH_MAX_LENGTH, desktopAppPathSchema, DESKTOP_NOTIFICATION_KINDS, DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH, DESKTOP_NOTIFICATION_BODY_MAX_LENGTH, notificationTitleSchema, notificationBodySchema, desktopNotificationSchema, DESKTOP_BADGE_MAX_COUNT, DESKTOP_BADGE_LABEL_MAX_LENGTH, desktopBadgeSchema, desktopNavigateSchema, desktopSettingsSchema, desktopSettingsChangeSchema, desktopBridgeArgsSchemas;
-var init_chunk_LKBSHANA = __esm({
-  "../../packages/core/dist/chunk-LKBSHANA.js"() {
+// ../../packages/core/dist/chunk-7CYHPF35.js
+var appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse;
+var init_chunk_7CYHPF35 = __esm({
+  "../../packages/core/dist/chunk-7CYHPF35.js"() {
     "use strict";
+    init_chunk_HZ6CADSY();
     init_zod();
-    DESKTOP_SHELL_VERSION_RE = /^(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})(-[0-9A-Za-z.-]{1,32})?$/;
-    DESKTOP_PLATFORMS = ["darwin", "win32"];
-    DESKTOP_FLAVORS = ["production", "development"];
-    desktopShellInfoSchema = external_exports.object({
-      /** The shell's own release version, independent of the web deploy. */
-      shellVersion: external_exports.string().regex(DESKTOP_SHELL_VERSION_RE),
-      /** The Electron runtime the shell was built with. */
-      electronVersion: external_exports.string().regex(/^\d{1,4}\.\d{1,4}\.\d{1,4}(-[0-9A-Za-z.-]{1,32})?$/),
-      platform: external_exports.enum(DESKTOP_PLATFORMS),
-      /** CPU architecture as Node reports it (`arm64`, `x64`). */
-      arch: external_exports.string().regex(/^[a-z0-9_]{1,16}$/),
-      flavor: external_exports.enum(DESKTOP_FLAVORS),
-      /**
-       * Present, and true, when the shell runs from the Microsoft Store's package: the Store updates it,
-       * and Windows alone opens it at login (the package's startup task, which the person turns on in
-       * Windows' settings). An optional field, so no new `bridgeVersion`: an older page ignores it, and
-       * its absence is every other shell.
-       */
-      store: external_exports.literal(true).optional()
-    });
-    DESKTOP_PRESENCE_STATES = ["present", "away"];
-    desktopPresenceSchema = external_exports.object({
-      presence: external_exports.enum(DESKTOP_PRESENCE_STATES),
-      mainWindow: external_exports.object({
-        shown: external_exports.boolean(),
-        focused: external_exports.boolean()
-      })
-    });
-    desktopUpdateSchema = external_exports.object({
-      ready: external_exports.object({
-        version: external_exports.string().regex(DESKTOP_SHELL_VERSION_RE),
-        offerRestart: external_exports.boolean()
-      }).nullable()
-    });
-    DESKTOP_SIGN_IN_URL_MAX_LENGTH = 4096;
-    DESKTOP_APP_PATH_MAX_LENGTH = 512;
-    desktopAppPathSchema = external_exports.string().max(DESKTOP_APP_PATH_MAX_LENGTH).regex(/^\/(?![/\\])[^\s\\]*$/);
-    DESKTOP_NOTIFICATION_KINDS = ["handoff", "message", "summary"];
-    DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH = 200;
-    DESKTOP_NOTIFICATION_BODY_MAX_LENGTH = 500;
-    notificationTitleSchema = external_exports.string().min(1).max(DESKTOP_NOTIFICATION_TITLE_MAX_LENGTH);
-    notificationBodySchema = external_exports.string().max(DESKTOP_NOTIFICATION_BODY_MAX_LENGTH);
-    desktopNotificationSchema = external_exports.object({
-      kind: external_exports.enum(DESKTOP_NOTIFICATION_KINDS),
-      title: notificationTitleSchema,
-      body: notificationBodySchema,
-      path: desktopAppPathSchema,
-      withoutPreview: external_exports.object({ title: notificationTitleSchema, body: notificationBodySchema }).optional()
-    });
-    DESKTOP_BADGE_MAX_COUNT = 1e6;
-    DESKTOP_BADGE_LABEL_MAX_LENGTH = 200;
-    desktopBadgeSchema = external_exports.object({
-      count: external_exports.number().int().min(0).max(DESKTOP_BADGE_MAX_COUNT),
-      label: external_exports.string().max(DESKTOP_BADGE_LABEL_MAX_LENGTH)
+    appMessageSenderType = external_exports.enum(["user", "team"]);
+    appMessageReceiverType = external_exports.enum(["user", "team", "agent", "assistant"]).transform((v) => v === "assistant" ? "agent" : v);
+    apiChannelMessage = external_exports.object({
+      text: clientOptionalString,
+      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0)
+    }).refine((m) => m.text && m.text.length > 0 || m.attachments && m.attachments.length > 0, {
+      message: "message must have text or at least one attachment"
     });
-    desktopNavigateSchema = external_exports.object({
-      path: desktopAppPathSchema
+    apiChannelMessageBody = external_exports.object({
+      // Correlation id (task hubs): new → new conversation, repeat → continue. min 1 so an
+      // empty string can't masquerade as a ref. Mutually exclusive with conversation_id.
+      external_ref: external_exports.string().min(1).max(256).optional(),
+      // Continue a specific WayAI conversation (authorized against the hub/channel + owner).
+      // UUID-validated here (unlike the app channel, whose client we control): allocation
+      // only treats a UUID-shaped id as a provided conversation, so a malformed id would
+      // otherwise skip the owner guard and silently MINT a new conversation instead of
+      // rejecting. A format 400 is shape-only — not an existence oracle (a valid-but-unknown
+      // UUID still collapses to the opaque authorization error downstream).
+      conversation_id: external_exports.string().uuid().optional(),
+      // On-behalf-of end-user identity. Absent → per-connection service principal (task-hub
+      // only; chat hub rejects with 422 in the route).
