conduyt 1.10.0 → 1.13.0

package/dist/client.js

@@ -50,6 +50,9 @@ export class ConduytClient {
     patch(path, body) {
         return this.request("PATCH", path, body);
     }
+    put(path, body) {
+        return this.request("PUT", path, body);
+    }
     del(path) {
         return this.request("DELETE", path);
     }

package/dist/index.js

@@ -81,6 +81,7 @@ contacts
     .option("--last <name>", "last name")
     .option("--email <email>", "email")
     .option("--phone <phone>", "phone")
+    .option("--timezone <iana>", "IANA timezone of the lead (e.g. America/Chicago); omit to let Conduyt derive it from ZIP → phone area code → state. On update pass '' to clear the override")
     .option("--company <company>", "company name (auto-creates/links a company)")
     .option("--source <source>", "lead source (first-write-wins acquisition truth)")
     .option("--master-status <status>", "lead lifecycle status: open|won|lost|abandoned|disqualified or an account custom (terminal statuses silence all outbound automation)")
@@ -95,6 +96,8 @@ contacts
         body.email = opts.email;
     if (opts.phone !== undefined)
         body.phone = opts.phone;
+    if (opts.timezone !== undefined)
+        body.timezone = opts.timezone === "" ? null : opts.timezone;
     if (opts.company !== undefined)
         body.company = opts.company;
     if (opts.source !== undefined) {
@@ -123,6 +126,7 @@ contacts
     .option("--last <name>", "last name")
     .option("--email <email>", "email")
     .option("--phone <phone>", "phone")
+    .option("--timezone <iana>", "IANA timezone of the lead (e.g. America/Chicago); omit to let Conduyt derive it from ZIP → phone area code → state. On update pass '' to clear the override")
     .option("--company <company>", "company name (auto-creates/links a company; pass '' to clear)")
     .option("--source <source>", "correct the lead's first-touch source (normally set once at creation — update only to fix bad attribution; pass 'null' to clear)")
     .option("--master-status <status>", "lead lifecycle status: open|won|lost|abandoned|disqualified or an account custom (terminal statuses silence all outbound automation)")
@@ -138,6 +142,8 @@ contacts
         body.email = opts.email;
     if (opts.phone !== undefined)
         body.phone = opts.phone;
+    if (opts.timezone !== undefined)
+        body.timezone = opts.timezone === "" ? null : opts.timezone;
     if (opts.company !== undefined)
         body.company = opts.company;
     if (opts.source !== undefined) {
@@ -769,11 +775,13 @@ messages
 }));
 messages
     .command("send-sms")
-    .description("Send an outbound SMS via Twilio (POST /messages/sms/send)")
+    .description("Send an outbound SMS (POST /messages/sms/send) — via Twilio, or from your own Project Blue iPhone line with --transport project_blue")
     .option("--contact <id>", "contact UUID (required)")
     .option("--body <text>", "SMS body, 1-1600 chars (required)")
     .option("--from <number>", "from number — must be an account-owned Twilio number/agent DID")
     .option("--provider <id>", "smsProviderId UUID")
+    .option("--transport <transport>", "twilio (default) | project_blue — send from your assigned Project Blue iPhone line (iMessage when the lead is on Apple, SMS otherwise)")
+    .option("--idempotency-key <key>", "operation key (8-200 chars) for at-most-once sends: reuse the SAME key when retrying a send whose outcome you did not see")
     .option("--json <json>", "full JSON body, merged over the flags")
     .action(run(async (client, opts) => {
     const body = {};
@@ -785,6 +793,10 @@ messages
         body.fromNumber = opts.from;
     if (opts.provider !== undefined)
         body.smsProviderId = opts.provider;
