@wayai/cli 0.3.56 → 0.3.58

package/dist/index.js

@@ -174,6 +174,11 @@ var init_sentry = __esm({
 });
 
 // src/lib/api-client.ts
+var api_client_exports = {};
+__export(api_client_exports, {
+  ApiClient: () => ApiClient,
+  ApiError: () => ApiError
+});
 function isRetryableErrorBody(body) {
   try {
     const parsed = JSON.parse(body);
@@ -254,11 +259,15 @@ var init_api_client = __esm({
       }
       // --- Templates gallery ---
       // Consumer (any authed user): list the joint template set + pull the wayai slice.
-      async templateList() {
-        return this.request("GET", "/api/ci/templates");
+      // `locale` is optional — the server resolves to each template's defaultLocale when
+      // omitted, and falls back to it (with a resolvedLocale signal) when unauthored.
+      async templateList(locale) {
+        const qs = locale ? `?${new URLSearchParams({ locale })}` : "";
+        return this.request("GET", `/api/ci/templates${qs}`);
       }
-      async templatePull(slug) {
-        return this.request("GET", `/api/ci/templates/${encodeURIComponent(slug)}`);
+      async templatePull(slug, locale) {
+        const qs = locale ? `?${new URLSearchParams({ locale })}` : "";
+        return this.request("GET", `/api/ci/templates/${encodeURIComponent(slug)}${qs}`);
       }
       // Author (platform-admin): push a template into the store / pull it for inspection.
       async adminTemplatePush(body) {
@@ -5206,7 +5215,7 @@ function findStepBoundaries(transcript) {
   }
   return out;
 }
-var APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, uuidSchema, paginationSchema, timestampSchema, idParamSchema, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlSchemaQuery, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, createJourneyBody, updateJourneyBody, getConversationsQuery, getMessagesQuery, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, sendMessageBody, listConversationsQuery, getConversationDetailParams, getConversationDetailQuery, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, completionsBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, uuidPattern, ciUuidSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysQuery, dataExplorerKvKeyParam, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteQuery, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, sentryRefStatusSchema, createReportBody, editReportBody, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, discordTier, discordBillingCycle, discordMetadata, discordOAuthStartResponse, discordOAuthFinalizeBody, discordOAuthFinalizeResponse, discordDisconnectResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, TEMPLATE_SLUG_REGEX, templateSlugSchema, templateStatusSchema, templateFileMapSchema, templateWayaiBlockSchema, templateRekorBlockSchema, templateYamlWayaiBlock, templateYamlRekorBlock, templateYamlSchema, templatePushMetadataSchema, templateHeroSchema, templatePushBody, templateSlugParam, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, WAYAI_WORKSPACE_LAYOUT, MAX_RESOURCE_FILE_SIZE;
+var APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, uuidSchema, paginationSchema, timestampSchema, idParamSchema, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlSchemaQuery, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, createJourneyBody, updateJourneyBody, getConversationsQuery, getMessagesQuery, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, sendMessageBody, listConversationsQuery, getConversationDetailParams, getConversationDetailQuery, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, completionsBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, uuidPattern, ciUuidSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysQuery, dataExplorerKvKeyParam, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteQuery, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, sentryRefStatusSchema, createReportBody, editReportBody, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, discordTier, discordBillingCycle, discordMetadata, discordOAuthStartResponse, discordOAuthFinalizeBody, discordOAuthFinalizeResponse, discordDisconnectResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, templateLocaleSchema, TEMPLATE_SLUG_REGEX, templateSlugSchema, templateStatusSchema, templateFileMapSchema, templateTextSchema, templateRekorPointerSchema, templateYamlLocaleEntry, templateYamlWayaiBlock, templateYamlRekorBlock, templateYamlSchema, templateHeroSchema, templatePushLocaleSchema, templatePushBody, templateListQuery, templateSlugParam, templateDetailQuery, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, WAYAI_WORKSPACE_LAYOUT, MAX_RESOURCE_FILE_SIZE;
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
     "use strict";
@@ -5382,6 +5391,7 @@ var init_dist = __esm({
       "summarizer"
     ];
     SAFE_USER_ID_REGEX = /^[A-Za-z0-9_-]{1,64}$/;
+    SUPPORTED_LOCALES = ["en", "pt", "es"];
     uuidSchema = external_exports.string().uuid();
     paginationSchema = external_exports.object({
       limit: external_exports.coerce.number().int().min(1).max(100).default(50),