+      user: external_exports.object({
+        id: external_exports.string().min(1),
+        email: clientOptionalString,
+        name: clientOptionalString
+      }).optional(),
+      message: apiChannelMessage,
+      // Idempotency key: maps to channel_message_sid, deduped within one conversation
+      // (ConversationDO.storeMessage). A retried POST resolves to the same conversation (a chat
+      // hub's user, the external_ref, the conversation_id, or on a task hub with neither, this key
+      // scoped by the sender), so it echoes the original message_id and skips billing / turn
+      // dispatch. A failed store answers a retryable 503 only when this key is set; without it a
+      // retry could store the message twice, so it answers 400.
+      client_message_id: external_exports.string().min(1).max(256).optional()
+    }).refine((b) => !(b.external_ref && b.conversation_id), {
+      message: "provide external_ref or conversation_id, not both",
+      path: ["external_ref"]
     });
-    desktopSettingsSchema = external_exports.object({
-      /** The app opens when the person logs in to the computer: the operating system's own login item. */
-      openAtLogin: external_exports.boolean(),
-      /** Closing the window keeps the app running in the tray (true), or quits it (false). */
-      closeToTray: external_exports.boolean(),
-      /** The shell shows notifications (true), or none (false). The badge is not a notification. */
-      notifications: external_exports.boolean(),
-      /**
-       * A customer message's notification shows the customer's name and words, where the platform
-       * allows them at all (`desktopShowsCustomerWords`: macOS); elsewhere the shell never shows them.
-       */
-      messagePreview: external_exports.boolean()
+    appMessageBody = external_exports.object({
+      // Message content — three historical aliases. All optional: an attachment-only
+      // or voice-only message carries no text.
+      content: clientOptionalString,
+      message_text: clientOptionalString,
+      message_body: clientOptionalString,
+      // Conversation context. Ids are plain strings rather than `.uuid()` on purpose:
+      // they are AUTHORIZED downstream, which is the stronger guarantee — a well-formed
+      // uuid belonging to another tenant must fail just as hard as junk. `hub_id` is
+      // gated by `assertHubEndUserAccess` (gh #3286) and `conversation_id` by HubDO's
+      // conversation_index owner check (gh #2781, #3281). The route's own falsy guards
+      // ('hub_id is required') still reject an empty one.
+      hub_id: clientOptionalString,
+      channel_id: clientOptionalString,
+      conversation_id: clientOptionalString,
+      hub_type: external_exports.enum(["chat", "task"]).nullish().transform((v) => v ?? void 0),
+      // Stable idempotency key for one explicit task-hub launcher. HubDO scopes it
+      // to the authenticated user and resolves retries/tabs to one conversation.
+      task_start_id: external_exports.string().uuid().nullish().transform((v) => v ?? void 0),
+      // Routing.
+      sender_type: appMessageSenderType.nullish().transform((v) => v ?? void 0),
+      receiver_type: appMessageReceiverType.nullish().transform((v) => v ?? void 0),
+      // Only meaningful on a team send, where `validateAppTeamSendContext` proves the
+      // caller may send to this receiver. Absent on a team send to a conversation with no
+      // person, which names its `conversation_id` instead. The end-user branch ignores it —
+      // see the receiver derivation in the route.
+      user_receiver_id: clientOptionalString,
+      // ── Internal consult (consultant-agents PR 2 — H1.0) ──────────────────────
+      // A team member handling a customer conversation can tag a `consultant`-role
+      // agent for a PRIVATE, team-only exchange that never reaches the customer. A
+      // consult send is a team send with `receiver_type: 'agent'` targeting the
+      // consultant; `user_receiver_id` identifies the customer whose conversation this is
+      // (and is authorized by `validateAppTeamSendContext`, exactly as a team→user send is),
+      // and is absent, as on a team→user send, when the conversation has no person. The consultant is resolved from `agent_receiver_id`
+      // when supplied, else from an `@mention` parsed out of the message text against
+      // the hub's consultant agents. `consult_thread_id` continues an existing thread;
+      // absent, the route creates/reuses the single implicit thread. These fields are
+      // inert on every non-consult send (end-user send, team→user send).
+      agent_receiver_id: clientOptionalString,
+      consult_thread_id: clientOptionalString,
+      is_first_message: clientOptionalBoolean,
+      end_conversation: clientOptionalBoolean,
+      // Pre-generated by the client so the optimistic bubble and the stored row share
+      // a key (transcription live-updates land on the same row instead of duplicating).
+      message_id: clientOptionalString,
+      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0),
+      // Base64-encoded audio for STT. Size-capped in the route (the cap is a byte
+      // budget tied to the /channels/* bodyLimit, not a shape rule).
+      audio_file: clientOptionalString
     });
-    desktopSettingsChangeSchema = desktopSettingsSchema.partial().strict().refine((change) => Object.values(change).every((value) => typeof value === "boolean"), {
-      message: "each setting changed is true or false"
+    appMessageResponse = external_exports.object({
+      success: external_exports.boolean(),
+      message: external_exports.string(),
+      result: external_exports.object({
+        conversation_id: external_exports.string().optional(),
+        message_id: external_exports.string().optional(),
+        status: external_exports.string().optional(),
+        files: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).optional(),
+        // True when this request reused a task-start/message id already accepted by
+        // the server. Clients must replace their optimistic payload with a fresh
+        // authoritative read because another tab may have won with different text.
