neatlogs-cli 0.1.0-team-test.5 → 0.1.0

package/dist/bin.js

@@ -148,7 +148,7 @@ var public_openapi_default = {
       description: "Local dev"
     },
     {
-      url: "https://cloud.neatlogs.com",
+      url: "https://neatlogs-dev-cloud.neatlogs.com",
       description: "dev.neatlogs.com backend"
     },
     {
@@ -430,7 +430,7 @@ var public_openapi_default = {
           instance: {
             type: "string",
             maxLength: 2048,
-            pattern: "^\\/api\\/v1\\/public(?:\\/[^?#\\r\\n]*)?$"
+            pattern: "^\\/[aA][pP][iI]\\/[vV][0-9]+\\/[pP][uU][bB][lL][iI][cC](?:\\/[^?#\\r\\n]*)?$"
           },
           requestId: {
             type: "string",
@@ -477,6 +477,189 @@ var public_openapi_default = {
         ],
         additionalProperties: false
       },
+      PublicDetectionIssueSemanticsInput: {
+        type: "object",
+        properties: {
+          schema_version: {
+            type: "string",
+            const: "detector-issue-semantics-v1"
+          },
+          polarity: {
+            type: "string",
+            enum: [
+              "problem",
+              "healthy",
+              "informational",
+              "unknown"
+            ]
+          },
+          authority: {
+            default: "none",
+            type: "string",
+            enum: [
+              "none",
+              "project_authoritative"
+            ]
+          },
+          truth_role: {
+            type: "string",
+            minLength: 1,
+            maxLength: 100
+          },
+          contract_id: {
+            type: "string",
+            minLength: 1,
+            maxLength: 256
+          },
+          contract_version: {
+            type: "string",
+            minLength: 1,
+            maxLength: 100
+          }
+        },
+        required: [
+          "schema_version",
+          "polarity"
+        ],
+        additionalProperties: false
+      },
+      PublicDetectionIssueSemanticsOutput: {
+        type: "object",
+        properties: {
+          schema_version: {
+            type: "string",
+            const: "detector-issue-semantics-v1"
+          },
+          polarity: {
+            type: "string",
+            enum: [
+              "problem",
+              "healthy",
+              "informational",
+              "unknown"
+            ]
+          },
+          authority: {
+            default: "none",
+            type: "string",
+            enum: [
+              "none",
+              "project_authoritative"
+            ]
+          },
+          truth_role: {
+            type: "string",
+            minLength: 1,
+            maxLength: 100
+          },
+          contract_id: {
+            type: "string",
+            minLength: 1,
+            maxLength: 256
+          },
+          contract_version: {
+            type: "string",
+            minLength: 1,
+            maxLength: 100
+          }
+        },
+        required: [
+          "schema_version",
+          "polarity",
+          "authority"
+        ],
+        additionalProperties: false
+      },
+      PublicDetectionSummary: {
+        type: "object",
+        properties: {
+          createdAt: {
+            type: "string",
+            format: "date-time",
+            pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+          },
+          displayName: {
+            type: "string",
+            minLength: 1,
+            maxLength: 255
+          },
+          groupId: {
+            type: "string",
+            format: "uuid",
+            pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
+          },
+          groupName: {
+            anyOf: [
+              {
+                type: "string",
+                maxLength: 255
+              },
+              {
+                type: "null"
+              }
+            ]
+          },
+          id: {
+            type: "string",
+            format: "uuid",
+            pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
+          },
+          isActive: {
+            type: "boolean"
+          },
+          issueSemantics: {
+            anyOf: [
+              {
+                $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+              },
+              {
+                type: "null"
+              }
+            ]
+          },
+          slug: {
+            type: "string",
+            minLength: 1,
+            maxLength: 100
+          },
+          threshold: {
+            type: "number",
+            minimum: 0,
+            maximum: 1
+          },
+          type: {
+            type: "string",
+            enum: [
+              "classifier",
+              "regex",
+              "conditional",
+              "pii",
+              "custom_trained",
+              "code",
+              "trace_rules",
+              "decision"
+            ]
+          },
+          updatedAt: {
+            type: "string",
+            format: "date-time",
+            pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+          }
+        },
+        required: [
+          "createdAt",
+          "displayName",
+          "groupId",
+          "groupName",
+          "id",
+          "isActive",
+          "slug",
+          "threshold",
+          "type",
+          "updatedAt"
+        ],
+        additionalProperties: false
+      },
       PublicSavedFilter: {
         additionalProperties: false,
         properties: {
@@ -31116,6 +31299,16 @@ var public_openapi_default = {
                                         default: true,
                                         type: "boolean"
                                       },
+                                      issueSemantics: {
+                                        anyOf: [
+                                          {
+                                            $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                          },
+                                          {
+                                            type: "null"
+                                          }
+                                        ]
+                                      },
                                       runOn: {
                                         default: {
                                           frequency: "trace"
@@ -31253,6 +31446,16 @@ var public_openapi_default = {
                                         default: true,
                                         type: "boolean"
                                       },
+                                      issueSemantics: {
+                                        anyOf: [
+                                          {
+                                            $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                          },
+                                          {
+                                            type: "null"
+                                          }
+                                        ]
+                                      },
                                       runOn: {
                                         default: {
                                           frequency: "trace"
@@ -31418,6 +31621,16 @@ var public_openapi_default = {
                                         default: true,
                                         type: "boolean"
                                       },
+                                      issueSemantics: {
+                                        anyOf: [
+                                          {
+                                            $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                          },
+                                          {
+                                            type: "null"
+                                          }
+                                        ]
+                                      },
                                       runOn: {
                                         default: {
                                           frequency: "trace"
@@ -32257,6 +32470,16 @@ var public_openapi_default = {
                                         default: true,
                                         type: "boolean"
                                       },
+                                      issueSemantics: {
+                                        anyOf: [
+                                          {
+                                            $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                          },
+                                          {
+                                            type: "null"
+                                          }
+                                        ]
+                                      },
                                       runOn: {
                                         default: {
                                           frequency: "trace"
@@ -32951,6 +33174,16 @@ var public_openapi_default = {
                                   default: true,
                                   type: "boolean"
                                 },
+                                issueSemantics: {
+                                  anyOf: [
+                                    {
+                                      $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                    },
+                                    {
+                                      type: "null"
+                                    }
+                                  ]
+                                },
                                 runOn: {
                                   default: {
                                     frequency: "trace"
@@ -33088,6 +33321,16 @@ var public_openapi_default = {
                                   default: true,
                                   type: "boolean"
                                 },
+                                issueSemantics: {
+                                  anyOf: [
+                                    {
+                                      $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                    },
+                                    {
+                                      type: "null"
+                                    }
+                                  ]
+                                },
                                 runOn: {
                                   default: {
                                     frequency: "trace"
@@ -33253,6 +33496,16 @@ var public_openapi_default = {
                                   default: true,
                                   type: "boolean"
                                 },
+                                issueSemantics: {
+                                  anyOf: [
+                                    {
+                                      $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                    },
+                                    {
+                                      type: "null"
+                                    }
+                                  ]
+                                },
                                 runOn: {
                                   default: {
                                     frequency: "trace"
@@ -34092,6 +34345,16 @@ var public_openapi_default = {
                                   default: true,
                                   type: "boolean"
                                 },
+                                issueSemantics: {
+                                  anyOf: [
+                                    {
+                                      $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                    },
+                                    {
+                                      type: "null"
+                                    }
+                                  ]
+                                },
                                 runOn: {
                                   default: {
                                     frequency: "trace"
@@ -34799,6 +35062,16 @@ var public_openapi_default = {
                                   default: true,
                                   type: "boolean"
                                 },
+                                issueSemantics: {
+                                  anyOf: [
+                                    {
+                                      $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                    },
+                                    {
+                                      type: "null"
+                                    }
+                                  ]
+                                },
                                 runOn: {
                                   default: {
                                     frequency: "trace"
@@ -34936,6 +35209,16 @@ var public_openapi_default = {