+    if (opts.transport !== undefined)
+        body.transport = opts.transport;
+    if (opts.idempotencyKey !== undefined)
+        body.idempotencyKey = opts.idempotencyKey;
     if (opts.json !== undefined)
         Object.assign(body, jsonArg(opts.json, "--json"));
     return client.post("/api/v1/messages/sms/send", body);
@@ -972,6 +984,10 @@ automations
     .command("schema")
     .description("Get the node/field/operator schema catalog (node types, action rules, graph shape)")
     .action(run(async (client) => client.get("/api/v1/automations/schema")));
+automations
+    .command("events")
+    .description("List trigger events with their labels, payload fields and documented scalar conditions (e.g. contact.untouched → untouchedDays: 1-365)")
+    .action(run(async (client) => client.get("/api/v1/automations/events")));
 automations
     .command("resolve")
     .description("Resolve human-readable names to UUIDs. Pass comma lists via flags and/or a full JSON body")
@@ -1827,6 +1843,273 @@ lifecycle
         throw new Error(`Invalid status name '${bad}' — 1-40 chars; letters, numbers, spaces, - and _ only.`);
     return client.patch("/api/v1/settings", { masterStatuses: clean });
 }));
+// ---- account default columns for the Contacts list (tri-surface parity, 2026-09-03) ----
+const CONTACT_COLUMN_IDS = ["name", "email", "phone", "company", "source", "tags", "score", "intent", "stage", "createdAt", "lastActivity", "assignedTo", "address", "city", "state", "zip"];
+lifecycle
+    .command("get-contact-columns")
+    .description("Show the account-level DEFAULT COLUMNS for the Contacts list (every user gets them merged into their own layout on their next visit; each version once). null = no account default.")
+    .action(run(async (client) => {
+    const result = (await client.get("/api/v1/settings"));
+    const raw = result?.data?.contactTableDefaults;
+    return { data: raw && typeof raw === "object" ? raw : null, columnIds: [...CONTACT_COLUMN_IDS, "custom:<fieldKey>"] };
+}));
+lifecycle
+    .command("set-contact-columns [ids...]")
+    .description("Set the account-level DEFAULT COLUMNS for the Contacts list (settings scope). Every user's saved layout gains the ids it lacks on their next visit (appended; nothing moves); the version bumps only when the set changes. Ids: the standard column ids or custom:<fieldKey>; up to 10. --clear removes the default.")
+    .option("--clear", "remove the account default (users keep what they already show)")
+    .action(run(async (client, ids, opts) => {
+    ids = ids ?? [];
+    if (ids.length === 0 && !opts.clear)
+        throw new Error("Pass at least one column id, or --clear to remove the account default.");
+    if (ids.length > 0 && opts.clear)
+        throw new Error("--clear cannot be combined with column ids.");
+    const clean = ids.map((s) => s.trim());
+    if (clean.length > 8)
+        throw new Error("At most 8 default columns (the table keeps its two anchors).");
+    const bad = clean.find((id) => !CONTACT_COLUMN_IDS.includes(id) && !/^custom:[A-Za-z0-9_][A-Za-z0-9_.-]{0,99}$/.test(id));
+    if (bad)
+        throw new Error(`Unknown column id '${bad}' — one of ${CONTACT_COLUMN_IDS.join(", ")} or custom:<fieldKey>.`);
+    return client.patch("/api/v1/settings", { contactTableDefaults: { columns: clean } });
+}));
+// ---- call flows + ring groups (#25 tri-surface parity, 2026-08-23) ----
+// IVR routing graphs and their companion ring sets. Settings-scoped at the
+// API-key boundary (same tier as the rest of the Twilio setup surface): a
+// dialer-only key gets 403 here. The flow graph (--graph) is the node/edge
+// JSON the API validates — `validate` previews problems without publishing.