+        deduped: external_exports.boolean().optional()
+      }).optional()
     });
-    desktopBridgeArgsSchemas = {
-      getShellInfo: external_exports.tuple([]),
-      getPresence: external_exports.tuple([]),
-      openSignIn: external_exports.tuple([external_exports.string().max(DESKTOP_SIGN_IN_URL_MAX_LENGTH)]),
-      getUpdate: external_exports.tuple([]),
-      restartToUpdate: external_exports.tuple([]),
-      notify: external_exports.tuple([desktopNotificationSchema]),
-      setBadge: external_exports.tuple([desktopBadgeSchema]),
-      clearAll: external_exports.tuple([]),
-      getSettings: external_exports.tuple([]),
-      setSettings: external_exports.tuple([desktopSettingsChangeSchema])
-    };
   }
 });
 
@@ -10482,7 +10662,7 @@ var init_chunk_BPCNB5RT = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-LQSENJ26.js
+// ../../packages/core/dist/chunk-MCSEEMGN.js
 function idempotencyHeaderRefusal(value) {
   if (typeof value !== "string" || !/^[A-Za-z0-9][A-Za-z0-9-]{0,63}$/.test(value)) {
     return "idempotency_header must be a header name: letters, digits and dashes, at most 64";
@@ -10493,10 +10673,10 @@ function idempotencyHeaderRefusal(value) {
   return null;
 }
 var CATALOG_REPLAY, REPLAY_OVERRIDES, RESERVED_HEADERS;
-var init_chunk_LQSENJ26 = __esm({
-  "../../packages/core/dist/chunk-LQSENJ26.js"() {
+var init_chunk_MCSEEMGN = __esm({
+  "../../packages/core/dist/chunk-MCSEEMGN.js"() {
     "use strict";
-    init_chunk_UZ7SPBM3();
+    init_chunk_UFYIBL66();
     CATALOG_REPLAY = new Map(
       NATIVE_TOOLS.map((tool) => [tool.tool_name, tool.replay])
     );
@@ -10729,7 +10909,7 @@ var init_chunk_WEXVYJ5H = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-KRGVB7U6.js
+// ../../packages/core/dist/chunk-4S4FBSBE.js
 function refineToolConfig(value, ctx) {
   const raw = value.tool_config;
   if (raw == null) return;
@@ -10765,10 +10945,10 @@ function refineToolConfig(value, ctx) {
   }
 }
 var toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, toolReplaySettingsFields, toolReplaySettingsSchema, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody;
-var init_chunk_KRGVB7U6 = __esm({
-  "../../packages/core/dist/chunk-KRGVB7U6.js"() {
+var init_chunk_4S4FBSBE = __esm({
+  "../../packages/core/dist/chunk-4S4FBSBE.js"() {
     "use strict";
-    init_chunk_LQSENJ26();
+    init_chunk_MCSEEMGN();
     init_chunk_WEXVYJ5H();
     init_chunk_HZ6CADSY();
     init_zod();
@@ -10839,7 +11019,7 @@ var init_chunk_4LXDRTO4 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-LZDVDC2S.js
+// ../../packages/core/dist/chunk-C5MU3WEM.js
 function isIanaTimezone(timezone) {
   try {
     new Intl.DateTimeFormat("en-US", { timeZone: timezone }).format(0);
@@ -10849,10 +11029,10 @@ function isIanaTimezone(timezone) {
   }
 }
 var evalDateContextSchema;
-var init_chunk_LZDVDC2S = __esm({
-  "../../packages/core/dist/chunk-LZDVDC2S.js"() {
+var init_chunk_C5MU3WEM = __esm({
+  "../../packages/core/dist/chunk-C5MU3WEM.js"() {
     "use strict";
-    init_chunk_PFDZEKDE();
+    init_chunk_Y3S4XX4K();
     init_chunk_HZ6CADSY();
     init_chunk_MIWZOSPI();
     init_chunk_DHPUPI4Y();
@@ -10879,7 +11059,7 @@ var init_chunk_2ISUBJG7 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-623SRYWZ.js
+// ../../packages/core/dist/chunk-6UKJ6EMZ.js
 function describeRole(role) {
   if (typeof role === "string") {
     return JSON.stringify(role.length > ROLE_ECHO_MAX ? `${role.slice(0, ROLE_ECHO_MAX)}\u2026` : role);
@@ -11053,11 +11233,11 @@ function terminalRunCount(counts) {
   return counts.successful_runs + counts.failed_runs;
 }
 var evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, EVAL_FIXTURE_NAME_MAX_LENGTH, evalFixtureOverrideSchema, runSessionQuery, runJourneyQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, evalCustomerContactIdSchema, evalBody, EVAL_LIST_MAX_LIMIT, evalListLimit, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, EVAL_MAX_SELECTED_SCENARIOS, evalScenarioSelectionEntrySchema, evalScenarioSelectionSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, evalSessionConfigResponseSchema, evalSessionResponseSchema, evalSessionListConfigSchema, evalSessionListItemSchema, seedReleaseStatusSchema, EVAL_SESSION_NOT_QUIESCENT;
-var init_chunk_623SRYWZ = __esm({
-  "../../packages/core/dist/chunk-623SRYWZ.js"() {
+var init_chunk_6UKJ6EMZ = __esm({
+  "../../packages/core/dist/chunk-6UKJ6EMZ.js"() {
     "use strict";
     init_chunk_4LXDRTO4();
-    init_chunk_LZDVDC2S();
+    init_chunk_C5MU3WEM();
     init_chunk_HZ6CADSY();
     init_chunk_2ISUBJG7();
     init_zod();
@@ -12140,7 +12320,7 @@ var init_chunk_6NI5RAM4 = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-RT35VFUY.js
+// ../../packages/core/dist/chunk-SCZ3GSJE.js
 function refineHubAsCodeCustomTools(config, ctx) {
   const agents = config.agents;
   if (!Array.isArray(agents)) return;
@@ -12676,12 +12856,12 @@ function refineHubAsCodeMonitorRulesOutput(config, ctx) {
   });
 }
 var MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, MAX_CALL_OPENING_CARRIERS, MAX_CALL_OPENING_AGGREGATE_ENCODED_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema;
-var init_chunk_RT35VFUY = __esm({
-  "../../packages/core/dist/chunk-RT35VFUY.js"() {
+var init_chunk_SCZ3GSJE = __esm({
+  "../../packages/core/dist/chunk-SCZ3GSJE.js"() {
     "use strict";
-    init_chunk_KRGVB7U6();
-    init_chunk_623SRYWZ();
-    init_chunk_XOGFONTQ();
+    init_chunk_4S4FBSBE();
+    init_chunk_6UKJ6EMZ();
+    init_chunk_DIBRGYL6();
     init_chunk_LBDH7LCG();
     init_chunk_4LXDRTO4();
     init_chunk_T4Q5COKJ();
@@ -12734,8 +12914,9 @@ var init_chunk_RT35VFUY = __esm({
     hubAsCodeResourceSchema = external_exports.object({
       id: external_exports.string().min(1).optional(),
       name: external_exports.string().min(1),
+      // Omitted: a new resource is a skill, an existing one keeps its type. A push refuses a new
+      // knowledge resource and a change to knowledge (wayai-pro/wayai#5142 step 5).