@@ -7556,62 +7566,76 @@ var init_dist = __esm({
       offset: external_exports.coerce.number().int().min(0).optional()
     });
     noticeIdParamSchema = external_exports.object({ id: external_exports.string().min(1) });
+    templateLocaleSchema = external_exports.enum(SUPPORTED_LOCALES);
     TEMPLATE_SLUG_REGEX = /^[a-z0-9][a-z0-9-]{0,62}$/;
     templateSlugSchema = external_exports.string().regex(TEMPLATE_SLUG_REGEX, "slug must be lowercase alphanumeric with hyphens (max 63)");
     templateStatusSchema = external_exports.enum(["published", "draft", "internal"]);
     templateFileMapSchema = external_exports.record(external_exports.string()).refine((m) => Object.keys(m).every(isSafeTemplatePath), {
       message: 'file map contains an unsafe path (no absolute paths, "..", or backslashes)'
     });
-    templateWayaiBlockSchema = external_exports.object({
+    templateTextSchema = external_exports.object({
       metaTitle: external_exports.string().min(1).max(200),
-      metaDescription: external_exports.string().max(1e3).default(""),
-      installCommand: external_exports.string().min(1).max(300)
+      metaDescription: external_exports.string().max(1e3).default("")
     });
-    templateRekorBlockSchema = templateWayaiBlockSchema.extend({
+    templateRekorPointerSchema = external_exports.object({
       mcpEndpoint: external_exports.string().url().optional(),
       url: external_exports.string().url().optional()
     });
-    templateYamlWayaiBlock = templateWayaiBlockSchema.extend({
-      source: external_exports.string().min(1)
+    templateYamlLocaleEntry = templateTextSchema.extend({ source: external_exports.string().min(1) });
+    templateYamlWayaiBlock = external_exports.object({
+      installCommand: external_exports.string().min(1).max(300),
+      locales: external_exports.record(templateLocaleSchema, templateYamlLocaleEntry)
     });
-    templateYamlRekorBlock = templateRekorBlockSchema.extend({
-      source: external_exports.string().min(1)
+    templateYamlRekorBlock = templateRekorPointerSchema.extend({
+      locales: external_exports.record(templateLocaleSchema, templateYamlLocaleEntry)
     });
     templateYamlSchema = external_exports.object({
       slug: templateSlugSchema,
       category: external_exports.string().min(1).max(60),
       status: templateStatusSchema.default("draft"),
       order: external_exports.number().int().min(0).max(1e5).optional(),
+      defaultLocale: templateLocaleSchema,
       hero: external_exports.string().optional(),
       // relative path to a hero image inside the template folder
       wayai: templateYamlWayaiBlock.optional(),
       rekor: templateYamlRekorBlock.optional()
     }).refine((c) => Boolean(c.wayai) || Boolean(c.rekor), {
       message: "template.yaml must define at least one of `wayai:` or `rekor:`"
-    });
-    templatePushMetadataSchema = external_exports.object({
-      category: external_exports.string().min(1).max(60),
-      status: templateStatusSchema,
-      order: external_exports.number().int().min(0).max(1e5).default(0),
-      wayai: templateWayaiBlockSchema.optional(),
-      rekor: templateRekorBlockSchema.optional()
+    }).refine((c) => !c.wayai || Boolean(c.wayai.locales[c.defaultLocale]), {
+      message: "`wayai.locales` must include the defaultLocale"
+    }).refine((c) => !c.rekor || Boolean(c.rekor.locales[c.defaultLocale]), {
+      message: "`rekor.locales` must include the defaultLocale"
     });
     templateHeroSchema = external_exports.object({
       filename: external_exports.string().min(1).max(200).regex(/\.(png|jpe?g|webp|gif)$/i, "hero must be a raster image (png/jpg/webp/gif)"),
-      // ~8MB of base64 ≈ a ~6MB image — a generous cap that bounds the inline payload
-      // (the endpoint is platform-admin-only, but an unbounded blob is still avoidable).
       dataBase64: external_exports.string().min(1).max(8e6)
     });
+    templatePushLocaleSchema = external_exports.object({
+      wayai: templateTextSchema.optional(),
+      rekorText: templateTextSchema.optional(),
+      readmeMarkdown: external_exports.string().default(""),
+      wayaiFiles: templateFileMapSchema.optional()
+    });
     templatePushBody = external_exports.object({
       slug: templateSlugSchema,
-      metadata: templatePushMetadataSchema,
-      // wayai slice file-map (path -> body); ABSENT for a Rekor-only template.
-      wayaiFiles: templateFileMapSchema.optional(),
-      // raw README markdown; the backend renders + sanitizes (single authority).
-      readmeMarkdown: external_exports.string().default(""),
-      hero: templateHeroSchema.optional()
+      defaultLocale: templateLocaleSchema,
+      common: external_exports.object({
+        category: external_exports.string().min(1).max(60),
+        status: templateStatusSchema,
+        order: external_exports.number().int().min(0).max(1e5).default(0),
+        // The WayAI install command — present iff the template has a wayai side; a
+        // Rekor-only template omits it.