+const callFlows = program.command("call-flows").description("Call flows: the IVR routing graphs inbound numbers execute (settings scope)");
+callFlows
+    .command("list")
+    .description("List call flows with status (draft/published) and attached numbers")
+    .action(run(async (client) => client.get("/api/v1/call-flows")));
+callFlows
+    .command("get <id>")
+    .description("Get one call flow incl. draft + published graphs")
+    .action(run(async (client, id) => { assertUuid(id, "call flow id"); return client.get(`/api/v1/call-flows/${encodeURIComponent(id)}`); }));
+callFlows
+    .command("create <name>")
+    .description("Create a call flow (starts as a DRAFT)")
+    .option("--phone-number <e164>", "account number this flow answers")
+    .option("--graph <json>", "initial flow graph (node/edge JSON) Kinds: entry, greeting, agent, group (queue.repeatRing = queue mode), menu (options[{digit,label,next}]), function (functionId, timeoutSeconds 2-8, next/failNext), set_attributes (assignments[{key,value}]), branch (attribute, op, value, next/elseNext), timing (hours, timezone, next/closedNext), voicemail, forward, hangup; every branch must reach an ending.")
+    .action(run(async (client, name, opts) => {
+    const body = { name };
+    if (opts.phoneNumber !== undefined)
+        body.phoneNumber = opts.phoneNumber;
+    if (opts.graph !== undefined)
+        body.draftGraph = graphArg(opts.graph);
+    return client.post("/api/v1/call-flows", body);
+}));
+callFlows
+    .command("update <id>")
+    .description("Update the DRAFT (published behavior changes only on the next publish)")
+    .option("--name <name>", "new name")
+    .option("--phone-number <e164>", "new number")
+    .option("--graph <json>", "replacement draft graph (node/edge JSON) — REQUIRES --expected-draft-revision. Kinds: entry, greeting, agent, group (queue.repeatRing = queue mode), menu (options[{digit,label,next}]), function (functionId, timeoutSeconds 2-8, next/failNext), set_attributes (assignments[{key,value}]), branch (attribute, op, value, next/elseNext), timing (hours, timezone, next/closedNext), voicemail, forward, hangup; every branch must reach an ending")
+    .option("--expected-draft-revision <n>", "draftRevision from your last `call-flows get` read (REQUIRED with --graph; the API 428s without it — it is graph-specific, so calls/publish never invalidate it)")
+    .action(run(async (client, id, opts) => {
+    assertUuid(id, "call flow id");
+    const body = {};
+    if (opts.name !== undefined)
+        body.name = opts.name;
+    if (opts.phoneNumber !== undefined)
+        body.phoneNumber = opts.phoneNumber;
+    if (opts.graph !== undefined) {
+        if (opts.expectedDraftRevision === undefined) {
+            throw new Error("Replacing --graph requires --expected-draft-revision (the draftRevision you read the flow at) — `call-flows get` first.");
+        }
+        body.draftGraph = graphArg(opts.graph);
+    }
+    if (opts.expectedDraftRevision !== undefined) {
+        // Strict decimal form BEFORE Number(): Number("") is 0, and a newly
+        // created flow's revision IS 0 — an unset shell variable must refuse
+        // locally, never perform a real graph replacement.