       type: external_exports.enum(["knowledge", "skill"]).optional(),
-      // 'knowledge' (default) | 'skill'
       description: external_exports.string().optional(),
       enabled: external_exports.boolean().optional(),
       // No `user_browsable`: the field is retired (wayai#4710). This schema is `.passthrough()`,
@@ -13522,58 +13703,29 @@ var init_chunk_YULHXJ5M = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-V4FRPRH5.js
-var CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS;
-var init_chunk_V4FRPRH5 = __esm({
-  "../../packages/core/dist/chunk-V4FRPRH5.js"() {
+// ../../packages/core/dist/chunk-UEJOG2Q7.js
+var archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams;
+var init_chunk_UEJOG2Q7 = __esm({
+  "../../packages/core/dist/chunk-UEJOG2Q7.js"() {
     "use strict";
     init_zod();
-    CONSULT_THREAD_STATUSES = ["open", "awaiting", "resolved", "cancelled_at_close"];
-    consultThreadStatus = external_exports.enum(CONSULT_THREAD_STATUSES);
-    CONSULT_THREAD_TITLE_MAX = 120;
-    consultThreadTitle = external_exports.string().trim().min(1).max(CONSULT_THREAD_TITLE_MAX);
-    consultThreadSummary = external_exports.object({
-      consult_thread_id: external_exports.string(),
-      conversation_id: external_exports.string(),
-      initiator_type: external_exports.enum(["team", "agent"]),
-      initiator_id: external_exports.string(),
-      engaged_agent_id: external_exports.string().nullable(),
-      engaged_agent_name: external_exports.string().nullable(),
-      title: external_exports.string().nullable(),
-      status: consultThreadStatus,
-      created_at: external_exports.string()
-    });
-    listConsultThreadsQuery = external_exports.object({
-      hub_id: external_exports.string().uuid()
-    });
-    listConsultThreadsResponse = external_exports.object({
-      threads: external_exports.array(consultThreadSummary)
-    });
-    createConsultThreadBody = external_exports.object({
-      hub_id: external_exports.string().uuid(),
-      title: consultThreadTitle.optional(),
-      // Optionally engage a consultant on creation. Validated server-side against the
-      // hub's `consultant`-role agents; a non-consultant / unknown id is rejected.
-      engaged_agent_id: external_exports.string().uuid().optional()
-    });
-    createConsultThreadResponse = external_exports.object({
-      thread: consultThreadSummary
+    archiveHubIdParam = external_exports.object({
+      hubId: external_exports.string().uuid()
     });
-    consultThreadIdParam = external_exports.object({
-      id: external_exports.string().uuid(),
-      threadId: external_exports.string().uuid()
+    archiveConversationParams = external_exports.object({
+      hubId: external_exports.string().uuid(),
+      conversationId: external_exports.string().uuid()
     });
-    updateConsultThreadBody = external_exports.object({
-      hub_id: external_exports.string().uuid(),
-      title: consultThreadTitle.optional(),
-      engaged_agent_id: external_exports.string().uuid().optional()
-    }).refine((v) => v.title !== void 0 || v.engaged_agent_id !== void 0, {
-      message: "Provide a title and/or an engaged_agent_id to update"
+    archiveListQuery = external_exports.object({
+      user_id: external_exports.string().optional(),
+      start: external_exports.string().optional(),
+      end: external_exports.string().optional(),
+      page: external_exports.string().regex(/^\d+$/).optional(),
+      page_size: external_exports.string().regex(/^\d+$/).optional()
     });
-    updateConsultThreadResponse = external_exports.object({
-      thread: consultThreadSummary
+    archiveMessageObservabilityParams = archiveConversationParams.extend({
+      messageId: external_exports.string().uuid()
     });
-    CONSULT_AWAIT_TIMEOUT_MS = 15 * 6e4;
   }
 });
 
@@ -13690,13 +13842,13 @@ var init_chunk_LQY2OCQL = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-2VTDOH67.js
+// ../../packages/core/dist/chunk-EHPGISOL.js
 var AUTOMATION_TRIGGER_TYPES, AUTOMATION_EVENT_TYPES, AUTOMATION_TARGET_TYPES, AUTOMATION_ACTION_TYPES, AUTOMATION_CHANNEL_TYPES, AUTOMATION_PURPOSES, AUTOMATION_NAME_MAX, AUTOMATION_DESCRIPTION_MAX, AUTOMATION_INSTRUCTIONS_MAX, AUTOMATION_TEXT_MAX, AUTOMATION_CRON_MAX, AUTOMATION_WEBHOOK_AUTHS, AUTOMATION_WEBHOOK_HEADERS, AUTOMATION_WEBHOOK_BODY_MAX_BYTES, AUTOMATION_WEBHOOK_HEADER_NAME_MAX, WEBHOOK_RESERVED_HEADERS, automationTriggerSchema, automationTargetSchema, automationActionSchema, automationGateSchema, automationName, automationDescription, automationIdParam, automationHubQuery, automationWebhookParams, AUTOMATION_RUNS_PAGE_MAX, listAutomationRunsQuery, createAutomationBody, updateAutomationBody, AUTOMATION_ALERT_CATEGORIES, AUTOMATION_BLOCKED_ALERT_CATEGORY, automationEventSubscriberParam;
-var init_chunk_2VTDOH67 = __esm({
-  "../../packages/core/dist/chunk-2VTDOH67.js"() {
+var init_chunk_EHPGISOL = __esm({
+  "../../packages/core/dist/chunk-EHPGISOL.js"() {
     "use strict";
     init_chunk_LQY2OCQL();
-    init_chunk_XOGFONTQ();
+    init_chunk_DIBRGYL6();
     init_chunk_3HSB6J4J();
     init_chunk_5XEJSR22();
     init_chunk_DHPUPI4Y();
@@ -13947,118 +14099,6 @@ var init_chunk_ZJJ5ODOD = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-7CYHPF35.js
-var appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse;
-var init_chunk_7CYHPF35 = __esm({
-  "../../packages/core/dist/chunk-7CYHPF35.js"() {
-    "use strict";
-    init_chunk_HZ6CADSY();
-    init_zod();
-    appMessageSenderType = external_exports.enum(["user", "team"]);
-    appMessageReceiverType = external_exports.enum(["user", "team", "agent", "assistant"]).transform((v) => v === "assistant" ? "agent" : v);
-    apiChannelMessage = external_exports.object({
-      text: clientOptionalString,
-      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0)
-    }).refine((m) => m.text && m.text.length > 0 || m.attachments && m.attachments.length > 0, {
-      message: "message must have text or at least one attachment"
-    });
-    apiChannelMessageBody = external_exports.object({
-      // Correlation id (task hubs): new → new conversation, repeat → continue. min 1 so an
-      // empty string can't masquerade as a ref. Mutually exclusive with conversation_id.
