@wayai/cli 0.3.63 → 0.3.65

package/dist/index.js

@@ -5255,7 +5255,7 @@ function findStepBoundaries(transcript) {
   }
   return out;
 }
-var APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, uuidSchema, paginationSchema, timestampSchema, idParamSchema, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlSchemaQuery, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, createJourneyBody, updateJourneyBody, getConversationsQuery, getMessagesQuery, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, sendMessageBody, listConversationsQuery, getConversationDetailParams, getConversationDetailQuery, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, completionsBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, uuidPattern, ciUuidSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysQuery, dataExplorerKvKeyParam, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteQuery, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, sentryRefStatusSchema, createReportBody, editReportBody, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, discordTier, discordBillingCycle, discordMetadata, discordOAuthStartResponse, discordOAuthFinalizeBody, discordOAuthFinalizeResponse, discordDisconnectResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, templateLocaleSchema, TEMPLATE_SLUG_REGEX, templateSlugSchema, templateStatusSchema, templateFileMapSchema, templateTextSchema, templateHttpUrl, templateRekorPointerSchema, templateYamlLocaleEntry, templateYamlWayaiBlock, templateYamlRekorBlock, templateTagsSchema, templateYamlSchema, templateHeroSchema, templatePushLocaleSchema, templatePushBody, templateListQuery, templateSlugParam, templateDetailQuery, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, WAYAI_WORKSPACE_LAYOUT, MAX_RESOURCE_FILE_SIZE;
+var APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, uuidSchema, paginationSchema, timestampSchema, idParamSchema, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlSchemaQuery, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, createJourneyBody, updateJourneyBody, getConversationsQuery, getMessagesQuery, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, sendMessageBody, listConversationsQuery, getConversationDetailParams, getConversationDetailQuery, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, completionsBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, uuidPattern, ciUuidSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysQuery, dataExplorerKvKeyParam, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteQuery, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, sentryRefStatusSchema, createReportBody, editReportBody, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, discordTier, discordBillingCycle, discordMetadata, discordOAuthStartResponse, discordOAuthFinalizeBody, discordOAuthFinalizeResponse, discordDisconnectResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, templateLocaleSchema, TEMPLATE_SLUG_REGEX, templateSlugSchema, templateStatusSchema, templateFileMapSchema, templateTextSchema, templateUsesEntrySchema, templateUsesSchema, templateYamlLocaleEntry, templateYamlWayaiBlock, templateTagsSchema, templateYamlSchema, templateHeroSchema, templatePushLocaleSchema, templatePushBody, templateListQuery, templateSlugParam, templateDetailQuery, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, WAYAI_WORKSPACE_LAYOUT, MAX_RESOURCE_FILE_SIZE;
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
     "use strict";
@@ -7694,19 +7694,16 @@ var init_dist = __esm({
       metaTitle: external_exports.string().min(1).max(200),
       metaDescription: external_exports.string().max(1e3).default("")
     });
-    templateHttpUrl = external_exports.string().url().refine((u) => /^https?:\/\//i.test(u), { message: "must be an http(s) URL" });
-    templateRekorPointerSchema = external_exports.object({
-      mcpEndpoint: templateHttpUrl.optional(),
-      url: templateHttpUrl.optional()
+    templateUsesEntrySchema = external_exports.object({
+      backend: templateSlugSchema,
+      endpoint: templateSlugSchema
     });
+    templateUsesSchema = external_exports.array(templateUsesEntrySchema).max(24).default([]);
     templateYamlLocaleEntry = templateTextSchema.extend({ source: external_exports.string().min(1) });
     templateYamlWayaiBlock = external_exports.object({
       installCommand: external_exports.string().min(1).max(300),
       locales: external_exports.record(templateLocaleSchema, templateYamlLocaleEntry)
     });
-    templateYamlRekorBlock = templateRekorPointerSchema.extend({
-      locales: external_exports.record(templateLocaleSchema, templateYamlLocaleEntry)
-    });
     templateTagsSchema = external_exports.array(external_exports.string().min(1).max(30)).max(12).default([]).transform((tags) => [...new Set(tags.map((t) => t.trim().toLowerCase()).filter(Boolean))]);
     templateYamlSchema = external_exports.object({
       slug: templateSlugSchema,
@@ -7717,21 +7714,14 @@ var init_dist = __esm({
       defaultLocale: templateLocaleSchema,
       hero: external_exports.string().optional(),
       // relative path to a hero image inside the template folder
-      // The Rekor MCP Factory endpoint this template stands up (locale-agnostic).
-      // Authored at the TOP LEVEL so one shared `template.yaml` satisfies both
-      // `wayai admin template push` (here) and `rekor admin template push` (which reads
-      // it flat). Mirrored onto the wire as `common.rekorPointer.mcpEndpoint`. The
-      // deprecated `rekor.mcpEndpoint` nesting is still honored as a fallback — always
-      // read via `resolveTemplateMcpEndpoint`, never one location directly.
