node-autotask 0.16.0 → 0.18.0

package/dist/operations/index.cjs

@@ -36,26 +36,26 @@
 
 
 
-var _chunkMAYYTYV5cjs = require('../chunk-MAYYTYV5.cjs');
+var _chunkWRWX6WIKcjs = require('../chunk-WRWX6WIK.cjs');
 
 
-var _chunkEWMG3HHUcjs = require('../chunk-EWMG3HHU.cjs');
+var _chunk5O5EPYBOcjs = require('../chunk-5O5EPYBO.cjs');
 
 // src/operations/searchAcrossResources.ts
 var DEFAULT_LIMIT = 25;
 function resourceFor(client, key) {
-  return client[_chunkMAYYTYV5cjs.camelKey.call(void 0, key)];
+  return client[_chunkWRWX6WIKcjs.camelKey.call(void 0, key)];
 }
 async function searchAcrossResources(client, query, opts = {}) {
   const text = query.trim();
   if (text === "") {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("searchAcrossResources: query must be a non-empty string");
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("searchAcrossResources: query must be a non-empty string");
   }
-  const keys = _nullishCoalesce(opts.resources, () => ( _chunkMAYYTYV5cjs.WORKFLOW_RESOURCES));
+  const keys = _nullishCoalesce(opts.resources, () => ( _chunkWRWX6WIKcjs.WORKFLOW_RESOURCES));
   if (keys.length === 0) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("searchAcrossResources: no resources requested");
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("searchAcrossResources: no resources requested");
   }
-  const limit = _chunkMAYYTYV5cjs.clampPageSize.call(void 0, _nullishCoalesce(opts.limit, () => ( DEFAULT_LIMIT)));
+  const limit = _chunkWRWX6WIKcjs.clampPageSize.call(void 0, _nullishCoalesce(opts.limit, () => ( DEFAULT_LIMIT)));
   const results = [];
   const skipped = [];
   for (const key of keys) {
@@ -73,7 +73,7 @@ async function searchAcrossResources(client, query, opts = {}) {
 