+        installCommand: external_exports.string().min(1).max(300).optional(),
+        hero: templateHeroSchema.optional(),
+        rekorPointer: templateRekorPointerSchema.optional()
+      }),
+      locales: external_exports.record(templateLocaleSchema, templatePushLocaleSchema)
+    }).refine((b) => Boolean(b.locales[b.defaultLocale]), {
+      message: "`locales` must include the defaultLocale"
     });
+    templateListQuery = external_exports.object({ locale: templateLocaleSchema.optional() });
     templateSlugParam = external_exports.object({ slug: templateSlugSchema });
+    templateDetailQuery = external_exports.object({ locale: templateLocaleSchema.optional() });
     ADMIN_SKILL_NAME_REGEX = /^[a-z0-9][a-z0-9-]{0,63}$/;
     adminSkillNameParam = external_exports.object({
       name: external_exports.string().regex(ADMIN_SKILL_NAME_REGEX, "invalid skill name")
@@ -8230,13 +8254,14 @@ function writeVersionCache(filename, cache) {
 function touchVersionCache(filename) {
   writeVersionCache(filename, { lastCheck: Date.now(), latest: readVersionCache(filename)?.latest ?? null });
 }
-var MAX_AGE_24H_MS, CLI_CACHE_FILE, SKILL_CACHE_FILE;
+var MAX_AGE_24H_MS, CLI_CACHE_FILE, SKILL_CACHE_FILE, ADMIN_SKILL_CACHE_FILE;
 var init_version_cache = __esm({
   "src/lib/version-cache.ts"() {
     "use strict";
     MAX_AGE_24H_MS = 24 * 60 * 60 * 1e3;
     CLI_CACHE_FILE = "update-check.json";
     SKILL_CACHE_FILE = "skill-update-check.json";
+    ADMIN_SKILL_CACHE_FILE = "admin-skill-update-check.json";
   }
 });
 
@@ -8244,6 +8269,9 @@ var init_version_cache = __esm({
 import { existsSync as existsSync5, readFileSync as readFileSync6 } from "fs";
 import { join as join7 } from "path";
 import * as yaml3 from "js-yaml";
+function skillInstallPaths(skillName) {
+  return HARNESS_SKILL_DIRS.map((dir) => `${dir}/skills/${skillName}/${SKILL_FILENAME}`);
+}
 function parseFrontmatterVersion(content) {
   const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(content);
   if (!match) return null;
@@ -8257,9 +8285,9 @@ function parseFrontmatterVersion(content) {
   const v = parsed.version;
   return typeof v === "string" ? v : null;
 }
-function findInstalledSkills(projectRoot) {
+function findInstalledSkills(projectRoot, paths = SKILL_INSTALL_PATHS) {
   const found = [];
-  for (const rel of SKILL_INSTALL_PATHS) {
+  for (const rel of paths) {
     const path22 = join7(projectRoot, rel);
     if (!existsSync5(path22)) continue;
     let version = null;
@@ -8276,20 +8304,28 @@ function lowestInstalledVersion(installs) {
   if (versions.length === 0) return null;
   return versions.reduce((lowest, v) => isNewerVersion(lowest, v) ? v : lowest);
 }
-var DEFAULT_SKILL_RAW_URL, HARNESS_SKILL_DIRS, SKILL_INSTALL_PATHS;
+var DEFAULT_SKILL_RAW_URL, HARNESS_SKILL_DIRS, SKILL_FILENAME, SKILL_INSTALL_PATHS, ADMIN_SKILL_NAME, ADMIN_SKILL_INSTALL_PATHS;
 var init_skill_version = __esm({
   "src/lib/skill-version.ts"() {
     "use strict";
     init_utils();
     DEFAULT_SKILL_RAW_URL = "https://raw.githubusercontent.com/wayai-pro/wayai-skill/main/skills/wayai/SKILL.md";
     HARNESS_SKILL_DIRS = [".claude", ".opencode", ".agents"];
-    SKILL_INSTALL_PATHS = HARNESS_SKILL_DIRS.map(
-      (dir) => `${dir}/skills/wayai/SKILL.md`
-    );
+    SKILL_FILENAME = "SKILL.md";
+    SKILL_INSTALL_PATHS = skillInstallPaths("wayai");
+    ADMIN_SKILL_NAME = "wayai-admin";
+    ADMIN_SKILL_INSTALL_PATHS = skillInstallPaths(ADMIN_SKILL_NAME);
   }
 });
 
 // src/lib/config.ts
+var config_exports = {};
+__export(config_exports, {
+  deleteConfig: () => deleteConfig,
+  getConfigPath: () => getConfigPath,
+  readConfig: () => readConfig,
+  writeConfig: () => writeConfig
+});
 import * as fs5 from "fs";
 import * as path5 from "path";
 import * as os from "os";
@@ -8299,6 +8335,9 @@ function configDir() {
 function configPath() {
   return path5.join(configDir(), "config.json");
 }
+function getConfigPath() {
+  return configPath();
+}
 function readConfig() {
   if (!fs5.existsSync(configPath())) return null;
   try {
@@ -8334,6 +8373,11 @@ function writeConfig(config) {
     // owner-only read/write
   });
 }
+function deleteConfig() {
+  if (fs5.existsSync(configPath())) {
+    fs5.unlinkSync(configPath());
+  }
+}
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -8628,6 +8672,22 @@ var init_token_store = __esm({
 });
 
 // src/lib/auth.ts
+var auth_exports = {};
+__export(auth_exports, {
+  OAUTH_CALLBACK_PORT: () => OAUTH_CALLBACK_PORT,
+  exchangeCodeForTokens: () => exchangeCodeForTokens,
+  expiresInToIso: () => expiresInToIso,