                                   default: true,
                                   type: "boolean"
                                 },
+                                issueSemantics: {
+                                  anyOf: [
+                                    {
+                                      $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                    },
+                                    {
+                                      type: "null"
+                                    }
+                                  ]
+                                },
                                 runOn: {
                                   default: {
                                     frequency: "trace"
@@ -35101,6 +35384,16 @@ var public_openapi_default = {
                                   default: true,
                                   type: "boolean"
                                 },
+                                issueSemantics: {
+                                  anyOf: [
+                                    {
+                                      $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                    },
+                                    {
+                                      type: "null"
+                                    }
+                                  ]
+                                },
                                 runOn: {
                                   default: {
                                     frequency: "trace"
@@ -35940,6 +36233,16 @@ var public_openapi_default = {
                                   default: true,
                                   type: "boolean"
                                 },
+                                issueSemantics: {
+                                  anyOf: [
+                                    {
+                                      $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                    },
+                                    {
+                                      type: "null"
+                                    }
+                                  ]
+                                },
                                 runOn: {
                                   default: {
                                     frequency: "trace"
@@ -36586,83 +36889,7 @@ var public_openapi_default = {
                         detections: {
                           type: "array",
                           items: {
-                            type: "object",
-                            properties: {
-                              createdAt: {
-                                type: "string",
-                                format: "date-time",
-                                pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
-                              },
-                              displayName: {
-                                type: "string",
-                                minLength: 1,
-                                maxLength: 255
-                              },
-                              groupId: {
-                                type: "string",
-                                format: "uuid",
-                                pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
-                              },
-                              groupName: {
-                                anyOf: [
-                                  {
-                                    type: "string",
-                                    maxLength: 255
-                                  },
-                                  {
-                                    type: "null"
-                                  }
-                                ]
-                              },
-                              id: {
-                                type: "string",
-                                format: "uuid",
-                                pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
-                              },
-                              isActive: {
-                                type: "boolean"
-                              },
-                              slug: {
-                                type: "string",
-                                minLength: 1,
-                                maxLength: 100
-                              },
-                              threshold: {
-                                type: "number",
-                                minimum: 0,
-                                maximum: 1
-                              },
-                              type: {
-                                type: "string",
-                                enum: [
-                                  "classifier",
-                                  "regex",
-                                  "conditional",
-                                  "pii",
-                                  "custom_trained",
-                                  "code",
-                                  "trace_rules"
-                                ]
-                              },
-                              updatedAt: {
-                                type: "string",
-                                format: "date-time",
-                                pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
-                              }
-                            },
-                            required: [
-                              "createdAt",
-                              "displayName",
-                              "groupId",
-                              "groupName",
-                              "id",
-                              "isActive",
-                              "slug",
-                              "threshold",
-                              "type",
-                              "updatedAt"
-                            ],
-                            additionalProperties: false
+                            $ref: "#/components/schemas/PublicDetectionSummary"
                           }
                         },
                         page: {
@@ -37213,83 +37440,7 @@ var public_openapi_default = {
                   type: "object",
                   properties: {
                     data: {
-                      type: "object",
-                      properties: {
-                        createdAt: {
-                          type: "string",
-                          format: "date-time",
-                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
-                        },
-                        displayName: {
-                          type: "string",
-                          minLength: 1,
-                          maxLength: 255
-                        },
-                        groupId: {
-                          type: "string",
-                          format: "uuid",
-                          pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
-                        },
-                        groupName: {
-                          anyOf: [
-                            {
-                              type: "string",
-                              maxLength: 255
-                            },
-                            {
-                              type: "null"
-                            }
-                          ]
-                        },
-                        id: {
-                          type: "string",
-                          format: "uuid",
-                          pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
-                        },
-                        isActive: {
-                          type: "boolean"
-                        },
-                        slug: {
-                          type: "string",
-                          minLength: 1,
-                          maxLength: 100
-                        },
-                        threshold: {
-                          type: "number",
-                          minimum: 0,
-                          maximum: 1
-                        },
-                        type: {
-                          type: "string",
-                          enum: [
-                            "classifier",
-                            "regex",
-                            "conditional",
-                            "pii",
-                            "custom_trained",
-                            "code",
-                            "trace_rules"
-                          ]
-                        },
-                        updatedAt: {
-                          type: "string",
-                          format: "date-time",
-                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
-                        }
-                      },
-                      required: [
-                        "createdAt",
-                        "displayName",
-                        "groupId",
-                        "groupName",
-                        "id",
-                        "isActive",
-                        "slug",
-                        "threshold",
-                        "type",
-                        "updatedAt"
-                      ],
-                      additionalProperties: false
+                      $ref: "#/components/schemas/PublicDetectionSummary"
                     },
                     requestId: {
                       type: "string",
@@ -37732,6 +37883,16 @@ var public_openapi_default = {
                         default: true,
                         type: "boolean"
                       },
+                      issueSemantics: {
+                        anyOf: [
+                          {
+                            $ref: "#/components/schemas/PublicDetectionIssueSemanticsInput"
+                          },
+                          {
+                            type: "null"
+                          }
+                        ]
+                      },
                       runOn: {
                         default: {
                           frequency: "trace"
@@ -37863,6 +38024,16 @@ var public_openapi_default = {
                         default: true,
                         type: "boolean"
                       },
+                      issueSemantics: {
+                        anyOf: [
+                          {
+                            $ref: "#/components/schemas/PublicDetectionIssueSemanticsInput"
+                          },
+                          {
+                            type: "null"
+                          }
+                        ]
+                      },
                       runOn: {
                         default: {
                           frequency: "trace"
@@ -38018,6 +38189,16 @@ var public_openapi_default = {
                         default: true,
                         type: "boolean"
                       },
+                      issueSemantics: {
+                        anyOf: [
+                          {
+                            $ref: "#/components/schemas/PublicDetectionIssueSemanticsInput"
+                          },
+                          {
+                            type: "null"
+                          }
+                        ]
+                      },
                       runOn: {
                         default: {
                           frequency: "trace"
@@ -38851,6 +39032,16 @@ var public_openapi_default = {
                         default: true,
                         type: "boolean"
                       },
+                      issueSemantics: {
+                        anyOf: [
+                          {
+                            $ref: "#/components/schemas/PublicDetectionIssueSemanticsInput"
+                          },
+                          {
+                            type: "null"
+                          }
+                        ]
+                      },
                       runOn: {
                         default: {
                           frequency: "trace"
@@ -39593,6 +39784,16 @@ var public_openapi_default = {
                             isActive: {
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             slug: {
                               type: "string",
                               minLength: 1,
@@ -39777,6 +39978,16 @@ var public_openapi_default = {
                             isActive: {
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             slug: {
                               type: "string",
                               minLength: 1,
@@ -39990,6 +40201,16 @@ var public_openapi_default = {
                             isActive: {
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             slug: {
                               type: "string",
                               minLength: 1,
@@ -40881,6 +41102,16 @@ var public_openapi_default = {
                             isActive: {