-      external_ref: external_exports.string().min(1).max(256).optional(),
-      // Continue a specific WayAI conversation (authorized against the hub/channel + owner).
-      // UUID-validated here (unlike the app channel, whose client we control): allocation
-      // only treats a UUID-shaped id as a provided conversation, so a malformed id would
-      // otherwise skip the owner guard and silently MINT a new conversation instead of
-      // rejecting. A format 400 is shape-only — not an existence oracle (a valid-but-unknown
-      // UUID still collapses to the opaque authorization error downstream).
-      conversation_id: external_exports.string().uuid().optional(),
-      // On-behalf-of end-user identity. Absent → per-connection service principal (task-hub
-      // only; chat hub rejects with 422 in the route).
-      user: external_exports.object({
-        id: external_exports.string().min(1),
-        email: clientOptionalString,
-        name: clientOptionalString
-      }).optional(),
-      message: apiChannelMessage,
-      // Idempotency key: maps to channel_message_sid, deduped within one conversation
-      // (ConversationDO.storeMessage). A retried POST resolves to the same conversation (a chat
-      // hub's user, the external_ref, the conversation_id, or on a task hub with neither, this key
-      // scoped by the sender), so it echoes the original message_id and skips billing / turn
-      // dispatch. A failed store answers a retryable 503 only when this key is set; without it a
-      // retry could store the message twice, so it answers 400.
-      client_message_id: external_exports.string().min(1).max(256).optional()
-    }).refine((b) => !(b.external_ref && b.conversation_id), {
-      message: "provide external_ref or conversation_id, not both",
-      path: ["external_ref"]
-    });
-    appMessageBody = external_exports.object({
-      // Message content — three historical aliases. All optional: an attachment-only
-      // or voice-only message carries no text.
-      content: clientOptionalString,
-      message_text: clientOptionalString,
-      message_body: clientOptionalString,
-      // Conversation context. Ids are plain strings rather than `.uuid()` on purpose:
-      // they are AUTHORIZED downstream, which is the stronger guarantee — a well-formed
-      // uuid belonging to another tenant must fail just as hard as junk. `hub_id` is
-      // gated by `assertHubEndUserAccess` (gh #3286) and `conversation_id` by HubDO's
-      // conversation_index owner check (gh #2781, #3281). The route's own falsy guards
-      // ('hub_id is required') still reject an empty one.
-      hub_id: clientOptionalString,
-      channel_id: clientOptionalString,
-      conversation_id: clientOptionalString,
-      hub_type: external_exports.enum(["chat", "task"]).nullish().transform((v) => v ?? void 0),
-      // Stable idempotency key for one explicit task-hub launcher. HubDO scopes it
-      // to the authenticated user and resolves retries/tabs to one conversation.
-      task_start_id: external_exports.string().uuid().nullish().transform((v) => v ?? void 0),
-      // Routing.
-      sender_type: appMessageSenderType.nullish().transform((v) => v ?? void 0),
-      receiver_type: appMessageReceiverType.nullish().transform((v) => v ?? void 0),
-      // Only meaningful on a team send, where `validateAppTeamSendContext` proves the
-      // caller may send to this receiver. Absent on a team send to a conversation with no
-      // person, which names its `conversation_id` instead. The end-user branch ignores it —
-      // see the receiver derivation in the route.
-      user_receiver_id: clientOptionalString,
-      // ── Internal consult (consultant-agents PR 2 — H1.0) ──────────────────────
-      // A team member handling a customer conversation can tag a `consultant`-role
-      // agent for a PRIVATE, team-only exchange that never reaches the customer. A
-      // consult send is a team send with `receiver_type: 'agent'` targeting the
-      // consultant; `user_receiver_id` identifies the customer whose conversation this is
-      // (and is authorized by `validateAppTeamSendContext`, exactly as a team→user send is),
-      // and is absent, as on a team→user send, when the conversation has no person. The consultant is resolved from `agent_receiver_id`
-      // when supplied, else from an `@mention` parsed out of the message text against
-      // the hub's consultant agents. `consult_thread_id` continues an existing thread;
-      // absent, the route creates/reuses the single implicit thread. These fields are
-      // inert on every non-consult send (end-user send, team→user send).
-      agent_receiver_id: clientOptionalString,
-      consult_thread_id: clientOptionalString,
-      is_first_message: clientOptionalBoolean,
-      end_conversation: clientOptionalBoolean,
-      // Pre-generated by the client so the optimistic bubble and the stored row share
-      // a key (transcription live-updates land on the same row instead of duplicating).
-      message_id: clientOptionalString,
-      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0),
-      // Base64-encoded audio for STT. Size-capped in the route (the cap is a byte
-      // budget tied to the /channels/* bodyLimit, not a shape rule).
-      audio_file: clientOptionalString
-    });
-    appMessageResponse = external_exports.object({
-      success: external_exports.boolean(),
-      message: external_exports.string(),
-      result: external_exports.object({
-        conversation_id: external_exports.string().optional(),
-        message_id: external_exports.string().optional(),
-        status: external_exports.string().optional(),
-        files: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).optional(),
-        // True when this request reused a task-start/message id already accepted by
-        // the server. Clients must replace their optimistic payload with a fresh
-        // authoritative read because another tab may have won with different text.