+  generateCodeChallenge: () => generateCodeChallenge,
+  generateCodeVerifier: () => generateCodeVerifier,
+  generateState: () => generateState,
+  getAccessToken: () => getAccessToken,
+  getAuthKitClientId: () => getAuthKitClientId,
+  getAuthKitDomain: () => getAuthKitDomain,
+  refreshAccessToken: () => refreshAccessToken,
+  requireAuth: () => requireAuth,
+  startCallbackServer: () => startCallbackServer,
+  validateToken: () => validateToken
+});
 import * as crypto2 from "crypto";
 import * as http from "http";
 function generateCodeVerifier() {
@@ -13050,7 +13110,7 @@ function isSafeTemplatePath2(path22) {
     (seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg)
   );
 }
-var uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, AUTH_TYPE2, ORG_CREDENTIAL_AUTH_TYPES2, AUTH_TYPE_DISPLAY2, LEGACY_AUTH_TYPE_MAP2, VALID_AUTH_TYPES2, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlSchemaQuery2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, createJourneyBody2, updateJourneyBody2, getConversationsQuery2, getMessagesQuery2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, sendMessageBody2, listConversationsQuery2, getConversationDetailParams2, getConversationDetailQuery2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, completionsBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, uuidPattern2, ciUuidSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysQuery2, dataExplorerKvKeyParam2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteQuery2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, discordTier2, discordBillingCycle2, discordMetadata2, discordOAuthStartResponse2, discordOAuthFinalizeBody2, discordOAuthFinalizeResponse2, discordDisconnectResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, TEMPLATE_SLUG_REGEX2, templateSlugSchema2, templateStatusSchema2, templateFileMapSchema2, templateWayaiBlockSchema2, templateRekorBlockSchema2, templateYamlWayaiBlock2, templateYamlRekorBlock2, templateYamlSchema2, templatePushMetadataSchema2, templateHeroSchema2, templatePushBody2, templateSlugParam2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2;
+var uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, AUTH_TYPE2, ORG_CREDENTIAL_AUTH_TYPES2, AUTH_TYPE_DISPLAY2, LEGACY_AUTH_TYPE_MAP2, VALID_AUTH_TYPES2, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlSchemaQuery2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, createJourneyBody2, updateJourneyBody2, getConversationsQuery2, getMessagesQuery2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, sendMessageBody2, listConversationsQuery2, getConversationDetailParams2, getConversationDetailQuery2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, completionsBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, uuidPattern2, ciUuidSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysQuery2, dataExplorerKvKeyParam2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteQuery2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, discordTier2, discordBillingCycle2, discordMetadata2, discordOAuthStartResponse2, discordOAuthFinalizeBody2, discordOAuthFinalizeResponse2, discordDisconnectResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, templateLocaleSchema2, TEMPLATE_SLUG_REGEX2, templateSlugSchema2, templateStatusSchema2, templateFileMapSchema2, templateTextSchema2, templateRekorPointerSchema2, templateYamlLocaleEntry2, templateYamlWayaiBlock2, templateYamlRekorBlock2, templateYamlSchema2, templateHeroSchema2, templatePushLocaleSchema2, templatePushBody2, templateListQuery2, templateSlugParam2, templateDetailQuery2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2;
 var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
     "use strict";
@@ -13191,6 +13251,7 @@ var init_contracts = __esm({
       "summarizer"
     ];
     SAFE_USER_ID_REGEX2 = /^[A-Za-z0-9_-]{1,64}$/;
+    SUPPORTED_LOCALES2 = ["en", "pt", "es"];
     SUMMARIZATION_THRESHOLD_MIN2 = 1e3;
     SUMMARIZATION_THRESHOLD_MAX2 = 1e6;
     summarizationThresholdField2 = external_exports.number().int().min(SUMMARIZATION_THRESHOLD_MIN2).max(SUMMARIZATION_THRESHOLD_MAX2).nullable().optional();
@@ -15316,62 +15377,76 @@ var init_contracts = __esm({
       offset: external_exports.coerce.number().int().min(0).optional()
     });
     noticeIdParamSchema2 = external_exports.object({ id: external_exports.string().min(1) });
+    templateLocaleSchema2 = external_exports.enum(SUPPORTED_LOCALES2);
     TEMPLATE_SLUG_REGEX2 = /^[a-z0-9][a-z0-9-]{0,62}$/;
     templateSlugSchema2 = external_exports.string().regex(TEMPLATE_SLUG_REGEX2, "slug must be lowercase alphanumeric with hyphens (max 63)");