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             slug: {
                               type: "string",
                               minLength: 1,
@@ -41071,6 +41302,16 @@ var public_openapi_default = {
                             isActive: {
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             slug: {
                               type: "string",
                               minLength: 1,
@@ -41292,6 +41533,16 @@ var public_openapi_default = {
                             isActive: {
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             slug: {
                               type: "string",
                               minLength: 1,
@@ -41504,6 +41755,16 @@ var public_openapi_default = {
                             isActive: {
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             slug: {
                               type: "string",
                               minLength: 1,
@@ -42612,83 +42873,7 @@ var public_openapi_default = {
                   type: "object",
                   properties: {
                     data: {
-                      type: "object",
-                      properties: {
-                        createdAt: {
-                          type: "string",
-                          format: "date-time",
-                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
-                        },
-                        displayName: {
-                          type: "string",
-                          minLength: 1,
-                          maxLength: 255
-                        },
-                        groupId: {
-                          type: "string",
-                          format: "uuid",
-                          pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
-                        },
-                        groupName: {
-                          anyOf: [
-                            {
-                              type: "string",
-                              maxLength: 255
-                            },
-                            {
-                              type: "null"
-                            }
-                          ]
-                        },
-                        id: {
-                          type: "string",
-                          format: "uuid",
-                          pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
-                        },
-                        isActive: {
-                          type: "boolean"
-                        },
-                        slug: {
-                          type: "string",
-                          minLength: 1,
-                          maxLength: 100
-                        },
-                        threshold: {
-                          type: "number",
-                          minimum: 0,
-                          maximum: 1
-                        },
-                        type: {
-                          type: "string",
-                          enum: [
-                            "classifier",
-                            "regex",
-                            "conditional",
-                            "pii",
-                            "custom_trained",
-                            "code",
-                            "trace_rules"
-                          ]
-                        },
-                        updatedAt: {
-                          type: "string",
-                          format: "date-time",
-                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
-                        }
-                      },
-                      required: [
-                        "createdAt",
-                        "displayName",
-                        "groupId",
-                        "groupName",
-                        "id",
-                        "isActive",
-                        "slug",
-                        "threshold",
-                        "type",
-                        "updatedAt"
-                      ],
-                      additionalProperties: false
+                      $ref: "#/components/schemas/PublicDetectionSummary"
                     },
                     requestId: {
                       type: "string",
@@ -43973,6 +44158,16 @@ var public_openapi_default = {
                     format: "uuid",
                     pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
                   },
+                  issueSemantics: {
+                    anyOf: [
+                      {
+                        $ref: "#/components/schemas/PublicDetectionIssueSemanticsInput"
+                      },
+                      {
+                        type: "null"
+                      }
+                    ]
+                  },
                   runOn: {
                     type: "object",
                     properties: {
@@ -45273,83 +45468,7 @@ var public_openapi_default = {
                   type: "object",
                   properties: {
                     data: {
-                      type: "object",
-                      properties: {
-                        createdAt: {
-                          type: "string",
-                          format: "date-time",
-                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
-                        },
-                        displayName: {
-                          type: "string",
-                          minLength: 1,
-                          maxLength: 255
-                        },
-                        groupId: {
-                          type: "string",
-                          format: "uuid",
-                          pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
-                        },
-                        groupName: {
-                          anyOf: [
-                            {
-                              type: "string",
-                              maxLength: 255
-                            },
-                            {
-                              type: "null"
-                            }
-                          ]
-                        },
-                        id: {
-                          type: "string",
-                          format: "uuid",
-                          pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
-                        },
-                        isActive: {
-                          type: "boolean"
-                        },
-                        slug: {
-                          type: "string",
-                          minLength: 1,
-                          maxLength: 100
-                        },
-                        threshold: {
-                          type: "number",
-                          minimum: 0,
-                          maximum: 1
-                        },
-                        type: {
-                          type: "string",
-                          enum: [
-                            "classifier",
-                            "regex",
-                            "conditional",
-                            "pii",
-                            "custom_trained",
-                            "code",
-                            "trace_rules"
-                          ]
-                        },
-                        updatedAt: {
-                          type: "string",
-                          format: "date-time",
-                          pattern: "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
-                        }
-                      },
-                      required: [
-                        "createdAt",
-                        "displayName",
-                        "groupId",
-                        "groupName",
-                        "id",
-                        "isActive",
-                        "slug",
-                        "threshold",
-                        "type",
-                        "updatedAt"
-                      ],
-                      additionalProperties: false
+                      $ref: "#/components/schemas/PublicDetectionSummary"
                     },
                     requestId: {
                       type: "string",
@@ -46461,6 +46580,16 @@ var public_openapi_default = {
                               default: true,
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             runOn: {
                               default: {
                                 frequency: "trace"
@@ -46598,6 +46727,16 @@ var public_openapi_default = {
                               default: true,
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             runOn: {
                               default: {
                                 frequency: "trace"
@@ -46763,6 +46902,16 @@ var public_openapi_default = {
                               default: true,
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             runOn: {
                               default: {
                                 frequency: "trace"
@@ -47602,6 +47751,16 @@ var public_openapi_default = {
                               default: true,
                               type: "boolean"
                             },
+                            issueSemantics: {
+                              anyOf: [
+                                {
+                                  $ref: "#/components/schemas/PublicDetectionIssueSemanticsOutput"
+                                },
+                                {
+                                  type: "null"
+                                }
+                              ]
+                            },
                             runOn: {
                               default: {
                                 frequency: "trace"
@@ -177002,7 +177161,18 @@ var HUMAN_CLI_OAUTH_SCOPES = Object.freeze(
   )
 );
 var ALLOWED_SCOPES = new Set(HUMAN_CLI_OAUTH_SCOPES);
-var DEFAULT_CLI_OAUTH_SCOPES = HUMAN_CLI_OAUTH_SCOPES;
+var DEFAULT_CLI_OAUTH_SCOPES = Object.freeze([
+  "context:read",
+  "organization:read",
+  "billing:read",
+  "profile:read",
+  "observability:read",
+  "evaluation:read",
+  "configuration:read",
+  "sharing:read",
+  "access:read",
+  "offline_access"
+]);
 var deviceAuthorizationSchema = z.object({
   device_code: z.string().regex(DEVICE_CODE),
   expires_in: z.number().int().min(60).max(1800),
@@ -177272,7 +177442,10 @@ function browserError(code, exitCode2 = ExitCode.Authentication) {
   return new CliError({ code, exitCode: exitCode2 });
 }
 function closeServer(server) {
-  return new Promise((resolve) => server.close(() => resolve()));
+  return new Promise((resolve) => {
+    server.close(() => resolve());
+    server.closeAllConnections();
+  });
 }
 var BrowserOAuthLogin = class {
   #fetch;
@@ -177431,10 +177604,10 @@ import { Command, CommanderError, Option } from "commander";
 // package.json
 var package_default = {
   name: "neatlogs-cli",
-  version: "0.1.0-team-test.5",
+  version: "0.1.0",
   description: "Non-interactive CLI for the NeatLogs public API",
   homepage: "https://github.com/neatlogs/neatlogs-app#readme",
-  license: "UNLICENSED",
+  license: "MIT",
   repository: {
     type: "git",
     url: "git+https://github.com/neatlogs/neatlogs-app.git",
@@ -177448,6 +177621,7 @@ var package_default = {
     "README.md",
     "SECURITY.md",
     "CHANGELOG.md",
+    "LICENSE",
     "docs"
   ],
   type: "module",
@@ -177919,6 +178093,8 @@ function isJsonLineWithinByteBudget(value, maximumBytes) {
 
 // src/handler-builder.ts
 var PUBLIC_RESPONSE_COMPONENT_NAMES = [
+  "PublicDetectionIssueSemanticsOutput",
+  "PublicDetectionSummary",
   "PublicSavedFilter",
   "PublicSavedFilterEnvelope",
   "PublicSavedFilterGroup1",
@@ -183639,9 +183815,15 @@ function isOpaqueId(value, maxLength = 255) {
 
 // src/commands/shared.ts
 var automaticallyGeneratedMutationKeys = /* @__PURE__ */ new Set();
-function invalidArguments() {
+function invalidArguments(error, field) {
   throw new CliError({
     code: "INVALID_ARGUMENTS",
+    detail: "Check the listed fields and run this command with --help for usage.",
+    errors: error?.issues.slice(0, 20).map((issue) => ({
+      code: issue.code,
+      message: "Invalid value; see command help for the expected format and bounds.",
+      path: [...field ? [field] : [], ...issue.path].map(String).join(".")
+    })),
     exitCode: ExitCode.Usage
   });
 }
@@ -183661,7 +183843,7 @@ function exactUuidConfirmation(confirmation, target) {
 }
 function uuid3(value) {
   const parsed = z20.string().uuid().transform((id) => id.toLowerCase()).safeParse(value);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return parsed.data;
 }
 function mutationKey(value) {
@@ -183677,12 +183859,12 @@ function postgresUuid(value) {
   const parsed = z20.string().regex(
     /^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$/