-      mcpEndpoint: templateHttpUrl.optional(),
-      wayai: templateYamlWayaiBlock.optional(),
-      rekor: templateYamlRekorBlock.optional()
-    }).refine((c) => Boolean(c.wayai) || Boolean(c.rekor), {
-      message: "template.yaml must define at least one of `wayai:` or `rekor:`"
-    }).refine((c) => !c.wayai || Boolean(c.wayai.locales[c.defaultLocale]), {
+      // The Rekor backend(s) this channel runs on (gh #2955). Locale-agnostic. The
+      // cross-link + MCP endpoint are derived from each entry's slugs, never authored.
+      uses: templateUsesSchema,
+      // A WayAI template IS a WayAI channel — the wayai slice is required. (The old
+      // Rekor-only store entry is gone: a pure Rekor backend lives only in Rekor's store.)
+      wayai: templateYamlWayaiBlock
+    }).refine((c) => Boolean(c.wayai.locales[c.defaultLocale]), {
       message: "`wayai.locales` must include the defaultLocale"
-    }).refine((c) => !c.rekor || Boolean(c.rekor.locales[c.defaultLocale]), {
-      message: "`rekor.locales` must include the defaultLocale"
     });
     templateHeroSchema = external_exports.object({
       filename: external_exports.string().min(1).max(200).regex(/\.(png|jpe?g|webp|gif)$/i, "hero must be a raster image (png/jpg/webp/gif)"),
@@ -7739,7 +7729,6 @@ var init_dist = __esm({
     });
     templatePushLocaleSchema = external_exports.object({
       wayai: templateTextSchema.optional(),
-      rekorText: templateTextSchema.optional(),
       readmeMarkdown: external_exports.string().default(""),
       wayaiFiles: templateFileMapSchema.optional()
     });
@@ -7751,11 +7740,12 @@ var init_dist = __esm({
         tags: templateTagsSchema,
         status: templateStatusSchema,
         order: external_exports.number().int().min(0).max(1e5).default(0),
-        // The WayAI install command — present iff the template has a wayai side; a
-        // Rekor-only template omits it.
+        // The WayAI install command (a WayAI template always has a wayai side). Kept
+        // optional on the wire so a malformed manifest 400s on the field, not the body.
         installCommand: external_exports.string().min(1).max(300).optional(),
         hero: templateHeroSchema.optional(),
-        rekorPointer: templateRekorPointerSchema.optional()
+        // The channel→backend edge (gh #2955), locale-agnostic.
+        uses: templateUsesSchema
       }),
       locales: external_exports.record(templateLocaleSchema, templatePushLocaleSchema)
     }).refine((b) => Boolean(b.locales[b.defaultLocale]), {
@@ -7819,6 +7809,9 @@ function resolveLayout(gitRoot, layout = WAYAI_LAYOUT) {
     legacyAlsoPresent: false
   };
 }
+function resolveHubsDir(gitRoot) {
+  return resolveLayout(gitRoot).hubsDir;
+}
 function resolveTemplatesDir(gitRoot) {
   return path.join(gitRoot, TEMPLATES_AUTHORING_SUBDIR);
 }
@@ -7856,7 +7849,7 @@ var init_layout = __esm({
       ...WAYAI_WORKSPACE_LAYOUT,
       legacy: { wsDir: "workspace", orgAtRoot: "org" }
     };
-    TEMPLATES_AUTHORING_SUBDIR = "templates";
+    TEMPLATES_AUTHORING_SUBDIR = "wayai-templates";
     _layoutWarned = false;
   }
 });
@@ -7968,6 +7961,16 @@ function findHubByFolderName(workspaceDir, hubFolderName) {
   const all = scanWorkspaceHubs(workspaceDir);
   return all.find((h) => path2.basename(h.hubFolder) === hubFolderName) ?? null;
 }
+function resolveHubFolderBySelector(hubsDir, selector) {
+  const asPath = path2.resolve(selector);
+  if (isDirectory(asPath) && fs2.existsSync(path2.join(asPath, "hub.yaml"))) return asPath;
+  if (UUID_RE.test(selector)) {
+    const match = scanWorkspaceHubs(hubsDir).find((h) => h.hubId === selector);
+    return match ? match.hubFolder : null;
+  }
+  const byName = findHubByFolderName(hubsDir, selector);
+  return byName ? byName.hubFolder : null;
+}
 function autoRenameHubFolder(currentFolder, hubName, hubEnvironment, hubId, previewLabel, branchName) {
   const expectedSlug = getHubFolderSlug(hubName, hubEnvironment, hubId, previewLabel, branchName);
   const currentSlug = path2.basename(currentFolder);
@@ -13288,10 +13291,37 @@ function isSafeTemplatePath2(path22) {
     (seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg)
   );
 }
-function resolveTemplateMcpEndpoint(manifest) {
-  return manifest.mcpEndpoint ?? manifest.rekor?.mcpEndpoint;
+function dropTemplateKeys(value, drop) {
+  if (Array.isArray(value)) return value.map((v) => dropTemplateKeys(v, drop));
+  if (isPlainObject(value)) {
+    const out = {};
+    for (const [key, child] of Object.entries(value)) {
+      if (drop.has(key)) continue;
+      out[key] = TEMPLATE_OPAQUE_BLOB_KEYS.has(key) ? child : dropTemplateKeys(child, drop);
+    }
+    return out;
+  }
+  return value;
+}
+function stripTemplateInstanceIds(value) {
+  return dropTemplateKeys(value, TEMPLATE_INSTANCE_ID_KEYS);
 }