     templateStatusSchema2 = external_exports.enum(["published", "draft", "internal"]);
     templateFileMapSchema2 = external_exports.record(external_exports.string()).refine((m) => Object.keys(m).every(isSafeTemplatePath2), {
       message: 'file map contains an unsafe path (no absolute paths, "..", or backslashes)'
     });
-    templateWayaiBlockSchema2 = external_exports.object({
+    templateTextSchema2 = external_exports.object({
       metaTitle: external_exports.string().min(1).max(200),
-      metaDescription: external_exports.string().max(1e3).default(""),
-      installCommand: external_exports.string().min(1).max(300)
+      metaDescription: external_exports.string().max(1e3).default("")
     });
-    templateRekorBlockSchema2 = templateWayaiBlockSchema2.extend({
+    templateRekorPointerSchema2 = external_exports.object({
       mcpEndpoint: external_exports.string().url().optional(),
       url: external_exports.string().url().optional()
     });
-    templateYamlWayaiBlock2 = templateWayaiBlockSchema2.extend({
-      source: external_exports.string().min(1)
+    templateYamlLocaleEntry2 = templateTextSchema2.extend({ source: external_exports.string().min(1) });
+    templateYamlWayaiBlock2 = external_exports.object({
+      installCommand: external_exports.string().min(1).max(300),
+      locales: external_exports.record(templateLocaleSchema2, templateYamlLocaleEntry2)
     });
-    templateYamlRekorBlock2 = templateRekorBlockSchema2.extend({
-      source: external_exports.string().min(1)
+    templateYamlRekorBlock2 = templateRekorPointerSchema2.extend({
+      locales: external_exports.record(templateLocaleSchema2, templateYamlLocaleEntry2)
     });
     templateYamlSchema2 = external_exports.object({
       slug: templateSlugSchema2,
       category: external_exports.string().min(1).max(60),
       status: templateStatusSchema2.default("draft"),
       order: external_exports.number().int().min(0).max(1e5).optional(),
+      defaultLocale: templateLocaleSchema2,
       hero: external_exports.string().optional(),
       // relative path to a hero image inside the template folder
       wayai: templateYamlWayaiBlock2.optional(),
       rekor: templateYamlRekorBlock2.optional()
     }).refine((c) => Boolean(c.wayai) || Boolean(c.rekor), {
       message: "template.yaml must define at least one of `wayai:` or `rekor:`"
-    });
-    templatePushMetadataSchema2 = external_exports.object({
-      category: external_exports.string().min(1).max(60),
-      status: templateStatusSchema2,
-      order: external_exports.number().int().min(0).max(1e5).default(0),
-      wayai: templateWayaiBlockSchema2.optional(),
-      rekor: templateRekorBlockSchema2.optional()
+    }).refine((c) => !c.wayai || Boolean(c.wayai.locales[c.defaultLocale]), {
+      message: "`wayai.locales` must include the defaultLocale"
+    }).refine((c) => !c.rekor || Boolean(c.rekor.locales[c.defaultLocale]), {
+      message: "`rekor.locales` must include the defaultLocale"
     });
     templateHeroSchema2 = external_exports.object({
       filename: external_exports.string().min(1).max(200).regex(/\.(png|jpe?g|webp|gif)$/i, "hero must be a raster image (png/jpg/webp/gif)"),
-      // ~8MB of base64 ≈ a ~6MB image — a generous cap that bounds the inline payload
-      // (the endpoint is platform-admin-only, but an unbounded blob is still avoidable).
       dataBase64: external_exports.string().min(1).max(8e6)
     });
+    templatePushLocaleSchema2 = external_exports.object({
+      wayai: templateTextSchema2.optional(),
+      rekorText: templateTextSchema2.optional(),
+      readmeMarkdown: external_exports.string().default(""),
+      wayaiFiles: templateFileMapSchema2.optional()
+    });
     templatePushBody2 = external_exports.object({
       slug: templateSlugSchema2,
-      metadata: templatePushMetadataSchema2,
-      // wayai slice file-map (path -> body); ABSENT for a Rekor-only template.
-      wayaiFiles: templateFileMapSchema2.optional(),
-      // raw README markdown; the backend renders + sanitizes (single authority).
-      readmeMarkdown: external_exports.string().default(""),
-      hero: templateHeroSchema2.optional()
+      defaultLocale: templateLocaleSchema2,
+      common: external_exports.object({
+        category: external_exports.string().min(1).max(60),
+        status: templateStatusSchema2,
+        order: external_exports.number().int().min(0).max(1e5).default(0),
+        // The WayAI install command — present iff the template has a wayai side; a
+        // Rekor-only template omits it.