   ).transform((id) => id.toLowerCase()).safeParse(value);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return parsed.data;
 }
 function opaqueId(value, maxLength = 255) {
   const parsed = z20.string().refine((candidate) => isOpaqueId(candidate, maxLength)).safeParse(value);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return parsed.data;
 }
 
@@ -183709,7 +183891,7 @@ function registerAccountCommands(program, executeOnline, readJsonBody) {
   profile.command("update").option("--name <name>", "public display name").option("--bio <bio>", "public biography").option("--clear-bio", "clear the public biography").option("--timezone <iana>", "IANA timezone").option("--clear-timezone", "clear the timezone").option("--language <language>", "language code").action(
     async (options) => {
       const parsed = profileUpdateOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const body = {};
       if (parsed.data.name !== void 0) body.name = parsed.data.name;
       if (parsed.data.bio !== void 0) body.bio = parsed.data.bio;
@@ -183793,7 +183975,7 @@ function registerAlertCommands(program, executeOnline, readJsonBody = async () =
   alerts.command("test").description("dry-run or deliver a bounded alert test").argument("<alert-rule-id>").requiredOption("--mode <mode>", "dry-run or deliver").option("--idempotency-key <key>", "stable UUID for retrying this mutation").action(
     async (alertRuleId, options) => {
       const mode = testModeSchema.safeParse(options.mode);
-      if (!mode.success) invalidArguments();
+      if (!mode.success) invalidArguments(mode.error);
       await executeOnline(testAlertRuleHandler, "curated", {
         body: { mode: mode.data === "dry-run" ? "dry_run" : "deliver" },
         idempotencyKey: mutationKey(options.idempotencyKey),
@@ -183850,7 +184032,7 @@ function registerAlertCommands(program, executeOnline, readJsonBody = async () =
   alerts.command("changes").description("list privacy-safe alert rule changes").argument("<alert-rule-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (alertRuleId, options) => {
       const parsed = changesOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0) {
@@ -183865,7 +184047,7 @@ function registerAlertCommands(program, executeOnline, readJsonBody = async () =
   alerts.command("history").description("list alert fire history").option("--alert-rule-id <uuid>", "filter by alert rule").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--end-time <timestamp>", "inclusive ISO-8601 end time").option("--limit <number>", "page size (1-100)").option("--start-time <timestamp>", "inclusive ISO-8601 start time").action(
     async (options) => {
       const parsed = historyOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.alertRuleId)
         query.alertRuleId = parsed.data.alertRuleId;
@@ -183880,7 +184062,7 @@ function registerAlertCommands(program, executeOnline, readJsonBody = async () =
   alerts.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--enabled <state>", "all, true, or false").option("--limit <number>", "page size (1-100)").option("--rule-type <type>", "alert rule type").action(
     async (options) => {
       const parsed = listOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.enabled) query.enabled = parsed.data.enabled;
@@ -183954,7 +184136,7 @@ var savedViewFields = [
 ];
 function parseSavedView(body) {
   const parsed = savedViewBody.safeParse(boundedBody(body));
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return {
     filters: savedViewFields.flatMap(([sourceField, field, id]) => {
       const values = parsed.data.filters[sourceField];
@@ -183972,7 +184154,7 @@ function parseBase(options) {
     to: options.to,
     workflow: options.workflow
   });
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   const filters = {
     ...parsed.data.detection ? { detections: parsed.data.detection } : {},
     ...parsed.data.session ? { sessionIds: parsed.data.session } : {},
@@ -183991,7 +184173,7 @@ function boundedBody(body) {
   return body;
 }
 function scopeOptions(command) {
-  return command.requiredOption("--from <timestamp>", "inclusive RFC 3339 start").requiredOption("--to <timestamp>", "exclusive RFC 3339 end").option("--workflow <names>", "comma-separated workflow names").option("--session <ids>", "comma-separated session IDs").option("--status <values>", "comma-separated OK,ERROR values").option("--detection <names>", "comma-separated detection names");
+  return command.requiredOption("--from <timestamp>", "inclusive RFC 3339 start (required)").requiredOption("--to <timestamp>", "exclusive RFC 3339 end (required)").option("--workflow <names>", "comma-separated workflow names").option("--session <ids>", "comma-separated session IDs").option("--status <values>", "comma-separated OK,ERROR values").option("--detection <names>", "comma-separated detection names");
 }
 function registerAnalyticsCommands(program, executeOnline, readJsonBody, readExportRequest) {
   const analytics = program.command("analytics").description("bounded trace analytics");
@@ -184002,7 +184184,7 @@ function registerAnalyticsCommands(program, executeOnline, readJsonBody, readExp
     const parsed = analyticsExportRequestSchema.safeParse(
       await readExportRequest()
     );
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(exportAnalyticsHandler, "curated", {
       body: parsed.data
     });
@@ -184048,8 +184230,9 @@ function registerAnalyticsCommands(program, executeOnline, readJsonBody, readExp
     async (options) => {
       const field = z23.enum(["workflowName", "detections", "sessionId", "status"]).safeParse(options.field);
       const limit2 = z23.coerce.number().int().min(1).max(50).safeParse(options.limit);
-      if (!(field.success && limit2.success) || (options.search?.length ?? 0) > 100)
-        invalidArguments();
+      if (!field.success) invalidArguments(field.error, "field");
+      if (!limit2.success) invalidArguments(limit2.error, "limit");
+      if ((options.search?.length ?? 0) > 100) invalidArguments();
       const body = boundedBody({
         ...parseBase(options),
         fields: [field.data],
@@ -184064,7 +184247,7 @@ function registerAnalyticsCommands(program, executeOnline, readJsonBody, readExp
   scopeOptions(analytics.command("chart")).requiredOption("--granularity <value>", "minute_5, hour, or day").option("--timezone <iana>", "IANA timezone", "UTC").action(
     async (options) => {
       const granularity = z23.enum(["minute_5", "hour", "day"]).safeParse(options.granularity);
-      if (!granularity.success) invalidArguments();
+      if (!granularity.success) invalidArguments(granularity.error);
       const body = boundedBody({
         ...parseBase(options),
         granularity: granularity.data,
@@ -184254,7 +184437,7 @@ function registerBillingCommands(program, executeOnline) {
   ).option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (organizationId, options) => {
       const parsed = alertOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.state) query.state = parsed.data.state;
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
@@ -184326,7 +184509,7 @@ function registerCommentCommands(program, executeOnline, readContent = async ()
   );
   comments.command("list").requiredOption("--trace <trace-id>", "opaque trace ID").option("--resolved <boolean>", "true or false").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-50)").action(async (options) => {
     const parsed = listOptionsSchema2.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(listCommentThreadsHandler, "curated", {
       pathParameters: { traceId: opaqueId(parsed.data.trace) },
       query: {
@@ -184338,7 +184521,7 @@ function registerCommentCommands(program, executeOnline, readContent = async ()
   });
   comments.command("get").argument("<thread-id>").requiredOption("--trace <trace-id>", "opaque trace ID").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "message page size (1-50)").action(async (threadId, options) => {
     const parsed = getOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(getCommentThreadHandler, "curated", {
       pathParameters: {
         threadId: uuid3(threadId),
@@ -184605,7 +184788,7 @@ var migrationReplacementOptions = lifecycleOptions.extend({
 function addListCommand(command, handler2, executeOnline) {
   command.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-50)").action(async (options) => {
     const parsed = listOptions.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = {};
     if (parsed.data.cursor) query.cursor = parsed.data.cursor;
     if (parsed.data.limit !== void 0) {
@@ -184650,8 +184833,8 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
   ).option("--idempotency-key <key>", "stable UUID for retrying issuance").action(async (migrationId, options) => {
     const id = uuid3(migrationId);
     const parsed = migrationReplacementOptions.safeParse(options);
-    if (!parsed.success || uuid3(parsed.data.confirm) !== id)
-      invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
+    if (uuid3(parsed.data.confirm) !== id) invalidArguments();
     const idempotencyKey = mutationKey(parsed.data.idempotencyKey);
     const replayKey = randomBytes(32).toString("base64url");
     const response = await executeOnline(
@@ -184681,8 +184864,8 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
     migrations.command(name).argument("<migration-id>").requiredOption("--confirm <migration-id>", "repeat the migration UUID").option("--idempotency-key <key>", "stable UUID for retrying the action").action(async (migrationId, options) => {
       const id = uuid3(migrationId);
       const parsed = lifecycleOptions.safeParse(options);
-      if (!parsed.success || uuid3(parsed.data.confirm) !== id)
-        invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
+      if (uuid3(parsed.data.confirm) !== id) invalidArguments();
       await executeOnline(handler2, "curated", {
         body: { confirmation: id },
         idempotencyKey: mutationKey(parsed.data.idempotencyKey),
@@ -184701,7 +184884,7 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
   ).option("--idempotency-key <key>", "stable UUID for retrying the action").action(async (migrationId, options) => {
     const id = uuid3(migrationId);
     const parsed = lifecycleOptions.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(revokeCredentialMigrationSourceHandler, "curated", {
       body: { confirmation: uuid3(parsed.data.confirm) },
       idempotencyKey: mutationKey(parsed.data.idempotencyKey),
@@ -184720,7 +184903,7 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
     []
   ).option("--expires-in-days <days>").option("--rate-limit <per-minute>").option("--idempotency-key <key>").action(async (options) => {
     const parsed = createApiKeyOptions.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const idempotencyKey = mutationKey(parsed.data.idempotencyKey);
     const replayKey = randomBytes(32).toString("base64url");
     const response = await executeOnline(createApiKeyHandler, "none", {
@@ -184752,8 +184935,8 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
   apiKeys.command("rotate").argument("<credential-id>").requiredOption("--confirm <credential-id>").option("--idempotency-key <key>").action(async (credentialId, options) => {
     const id = uuid3(credentialId);
     const parsed = lifecycleOptions.safeParse(options);
-    if (!parsed.success || uuid3(parsed.data.confirm) !== id)
-      invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
+    if (uuid3(parsed.data.confirm) !== id) invalidArguments();
     const idempotencyKey = mutationKey(parsed.data.idempotencyKey);
     const replayKey = randomBytes(32).toString("base64url");
     const response = await executeOnline(rotateApiKeyHandler, "none", {
@@ -184778,8 +184961,8 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
   apiKeys.command("revoke").argument("<credential-id>").requiredOption("--confirm <credential-id>").option("--idempotency-key <key>").action(async (credentialId, options) => {
     const id = uuid3(credentialId);
     const parsed = lifecycleOptions.safeParse(options);
-    if (!parsed.success || uuid3(parsed.data.confirm) !== id)
-      invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
+    if (uuid3(parsed.data.confirm) !== id) invalidArguments();
     await executeOnline(revokeApiKeyHandler, "curated", {
       body: { confirmation: id },
       idempotencyKey: mutationKey(parsed.data.idempotencyKey),
@@ -184790,7 +184973,7 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
   addListCommand(ingest, listIngestCredentialsHandler, executeOnline);
   ingest.command("create").requiredOption("--name <name>").option("--expires-in-days <days>").option("--idempotency-key <key>").action(async (options) => {
     const parsed = createIngestOptions.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const idempotencyKey = mutationKey(parsed.data.idempotencyKey);
     const replayKey = randomBytes(32).toString("base64url");