-        deduped: external_exports.boolean().optional()
-      }).optional()
-    });
-  }
-});
-
 // ../../packages/core/dist/chunk-NVKU5PPQ.js
 var ADMIN_SKILL_NAME_REGEX, adminSkillNameParam;
 var init_chunk_NVKU5PPQ = __esm({
@@ -14701,32 +14741,6 @@ var init_chunk_2PZIF56U = __esm({
   }
 });
 
-// ../../packages/core/dist/chunk-UEJOG2Q7.js
-var archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams;
-var init_chunk_UEJOG2Q7 = __esm({
-  "../../packages/core/dist/chunk-UEJOG2Q7.js"() {
-    "use strict";
-    init_zod();
-    archiveHubIdParam = external_exports.object({
-      hubId: external_exports.string().uuid()
-    });
-    archiveConversationParams = external_exports.object({
-      hubId: external_exports.string().uuid(),
-      conversationId: external_exports.string().uuid()
-    });
-    archiveListQuery = external_exports.object({
-      user_id: external_exports.string().optional(),
-      start: external_exports.string().optional(),
-      end: external_exports.string().optional(),
-      page: external_exports.string().regex(/^\d+$/).optional(),
-      page_size: external_exports.string().regex(/^\d+$/).optional()
-    });
-    archiveMessageObservabilityParams = archiveConversationParams.extend({
-      messageId: external_exports.string().uuid()
-    });
-  }
-});
-
 // ../../packages/core/dist/chunk-SOJMWM63.js
 var init_chunk_SOJMWM63 = __esm({
   "../../packages/core/dist/chunk-SOJMWM63.js"() {
@@ -14942,13 +14956,14 @@ var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
     "use strict";
     init_chunk_SXDX4GHS();
-    init_chunk_FK6HBXM7();
+    init_chunk_HENF6YTF();
     init_chunk_VXEAR36B();
-    init_chunk_TIZ57ZBA();
+    init_chunk_DYI3BRJ3();
     init_chunk_Q7KIQHAZ();
     init_chunk_WBFLPPDI();
     init_chunk_IPXBFWUU();
     init_chunk_GK27ENTT();
+    init_chunk_IPDOHAZ5();
     init_chunk_GPM7PE44();
     init_chunk_DGKMMFIR();
     init_chunk_ZC6YGHNX();
@@ -14956,40 +14971,41 @@ var init_contracts = __esm({
     init_chunk_ZXK6N2HN();
     init_chunk_Y7CFCYX4();
     init_chunk_5DGHIY7L();
-    init_chunk_FNNHGL7K();
+    init_chunk_4QBKRQMM();
     init_chunk_4MRBBR5L();
     init_chunk_BEOHBREG();
-    init_chunk_IPDOHAZ5();
+    init_chunk_SY6PLCPK();
     init_chunk_YUZFHVB2();
     init_chunk_I3O2RACG();
     init_chunk_34LE6P7E();
     init_chunk_FPSDNS2E();
-    init_chunk_QZZ3OHLV();
+    init_chunk_LKBSHANA();
+    init_chunk_23ESQLLF();
     init_chunk_C4HEZ7ZI();
     init_chunk_IR2NOSI3();
     init_chunk_EA23LSDS();
-    init_chunk_SY6PLCPK();
+    init_chunk_V4FRPRH5();
     init_chunk_LWMLR2WI();
     init_chunk_ACGAI25T();
     init_chunk_MH4O3YEX();
-    init_chunk_TUP5Y6ZB();
+    init_chunk_6GBBTCME();
     init_chunk_KSTYTQ7I();
-    init_chunk_LKBSHANA();
+    init_chunk_7CYHPF35();
     init_chunk_BPCNB5RT();
-    init_chunk_RT35VFUY();
-    init_chunk_KRGVB7U6();
-    init_chunk_623SRYWZ();
+    init_chunk_SCZ3GSJE();
+    init_chunk_4S4FBSBE();
+    init_chunk_6UKJ6EMZ();
     init_chunk_JDJ4EUOL();
     init_chunk_3KYTITOR();
     init_chunk_XCDUP42J();
     init_chunk_6J742GLA();
     init_chunk_ZVXO3XL6();
     init_chunk_YULHXJ5M();
-    init_chunk_V4FRPRH5();
+    init_chunk_UEJOG2Q7();
     init_chunk_ZHJEQBXJ();
-    init_chunk_2VTDOH67();
+    init_chunk_EHPGISOL();
     init_chunk_LQY2OCQL();
-    init_chunk_XOGFONTQ();
+    init_chunk_DIBRGYL6();
     init_chunk_3HSB6J4J();
     init_chunk_IG6QBZMA();
     init_chunk_ZJJ5ODOD();
@@ -14997,10 +15013,9 @@ var init_contracts = __esm({
     init_chunk_LBDH7LCG();
     init_chunk_4LXDRTO4();
     init_chunk_E4DIIOOE();
-    init_chunk_7CYHPF35();
-    init_chunk_OGXIPFQY();
-    init_chunk_LQSENJ26();
-    init_chunk_UZ7SPBM3();
+    init_chunk_23UZ2IKU();
+    init_chunk_MCSEEMGN();
+    init_chunk_UFYIBL66();
     init_chunk_NVKU5PPQ();
     init_chunk_2FCLSQSQ();
     init_chunk_FECLIZTY();
@@ -15012,14 +15027,14 @@ var init_contracts = __esm({
     init_chunk_ACN6GXU6();
     init_chunk_OMPT4ZHR();
     init_chunk_2PZIF56U();
-    init_chunk_UEJOG2Q7();
-    init_chunk_ISFDR7SP();
+    init_chunk_KJXJKAYT();
     init_chunk_SOJMWM63();
     init_chunk_WEXVYJ5H();
-    init_chunk_LZDVDC2S();
+    init_chunk_C5MU3WEM();
     init_chunk_5XEJSR22();
     init_chunk_IBL7FANV();
-    init_chunk_PFDZEKDE();
+    init_chunk_Y3S4XX4K();
+    init_chunk_A4JC7DXB();
     init_chunk_VORPHGDT();
     init_chunk_HZ6CADSY();
     init_chunk_MIWZOSPI();
@@ -16341,13 +16356,14 @@ var UUID_RE2, WAYAI_WORKSPACE_LAYOUT;
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
     "use strict";
-    init_chunk_ISFDR7SP();
+    init_chunk_KJXJKAYT();
     init_chunk_SOJMWM63();
     init_chunk_WEXVYJ5H();
-    init_chunk_LZDVDC2S();
+    init_chunk_C5MU3WEM();
     init_chunk_5XEJSR22();
     init_chunk_IBL7FANV();
-    init_chunk_PFDZEKDE();
+    init_chunk_Y3S4XX4K();
+    init_chunk_A4JC7DXB();
     init_chunk_P3AWZG3N();
     init_chunk_VORPHGDT();
     init_chunk_HZ6CADSY();
@@ -22250,7 +22266,7 @@ function renderDiff(diff) {
   for (const kind of ENTITY_KINDS) {
     const b = bucket(diff, kind);
     if (!b || isEmptyBucket(b)) continue;
-    lines.push(`${BOLD}${LABELS[kind]}s${RESET}`);