+        installCommand: external_exports.string().min(1).max(300).optional(),
+        hero: templateHeroSchema2.optional(),
+        rekorPointer: templateRekorPointerSchema2.optional()
+      }),
+      locales: external_exports.record(templateLocaleSchema2, templatePushLocaleSchema2)
+    }).refine((b) => Boolean(b.locales[b.defaultLocale]), {
+      message: "`locales` must include the defaultLocale"
     });
+    templateListQuery2 = external_exports.object({ locale: templateLocaleSchema2.optional() });
     templateSlugParam2 = external_exports.object({ slug: templateSlugSchema2 });
+    templateDetailQuery2 = external_exports.object({ locale: templateLocaleSchema2.optional() });
     ADMIN_SKILL_NAME_REGEX2 = /^[a-z0-9][a-z0-9-]{0,63}$/;
     adminSkillNameParam2 = external_exports.object({
       name: external_exports.string().regex(ADMIN_SKILL_NAME_REGEX2, "invalid skill name")
@@ -16662,9 +16737,32 @@ async function runTemplateList() {
   }
 }
 async function runTemplatePull(rest) {
-  const slug = rest[0];
+  const positional = [];
+  let lang;
+  for (let i = 0; i < rest.length; i++) {
+    if (rest[i] === "--lang") {
+      const v = rest[++i];
+      if (!v) {
+        console.error("--lang requires a value");
+        process.exit(1);
+      }
+      const parsed = templateLocaleSchema2.safeParse(v);
+      if (!parsed.success) {
+        console.error(`Invalid --lang "${v}": must be one of ${templateLocaleSchema2.options.join(", ")}.`);
+        process.exit(1);
+      }
+      lang = parsed.data;
+      continue;
+    }
+    if (rest[i].startsWith("--")) {
+      console.error(`Unknown flag: ${rest[i]}`);
+      process.exit(1);
+    }
+    positional.push(rest[i]);
+  }
+  const slug = positional[0];
   if (!slug) {
-    console.error("wayai template pull <slug>");
+    console.error("wayai template pull <slug> [--lang <locale>]");
     process.exit(1);
   }
   if (!TEMPLATE_SLUG_REGEX2.test(slug)) {
@@ -16680,13 +16778,16 @@ async function runTemplatePull(rest) {
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
   let detail;
   try {
-    detail = await client.templatePull(slug);
+    detail = await client.templatePull(slug, lang);
   } catch (err) {
     exitOnTemplateApiError(err);
     throw err;
   }
+  if (detail.resolvedLocale !== detail.requestedLocale) {
+    console.log(`Note: "${detail.requestedLocale}" not translated yet \u2014 pulled "${detail.resolvedLocale}" instead.`);
+  }
   if (!detail.includes.wayai) {
-    console.log(`Template "${slug}" has no WayAI slice \u2014 run \`rekor template pull ${slug}\` for its data layer.`);
+    console.log(`Template "${slug}" has no WayAI slice \u2014 run \`rekor template pull ${slug}${langFlag(lang)}\` for its data layer.`);
     return;
   }
   const targetDir = path20.join(resolveLayout(gitRoot).hubsDir, slug);
@@ -16695,15 +16796,21 @@ async function runTemplatePull(rest) {
   console.log(`Next: \`wayai push\` to deploy it into your own hub.`);
   if (detail.includes.rekor) {
     console.log(`
-This template includes a Rekor data layer \u2014 run \`rekor template pull ${slug}\` to add it.`);
+This template includes a Rekor data layer \u2014 run \`rekor template pull ${slug}${langFlag(lang)}\` to add it.`);
   }
 }
+function langFlag(lang) {
+  return lang ? ` --lang ${lang}` : "";
+}
 function printTemplateHelp() {
   console.log(`wayai template \u2014 install ready-made hub templates
 
 Usage:
-  wayai template list            List available templates
-  wayai template pull <slug>     Write a template's WayAI slice into wayai-ws/hubs/<slug>/
+  wayai template list                       List available templates
+  wayai template pull <slug> [--lang <l>]   Write a template's WayAI slice into wayai-ws/hubs/<slug>/
+
+--lang selects a localized variant (${templateLocaleSchema2.options.join("|")}); omitted = the template's default
+language. An untranslated language falls back to the default (with a note).