     const response = await executeOnline(
@@ -184822,8 +185005,8 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
   ingest.command("rotate").argument("<credential-id>").requiredOption("--confirm <credential-id>").option("--idempotency-key <key>").action(async (credentialId, options) => {
     const id = uuid3(credentialId);
     const parsed = lifecycleOptions.safeParse(options);
-    if (!parsed.success || uuid3(parsed.data.confirm) !== id)
-      invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
+    if (uuid3(parsed.data.confirm) !== id) invalidArguments();
     const idempotencyKey = mutationKey(parsed.data.idempotencyKey);
     const replayKey = randomBytes(32).toString("base64url");
     const response = await executeOnline(
@@ -184852,8 +185035,8 @@ function registerCredentialCommands(program, executeOnline, renderSecret, resolv
   ingest.command("revoke").argument("<credential-id>").requiredOption("--confirm <credential-id>").option("--idempotency-key <key>").action(async (credentialId, options) => {
     const id = uuid3(credentialId);
     const parsed = lifecycleOptions.safeParse(options);
-    if (!parsed.success || uuid3(parsed.data.confirm) !== id)
-      invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
+    if (uuid3(parsed.data.confirm) !== id) invalidArguments();
     await executeOnline(revokeIngestCredentialHandler, "curated", {
       body: { confirmation: id },
       idempotencyKey: mutationKey(parsed.data.idempotencyKey),
@@ -184891,13 +185074,15 @@ var jsonObjectSchema = z29.record(z29.string(), z29.unknown());
 var batchFieldsSchema = z29.array(z29.string().min(1).max(1024)).max(128);
 function jsonValue(value, schema, maxBytes) {
   if (Buffer.byteLength(value, "utf8") > maxBytes) invalidArguments();
+  let decoded;
   try {
-    const parsed = schema.safeParse(JSON.parse(value));
-    if (!parsed.success) invalidArguments();
-    return parsed.data;
+    decoded = JSON.parse(value);
   } catch {
     invalidArguments();
   }
+  const parsed = schema.safeParse(decoded);
+  if (!parsed.success) invalidArguments(parsed.error);
+  return parsed.data;
 }
 function registerDetectionCommands(program, executeOnline, readPreviewRequest, readComputeRequest) {
   const detections = program.command("detections").description("detection catalog commands");
@@ -184908,7 +185093,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
     const parsed = detectionPreviewRequestSchema.safeParse(
       await readPreviewRequest()
     );
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(previewDetectionHandler, "curated", {
       body: parsed.data
     });
@@ -184920,7 +185105,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
     const parsed = detectionGenerateRequestSchema.safeParse(
       await readComputeRequest()
     );
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(generateDetectionHandler, "curated", {
       body: parsed.data
     });
@@ -184932,7 +185117,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
     const parsed = detectionSuggestionRunRequestSchema.safeParse(
       await readComputeRequest()
     );
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(createDetectionSuggestionRunHandler, "curated", {
       body: parsed.data,
       idempotencyKey: mutationKey(options.idempotencyKey)
@@ -184959,7 +185144,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
       cursor: z29.string().min(1).max(1024).optional(),
       limit: z29.coerce.number().int().min(1).max(50).optional()
     }).strict().safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = {};
     if (parsed.data.cursor) query.cursor = parsed.data.cursor;
     if (parsed.data.limit !== void 0)
@@ -184990,7 +185175,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
   detections.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--group <uuid>", "filter by detection group UUID").option("--limit <number>", "page size (1-100)").option("--status <status>", "active, paused, disabled, inactive, or all").action(
     async (options) => {
       const parsed = detectionListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.group) query.groupId = parsed.data.group;
@@ -185010,8 +185195,9 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
       const type = detectionTypeSchema.safeParse(options.type);
       const name = z29.string().trim().min(1).max(255).safeParse(options.name);
       const threshold = z29.coerce.number().min(0).max(1).optional().safeParse(options.threshold);
-      if (!(type.success && name.success && threshold.success))
-        invalidArguments();
+      if (!type.success) invalidArguments(type.error, "type");
+      if (!name.success) invalidArguments(name.error, "name");
+      if (!threshold.success) invalidArguments(threshold.error, "threshold");
       const body = {
         config: jsonValue(options.config, jsonObjectSchema, 512 * 1024),
         displayName: name.data,
@@ -185048,7 +185234,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
       if (options.group !== void 0) body.groupId = uuid3(options.group);
       if (options.name !== void 0) {
         const name = z29.string().trim().min(1).max(255).safeParse(options.name);
-        if (!name.success) invalidArguments();
+        if (!name.success) invalidArguments(name.error);
         body.displayName = name.data;
       }
       if (options.clearDescription) body.description = null;
@@ -185056,7 +185242,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
         body.description = options.description;
       if (options.threshold !== void 0) {
         const threshold = z29.coerce.number().min(0).max(1).safeParse(options.threshold);
-        if (!threshold.success) invalidArguments();
+        if (!threshold.success) invalidArguments(threshold.error);
         body.threshold = threshold.data;
       }
       if (options.config !== void 0) {
@@ -185112,7 +185298,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
   detections.command("history").argument("<detection-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (detectionId, options) => {
       const parsed = detectionHitOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0) {
@@ -185127,7 +185313,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
   detections.command("hits").argument("<detection-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (detectionId, options) => {
       const parsed = detectionHitOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0) {
@@ -185142,7 +185328,7 @@ function registerDetectionCommands(program, executeOnline, readPreviewRequest, r
   detections.command("trends").argument("<detection-id>").requiredOption("--from <timestamp>", "inclusive UTC start timestamp").requiredOption("--to <timestamp>", "exclusive UTC end timestamp").option("--granularity <value>", "hour, day, or week", "day").action(
     async (detectionId, options) => {
       const parsed = detectionTrendOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(getDetectionTrendsHandler, "curated", {
         pathParameters: { detectionId: uuid3(detectionId) },
         query: parsed.data
@@ -185275,7 +185461,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
   ).action(
     async (evaluationId, options) => {
       const parsed = evaluationExportOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {
         from: parsed.data.from,
         to: parsed.data.to
@@ -185308,7 +185494,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
         limit: z30.coerce.number().int().min(1).max(100).optional(),
         status: z30.enum(["draft", "active", "completed", "archived", "all"]).optional()
       }).strict().safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -185335,7 +185521,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
       const batchSchedule = publicEvaluationDurationSchema.safeParse(
         options.batchSchedule
       );
-      if (!batchSchedule.success) invalidArguments();
+      if (!batchSchedule.success) invalidArguments(batchSchedule.error);
       await executeOnline(updateEvaluationHandler, "curated", {
         body: { batchSchedule: batchSchedule.data },
         idempotencyKey: mutationKey(options.idempotencyKey),
@@ -185346,7 +185532,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
   batches.command("list").argument("<evaluation-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (evaluationId, options) => {
       const parsed = evaluationItemListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -185384,7 +185570,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
   ).action(
     async (evaluationId, batchId, options) => {
       const parsed = evaluationBatchReportExportOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const request = {
         pathParameters: {
           batchId: uuid3(batchId),
@@ -185410,7 +185596,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
   batches.command("cube").argument("<evaluation-id>").argument("<batch-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (evaluationId, batchId, options) => {
       const parsed = evaluationItemListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -185442,7 +185628,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
         maxAssignments: options.maxAssignments,
         maxItems: options.maxItems
       });
-      if (!body.success) invalidArguments();
+      if (!body.success) invalidArguments(body.error);
       await executeOnline(dispatchEvaluationBatchHandler, "curated", {
         body: body.data,
         idempotencyKey: mutationKey(options.idempotencyKey),
@@ -185473,7 +185659,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
   evaluations.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").option("--status <status>", "draft, active, completed, archived, or all").action(
     async (options) => {
       const parsed = evaluationListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -185484,14 +185670,14 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
   );
   evaluations.command("stats").option("--period <period>", "24h, 7d, 30d, 90d, or all").action(async (options) => {
     const parsed = evaluationStatsOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = {};
     if (parsed.data.period) query.period = parsed.data.period;
     await executeOnline(getEvaluationStatsHandler, "curated", { query });
   });
   evaluations.command("cohorts").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(async (options) => {
     const parsed = evaluationItemListOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = {};
     if (parsed.data.cursor) query.cursor = parsed.data.cursor;
     if (parsed.data.limit !== void 0)
@@ -185501,7 +185687,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
   evaluations.command("responses").argument("<evaluation-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (evaluationId, options) => {
       const parsed = evaluationItemListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -185545,7 +185731,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
         assignMe: options.assignMe,
         reviewDuration: options.reviewDuration
       });
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(launchEvaluationHandler, "curated", {
         body: parsed.data,
         idempotencyKey: mutationKey(options.idempotencyKey),
@@ -185632,7 +185818,7 @@ function registerEvaluationCommands(program, executeOnline, readJsonBody) {
   items.command("list").argument("<evaluation-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (evaluationId, options) => {
       const parsed = evaluationItemListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -185727,7 +185913,7 @@ function registerEvaluatorCommands(program, executeOnline, readJsonBody, readRun
       const parsed = evaluatorRunRequestSchema.safeParse(
         await readRunRequest()
       );
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(createEvaluatorRunHandler, "curated", {
         body: parsed.data,
         idempotencyKey: mutationKey(options.idempotencyKey),
@@ -185767,7 +185953,7 @@ function registerEvaluatorCommands(program, executeOnline, readJsonBody, readRun
     const parsed = evaluatorPreviewRequestSchema.safeParse(
       await readComputeRequest()
     );
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(previewEvaluatorHandler, "curated", {
       body: parsed.data
     });
@@ -185779,7 +185965,7 @@ function registerEvaluatorCommands(program, executeOnline, readJsonBody, readRun
     const parsed = evaluatorPlaygroundRequestSchema.safeParse(
       await readComputeRequest()
     );
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(playgroundEvaluatorHandler, "curated", {
       body: parsed.data,
       pathParameters: { evaluatorId: uuid3(evaluatorId) }
@@ -185788,7 +185974,7 @@ function registerEvaluatorCommands(program, executeOnline, readJsonBody, readRun
   evaluators.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").option("--type <type>", "llm_judge or agent_judge").option("--include-archived", "include archived evaluator definitions").action(