-var uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, AUTH_TYPE2, ORG_CREDENTIAL_AUTH_TYPES2, AUTH_TYPE_DISPLAY2, LEGACY_AUTH_TYPE_MAP2, VALID_AUTH_TYPES2, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlSchemaQuery2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, createJourneyBody2, updateJourneyBody2, getConversationsQuery2, getMessagesQuery2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, sendMessageBody2, listConversationsQuery2, getConversationDetailParams2, getConversationDetailQuery2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, completionsBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, uuidPattern2, ciUuidSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysQuery2, dataExplorerKvKeyParam2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteQuery2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, discordTier2, discordBillingCycle2, discordMetadata2, discordOAuthStartResponse2, discordOAuthFinalizeBody2, discordOAuthFinalizeResponse2, discordDisconnectResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, templateLocaleSchema2, TEMPLATE_SLUG_REGEX2, templateSlugSchema2, templateStatusSchema2, templateFileMapSchema2, templateTextSchema2, templateHttpUrl2, templateRekorPointerSchema2, templateYamlLocaleEntry2, templateYamlWayaiBlock2, templateYamlRekorBlock2, templateTagsSchema2, templateYamlSchema2, templateHeroSchema2, templatePushLocaleSchema2, templatePushBody2, templateListQuery2, templateSlugParam2, templateDetailQuery2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2;
+function excludeTemplateAuthorData(value) {
+  return dropTemplateKeys(value, TEMPLATE_AUTHOR_DATA_KEYS);
+}
+function isPlainObject(value) {
+  if (value === null || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function isSanitizableSliceFile(path22) {
+  if (!/\.ya?ml$/i.test(path22)) return false;
+  return path22 !== "resources" && !path22.startsWith("resources/");
+}
+function distinctUsesBackends(uses) {
+  return [...new Set((uses ?? []).map((u) => u.backend))];
+}
+var uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, AUTH_TYPE2, ORG_CREDENTIAL_AUTH_TYPES2, AUTH_TYPE_DISPLAY2, LEGACY_AUTH_TYPE_MAP2, VALID_AUTH_TYPES2, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlSchemaQuery2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, createJourneyBody2, updateJourneyBody2, getConversationsQuery2, getMessagesQuery2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, sendMessageBody2, listConversationsQuery2, getConversationDetailParams2, getConversationDetailQuery2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, completionsBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, uuidPattern2, ciUuidSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysQuery2, dataExplorerKvKeyParam2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteQuery2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, discordTier2, discordBillingCycle2, discordMetadata2, discordOAuthStartResponse2, discordOAuthFinalizeBody2, discordOAuthFinalizeResponse2, discordDisconnectResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, templateLocaleSchema2, TEMPLATE_SLUG_REGEX2, templateSlugSchema2, templateStatusSchema2, templateFileMapSchema2, TEMPLATE_INSTANCE_ID_KEYS, TEMPLATE_OPAQUE_BLOB_KEYS, TEMPLATE_AUTHOR_DATA_KEYS, templateTextSchema2, templateUsesEntrySchema2, templateUsesSchema2, templateYamlLocaleEntry2, templateYamlWayaiBlock2, templateTagsSchema2, templateYamlSchema2, templateHeroSchema2, templatePushLocaleSchema2, templatePushBody2, templateListQuery2, templateSlugParam2, templateDetailQuery2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2;
 var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
     "use strict";
@@ -15642,23 +15672,78 @@ var init_contracts = __esm({
     templateFileMapSchema2 = external_exports.record(external_exports.string()).refine((m) => Object.keys(m).every(isSafeTemplatePath2), {
       message: 'file map contains an unsafe path (no absolute paths, "..", or backslashes)'
     });
+    TEMPLATE_INSTANCE_ID_KEYS = /* @__PURE__ */ new Set([
+      // Top-level hub instance metadata (hub.yaml) — set by `wayai pull`, never authored.
+      "hub_id",
+      "hub_environment",
+      "preview_label",
+      "branch_name",
+      // Per-entity row id + cross-entity reference UUIDs (each has a portable name twin).
+      "id",
+      "connection_id",
+      "target_id",
+      "agent_id",
+      "resource_id",
+      "list_id",
+      // Account-scoped Meta WhatsApp template id (name twin: `template_whatsapp`).
+      "template_whatsapp_id"
+    ]);
+    TEMPLATE_OPAQUE_BLOB_KEYS = /* @__PURE__ */ new Set([
+      "settings",
+      // agent + connection connector settings
+      "schema_json",
+      // agent response_format JSON Schema
+      "json_schema",
+      // state JSON Schema
+      "initial_value",
+      // state seed value
+      "additional_context_schema",
+      // kanban-status transition-form schema
+      "config",
+      // custom-tool OpenAI function schema
+      "headers",
+      "query_params",
+      "body_params",
+      // custom-tool HTTP shaping
+      "mappings",
+      // composed-tool argument mappings
+      "input",
+      "expected",
+      "history",
+      // eval message fixtures (tool_calls carry their own `id`)
+      "transcript",
+      "step_config"
+      // journey fixtures (transcript carries `step_id`; step_config is keyed by it)
+    ]);
+    TEMPLATE_AUTHOR_DATA_KEYS = /* @__PURE__ */ new Set([
+      // Outbound campaign subsystem (hub.yaml top-level). `outbound_contacts` is the
+      // author's real leads — `phone`/`email`/`instagram_sid` + the required `name` are
+      // GDPR-grade PII. `outbound_lists` group those contacts by real name. `outbound_schedules`
+      // bind to the (now-absent) lists and carry the author's campaign cadence + message
+      // copy — operationally tied to the author's customers; a consumer builds their own.