+        const raw = String(opts.expectedDraftRevision).trim();
+        const n = /^\d+$/.test(raw) ? Number(raw) : NaN;
+        if (!Number.isSafeInteger(n) || n < 0) {
+            throw new Error("--expected-draft-revision must be the non-negative integer draftRevision from your last read.");
+        }
+        body.expectedDraftRevision = n;
+    }
+    if (Object.keys(body).length === 0)
+        throw new Error("Nothing to update. Pass at least one flag.");
+    return client.patch(`/api/v1/call-flows/${encodeURIComponent(id)}`, body);
+}));
+callFlows
+    .command("delete <id>")
+    .description("Delete a call flow. A PUBLISHED flow refuses deletion (409) — run `call-flows unpublish` first")
+    .action(run(async (client, id) => { assertUuid(id, "call flow id"); return client.del(`/api/v1/call-flows/${encodeURIComponent(id)}`); }));
+callFlows
+    .command("validate <id>")
+    .description("Validate the draft graph WITHOUT publishing — structured problems")
+    .action(run(async (client, id) => { assertUuid(id, "call flow id"); return client.get(`/api/v1/call-flows/${encodeURIComponent(id)}/validate`); }));
+callFlows
+    .command("publish <id>")
+    .description("Publish the draft (refuses an invalid graph). REQUIRES --expected-updated-at (the API 428s without it): `call-flows get` first, pass its updatedAt — a concurrent edit then 409s instead of being published over")
+    .requiredOption("--expected-updated-at <iso>", "updatedAt from your last `call-flows get` read (REQUIRED)")
+    .action(run(async (client, id, opts) => {
+    assertUuid(id, "call flow id");
+    if (Number.isNaN(Date.parse(opts.expectedUpdatedAt))) {
+        throw new Error("--expected-updated-at must be the ISO updatedAt timestamp from your last read.");
+    }
+    return client.post(`/api/v1/call-flows/${encodeURIComponent(id)}/publish`, { expectedUpdatedAt: opts.expectedUpdatedAt });
+}));
+callFlows
+    .command("unpublish <id>")
+    .description("Unpublish — the number falls back to default routing")
+    .action(run(async (client, id) => { assertUuid(id, "call flow id"); return client.post(`/api/v1/call-flows/${encodeURIComponent(id)}/unpublish`, {}); }));
+callFlows
+    .command("simulate <id>")
+    .description('"If someone calls right now, who picks up?" — DRAFT graph vs LIVE availability, no side effects')
+    .action(run(async (client, id) => { assertUuid(id, "call flow id"); return client.post(`/api/v1/call-flows/${encodeURIComponent(id)}/simulate`, {}); }));
+// #32 Call Flows function endpoints (Amazon Connect "Invoke Lambda" parity): the
+// HTTPS endpoints a flow's "Call a function" step may invoke mid-call.
+const callFlowFunctions = callFlows.command("functions").description("Function endpoints a \"Call a function\" step can invoke mid-call (settings scope; admin to change)");
+callFlowFunctions
+    .command("list")
+    .description("List the account's function endpoints")
+    .action(run(async (client) => client.get("/api/v1/call-flows/functions")));
+callFlowFunctions
+    .command("create <name>")
+    .description("Register a function endpoint. Conduyt POSTs a signed JSON call snapshot (X-Conduyt-Signature = sha256 HMAC of `${timestamp}.${body}`, X-Conduyt-Timestamp, Idempotency-Key); reply 200 with a JSON object — top-level strings/numbers/booleans become call attributes. https + public host only, no redirects, 2-8 s timeout")
+    .requiredOption("--url <https-url>", "HTTPS endpoint (ports 443/8443)")
+    .requiredOption("--secret <secret>", "HMAC signing secret (16-200 chars) the endpoint verifies with")
+    .action(run(async (client, name, opts) => client.post("/api/v1/call-flows/functions", { name, url: opts.url, secret: opts.secret })));
+callFlowFunctions
+    .command("update <id>")
+    .description("Rename, change the URL, or rotate the secret")
+    .option("--name <name>", "new name")
+    .option("--url <https-url>", "new HTTPS endpoint")
+    .option("--secret <secret>", "new signing secret (rotation)")
+    .action(run(async (client, id, opts) => {
+    assertUuid(id, "function id");
+    const body = {};
+    if (opts.name !== undefined)
+        body.name = opts.name;
+    if (opts.url !== undefined)
+        body.url = opts.url;
+    if (opts.secret !== undefined)
+        body.secret = opts.secret;
+    if (Object.keys(body).length === 0)