     async (options) => {
       const parsed = listOptionsSchema3.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.includeArchived) query.includeArchived = "true";
@@ -185811,7 +185997,7 @@ function registerEvaluatorCommands(program, executeOnline, readJsonBody, readRun
   evaluators.command("runs").argument("<evaluator-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (evaluatorId, options) => {
       const parsed = runListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -185887,7 +186073,7 @@ var traceOptionSchema = z32.object({ trace: z32.string().min(1).max(255) }).stri
 var bulkRequestSchema = z32.object({ items: z32.array(z32.unknown()).min(1).max(100) }).strict();
 function pageInput(options) {
   const parsed = pageOptionsSchema.safeParse(options);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return {
     pathParameters: { traceId: opaqueId(parsed.data.trace) },
     query: {
@@ -185898,7 +186084,7 @@ function pageInput(options) {
 }
 function traceId(options) {
   const parsed = traceOptionSchema.safeParse(options);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return opaqueId(parsed.data.trace);
 }
 function registerFeedbackCommands(program, executeOnline, readJsonBody = async () => invalidArguments(), readBulkRequest = async () => invalidArguments()) {
@@ -185908,7 +186094,7 @@ function registerFeedbackCommands(program, executeOnline, readJsonBody = async (
     "read one bounded feedback bulk request from stdin"
   ).option("--idempotency-key <key>", "stable UUID for retrying this mutation").action(async (options) => {
     const parsed = bulkRequestSchema.safeParse(await readBulkRequest());
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const response = await executeOnline(
       bulkMutateFeedbackHandler,
       "curated",
@@ -186031,7 +186217,7 @@ function registerFilterCommands(program, executeOnline, readJsonBody) {
   const filters = program.command("filters").description("personal saved trace-filter commands");
   filters.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(async (options) => {
     const parsed = listOptionsSchema4.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = {};
     if (parsed.data.cursor) query.cursor = parsed.data.cursor;
     if (parsed.data.limit !== void 0)
@@ -186088,7 +186274,7 @@ function registerDetectionGroupCommands(program, executeOnline) {
   const groups = program.command("groups").description("detection group catalog commands");
   groups.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(async (options) => {
     const parsed = groupListOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = {};
     if (parsed.data.cursor) query.cursor = parsed.data.cursor;
     if (parsed.data.limit !== void 0) {
@@ -186109,7 +186295,9 @@ function registerDetectionGroupCommands(program, executeOnline) {
     const idempotencyKey = idempotencyKeySchema.safeParse(
       options.idempotencyKey
     );
-    if (!(name.success && idempotencyKey.success)) invalidArguments();
+    if (!name.success) invalidArguments(name.error, "name");
+    if (!idempotencyKey.success)
+      invalidArguments(idempotencyKey.error, "idempotencyKey");
     await executeOnline(createDetectionGroupHandler, "curated", {
       body: { name: name.data },
       idempotencyKey: mutationKey(idempotencyKey.data)
@@ -186125,7 +186313,9 @@ function registerDetectionGroupCommands(program, executeOnline) {
       const idempotencyKey = idempotencyKeySchema.safeParse(
         options.idempotencyKey
       );
-      if (!(name.success && idempotencyKey.success)) invalidArguments();
+      if (!name.success) invalidArguments(name.error, "name");
+      if (!idempotencyKey.success)
+        invalidArguments(idempotencyKey.error, "idempotencyKey");
       await executeOnline(updateDetectionGroupHandler, "curated", {
         body: { name: name.data },
         idempotencyKey: mutationKey(idempotencyKey.data),
@@ -186146,7 +186336,9 @@ function registerDetectionGroupCommands(program, executeOnline) {
       const idempotencyKey = idempotencyKeySchema.safeParse(
         options.idempotencyKey
       );
-      if (confirmation !== parsedGroupId || !idempotencyKey.success) {
+      if (!idempotencyKey.success)
+        invalidArguments(idempotencyKey.error, "idempotencyKey");
+      if (confirmation !== parsedGroupId) {
         invalidArguments();
       }
       await executeOnline(deleteDetectionGroupHandler, "curated", {
@@ -186708,6 +186900,10 @@ async function executePublicTransport(input) {
 }
 async function decodePublicResponse(response, handler2, input, prepared) {
   const generatedKey = prepared.generatedIdempotencyKey;
+  const responseRequestId = safeString(
+    response.headers.get("x-request-id"),
+    SAFE_REQUEST_ID
+  );
   if (response.status >= 300 && response.status < 400) {
     throw errorWithGeneratedIdempotencyKey(
       new CliError({
@@ -186740,7 +186936,9 @@ async function decodePublicResponse(response, handler2, input, prepared) {
     throw errorWithGeneratedIdempotencyKey(
       new CliError({
         code: "INVALID_RESPONSE",
-        exitCode: ExitCode.ServerOrContract
+        exitCode: ExitCode.ServerOrContract,
+        instance: responseRequestId ? handler2.path : void 0,
+        requestId: responseRequestId
       }),
       generatedKey
     );
@@ -186750,7 +186948,9 @@ async function decodePublicResponse(response, handler2, input, prepared) {
     throw errorWithGeneratedIdempotencyKey(
       new CliError({
         code: "INVALID_RESPONSE",
-        exitCode: ExitCode.ServerOrContract
+        exitCode: ExitCode.ServerOrContract,
+        instance: responseRequestId ? handler2.path : void 0,
+        requestId: responseRequestId
       }),
       generatedKey
     );
@@ -187330,7 +187530,7 @@ function registerGuestCommands(program, dependencies) {
   ).option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-25)").action(
     async (options) => {
       const parsedOptions = contextOptions.safeParse(options);
-      if (!parsedOptions.success) invalidArguments();
+      if (!parsedOptions.success) invalidArguments(parsedOptions.error);
       const client = clientFor(dependencies);
       const request = await parseGuestContextRequest(dependencies.stdin);
       const query = {};
@@ -187385,7 +187585,7 @@ var listOptionsSchema5 = z38.object({
 }).strict();
 function listQuery(options) {
   const parsed = listOptionsSchema5.safeParse(options);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   const query = {};
   if (parsed.data.cursor) query.cursor = parsed.data.cursor;
   if (parsed.data.limit !== void 0) query.limit = String(parsed.data.limit);
@@ -187538,12 +187738,12 @@ var issuePageSchema = z39.object({
 }).strict();
 function provider(value) {
   const parsed = providerSchema.safeParse(value);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return parsed.data;
 }
 function issuePage(options) {
   const parsed = issuePageSchema.safeParse(options);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return {
     ...parsed.data.cursor ? { cursor: parsed.data.cursor } : {},
     ...parsed.data.limit === void 0 ? {} : { limit: String(parsed.data.limit) }
@@ -187560,7 +187760,7 @@ function registerIntegrationCommands(program, executeOnline, readJsonBody = asyn
   integrations.command("test").argument("<provider-id>").option("--idempotency-key <key>", "stable UUID for retrying this test").action(
     async (providerId, options) => {
       const parsed = testedProviderSchema.safeParse(providerId);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(testIntegrationProviderHandler, "curated", {
         body: {},
         idempotencyKey: mutationKey(options.idempotencyKey),
@@ -187571,7 +187771,7 @@ function registerIntegrationCommands(program, executeOnline, readJsonBody = asyn
   integrations.command("oauth-start").argument("<provider-id>").option("--idempotency-key <key>", "stable UUID for retrying this handoff").action(
     async (providerId, options) => {
       const parsed = oauthProviderSchema.safeParse(providerId);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(createIntegrationOAuthHandoffHandler, "curated", {
         body: {},
         idempotencyKey: mutationKey(options.idempotencyKey),
@@ -187581,7 +187781,7 @@ function registerIntegrationCommands(program, executeOnline, readJsonBody = asyn
   );
   integrations.command("oauth-status").argument("<provider-id>").argument("<handoff-id>").action(async (providerId, handoffId) => {
     const parsed = oauthProviderSchema.safeParse(providerId);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(getIntegrationOAuthHandoffHandler, "curated", {
       pathParameters: {
         handoffId: uuid3(handoffId),
@@ -187602,7 +187802,7 @@ function registerIntegrationCommands(program, executeOnline, readJsonBody = asyn
     ).action(
       async (providerId, targetIdOrOptions, possibleOptions) => {
         const parsedProvider = issueProviderSchema.safeParse(providerId);
-        if (!parsedProvider.success) invalidArguments();
+        if (!parsedProvider.success) invalidArguments(parsedProvider.error);
         const hasTarget = name !== "issue-targets";
         const options = hasTarget ? possibleOptions : targetIdOrOptions;
         const pathParameters = {
@@ -187610,7 +187810,7 @@ function registerIntegrationCommands(program, executeOnline, readJsonBody = asyn
         };
         if (hasTarget) {
           const parsedTarget = issueTargetSchema.safeParse(targetIdOrOptions);
-          if (!parsedTarget.success) invalidArguments();
+          if (!parsedTarget.success) invalidArguments(parsedTarget.error);
           pathParameters.targetId = parsedTarget.data;
         }
         await executeOnline(handler2, "curated", {
@@ -187626,7 +187826,7 @@ function registerIntegrationCommands(program, executeOnline, readJsonBody = asyn
   ).action(
     async (providerId, options) => {
       const parsed = issueProviderSchema.safeParse(providerId);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(createIntegrationIssueRunHandler, "curated", {
         body: await readJsonBody(),
         idempotencyKey: mutationKey(options.idempotencyKey),
@@ -187636,7 +187836,7 @@ function registerIntegrationCommands(program, executeOnline, readJsonBody = asyn
   );
   integrations.command("issue-status").argument("<provider-id>").argument("<run-id>").action(async (providerId, runId) => {
     const parsed = issueProviderSchema.safeParse(providerId);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(getIntegrationIssueRunHandler, "curated", {
       pathParameters: {
         providerId: parsed.data,
@@ -187762,7 +187962,7 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
   const traces = program.command("traces").description("trace and span metadata commands");
   traces.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--from <timestamp>", "inclusive RFC 3339 start timestamp").option("--to <timestamp>", "inclusive RFC 3339 end timestamp").option("--limit <number>", "page size (1-50)").option("--status <status>", "trace status filter").option("--workflow <name>", "workflow name filter").option("--session <id>", "opaque session ID filter").action(async (options) => {
     const parsed = traceListOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = dateRangeQuery(
       parsed.data,
       parsed.data.session ? opaqueId(parsed.data.session) : void 0
@@ -187792,7 +187992,7 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
   );
   traces.command("export").argument("<trace-id>").option("--format <format>", "safe export format: json, markdown, or csv").action(async (traceId2, options) => {
     const parsed = exportFormat.safeParse(options.format);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = parsed.data ? { format: parsed.data } : void 0;
     await executeOnline(
       exportPublicTraceHandler,
@@ -187826,8 +188026,9 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
       async (rawQuery, options) => {
         const parsedQuery = searchQuerySchema.safeParse(rawQuery);
         const parsedOptions = searchOptionsSchema.safeParse(options);
-        if (!(parsedQuery.success && parsedOptions.success))
-          invalidArguments();
+        if (!parsedQuery.success)
+          invalidArguments(parsedQuery.error, "query");
+        if (!parsedOptions.success) invalidArguments(parsedOptions.error);
         const body = dateRangeQuery(
           parsedOptions.data,
           parsedOptions.data.session ? opaqueId(parsedOptions.data.session) : void 0
@@ -187845,7 +188046,7 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
   traces.command("raw-spans").argument("<trace-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-50)").option("--status <status>", "span status filter").option("--type <type>", "span type filter").action(
     async (traceId2, options) => {