+      "outbound_contacts",
+      "outbound_lists",
+      "outbound_schedules",
+      // Account-scoped channel identifier on a connection (Twilio SID / WhatsApp number /
+      // IG username / from-email, per connector). The connection stays as portable
+      // structure re-bound by name on push; this author-account value carries no blueprint
+      // value. A dedicated top-level column — never nested in the `settings` opaque blob.
+      "account_sid"
+    ]);
     templateTextSchema2 = external_exports.object({
       metaTitle: external_exports.string().min(1).max(200),
       metaDescription: external_exports.string().max(1e3).default("")
     });
-    templateHttpUrl2 = external_exports.string().url().refine((u) => /^https?:\/\//i.test(u), { message: "must be an http(s) URL" });
-    templateRekorPointerSchema2 = external_exports.object({
-      mcpEndpoint: templateHttpUrl2.optional(),
-      url: templateHttpUrl2.optional()
+    templateUsesEntrySchema2 = external_exports.object({
+      backend: templateSlugSchema2,
+      endpoint: templateSlugSchema2
     });
+    templateUsesSchema2 = external_exports.array(templateUsesEntrySchema2).max(24).default([]);
     templateYamlLocaleEntry2 = templateTextSchema2.extend({ source: external_exports.string().min(1) });
     templateYamlWayaiBlock2 = external_exports.object({
       installCommand: external_exports.string().min(1).max(300),
       locales: external_exports.record(templateLocaleSchema2, templateYamlLocaleEntry2)
     });
-    templateYamlRekorBlock2 = templateRekorPointerSchema2.extend({
-      locales: external_exports.record(templateLocaleSchema2, templateYamlLocaleEntry2)
-    });
     templateTagsSchema2 = external_exports.array(external_exports.string().min(1).max(30)).max(12).default([]).transform((tags) => [...new Set(tags.map((t) => t.trim().toLowerCase()).filter(Boolean))]);
     templateYamlSchema2 = external_exports.object({
       slug: templateSlugSchema2,
@@ -15669,21 +15754,14 @@ var init_contracts = __esm({
       defaultLocale: templateLocaleSchema2,
       hero: external_exports.string().optional(),
       // relative path to a hero image inside the template folder
-      // The Rekor MCP Factory endpoint this template stands up (locale-agnostic).
-      // Authored at the TOP LEVEL so one shared `template.yaml` satisfies both
-      // `wayai admin template push` (here) and `rekor admin template push` (which reads
-      // it flat). Mirrored onto the wire as `common.rekorPointer.mcpEndpoint`. The
-      // deprecated `rekor.mcpEndpoint` nesting is still honored as a fallback — always
-      // read via `resolveTemplateMcpEndpoint`, never one location directly.
-      mcpEndpoint: templateHttpUrl2.optional(),
-      wayai: templateYamlWayaiBlock2.optional(),
-      rekor: templateYamlRekorBlock2.optional()
-    }).refine((c) => Boolean(c.wayai) || Boolean(c.rekor), {
-      message: "template.yaml must define at least one of `wayai:` or `rekor:`"
-    }).refine((c) => !c.wayai || Boolean(c.wayai.locales[c.defaultLocale]), {
+      // The Rekor backend(s) this channel runs on (gh #2955). Locale-agnostic. The
+      // cross-link + MCP endpoint are derived from each entry's slugs, never authored.
+      uses: templateUsesSchema2,
+      // A WayAI template IS a WayAI channel — the wayai slice is required. (The old
+      // Rekor-only store entry is gone: a pure Rekor backend lives only in Rekor's store.)
+      wayai: templateYamlWayaiBlock2
+    }).refine((c) => Boolean(c.wayai.locales[c.defaultLocale]), {
       message: "`wayai.locales` must include the defaultLocale"
-    }).refine((c) => !c.rekor || Boolean(c.rekor.locales[c.defaultLocale]), {
-      message: "`rekor.locales` must include the defaultLocale"
     });
     templateHeroSchema2 = external_exports.object({
       filename: external_exports.string().min(1).max(200).regex(/\.(png|jpe?g|webp|gif)$/i, "hero must be a raster image (png/jpg/webp/gif)"),
@@ -15691,7 +15769,6 @@ var init_contracts = __esm({
     });
     templatePushLocaleSchema2 = external_exports.object({
       wayai: templateTextSchema2.optional(),
-      rekorText: templateTextSchema2.optional(),
       readmeMarkdown: external_exports.string().default(""),
       wayaiFiles: templateFileMapSchema2.optional()
     });
@@ -15703,11 +15780,12 @@ var init_contracts = __esm({
         tags: templateTagsSchema2,
         status: templateStatusSchema2,
         order: external_exports.number().int().min(0).max(1e5).default(0),
-        // The WayAI install command — present iff the template has a wayai side; a
-        // Rekor-only template omits it.