+        throw new Error("Nothing to update. Pass at least one flag.");
+    return client.patch(`/api/v1/call-flows/functions/${encodeURIComponent(id)}`, body);
+}));
+callFlowFunctions
+    .command("delete <id>")
+    .description("Remove a function endpoint (409 while a PUBLISHED flow still calls it)")
+    .action(run(async (client, id) => { assertUuid(id, "function id"); return client.del(`/api/v1/call-flows/functions/${encodeURIComponent(id)}`); }));
+callFlowFunctions
+    .command("test <id>")
+    .description("Send a real signed test call (callSid TEST, sample caller) and report status, latency and the attributes it would save")
+    .action(run(async (client, id) => { assertUuid(id, "function id"); return client.post(`/api/v1/call-flows/functions/${encodeURIComponent(id)}/test`, {}); }));
+callFlows
+    .command("roster")
+    .description("Routing roster: members with DIDs + live availability")
+    .action(run(async (client) => client.get("/api/v1/call-flows/roster")));
+const ringGroups = program.command("ring-groups").description("Ring groups: simultaneous/sequential ring sets over member DIDs (settings scope)");
+ringGroups
+    .command("list")
+    .description("List ring groups with numbers and members")
+    .action(run(async (client) => client.get("/api/v1/ring-groups")));
+ringGroups
+    .command("get <id>")
+    .description("Get one ring group")
+    .action(run(async (client, id) => { assertUuid(id, "ring group id"); return client.get(`/api/v1/ring-groups/${encodeURIComponent(id)}`); }));
+ringGroups
+    .command("create <name>")
+    .description("Create a ring group. --phone-number is REQUIRED; without --member-ids the group is created INACTIVE (memberless groups never ring)")
+    .requiredOption("--phone-number <e164>", "account number that rings this group (REQUIRED)")
+    .option("--member-ids <ids>", "comma-separated member user UUIDs (omit → created inactive)")
+    .option("--strategy <strategy>", "ring strategy (e.g. simultaneous, sequential)")
+    .option("--ring-seconds <n>", "seconds to ring before advancing/failing over (integer 5-120)")
+    .option("--inactive", "create as inactive")
+    .action(run(async (client, name, opts) => {
+    // memberIds must ALWAYS be an array — the API rejects undefined
+    // (validateRingGroupMemberIds requires an array; [] = memberless →
+    // the group is created INACTIVE).
+    const body = {
+        name,
+        phoneNumber: opts.phoneNumber,
+        memberIds: opts.memberIds !== undefined ? memberIdsArg(opts.memberIds) : [],
+    };
+    if (opts.strategy !== undefined)
+        body.strategy = opts.strategy;
+    if (opts.ringSeconds !== undefined)
+        body.ringSeconds = ringSecondsArg(opts.ringSeconds);
+    if (opts.inactive)
+        body.isActive = false;
+    return client.post("/api/v1/ring-groups", body);
+}));
+ringGroups
+    .command("update <id>")
+    .description("Update a ring group. --expected-updated-at makes a concurrent edit 409 instead of being overwritten")
+    .option("--name <name>", "new name")
+    .option("--phone-number <e164>", "new number")
+    .option("--member-ids <ids>", 'comma-separated replacement member UUIDs, or "none" to clear the roster (deactivates the group)')
+    .option("--strategy <strategy>", "ring strategy")
+    .option("--ring-seconds <n>", "seconds to ring")
+    .option("--active <bool>", 'active flag — exactly "true" or "false"')
+    .option("--expected-updated-at <iso>", "updatedAt from your last read (REQUIRED when replacing --member-ids)")
+    .action(run(async (client, id, opts) => {
+    assertUuid(id, "ring group id");
+    const body = {};
+    if (opts.name !== undefined)
+        body.name = opts.name;
+    if (opts.phoneNumber !== undefined)
+        body.phoneNumber = opts.phoneNumber;
+    if (opts.memberIds !== undefined) {
+        if (opts.expectedUpdatedAt === undefined) {
+            throw new Error("Replacing --member-ids requires --expected-updated-at (the updatedAt you read the group at) — `ring-groups get` first.");
+        }
+        const ids = memberIdsArg(opts.memberIds);
+        body.memberIds = ids;
+        if (ids.length === 0) {
+            // An empty roster cannot stay active (the API 400s an active
+            // memberless group) — clearing implies deactivation.