 
 After pulling, run \`wayai push\` to deploy the template into your own hub.`);
 }
@@ -17183,17 +17290,36 @@ async function runTemplatePush(positional) {
     console.error(`template.yaml slug "${manifest.slug}" does not match folder "${slug}".`);
     process.exit(1);
   }
-  let wayaiFiles;
-  if (manifest.wayai) {
-    const sliceDir = path21.resolve(templateDir, manifest.wayai.source);
-    if (!fs17.existsSync(sliceDir)) {
-      console.error(`wayai source not found: ${manifest.wayai.source} (resolved ${sliceDir})`);
-      process.exit(1);
+  const authoredLocales = /* @__PURE__ */ new Set([
+    ...manifest.wayai ? Object.keys(manifest.wayai.locales) : [],
+    ...manifest.rekor ? Object.keys(manifest.rekor.locales) : []
+  ]);
+  const locales = {};
+  for (const locale of authoredLocales) {
+    const wayaiEntry = manifest.wayai?.locales[locale];
+    const rekorEntry = manifest.rekor?.locales[locale];
+    let wayaiFiles;
+    if (wayaiEntry) {
+      const sliceDir = path21.resolve(templateDir, wayaiEntry.source);
+      if (!fs17.existsSync(sliceDir)) {
+        console.error(`wayai source not found for ${locale}: ${wayaiEntry.source} (resolved ${sliceDir})`);
+        process.exit(1);
+      }
+      wayaiFiles = readDirToFileMap(sliceDir);
     }
-    wayaiFiles = readDirToFileMap(sliceDir);
+    const readmePath = path21.join(templateDir, `README.${locale}.md`);
+    const readmeMarkdown = fs17.existsSync(readmePath) ? fs17.readFileSync(readmePath, "utf-8") : "";
+    locales[locale] = {
+      readmeMarkdown,
+      ...wayaiFiles && { wayaiFiles },
+      ...wayaiEntry && {
+        wayai: { metaTitle: wayaiEntry.metaTitle, metaDescription: wayaiEntry.metaDescription }
+      },
+      ...rekorEntry && {
+        rekorText: { metaTitle: rekorEntry.metaTitle, metaDescription: rekorEntry.metaDescription }
+      }
+    };
   }
-  const readmePath = path21.join(templateDir, "README.md");
-  const readmeMarkdown = fs17.existsSync(readmePath) ? fs17.readFileSync(readmePath, "utf-8") : "";
   let hero;
   if (manifest.hero) {
     const heroPath = path21.resolve(templateDir, manifest.hero);
@@ -17203,27 +17329,27 @@ async function runTemplatePush(positional) {
       console.error(`Warning: hero not found at ${manifest.hero}; skipping.`);
     }
   }
-  const metadata = {
-    category: manifest.category,
-    status: manifest.status,
-    order: manifest.order ?? 0,
-    ...manifest.wayai && {
-      wayai: {
-        metaTitle: manifest.wayai.metaTitle,
-        metaDescription: manifest.wayai.metaDescription,
-        installCommand: manifest.wayai.installCommand
+  const body = {
+    slug,
+    defaultLocale: manifest.defaultLocale,
+    common: {
+      category: manifest.category,
+      status: manifest.status,
+      order: manifest.order ?? 0,
+      // The install command is the wayai one (locale-agnostic). OMIT it for a
+      // Rekor-only template — the contract requires installCommand be non-empty
+      // when present, so sending '' would 400 the whole push.
+      ...manifest.wayai?.installCommand && { installCommand: manifest.wayai.installCommand },
+      ...hero && { hero },
+      ...manifest.rekor && (manifest.rekor.mcpEndpoint || manifest.rekor.url) && {
+        rekorPointer: {
+          ...manifest.rekor.mcpEndpoint && { mcpEndpoint: manifest.rekor.mcpEndpoint },
+          ...manifest.rekor.url && { url: manifest.rekor.url }
+        }
       }
     },
-    ...manifest.rekor && {
-      rekor: {
-        metaTitle: manifest.rekor.metaTitle,
-        metaDescription: manifest.rekor.metaDescription,
-        installCommand: manifest.rekor.installCommand,
-        ...manifest.rekor.mcpEndpoint && { mcpEndpoint: manifest.rekor.mcpEndpoint }
-      }
-    }
+    locales
   };
-  const body = { slug, metadata, wayaiFiles, readmeMarkdown, hero };
   const { config, accessToken } = await requireAuth();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
   let result;
@@ -18245,10 +18371,39 @@ async function refreshSkillCache() {
     clearTimeout(timer);
   }
 }
+async function refreshAdminSkillCache() {
+  let timer;
+  const deadline = new Promise((resolve5) => {
+    timer = setTimeout(resolve5, REFRESH_TIMEOUT_MS);
+  });
+  await Promise.race([deadline, fetchAndCacheAdminSkillVersion().catch(() => {
+  })]);
+  if (timer) clearTimeout(timer);
+}
+async function fetchAndCacheAdminSkillVersion() {