+        // The WayAI install command (a WayAI template always has a wayai side). Kept
+        // optional on the wire so a malformed manifest 400s on the field, not the body.
         installCommand: external_exports.string().min(1).max(300).optional(),
         hero: templateHeroSchema2.optional(),
-        rekorPointer: templateRekorPointerSchema2.optional()
+        // The channel→backend edge (gh #2955), locale-agnostic.
+        uses: templateUsesSchema2
       }),
       locales: external_exports.record(templateLocaleSchema2, templatePushLocaleSchema2)
     }).refine((b) => Boolean(b.locales[b.defaultLocale]), {
@@ -16953,10 +17031,30 @@ function writeFileMap(targetDir, files) {
   }
   return written;
 }
+function listDirRelFiles(dir) {
+  const out = [];
+  function walk(d, prefix) {
+    for (const entry of fs16.readdirSync(d, { withFileTypes: true })) {
+      const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+      if (entry.isDirectory()) walk(path19.join(d, entry.name), rel);
+      else if (entry.isFile()) out.push(rel);
+    }
+  }
+  if (fs16.existsSync(dir)) walk(dir, "");
+  return out;
+}
+function writeSliceSnapshot(targetDir, files) {
+  const keep = new Set(Object.keys(files));
+  const removed = listDirRelFiles(targetDir).filter((rel) => !keep.has(rel)).sort((a, b) => a.localeCompare(b));
+  const written = writeFileMap(targetDir, files).sort((a, b) => a.localeCompare(b));
+  if (fs16.existsSync(targetDir)) cleanOrphanFiles(targetDir, "", keep);
+  return { written, removed };
+}
 var init_template_files = __esm({
   "src/lib/template-files.ts"() {
     "use strict";
     init_contracts();
+    init_resource_files();
   }
 });
 
@@ -16987,10 +17085,10 @@ async function templateCommand(args2) {
       process.exit(1);
   }
 }
-function includesLabel(includes) {
+function includesLabel(item) {
   const parts = [];
-  if (includes.wayai) parts.push("wayai agent");
-  if (includes.rekor) parts.push("rekor data layer");
+  if (item.includes.wayai) parts.push("wayai agent");
+  if (item.uses?.length) parts.push("rekor backend");
   return parts.length ? parts.join(" + ") : "(none)";
 }
 async function runTemplateList() {
@@ -17012,7 +17110,7 @@ async function runTemplateList() {
   const catWidth = Math.max(8, ...templates.map((t) => t.category.length));
   console.log(`${"SLUG".padEnd(slugWidth)}  ${"CATEGORY".padEnd(catWidth)}  INCLUDES`);
   for (const t of templates) {
-    console.log(`${t.slug.padEnd(slugWidth)}  ${t.category.padEnd(catWidth)}  ${includesLabel(t.includes)}`);
+    console.log(`${t.slug.padEnd(slugWidth)}  ${t.category.padEnd(catWidth)}  ${includesLabel(t)}`);
   }
 }
 async function runTemplatePull(rest) {
@@ -17076,7 +17174,9 @@ async function runTemplatePull(rest) {
     console.log(`Note: "${detail.requestedLocale}" not translated yet \u2014 pulled "${detail.resolvedLocale}" instead.`);
   }
   if (!detail.includes.wayai) {
-    console.log(`Template "${slug}" has no WayAI slice \u2014 run \`rekor template pull ${slug}${langFlag(lang)}\` for its data layer.`);
+    const backends2 = distinctUsesBackends(detail.uses);
+    const hint = backends2.length ? ` \u2014 run ${backends2.map((b) => `\`rekor template pull ${b}${langFlag(lang)}\``).join(" and ")} for its data layer.` : ".";
+    console.log(`Template "${slug}" has no WayAI slice${hint}`);
     return;
   }
   const targetDir = path20.join(resolveLayout(gitRoot).hubsDir, slug);
@@ -17106,9 +17206,13 @@ Commit or move your changes and re-run with --force to overwrite, or pull into a
   const written = writeFileMap(targetDir, detail.files);
   console.log(`Pulled template "${slug}" \u2192 ${relTarget}/ (${written.length} file${written.length === 1 ? "" : "s"}).`);
   console.log(`Next: \`wayai push\` to deploy it into your own hub.`);
-  if (detail.includes.rekor) {
+  const backends = distinctUsesBackends(detail.uses);
+  if (backends.length) {
+    const cmds = backends.map((b) => `\`rekor template pull ${b}${langFlag(lang)}\``).join(" and ");
+    const noun = backends.length === 1 ? "a Rekor backend" : "Rekor backends";
+    const obj = backends.length === 1 ? "it" : "them";
     console.log(`
-This template includes a Rekor data layer \u2014 run \`rekor template pull ${slug}${langFlag(lang)}\` to add it.`);
+This channel runs on ${noun} \u2014 run ${cmds} to add ${obj}.`);
   }
 }
 function langFlag(lang) {
@@ -17197,34 +17301,51 @@ var init_report_edit_args = __esm({
   }
 });
 
+// src/lib/template-sanitize.ts
+import * as yaml9 from "js-yaml";
+function sanitizeWayaiSliceFiles(files) {
+  const out = {};
+  for (const [filePath, body] of Object.entries(files)) {
+    out[filePath] = isSanitizableSliceFile(filePath) ? sanitizeOne(body) : body;
+  }
+  return out;
+}