+            if (opts.active === "true") {
+                throw new Error('--member-ids none clears the roster and deactivates the group — it cannot combine with --active true.');
+            }
+            body.isActive = false;
+        }
+    }
+    if (opts.strategy !== undefined)
+        body.strategy = opts.strategy;
+    if (opts.ringSeconds !== undefined)
+        body.ringSeconds = ringSecondsArg(opts.ringSeconds);
+    if (opts.active !== undefined)
+        body.isActive = strictBool(opts.active, "--active");
+    if (opts.expectedUpdatedAt !== undefined) {
+        if (Number.isNaN(Date.parse(opts.expectedUpdatedAt))) {
+            throw new Error("--expected-updated-at must be the ISO updatedAt timestamp from your last read.");
+        }
+        body.expectedUpdatedAt = opts.expectedUpdatedAt;
+    }
+    if (Object.keys(body).length === 0)
+        throw new Error("Nothing to update. Pass at least one flag.");
+    return client.patch(`/api/v1/ring-groups/${encodeURIComponent(id)}`, body);
+}));
+ringGroups
+    .command("delete <id>")
+    .description("Delete a ring group (its number keeps default routing)")
+    .action(run(async (client, id) => { assertUuid(id, "ring group id"); return client.del(`/api/v1/ring-groups/${encodeURIComponent(id)}`); }));
+ringGroups
+    .command("release-number <e164>")
+    .description("Release a number from routing (DESTRUCTIVE). --confirm must repeat the EXACT number. A number still referenced by an ACTIVE group cannot be released — delete or repoint that group first; --force does NOT bypass it (it exists only for numbers whose Twilio ownership cannot be verified, and then --force-reason is required)")
+    .requiredOption("--confirm <e164>", "EXACT repetition of the number being released (REQUIRED)")
+    .option("--force", "ONLY when Twilio ownership is unverifiable; requires --force-reason")
+    .option("--force-reason <why>", "non-empty justification, required with --force")
+    .action(run(async (client, phoneNumber, opts) => {
+    if (opts.confirm !== phoneNumber) {
+        throw new Error(`--confirm must repeat the exact number (${phoneNumber}) — got "${opts.confirm}".`);
+    }
+    if (opts.force && !(opts.forceReason && opts.forceReason.trim())) {
+        throw new Error("--force requires a non-empty --force-reason.");
+    }
+    const body = { phoneNumber, confirm: opts.confirm };
+    if (opts.force) {
+        body.force = true;
+        body.forceReason = opts.forceReason;
+    }
+    return client.post("/api/v1/ring-groups/release-number", body);
+}));
 program.parseAsync(process.argv).catch(fail);
 // helpers
 // Parse a --json / --stages style argument, throwing a clear CLI error (caught
@@ -1865,6 +2148,44 @@ function assertFiniteValue(v) {
 // The path is also URL-encoded at the call site as defence in depth. The regex
 // is inlined (not a module-level const) so it isn't in the temporal dead zone
 // when an action callback runs during program.parse().