       const parsed = spanListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -187864,7 +188065,7 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
   ).action(
     async (traceId2, spanId, options) => {
       const fields = payloadFieldsSchema.safeParse(options.fields);
-      if (!fields.success) invalidArguments();
+      if (!fields.success) invalidArguments(fields.error);
       await executeOnline(getPublicSpanPayloadHandler, "curated", {
         pathParameters: {
           spanId: opaqueId(spanId, 128),
@@ -187878,7 +188079,7 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
   spans.command("list").argument("<trace-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-50)").option("--status <status>", "span status filter").option("--type <type>", "span type filter").action(
     async (traceId2, options) => {
       const parsed = spanListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -187902,7 +188103,7 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
   const sessions = program.command("sessions").description("session metadata commands");
   sessions.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--from <timestamp>", "inclusive RFC 3339 start timestamp").option("--to <timestamp>", "inclusive RFC 3339 end timestamp").option("--limit <number>", "page size (1-50)").option("--status <status>", "session status filter").option("--workflow <name>", "workflow name filter").action(async (options) => {
     const parsed = sessionListOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(listPublicSessionsHandler, "curated", {
       query: dateRangeQuery(parsed.data)
     });
@@ -187910,7 +188111,7 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
   sessions.command("get").argument("<session-id>").option("--cursor <cursor>", "opaque trace cursor from the previous page").option("--limit <number>", "trace page size (1-50)").action(
     async (sessionId, options) => {
       const parsed = pageOptionsSchema2.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -187923,7 +188124,7 @@ function registerObservabilityCommands(program, executeOnline, readJsonBody) {
   );
   sessions.command("export").argument("<session-id>").option("--format <format>", "safe export format: json, markdown, or csv").action(async (sessionId, options) => {
     const parsed = exportFormat.safeParse(options.format);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = parsed.data ? { format: parsed.data } : void 0;
     await executeOnline(
       exportPublicSessionHandler,
@@ -188019,7 +188220,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   const organizations = program.command("orgs").description("organization discovery commands");
   organizations.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(async (options) => {
     const parsed = organizationListOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = {};
     if (parsed.data.cursor) query.cursor = parsed.data.cursor;
     if (parsed.data.limit !== void 0)
@@ -188035,7 +188236,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   audit.command("list").argument("<organization-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (organizationId, options) => {
       const parsed = organizationAccessListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(listAuditLifecycleEventsHandler, "curated", {
         pathParameters: { organizationId: uuid3(organizationId) },
         query: pageQuery(parsed.data)
@@ -188045,7 +188246,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   audit.command("export").argument("<organization-id>").requiredOption("--from <timestamp>", "inclusive ISO 8601 start timestamp").requiredOption("--to <timestamp>", "exclusive ISO 8601 end timestamp").option("--limit <number>", "maximum rows (1-5000)").action(
     async (organizationId, options) => {
       const parsed = auditExportOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {
         from: parsed.data.from,
         to: parsed.data.to
@@ -188063,7 +188264,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   members.command("list").argument("<organization-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (organizationId, options) => {
       const parsed = organizationAccessListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(listOrganizationMembersHandler, "curated", {
         pathParameters: { organizationId: uuid3(organizationId) },
         query: pageQuery(parsed.data)
@@ -188090,7 +188291,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   ).action(
     async (organizationId, userId, options) => {
       const parsed = memberRoleUpdateOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(updateOrganizationMemberRoleHandler, "curated", {
         body: {
           expectedRole: parsed.data.expectedRole,
@@ -188120,7 +188321,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   ).action(
     async (organizationId, userId, options) => {
       const parsed = memberRemoveOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const membershipId = postgresUuid(parsed.data.membershipId);
       if (postgresUuid(parsed.data.confirm) !== membershipId) {
         invalidArguments();
@@ -188139,7 +188340,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   invitations.command("list").argument("<organization-id>").option("--state <state>", "all, pending, or expired").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (organizationId, options) => {
       const parsed = invitationListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.state) query.state = parsed.data.state;
       Object.assign(query, pageQuery(parsed.data));
@@ -188158,7 +188359,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   ).action(
     async (organizationId, options) => {
       const parsed = invitationCreateOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(createOrganizationInvitationHandler, "curated", {
         body: { email: parsed.data.email, role: parsed.data.role },
         idempotencyKey: mutationKey(parsed.data.idempotencyKey),
@@ -188172,7 +188373,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   ).action(
     async (organizationId, invitationId, options) => {
       const parsed = invitationMutationOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(resendOrganizationInvitationHandler, "curated", {
         body: { email: parsed.data.email },
         idempotencyKey: mutationKey(parsed.data.idempotencyKey),
@@ -188192,7 +188393,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   ).action(
     async (organizationId, invitationIdValue, options) => {
       const parsed = invitationRevokeOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const invitationId = uuid3(invitationIdValue);
       if (uuid3(parsed.data.confirm) !== invitationId) invalidArguments();
       await executeOnline(revokeOrganizationInvitationHandler, "curated", {
@@ -188214,11 +188415,11 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   ).action(
     async (options) => {
       const parsed = invitationAcceptOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const tokenResult = invitationTokenSchema.safeParse(
         (await readInvitationToken()).replace(/\r?\n$/, "")
       );
-      if (!tokenResult.success) invalidArguments();
+      if (!tokenResult.success) invalidArguments(tokenResult.error);
       await executeOnline(acceptOrganizationInvitationHandler, "curated", {
         body: { token: tokenResult.data },
         idempotencyKey: mutationKey(parsed.data.idempotencyKey)
@@ -188228,7 +188429,7 @@ function registerOrganizationCommands(program, executeOnline, readInvitationToke
   const roles = organizations.command("roles").description("organization role assignment options");
   roles.command("list").argument("<organization-id>").requiredOption("--action <action>", "invitation or member-role-change").action(async (organizationId, options) => {
     const parsed = roleListOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(listOrganizationRolesHandler, "curated", {
       pathParameters: { organizationId: uuid3(organizationId) },
       query: { action: parsed.data.action }
@@ -188349,7 +188550,7 @@ function registerProjectCommands(program, executeOnline) {
   ).action(
     async (options) => {
       const parsed = projectCreateOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(createProjectHandler, "curated", {
         body: {
           name: parsed.data.name,
@@ -188366,7 +188567,7 @@ function registerProjectCommands(program, executeOnline) {
   ).action(
     async (options) => {
       const parsed = projectUpdateOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(updateProjectHandler, "curated", {
         body: {
           ...parsed.data.name === void 0 ? {} : { name: parsed.data.name },
@@ -188379,7 +188580,7 @@ function registerProjectCommands(program, executeOnline) {
   projects.command("list").option("--organization <uuid>", "filter by organization UUID").option("--include-archived", "include archived projects").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (options) => {
       const parsed = projectListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.organization) {
         query.organizationId = parsed.data.organization;
@@ -188409,7 +188610,7 @@ function registerProjectCommands(program, executeOnline) {
     "schedule archive-state deletion; recovery does not replay accepted telemetry; not activation-ready until durable accepted-event replay is implemented"
   ).requiredOption("--project-id <uuid>", "exact project UUID").requiredOption("--project-name <name>", "exact current project name").requiredOption("--digest <sha256>", "preview digest").requiredOption("--confirm <uuid>", "repeat the exact project UUID").option("--idempotency-key <key>", "stable UUID for retrying this schedule").action(async (options) => {
     const parsed = projectDeletionScheduleOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(scheduleProjectDeletionHandler, "curated", {
       body: {
         digest: parsed.data.digest,
@@ -188424,7 +188625,7 @@ function registerProjectCommands(program, executeOnline) {
     "restore archive state only; recovery does not replay accepted telemetry"
   ).requiredOption("--project-id <uuid>", "exact project UUID").requiredOption("--run-id <uuid>", "deletion run UUID").requiredOption("--confirm <uuid>", "repeat the exact project UUID").option("--idempotency-key <key>", "stable UUID for retrying recovery").action(async (options) => {
     const parsed = projectDeletionRecoveryOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(recoverProjectDeletionHandler, "curated", {
       body: {
         projectId: parsed.data.projectId,
@@ -188515,7 +188716,7 @@ async function createPromptFromStdin(input) {
 }
 async function promptBodyFromOptions(options, readPromptContent) {
   const name = z43.string().trim().min(1).max(255).safeParse(options.name);
-  if (!name.success) invalidArguments();
+  if (!name.success) invalidArguments(name.error);
   if (options.content !== void 0 && options.contentStdin === true) {
     invalidArguments();
   }
@@ -188560,7 +188761,7 @@ function registerPromptCommands(program, executeOnline, readPromptContent, readP
   prompts.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--label <label>", "active label filter").option("--limit <number>", "page size (1-100)").option("--name <name>", "exact prompt name filter").option("--source <source>", "exact prompt source filter").action(
     async (options) => {
       const parsed = listOptionsSchema6.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(listPromptsHandler, "curated", {
         query: {
           ...parsed.data.label ? { label: parsed.data.label } : {},
@@ -188591,7 +188792,7 @@ function registerPromptCommands(program, executeOnline, readPromptContent, readP
     "read one bounded prompt label assignment request from stdin"
   ).option("--idempotency-key <key>", "stable UUID for retrying this mutation").action(async (options) => {
     const parsed = bulkLabelRequestSchema.safeParse(await readBulkRequest());
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(bulkMovePromptLabelsHandler, "curated", {
       body: parsed.data,
       idempotencyKey: mutationKey(options.idempotencyKey)
@@ -188605,7 +188806,7 @@ function registerPromptCommands(program, executeOnline, readPromptContent, readP
   prompts.command("history").argument("<prompt-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (promptId, options) => {
       const parsed = pageOptionsSchema3.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(listPromptHistoryHandler, "curated", {
         pathParameters: { promptId: uuid3(promptId) },
         query: pageQuery2(parsed.data)
@@ -188631,7 +188832,7 @@ function registerPromptCommands(program, executeOnline, readPromptContent, readP
   prompts.command("changelog").argument("<prompt-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-50)").action(
     async (promptId, options) => {
       const parsed = collaborationPageOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(listPromptChangelogHandler, "curated", {