+function sanitizeOne(body) {
+  let parsed;
+  try {
+    parsed = yaml9.load(body);
+  } catch {
+    return body;
+  }
+  const scrubbed = excludeTemplateAuthorData(stripTemplateInstanceIds(parsed));
+  if (JSON.stringify(parsed) === JSON.stringify(scrubbed)) return body;
+  return yaml9.dump(scrubbed, YAML_DUMP_OPTIONS);
+}
+var init_template_sanitize = __esm({
+  "src/lib/template-sanitize.ts"() {
+    "use strict";
+    init_contracts();
+    init_yaml_writer();
+  }
+});
+
 // src/lib/template-manifest.ts
 function buildTemplatePushCommon(manifest, hero) {
-  const mcpEndpoint = resolveTemplateMcpEndpoint(manifest);
   return {
     category: manifest.category,
     tags: manifest.tags,
     status: manifest.status,
     order: manifest.order ?? 0,
-    // The install command is the wayai one (locale-agnostic). OMIT it for a Rekor-only
-    // template — the contract requires installCommand be non-empty when present, so
-    // sending '' would 400 the whole push.
-    ...manifest.wayai?.installCommand && { installCommand: manifest.wayai.installCommand },
+    installCommand: manifest.wayai.installCommand,
     ...hero && { hero },
-    // The rekor pointer carries the (locale-agnostic) mcpEndpoint + cross-link url. Only
-    // emitted alongside a `rekor:` block — the store gates the endpoint behind per-locale
-    // rekorText, so a block-less endpoint would be dead data (the command warns on it).
-    ...manifest.rekor && (mcpEndpoint || manifest.rekor.url) && {
-      rekorPointer: {
-        ...mcpEndpoint && { mcpEndpoint },
-        ...manifest.rekor.url && { url: manifest.rekor.url }
-      }
-    }
+    // The channel→backend edge (locale-agnostic). The store persists it verbatim; the
+    // website derives the "runs on backend X" cross-link + MCP endpoint from the slugs.
+    uses: manifest.uses
   };
 }
 var init_template_manifest = __esm({
   "src/lib/template-manifest.ts"() {
     "use strict";
-    init_contracts();
   }
 });
 
@@ -17235,7 +17356,7 @@ __export(admin_exports, {
 });
 import * as fs17 from "fs";
 import * as path21 from "path";
-import * as yaml9 from "js-yaml";
+import * as yaml10 from "js-yaml";
 async function adminCommand(args2) {
   const [group, ...afterGroup] = args2;
   if (!group) {
@@ -17361,6 +17482,9 @@ async function adminCommand(args2) {
       case "pull":
         await runTemplatePull2(positional, flagArgs);
         return;
+      case "freeze":
+        await runTemplateFreeze(positional, flagArgs);
+        return;
       default:
         printHelp2();
         process.exit(1);
@@ -17604,16 +17728,7 @@ function parseFlags2(flagArgs, allowed) {
   }
   return out;
 }
-async function runTemplatePush(positional) {
-  const slug = positional[0];
-  if (!slug) {
-    console.error("wayai admin template push <slug>");
-    process.exit(1);
-  }
-  if (!TEMPLATE_SLUG_REGEX2.test(slug)) {
-    console.error(`Invalid template slug: ${slug}`);
-    process.exit(1);
-  }
+function loadTemplateManifest(slug) {
   const gitRoot = findGitRoot();
   if (!gitRoot) {
     console.error("Not in a git repository. Run from the tutorials/ authoring repo.");
@@ -17627,7 +17742,7 @@ async function runTemplatePush(positional) {
   }
   let manifest;
   try {
-    manifest = templateYamlSchema2.parse(yaml9.load(fs17.readFileSync(manifestPath, "utf-8")));
+    manifest = templateYamlSchema2.parse(yaml10.load(fs17.readFileSync(manifestPath, "utf-8")));
   } catch (err) {
     console.error(`Invalid template.yaml: ${err instanceof Error ? err.message : String(err)}`);
     process.exit(1);
@@ -17636,14 +17751,25 @@ async function runTemplatePush(positional) {
     console.error(`template.yaml slug "${manifest.slug}" does not match folder "${slug}".`);
     process.exit(1);
   }
-  const authoredLocales = /* @__PURE__ */ new Set([
-    ...manifest.wayai ? Object.keys(manifest.wayai.locales) : [],
-    ...manifest.rekor ? Object.keys(manifest.rekor.locales) : []
-  ]);
+  return { gitRoot, templateDir, manifest };
+}
+async function runTemplatePush(positional) {
+  const slug = positional[0];
+  if (!slug) {
+    console.error("wayai admin template push <slug>");
+    process.exit(1);
+  }
+  if (!TEMPLATE_SLUG_REGEX2.test(slug)) {
+    console.error(`Invalid template slug: ${slug}`);
+    process.exit(1);
+  }
+  const { templateDir, manifest } = loadTemplateManifest(slug);
+  const authoredLocales = new Set(
+    Object.keys(manifest.wayai.locales)
+  );
   const locales = {};
   for (const locale of authoredLocales) {
-    const wayaiEntry = manifest.wayai?.locales[locale];
-    const rekorEntry = manifest.rekor?.locales[locale];
+    const wayaiEntry = manifest.wayai.locales[locale];
     let wayaiFiles;
     if (wayaiEntry) {