+    lines.push(`${BOLD}${ENTITY_LABELS[kind]}s${RESET}`);
     for (const e of b.added) lines.push(`${GREEN}  + ${sanitizeTerminalText(e.id)}${RESET}`);
     for (const m of b.modified) lines.push(`${YELLOW}  ~ ${sanitizeTerminalText(m.after.id)}${RESET}`);
     for (const e of b.removed) {
@@ -22271,14 +22287,14 @@ function renderDiff(diff) {
   }
   return lines.join("\n");
 }
-var LABELS, GREEN, YELLOW, RED, BOLD, RESET;
+var ENTITY_LABELS, GREEN, YELLOW, RED, BOLD, RESET;
 var init_diff_format = __esm({
   "src/data/config-as-code/diff-format.ts"() {
     "use strict";
     init_terminal_output();
     init_base_id();
     init_types2();
-    LABELS = {
+    ENTITY_LABELS = {
       record_types: "record type",
       relationship_types: "relationship type",
       file_types: "file type",
@@ -33554,13 +33570,23 @@ function compareForSlugOrder(a, b) {
   if (at !== bt) return at < bt ? -1 : 1;
   return a.resource_id < b.resource_id ? -1 : a.resource_id > b.resource_id ? 1 : 0;
 }
-function buildResourceSlugMap(resources) {
-  const ordered = [...resources].sort(compareForSlugOrder);
+function isSkill(resource) {
+  return resource.resource_type === "skill";
+}
+function resourceNamespace(resource) {
+  return isSkill(resource) ? SKILL_NAMESPACE : RESOURCE_NAMESPACE;
+}
+function resourceMountPath(resource, slug) {
+  return `${resourceNamespace(resource)}/${slug}`;
+}
+function baseSlug(resource) {
+  return slugifySkillName(resourceDisplayName(resource)) || FALLBACK_SLUG;
+}
+function rankSlugs(ordered) {
   const used = /* @__PURE__ */ new Set();
   const slugByResourceId = /* @__PURE__ */ new Map();
   for (const resource of ordered) {
-    if (!resource?.resource_id) continue;
-    const base = slugifySkillName(resourceDisplayName(resource)) || FALLBACK_SLUG;
+    const base = baseSlug(resource);
     let slug = base;
     for (let ordinal = 2; used.has(slug); ordinal++) slug = `${base}-${ordinal}`;
     used.add(slug);
@@ -33568,6 +33594,17 @@ function buildResourceSlugMap(resources) {
   }
   return slugByResourceId;
 }
+function buildResourceSlugMap(resources) {
+  const ordered = resources.filter((resource) => !!resource?.resource_id).sort(compareForSlugOrder);
+  const overAll = rankSlugs(ordered);
+  const overSkills = rankSlugs(ordered.filter(isSkill));
+  const slugByResourceId = /* @__PURE__ */ new Map();
+  for (const resource of ordered) {
+    const slug = isSkill(resource) ? overSkills.get(resource.resource_id) : overAll.get(resource.resource_id);
+    if (slug) slugByResourceId.set(resource.resource_id, slug);
+  }
+  return slugByResourceId;
+}
 function sanitizeSegment(name) {
   const cleaned = (name ?? "").replace(/[\\/]+/g, "-").replace(/[\u0000-\u001F\u007F-\u009F\u2028\u2029]+/g, " ").trim();
   return cleaned === "." || cleaned === ".." ? "" : cleaned;
@@ -33684,8 +33721,15 @@ function compareForOrdinalOrder(a, b) {
 }
 function buildResourcePathIndex(resources, files, folders) {
   const slugByResourceId = buildResourceSlugMap(resources);
-  const resourceIdBySlug = /* @__PURE__ */ new Map();
-  for (const [resourceId, slug] of slugByResourceId) resourceIdBySlug.set(slug, resourceId);
+  const mountPathByResourceId = /* @__PURE__ */ new Map();
+  const resourceIdByMountPath = /* @__PURE__ */ new Map();
+  for (const resource of resources) {
+    const slug = resource?.resource_id ? slugByResourceId.get(resource.resource_id) : void 0;
+    if (!slug) continue;
+    const mountPath = resourceMountPath(resource, slug);
+    mountPathByResourceId.set(resource.resource_id, mountPath);
+    resourceIdByMountPath.set(mountPath, resource.resource_id);
+  }
   const resolveFolder = buildFolderPathResolver(folders);
   const filesByResource = /* @__PURE__ */ new Map();
   for (const row of files) {
@@ -33700,7 +33744,8 @@ function buildResourcePathIndex(resources, files, folders) {
   const entriesByResourceId = /* @__PURE__ */ new Map();
   for (const [resourceId, rows] of filesByResource) {
     const slug = slugByResourceId.get(resourceId);
-    if (!slug) continue;
+    const mountPath = mountPathByResourceId.get(resourceId);
+    if (!slug || !mountPath) continue;
     const takenPaths = /* @__PURE__ */ new Set();
     const resourceEntries = [];
     for (const row of [...rows].sort(compareForOrdinalOrder)) {
@@ -33721,7 +33766,7 @@ function buildResourcePathIndex(resources, files, folders) {
         resource_file_id: row.resource_file_id,
         file_id: row.file_id,
         relative_path: relativePath,
-        canonical_path: `${RESOURCE_NAMESPACE}/${slug}/${relativePath}`,
+        canonical_path: `${mountPath}/${relativePath}`,
         file: row
       };
       entries.push(entry);
@@ -33731,9 +33776,9 @@ function buildResourcePathIndex(resources, files, folders) {
     }
     entriesByResourceId.set(resourceId, resourceEntries);
   }
-  return { entries, slugByResourceId, resourceIdBySlug, byCanonicalPath, byFileId, entriesByResourceId };
+  return { entries, slugByResourceId, mountPathByResourceId, resourceIdByMountPath, byCanonicalPath, byFileId, entriesByResourceId };
 }