+  const [{ readConfig: readConfig2 }, { getAccessToken: getAccessToken2 }, { ApiClient: ApiClient2 }] = await Promise.all([
+    Promise.resolve().then(() => (init_config(), config_exports)),
+    Promise.resolve().then(() => (init_auth(), auth_exports)),
+    Promise.resolve().then(() => (init_api_client(), api_client_exports))
+  ]);
+  const config = readConfig2();
+  if (!config) return;
+  const accessToken = await getAccessToken2(config);
+  const client = new ApiClient2({ apiUrl: config.api_url, accessToken });
+  const res = await client.adminSkillInstall(ADMIN_SKILL_NAME);
+  const latest = parseFrontmatterVersion(res.files[SKILL_FILENAME] ?? "");
+  if (latest) {
+    try {
+      writeVersionCache(ADMIN_SKILL_CACHE_FILE, { lastCheck: Date.now(), latest });
+    } catch {
+    }
+  }
+}
 async function refreshVersionCaches(opts) {
   await Promise.all([
     opts.cli ? refreshCliCache() : Promise.resolve(),
-    opts.skill ? refreshSkillCache() : Promise.resolve()
+    opts.skill ? refreshSkillCache() : Promise.resolve(),
+    opts.adminSkill ? refreshAdminSkillCache() : Promise.resolve()
   ]);
 }
 
@@ -18261,6 +18416,7 @@ import { spawn } from "child_process";
 var REFRESH_COMMAND = "__refresh-version-cache";
 var ENV_REFRESH_CLI = "WAYAI_REFRESH_CLI";
 var ENV_REFRESH_SKILL = "WAYAI_REFRESH_SKILL";
+var ENV_REFRESH_ADMIN_SKILL = "WAYAI_REFRESH_ADMIN_SKILL";
 function isUpdateCheckDisabled() {
   return Boolean(
     process.env.NO_UPDATE_NOTIFIER || process.env.WAYAI_NO_UPDATE_CHECK || process.env.CI
@@ -18270,6 +18426,7 @@ function scheduleVersionRefresh(opts, entryPath) {
   try {
     if (opts.cli) touchVersionCache(CLI_CACHE_FILE);
     if (opts.skill) touchVersionCache(SKILL_CACHE_FILE);
+    if (opts.adminSkill) touchVersionCache(ADMIN_SKILL_CACHE_FILE);
     spawn(process.execPath, [entryPath, REFRESH_COMMAND], {
       detached: true,
       stdio: "ignore",
@@ -18278,7 +18435,8 @@ function scheduleVersionRefresh(opts, entryPath) {
       env: {
         ...process.env,
         [ENV_REFRESH_CLI]: opts.cli ? "1" : "",
-        [ENV_REFRESH_SKILL]: opts.skill ? "1" : ""
+        [ENV_REFRESH_SKILL]: opts.skill ? "1" : "",
+        [ENV_REFRESH_ADMIN_SKILL]: opts.adminSkill ? "1" : ""
       }
     }).unref();
   } catch {
@@ -18293,7 +18451,8 @@ function showUpdateNudges(currentVersion, entryPath) {
 Update available: ${currentVersion} \u2192 ${cliLatest}
 Run \`wayai update\` to update.`);
     }
-    const installs = findInstalledSkills(findRepoRootSync() ?? process.cwd());
+    const repoRoot = findRepoRootSync() ?? process.cwd();
+    const installs = findInstalledSkills(repoRoot);
     const localSkillVersion = installs.length > 0 ? lowestInstalledVersion(installs) : null;
     if (localSkillVersion) {
       const skillLatest = readVersionCache(SKILL_CACHE_FILE)?.latest ?? null;
@@ -18303,10 +18462,21 @@ Skill update available: ${localSkillVersion} \u2192 ${skillLatest}
 Run \`npx skills add wayai-pro/wayai-skill -y\` to update.`);
       }
     }
+    const adminInstalls = findInstalledSkills(repoRoot, ADMIN_SKILL_INSTALL_PATHS);
+    const localAdminVersion = adminInstalls.length > 0 ? lowestInstalledVersion(adminInstalls) : null;
+    if (localAdminVersion) {
+      const adminLatest = readVersionCache(ADMIN_SKILL_CACHE_FILE)?.latest ?? null;
+      if (adminLatest && isNewerVersion(adminLatest, localAdminVersion)) {
+        console.error(`
+Admin skill update available: ${localAdminVersion} \u2192 ${adminLatest}
+Run \`wayai admin skill install\` to update.`);
+      }
+    }
     const cliStale = isVersionCacheStale(CLI_CACHE_FILE);
     const skillStale = localSkillVersion !== null && isVersionCacheStale(SKILL_CACHE_FILE);
-    if (cliStale || skillStale) {
-      scheduleVersionRefresh({ cli: cliStale, skill: skillStale }, entryPath);
+    const adminSkillStale = localAdminVersion !== null && isVersionCacheStale(ADMIN_SKILL_CACHE_FILE);
+    if (cliStale || skillStale || adminSkillStale) {
+      scheduleVersionRefresh({ cli: cliStale, skill: skillStale, adminSkill: adminSkillStale }, entryPath);
     }
   } catch {
   }
@@ -18601,7 +18771,8 @@ async function runForeground() {
 if (isBackgroundRefresh) {
   void refreshVersionCaches({
     cli: process.env[ENV_REFRESH_CLI] === "1",
-    skill: process.env[ENV_REFRESH_SKILL] === "1"
+    skill: process.env[ENV_REFRESH_SKILL] === "1",
+    adminSkill: process.env[ENV_REFRESH_ADMIN_SKILL] === "1"
   }).finally(() => process.exit(0));
 } else {
   void runForeground();