         pathParameters: { promptId: uuid3(promptId) },
         query: pageQuery2(parsed.data)
@@ -188641,7 +188842,7 @@ function registerPromptCommands(program, executeOnline, readPromptContent, readP
   prompts.command("comments").argument("<prompt-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-20)").action(
     async (promptId, options) => {
       const parsed = commentPageOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(listPromptCommentsHandler, "curated", {
         pathParameters: { promptId: uuid3(promptId) },
         query: pageQuery2(parsed.data)
@@ -188713,7 +188914,7 @@ function registerPromptCommands(program, executeOnline, readPromptContent, readP
   prompts.command("label-remove").description("remove one active label from a prompt version").argument("<prompt-id>").argument("<label>").option("--idempotency-key <key>").action(
     async (promptId, label, options) => {
       const parsedLabel = promptLabelSchema.safeParse(label);
-      if (!parsedLabel.success) invalidArguments();
+      if (!parsedLabel.success) invalidArguments(parsedLabel.error);
       await executeOnline(removePromptLabelHandler, "curated", {
         idempotencyKey: mutationKey(options.idempotencyKey),
         pathParameters: {
@@ -188855,7 +189056,7 @@ function addAccountPageCommand(parent, handler2, executeOnline) {
   parent.command("list").argument("<service-account-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (serviceAccountId, options) => {
       const parsed = listOptionsSchema7.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(handler2, "curated", {
         pathParameters: { serviceAccountId: uuid3(serviceAccountId) },
         query: pageQuery3(parsed.data)
@@ -188873,7 +189074,7 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
   ).option("--description <description>").option("--idempotency-key <key>").action(
     async (organizationId, options) => {
       const parsed = createOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const { binding, description, idempotencyKey, name } = parsed.data;
       await executeOnline(createServiceAccountHandler, "curated", {
         body: {
@@ -188889,7 +189090,7 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
   serviceAccounts.command("list").argument("<organization-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (organizationId, options) => {
       const parsed = listOptionsSchema7.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(listServiceAccountsHandler, "curated", {
         pathParameters: { organizationId: uuid3(organizationId) },
         query: pageQuery3(parsed.data)
@@ -188904,7 +189105,7 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
   serviceAccounts.command("update").argument("<service-account-id>").option("--name <name>").option("--description <description>").option("--idempotency-key <key>").action(
     async (serviceAccountId, options) => {
       const parsed = updateOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const { idempotencyKey, ...body } = parsed.data;
       await executeOnline(updateServiceAccountHandler, "curated", {
         body,
@@ -188920,7 +189121,8 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
     async (serviceAccountId, options) => {
       const parsedServiceAccountId = uuid3(serviceAccountId);
       const parsed = destructiveReasonOptionsSchema.safeParse(options);
-      if (!parsed.success || parsed.data.confirm !== serviceAccountId) {
+      if (!parsed.success) invalidArguments(parsed.error);
+      if (parsed.data.confirm !== serviceAccountId) {
         invalidArguments();
       }
       await executeOnline(disableServiceAccountHandler, "curated", {
@@ -188939,7 +189141,7 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
   bindings.command("add").argument("<service-account-id>").requiredOption("--project-id <project-id>").requiredOption("--role <role>").option("--idempotency-key <key>").action(
     async (serviceAccountId, options) => {
       const parsed = bindingCreateOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(createServiceAccountBindingHandler, "curated", {
         body: {
           projectId: uuid3(parsed.data.projectId),
@@ -188953,7 +189155,7 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
   bindings.command("set-role").argument("<service-account-id>").argument("<binding-id>").requiredOption("--role <role>").option("--idempotency-key <key>").action(
     async (serviceAccountId, bindingId, options) => {
       const parsed = bindingRoleOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(updateServiceAccountBindingHandler, "curated", {
         body: { role: parsed.data.role },
         idempotencyKey: mutationKey(parsed.data.idempotencyKey),
@@ -188970,7 +189172,8 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
   ).option("--idempotency-key <key>").action(
     async (serviceAccountId, bindingId, options) => {
       const parsed = bindingRemoveOptionsSchema.safeParse(options);
-      if (!parsed.success || parsed.data.confirm !== bindingId) {
+      if (!parsed.success) invalidArguments(parsed.error);
+      if (parsed.data.confirm !== bindingId) {
         invalidArguments();
       }
       await executeOnline(deleteServiceAccountBindingHandler, "curated", {
@@ -189001,7 +189204,7 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
       parsedTokenId
     );
     const parsed = reasonOptionsSchema.safeParse(reasonOptions);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(revokeServiceAccountTokenHandler, "curated", {
       body: parsed.data.reason ? { reason: parsed.data.reason } : {},
       idempotencyKey: mutationKey(parsed.data.idempotencyKey),
@@ -189016,7 +189219,7 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
   ).option("--expires-in-days <days>").option("--idempotency-key <key>").action(
     async (serviceAccountId, options) => {
       const parsed = mintOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const body = {
         ...parsed.data.expiresInDays === void 0 ? {} : { expiresInDays: parsed.data.expiresInDays },
         name: parsed.data.name,
@@ -189055,7 +189258,7 @@ function registerServiceAccountCommands(program, executeOnline, renderSecret, re
     []
   ).option("--expires-in-days <days>").option("--idempotency-key <key>").action(async (tokenId, options) => {
     const parsed = mintOptionsSchema.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const body = {
       ...parsed.data.expiresInDays === void 0 ? {} : { expiresInDays: parsed.data.expiresInDays },
       name: parsed.data.name,
@@ -189197,7 +189400,7 @@ function registerSharingCommands(program, executeOnline, renderSecret, resolvedP
   const guestLinks = program.command("guest-links").description("redacted guest-link metadata");
   guestLinks.command("list").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-50)").action(async (options) => {
     const parsed = listOptions2.safeParse(options);
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const query = {};
     if (parsed.data.cursor) query.cursor = parsed.data.cursor;
     if (parsed.data.limit !== void 0)
@@ -189210,7 +189413,7 @@ function registerSharingCommands(program, executeOnline, renderSecret, resolvedP
       const parsedRecipient = recipientEmail.safeParse(
         options.recipientEmail
       );
-      if (!parsedRecipient.success) invalidArguments();
+      if (!parsedRecipient.success) invalidArguments(parsedRecipient.error);
       const idempotencyKey = mutationKey(options.idempotencyKey);
       const replayKey = randomBytes3(32).toString("base64url");
       const response = await executeOnline(mintGuestLinkHandler, "none", {
@@ -189241,7 +189444,7 @@ function registerSharingCommands(program, executeOnline, renderSecret, resolvedP
     "read one bounded guest-link bulk mint request from stdin"
   ).option("--idempotency-key <key>", "stable UUID for retrying this mutation").action(async (options) => {
     const parsed = bulkMintRequestSchema.safeParse(await readBulkRequest());
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     const idempotencyKey = mutationKey(options.idempotencyKey);
     const replayKey = randomBytes3(32).toString("base64url");
     const response = await executeOnline(bulkMintGuestLinksHandler, "none", {
@@ -189268,7 +189471,7 @@ function registerSharingCommands(program, executeOnline, renderSecret, resolvedP
     "read one bounded guest-link bulk revoke request from stdin"
   ).option("--idempotency-key <key>", "stable UUID for retrying this mutation").action(async (options) => {
     const parsed = bulkRevokeRequestSchema.safeParse(await readBulkRequest());
-    if (!parsed.success) invalidArguments();
+    if (!parsed.success) invalidArguments(parsed.error);
     await executeOnline(bulkRevokeGuestLinksHandler, "curated", {
       body: parsed.data,
       idempotencyKey: mutationKey(options.idempotencyKey)
@@ -189360,7 +189563,7 @@ function attachSkillMutationCommands(skills, executeOnline, deleteHandler, impor
         idempotencyKey: z47.string().optional(),
         name: z47.string().min(1).max(64).regex(/^[a-z0-9-]+$/).optional()
       }).strict().safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(importHandler, "curated", {
         body: {
           ...parsed.data.description === void 0 ? {} : { description: parsed.data.description },
@@ -189407,7 +189610,7 @@ function registerSkillCommands(program, executeOnline, readSkillContent, readUpd
   ).requiredOption("--ref <sha>", "full immutable 40-character commit SHA").requiredOption("--path <path>", "relative path ending in SKILL.md").option("--idempotency-key <key>", "stable UUID for retrying this import").action(
     async (options) => {
       const parsed = githubImportOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       await executeOnline(importGithubSkillHandler, "curated", {
         body: {
           path: parsed.data.path,
@@ -189422,7 +189625,7 @@ function registerSkillCommands(program, executeOnline, readSkillContent, readUpd
   skills.command("list").option("--include-archived", "include archived evaluator skills").option("--limit <number>", "page size (1-100)").option("--cursor <cursor>", "opaque cursor returned by the previous page").action(
     async (options) => {
       const parsed = listOptionsSchema8.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.includeArchived) query.includeArchived = "true";
@@ -189475,7 +189678,7 @@ function registerToolingCommands(program, executeOnline, readJsonBody = async ()
 var limitSchema = z48.coerce.number().int().min(1).max(100);
 function limit(value) {
   const parsed = limitSchema.safeParse(value);
-  if (!parsed.success) invalidArguments();
+  if (!parsed.success) invalidArguments(parsed.error);
   return parsed.data;
 }
 function registerConnectionCommands(command, executeOnline, readJsonBody, handlers) {
@@ -189615,7 +189818,7 @@ function registerWebhookCommands(program, executeOnline, readJsonBody = async ()
   webhooks.command("deliveries").argument("<webhook-id>").option("--cursor <cursor>", "opaque cursor returned by the previous page").option("--limit <number>", "page size (1-100)").action(
     async (webhookId, options) => {
       const parsed = deliveryListOptionsSchema.safeParse(options);
-      if (!parsed.success) invalidArguments();
+      if (!parsed.success) invalidArguments(parsed.error);
       const query = {};
       if (parsed.data.cursor) query.cursor = parsed.data.cursor;
       if (parsed.data.limit !== void 0)
@@ -189818,6 +190021,17 @@ var PUBLIC_EVALUATOR_RUN_REQUEST_MAX_BYTES = 64 * 1024;
 var PUBLIC_DETECTION_PREVIEW_REQUEST_MAX_BYTES = 320 * 1024;
 var PUBLIC_DETECTION_COMPUTE_REQUEST_MAX_BYTES = 64 * 1024;
 
+// src/usage-error.ts
+function commanderUsageError(error) {
+  const option = error.message.match(/--[a-z][a-z0-9-]*/)?.[0];
+  const detail = error.code === "commander.missingMandatoryOptionValue" && option ? `Missing required option ${option}. Run this command with --help for usage.` : "Invalid command arguments. Run this command with --help for usage.";
+  return new CliError({
+    code: "INVALID_ARGUMENTS",
+    detail,
+    exitCode: ExitCode.Usage
+  });
+}
+
 // src/cli.ts
 var MAX_GENERIC_BODY_BYTES = 512 * 1024;
 var MAX_COMMENT_CONTENT_BYTES = 1e4;
@@ -190488,14 +190702,10 @@ async function runCli(argv, dependencies) {
       if (error.code === "commander.helpDisplayed" || error.code === "commander.version") {
         return ExitCode.Success;
       }
-      const cliError2 = new CliError({
-        code: "INVALID_ARGUMENTS",
-        exitCode: ExitCode.Usage
-      });
+      const cliError2 = commanderUsageError(error);
       if (machineDiagnostics)
         writeJson(dependencies.stderr, diagnostic(cliError2));
-      else dependencies.stderr.write(`${cliError2.code}
-`);
+      else dependencies.stderr.write(humanDiagnostic(cliError2));
       return cliError2.exitCode;
     }
     const cliError = asCliError(error);