       const sliceDir = path21.resolve(templateDir, wayaiEntry.source);
@@ -17651,6 +17777,11 @@ async function runTemplatePush(positional) {
         console.error(`wayai source not found for ${locale}: ${wayaiEntry.source} (resolved ${sliceDir})`);
         process.exit(1);
       }
+      if (!isInsideTemplateDir(sliceDir, templateDir)) {
+        console.warn(
+          `Note: ${locale} source points at a live hub (${wayaiEntry.source}); it can go stale on a hub recreate. Run \`wayai admin template freeze ${slug} --locale ${locale} --from ${path21.basename(sliceDir)}\` to commit a stable frozen slice.`
+        );
+      }
       wayaiFiles = readDirToFileMap(sliceDir);
     }
     const readmePath = path21.join(templateDir, `README.${locale}.md`);
@@ -17660,9 +17791,6 @@ async function runTemplatePush(positional) {
       ...wayaiFiles && { wayaiFiles },
       ...wayaiEntry && {
         wayai: { metaTitle: wayaiEntry.metaTitle, metaDescription: wayaiEntry.metaDescription }
-      },
-      ...rekorEntry && {
-        rekorText: { metaTitle: rekorEntry.metaTitle, metaDescription: rekorEntry.metaDescription }
       }
     };
   }
@@ -17675,12 +17803,6 @@ async function runTemplatePush(positional) {
       console.error(`Warning: hero not found at ${manifest.hero}; skipping.`);
     }
   }
-  const mcpEndpoint = resolveTemplateMcpEndpoint(manifest);
-  if (mcpEndpoint && !manifest.rekor) {
-    console.error(
-      "Warning: `mcpEndpoint` is set but there is no `rekor:` block to attach it to \u2014 it will be ignored. Add a `rekor:` block (the cross-link to the paired template) or remove `mcpEndpoint`."
-    );
-  }
   const body = {
     slug,
     defaultLocale: manifest.defaultLocale,
@@ -17701,6 +17823,119 @@ async function runTemplatePush(positional) {
     console.log(`(status=${manifest.status} \u2192 unpublished from the store)`);
   }
 }
+function isInsideTemplateDir(dest, templateDir) {
+  return dest === templateDir || dest.startsWith(templateDir + path21.sep);
+}
+async function runTemplateFreeze(positional, flagArgs) {
+  const slug = positional[0];
+  if (!slug) {
+    console.error("wayai admin template freeze <slug> [--locale <l>] [--from <hub>] [--dry-run]");
+    process.exit(1);
+  }
+  if (!TEMPLATE_SLUG_REGEX2.test(slug)) {
+    console.error(`Invalid template slug: ${slug}`);
+    process.exit(1);
+  }
+  let locale;
+  let from;
+  let dryRun = false;
+  for (let i = 0; i < flagArgs.length; i++) {
+    if (flagArgs[i] === "--dry-run") {
+      dryRun = true;
+      continue;
+    }
+    if (flagArgs[i] === "--locale") {
+      const v = flagArgs[++i];
+      if (!v) {
+        console.error("--locale requires a value");
+        process.exit(1);
+      }
+      const parsed = templateLocaleSchema2.safeParse(v);
+      if (!parsed.success) {
+        console.error(`Invalid --locale "${v}": must be one of ${templateLocaleSchema2.options.join(", ")}.`);
+        process.exit(1);
+      }
+      locale = parsed.data;
+      continue;
+    }
+    if (flagArgs[i] === "--from") {
+      from = flagArgs[++i];
+      if (!from) {
+        console.error("--from requires a value");
+        process.exit(1);
+      }
+      continue;
+    }
+    console.error(`Unknown flag: ${flagArgs[i]}`);
+    process.exit(1);
+  }
+  const { gitRoot, templateDir, manifest } = loadTemplateManifest(slug);
+  const authored = Object.keys(manifest.wayai.locales);
+  let targetLocale;
+  if (locale) {
+    if (!manifest.wayai.locales[locale]) {
+      console.error(`Locale "${locale}" is not authored in ${slug}/template.yaml (have: ${authored.join(", ")}).`);
+      process.exit(1);
+    }
+    targetLocale = locale;
+  } else if (authored.length === 1) {
+    targetLocale = authored[0];
+  } else {
+    console.error(`Template "${slug}" authors ${authored.length} locales (${authored.join(", ")}). Pass --locale <l> \u2014 each freezes from its own hub.`);
+    process.exit(1);
+  }
+  const entry = manifest.wayai.locales[targetLocale];
+  const dest = path21.resolve(templateDir, entry.source);
+  if (!isInsideTemplateDir(dest, templateDir) || dest === templateDir) {
+    console.error(
+      `source for "${targetLocale}" must be a committed path inside ${slug}/ (e.g. "./${targetLocale}/slice"), but resolved to:
+  ${entry.source} \u2192 ${dest}
+Set it to a subdir of the template folder and re-run freeze.`
+    );
+    process.exit(1);
+  }
+  const hubsDir = resolveHubsDir(gitRoot);
+  const selector = from ?? readBinding();
+  const hubFolder = selector ? resolveHubFolderBySelector(hubsDir, selector) : null;
+  if (!hubFolder) {
+    console.error(
+      selector ? `Could not resolve a source hub matching "${selector}" in ${hubsDirLabel(gitRoot)}/.` : "No --from given and this worktree has no `wayai use` binding."