-var RESOURCE_NAMESPACE, FALLBACK_SLUG, FALLBACK_LEAF, MAX_FOLDER_DEPTH, UI_UPLOAD_TIMESTAMP_PREFIX, UUID_SEGMENT;
+var RESOURCE_NAMESPACE, SKILL_NAMESPACE, FALLBACK_SLUG, FALLBACK_LEAF, MAX_FOLDER_DEPTH, UI_UPLOAD_TIMESTAMP_PREFIX, UUID_SEGMENT;
 var init_resource_paths = __esm({
   "../../packages/core/dist/resource-paths.js"() {
     "use strict";
@@ -33741,6 +33786,7 @@ var init_resource_paths = __esm({
     init_chunk_CJ3L46X6();
     init_chunk_6TSQ5HXC();
     RESOURCE_NAMESPACE = "resources";
+    SKILL_NAMESPACE = "skills";
     FALLBACK_SLUG = "resource";
     FALLBACK_LEAF = "file";
     MAX_FOLDER_DEPTH = 32;
@@ -34590,7 +34636,7 @@ function sameFileType(remote, spec) {
 function isObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function promotionProblems(result, ids, section = "file_types") {
+function promotionProblems(result, ids, { section = "file_types", createOnly = false } = {}) {
   const answer = isObject(result) ? result : {};
   const problems2 = [];
   for (const [kind, bucket2] of Object.entries(isObject(answer.diff) ? answer.diff : {})) {
@@ -34599,7 +34645,15 @@ function promotionProblems(result, ids, section = "file_types") {
       for (const entry of Array.isArray(bucket2[change]) ? bucket2[change] : []) {
         const row = isObject(entry) ? isObject(entry.after) ? entry.after : entry : {};
         const id = typeof row.id === "string" ? row.id : JSON.stringify(row).slice(0, 80);
-        if (kind === section && change !== "removed" && ids.has(id)) continue;
+        if (kind === section && ids.has(id)) {
+          if (change === "added" || change === "modified" && !createOnly) continue;
+          if (change === "modified") {
+            problems2.push(
+              `${ENTITY_LABELS[section]} "${id}" was created in production while the migration ran, and differs from the one it would promote, so the production one is kept`
+            );
+            continue;
+          }
+        }
         problems2.push(`it would also apply ${kind} ${change}: "${id}"`);
       }
     }
@@ -34762,7 +34816,7 @@ Dry run: nothing written (${writes === 0 ? "nothing to write" : `${writes} write
   for (const spec of toWrite) await kb.putFileType(preview, spec);
   if (toPromote.length > 0) {
     const ids = toPromote.map((s) => s.id);
-    const problems2 = promotionProblems(await kb.promoteFileTypes(productionId, preview, ids, true), new Set(ids));
+    const problems2 = promotionProblems(await kb.promoteFileTypes(productionId, preview, ids, true), new Set(ids), { createOnly: true });
     if (problems2.length > 0) {
       throw expected(
         `The promotion into "${safe(productionId)}" would not apply as planned (${problems2.map(safe).join("; ")}). Its file types are written in "${safe(preview)}"; nothing reached production.`
@@ -34797,6 +34851,7 @@ var init_migrate2 = __esm({
     "use strict";
     init_resource_files();
     init_api_client();
+    init_diff_format();
     init_expected();
     init_terminal_output();
     init_utils();
@@ -35367,9 +35422,10 @@ var COUNTER_KEYS, STT_PRICING, CONTAINER_PRICING, connectorById, nativeToolById;
 var init_catalog = __esm({
   "../../packages/core/dist/catalog/index.js"() {
     "use strict";
-    init_chunk_OGXIPFQY();
-    init_chunk_LQSENJ26();
-    init_chunk_UZ7SPBM3();
+    init_chunk_23UZ2IKU();
+    init_chunk_MCSEEMGN();
+    init_chunk_UFYIBL66();
+    init_chunk_A4JC7DXB();
     init_chunk_MIWZOSPI();
     init_chunk_DHPUPI4Y();
     COUNTER_KEYS = Object.keys({
@@ -35767,7 +35823,7 @@ Dry run: nothing written (${writes === 0 ? "nothing to write" : `${writes} write
   for (const spec of toolsetsToWrite) await kb.putToolset(preview, spec);
   if (toolsetsToPromote.length > 0) {
     const slugs = toolsetsToPromote.map((s) => s.id);
-    const problems2 = promotionProblems(await kb.promoteToolsets(production, preview, slugs, true), new Set(slugs), "toolsets");
+    const problems2 = promotionProblems(await kb.promoteToolsets(production, preview, slugs, true), new Set(slugs), { section: "toolsets" });
     if (problems2.length > 0) {
       throw expected(
         `The promotion into "${safe2(production)}" would not apply as planned (${problems2.map(safe2).join("; ")}). The toolsets are written in "${safe2(preview)}"; nothing reached production, and the hub's agents are unchanged.`
@@ -35964,7 +36020,9 @@ migrate: move knowledge resources into the organization's knowledge base.
   file type, its files keep their paths, and each described folder gains an _index.md. Files are
   written create-only: one created at its path while it runs is kept, and the run stops there,
   naming it. A re-run writes what is left once that file matches its source or is moved or
-  removed; until then it stops before any write, naming it.
+  removed; until then it stops before any write, naming it. A file type created in production at
+  an id it would add, after it read production, is kept too: unless it is already what the run
+  would promote, the run stops before promoting, naming it.
 
   --base       The knowledge base: its production base, or the preview its file types are
                written in. File types are written in the preview and promoted; files are