+const projectBlue = program.command("project-blue").description("Project Blue: dedicated iPhone lines (iMessage/SMS + FaceTime Audio), one line per agent (settings scope)");
+projectBlue
+    .command("status")
+    .description("Connection status (key masked) + current line assignments")
+    .action(run(async (client) => client.get("/api/v1/settings/project-blue")));
+projectBlue
+    .command("connect")
+    .description("Connect or replace the account's Project Blue API key — verified with the vendor before it is stored")
+    .option("--key <apiKey>", "Project Blue API key (proj_…); omit to read PROJECT_BLUE_API_KEY from the environment and keep the key out of shell history")
+    .action(run(async (client, opts) => {
+    const apiKey = (opts.key ?? process.env.PROJECT_BLUE_API_KEY ?? "").trim();
+    if (!apiKey)
+        throw new Error("Pass --key or set PROJECT_BLUE_API_KEY.");
+    return client.put("/api/v1/settings/project-blue", { apiKey });
+}));
+projectBlue
+    .command("disconnect")
+    .description("Forget the API key and release every agent's line")
+    .action(run(async (client) => client.del("/api/v1/settings/project-blue")));
+projectBlue
+    .command("lines")
+    .description("LIVE line inventory from the vendor with each line's assigned agent, plus assignments the vendor no longer lists (orphaned)")
+    .action(run(async (client) => client.get("/api/v1/settings/project-blue/lines")));
+projectBlue
+    .command("assign <lineId> <userId>")
+    .description("Give a line to an agent (one line per agent, one agent per line — prior holders are released and reported)")
+    .action(run(async (client, lineId, userId) => {
+    assertUuid(lineId, "line id");
+    assertUuid(userId, "user id");
+    return client.put(`/api/v1/settings/project-blue/lines/${encodeURIComponent(lineId)}`, { userId });
+}));
+projectBlue
+    .command("release <lineId>")
+    .description("Release a line from whoever holds it")
+    .action(run(async (client, lineId) => {
+    assertUuid(lineId, "line id");
+    return client.put(`/api/v1/settings/project-blue/lines/${encodeURIComponent(lineId)}`, { userId: null });
+}));
 function assertUuid(id, label = "id") {
     const uuidRe = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     if (!uuidRe.test(id.trim())) {
@@ -1900,6 +2221,39 @@ function jsonArrayArg(raw, flag) {
     }
     return v;
 }
+function strictBool(raw, flag) {
+    if (raw === "true")
+        return true;
+    if (raw === "false")
+        return false;
+    throw new Error(`${flag} must be exactly "true" or "false" (got "${raw}").`);
+}
+function ringSecondsArg(raw) {
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < 5 || n > 120) {
+        throw new Error("--ring-seconds must be an integer between 5 and 120.");
+    }
+    return n;
+}
+function memberIdsArg(raw) {
+    // "none" is the explicit empty roster: the API accepts memberIds: [] and
+    // uses it to clear (and deactivate) a group — without a spelled form the
+    // CLI could never remove the final member.
+    if (raw.trim().toLowerCase() === "none")
+        return [];
+    const parts = raw.split(",").map((v) => v.trim());
+    if (parts.length === 0 || parts.some((v) => v === "")) {
+        throw new Error('--member-ids must be a comma-separated list of user UUIDs with no empty entries (or "none" to clear the roster).');
+    }
+    return parts;
+}
+function graphArg(raw) {
+    const g = jsonArg(raw, "--graph");
+    if (typeof g.entryId !== "string" || !Array.isArray(g.nodes)) {
+        throw new Error("--graph must be a flow graph object with a string entryId and a nodes array — the API silently substitutes a default voicemail flow for anything else.");
+    }
+    return g;
+}
 function jsonArg(raw, flag) {
     if (raw.trim() === "") {
         throw new Error(`${flag} must be valid JSON (got an empty string).`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt",
-  "version": "1.10.0",
+  "version": "1.13.0",
   "description": "Command-line interface for Conduyt CRM — manage contacts, deals, pipelines, and run insight queries from your terminal.",
   "type": "module",
   "main": "dist/index.js",
@@ -18,7 +18,7 @@
     "build": "tsc",
     "typecheck": "tsc --noEmit",
     "start": "tsx src/index.ts",
-    "prepublishOnly": "npm run check:version && npm run build && node --import tsx --experimental-test-module-mocks --test src/privacy-forget.test.ts src/contact-source-json.test.ts",
+    "prepublishOnly": "npm run check:version && npm run build && node --import tsx --experimental-test-module-mocks --test src/*.test.ts",
     "test": "node --import tsx --test src/*.test.ts",
     "check:version": "node -e \"const p=require('./package.json').version,l=require('./package-lock.json');if(l.version!==p||l.packages[''].version!==p){console.error('lockfile version != '+p);process.exit(1)}console.log('Version sync OK: '+p)\""
   },