+    );
+    const hubs = scanWorkspaceHubs(hubsDir);
+    if (hubs.length) {
+      console.error("Available hubs:");
+      for (const h of hubs) console.error(`  ${path21.basename(h.hubFolder)} (${h.hubId})`);
+    }
+    console.error(`
+Pass --from <folder|uuid>${selector ? "." : " or run `wayai use <hub>` first."}`);
+    process.exit(1);
+  }
+  const liveFiles = readDirToFileMap(hubFolder);
+  if (Object.keys(liveFiles).length === 0) {
+    console.error(`Source hub folder has no files to freeze: ${path21.relative(gitRoot, hubFolder)}`);
+    process.exit(1);
+  }
+  const sanitized = sanitizeWayaiSliceFiles(liveFiles);
+  const relDest = path21.relative(gitRoot, dest);
+  const relSrc = path21.relative(gitRoot, hubFolder);
+  if (dryRun) {
+    const existing = new Set(listDirRelFiles(dest));
+    const nextKeys = new Set(Object.keys(sanitized));
+    console.log(`Dry run \u2014 would freeze ${relSrc}/ \u2192 ${relDest}/ (locale ${targetLocale}):`);
+    for (const rel of Object.keys(sanitized).sort((a, b) => a.localeCompare(b))) {
+      console.log(`  ${existing.has(rel) ? "update" : "create"}  ${rel}`);
+    }
+    for (const rel of [...existing].filter((k) => !nextKeys.has(k)).sort((a, b) => a.localeCompare(b))) {
+      console.log(`  remove  ${rel}`);
+    }
+    return;
+  }
+  const { written, removed } = writeSliceSnapshot(dest, sanitized);
+  console.log(
+    `Froze ${relSrc}/ \u2192 ${relDest}/ (locale ${targetLocale}): ${written.length} file${written.length === 1 ? "" : "s"} written${removed.length ? `, ${removed.length} removed` : ""}.`
+  );
+  console.log(`The slice is committed \u2014 re-push is stable across hub recreates. Next: \`wayai admin template push ${slug}\`.`);
+}
 async function runTemplatePull2(positional, flagArgs) {
   const slug = positional[0];
   if (!slug) {
@@ -17745,7 +17980,9 @@ async function runTemplatePull2(positional, flagArgs) {
   const target = outDir ? path21.resolve(outDir) : path21.join(process.cwd(), "template-store-pull", slug);
   const written = writeFileMap(target, detail.files);
   console.log(`Pulled "${slug}" from the store \u2192 ${target} (${written.length} file${written.length === 1 ? "" : "s"}).`);
-  console.log(`includes: wayai=${detail.includes.wayai} rekor=${detail.includes.rekor}`);
+  const uses = detail.uses ?? [];
+  const usesLabel = uses.length ? uses.map((u) => `${u.backend}/${u.endpoint}`).join(", ") : "(none)";
+  console.log(`includes: wayai=${detail.includes.wayai} | uses: ${usesLabel}`);
 }
 async function runSkillInstall(positional) {
   const name = positional[0] ?? "wayai-admin";
@@ -18185,8 +18422,10 @@ Usage:
   wayai admin notice list [--status active|resolved] [--limit N] [--offset N] [--json]
   wayai admin notice resolve <notice_id>
 
-  wayai admin template push <slug>                 Publish a template from tutorials/templates/<slug>/ into the store
+  wayai admin template push <slug>                 Publish a template from wayai-templates/<slug>/ into the store
   wayai admin template pull <slug> [--out DIR] [--json]   Pull a published template from the store for inspection
+  wayai admin template freeze <slug> [--locale <l>] [--from <hub>] [--dry-run]
+                                                   Snapshot a live hub into the template's committed slice (id/PII-scrubbed)
 
   wayai admin skill install [name]                 Install a private operator skill (default: wayai-admin) into each present harness's skills/ dir
 
@@ -18248,9 +18487,11 @@ var init_admin = __esm({
     init_observability();
     init_report_edit_args();
     init_workspace();
+    init_hub_binding();
     init_skill_version();
     init_layout();
     init_template_files();
+    init_template_sanitize();
     init_template_manifest();
     init_contracts();
     VALID_TYPES = dataExplorerDebugDoType2.options;