 // src/operations/resolveAny.ts
 function resourceFor2(client, key) {
-  return client[_chunkMAYYTYV5cjs.camelKey.call(void 0, key)];
+  return client[_chunkWRWX6WIKcjs.camelKey.call(void 0, key)];
 }
 var FAULT_CATEGORIES = /* @__PURE__ */ new Set(["auth", "rate_limit", "server", "network", "timeout", "policy"]);
 function missCost(identifier) {
@@ -82,13 +82,13 @@ function missCost(identifier) {
 }
 async function resolveAny(client, identifier, opts = {}) {
   if (typeof identifier === "number") {
-    _chunkMAYYTYV5cjs.parseIdentifier.call(void 0, identifier, "identifier");
+    _chunkWRWX6WIKcjs.parseIdentifier.call(void 0, identifier, "identifier");
   } else if (identifier.trim() === "") {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("resolveAny: identifier must be non-empty");
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("resolveAny: identifier must be non-empty");
   }
-  const keys = _nullishCoalesce(opts.resources, () => ( _chunkMAYYTYV5cjs.WORKFLOW_RESOURCES));
+  const keys = _nullishCoalesce(opts.resources, () => ( _chunkWRWX6WIKcjs.WORKFLOW_RESOURCES));
   if (keys.length === 0) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("resolveAny: no resources requested");
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("resolveAny: no resources requested");
   }
   const results = [];
   for (const key of keys) {
@@ -118,9 +118,9 @@ async function resolveAny(client, identifier, opts = {}) {
     } catch (err) {
       let code;
       let candidates = [];
-      if (err instanceof _chunkMAYYTYV5cjs.AutotaskConfigError) {
+      if (err instanceof _chunkWRWX6WIKcjs.AutotaskConfigError) {
         code = "CONFIG_ERROR";
-      } else if (_chunkMAYYTYV5cjs.isAutotaskError.call(void 0, err)) {
+      } else if (_chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err)) {
         if (FAULT_CATEGORIES.has(err.category)) throw err;
         code = err.code;
         if (code === "RESOLUTION_AMBIGUOUS" && err.resourceIds !== void 0) {
@@ -147,7 +147,7 @@ async function resolveAny(client, identifier, opts = {}) {
 // src/operations/aggregate.ts
 var AGGREGATE_TOP_MAX = 100;
 var AGGREGATE_DEFAULT_TOP = 25;
-var AGGREGATE_DEFAULT_LIMIT = _chunkMAYYTYV5cjs.BOUNDED_QUERY_MAX_LIMIT;
+var AGGREGATE_DEFAULT_LIMIT = _chunkWRWX6WIKcjs.BOUNDED_QUERY_MAX_LIMIT;
 var AGGREGATE_DATE_BUCKETS = ["month", "week", "year"];
 var DATE_ONLY_RE = /^(\d{4})-(\d{2})-(\d{2})$/;
 var DATETIME_RE = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(\.\d{1,9})?(Z|[+-]\d{2}:?\d{2})?$/;
@@ -204,7 +204,7 @@ function dateBucketLabel(value, bucket) {
 }
 var QUERY_RESOURCE_KEYS = (() => {
   const s = /* @__PURE__ */ new Set();
-  for (const rec of _chunkEWMG3HHUcjs.CAPABILITIES) if (rec.operation === "query") s.add(rec.resource);
+  for (const rec of _chunk5O5EPYBOcjs.CAPABILITIES) if (rec.operation === "query") s.add(rec.resource);
   return s;
 })();
 var AGGREGATE_OPT_KEYS = ["groupBy", "sum", "top", "limit"];
@@ -239,14 +239,14 @@ function validateAggregate(operation, filter, opts) {
       conditions = [];
     } else {
       try {
-        conditions = _chunkMAYYTYV5cjs.buildFilter.call(void 0, conds).filter;
+        conditions = _chunkWRWX6WIKcjs.buildFilter.call(void 0, conds).filter;
       } catch (err) {
-        problems.push(err instanceof _chunkMAYYTYV5cjs.AutotaskConfigError ? err.message : `filter must be the query-bag filter (13 operators; caps 500 OR-conditions / 1 UDF / 8000 chars); ${String(err)}`);
+        problems.push(err instanceof _chunkWRWX6WIKcjs.AutotaskConfigError ? err.message : `filter must be the query-bag filter (13 operators; caps 500 OR-conditions / 1 UDF / 8000 chars); ${String(err)}`);
       }
     }
   }
   if (opts !== void 0 && (typeof opts !== "object" || opts === null || Array.isArray(opts))) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `aggregate: opts must be the options object (got ${Array.isArray(opts) ? "an array" : typeof opts})`,
       { operation: "operations.aggregate" }
     );
@@ -256,8 +256,8 @@ function validateAggregate(operation, filter, opts) {
       problems.push(`unknown opts key "${key}" \u2014 the bag is closed: ${AGGREGATE_OPT_KEYS.join(", ")}`);
     }
   }
-  const fieldSets = resourceKey !== void 0 ? _chunkMAYYTYV5cjs.MODEL_FIELD_SETS[resourceKey] : void 0;
-  const dateSets = resourceKey !== void 0 ? _chunkMAYYTYV5cjs.MODEL_DATE_FIELDS[resourceKey] : void 0;
+  const fieldSets = resourceKey !== void 0 ? _chunkWRWX6WIKcjs.MODEL_FIELD_SETS[resourceKey] : void 0;
+  const dateSets = resourceKey !== void 0 ? _chunkWRWX6WIKcjs.MODEL_DATE_FIELDS[resourceKey] : void 0;
   const checkFields = (name, fields) => {
     if (fields === void 0) return [];
     if (!Array.isArray(fields) || fields.length === 0 || fields.some((f) => typeof f !== "string" || f.trim() === "")) {
@@ -321,11 +321,11 @@ function validateAggregate(operation, filter, opts) {
     if (!Number.isInteger(opts.limit)) {
       problems.push(`limit must be an integer (got ${String(opts.limit)})`);
     } else {
-      limit = Math.min(Math.max(opts.limit, 1), _chunkMAYYTYV5cjs.BOUNDED_QUERY_MAX_LIMIT);
+      limit = Math.min(Math.max(opts.limit, 1), _chunkWRWX6WIKcjs.BOUNDED_QUERY_MAX_LIMIT);
     }
   }
   if (problems.length > 0) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `aggregate: ${problems.length} problem(s) found pre-request (zero wire was issued)
 - ` + problems.join("\n- "),
       { operation: "operations.aggregate" }
@@ -335,9 +335,9 @@ function validateAggregate(operation, filter, opts) {
 }
 async function aggregate(client, operation, filter, opts = {}) {
   const v = validateAggregate(operation, filter, opts);
-  const holder = client[_chunkMAYYTYV5cjs.camelKey.call(void 0, v.resourceKey)];
+  const holder = client[_chunkWRWX6WIKcjs.camelKey.call(void 0, v.resourceKey)];
   if (holder === void 0) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(`aggregate: the client exposes no accessor for resource "${v.resourceKey}"`, {
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(`aggregate: the client exposes no accessor for resource "${v.resourceKey}"`, {
       operation: "operations.aggregate",
       suggestedAction: "Rebuild the client from the SDK build that ships this registry (the resource set is pinned by the plan)."
     });
@@ -392,20 +392,20 @@ async function aggregate(client, operation, filter, opts = {}) {
 async function relationshipMap(client, resourceKey) {
   void client;
   if (typeof resourceKey !== "string" || resourceKey.trim() === "") {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `relationshipMap: resourceKey must be a non-empty plan resource key string (e.g. 'tickets'; got ${typeof resourceKey === "string" ? "a blank string" : typeof resourceKey})`,
       { suggestedAction: "Pass the exact plan resource key (snake_case) from autotask_catalog \u2014 e.g. tickets, companies, configuration_items, ticket_notes." }
     );
   }
   const key = resourceKey.trim();
-  const entry = _chunkMAYYTYV5cjs.RELATIONSHIP_MAP[key];
+  const entry = _chunkWRWX6WIKcjs.RELATIONSHIP_MAP[key];
   if (entry === void 0) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskError)(
-      `relationshipMap: unknown resource "${key}" \u2014 the plan has ${Object.keys(_chunkMAYYTYV5cjs.RELATIONSHIP_MAP).length} resources`,
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
+      `relationshipMap: unknown resource "${key}" \u2014 the plan has ${Object.keys(_chunkWRWX6WIKcjs.RELATIONSHIP_MAP).length} resources`,
       {
         code: "RESOURCE_UNKNOWN",
         category: "validation",
-        suggestedAction: `Pass the exact plan resource key (snake_case) from autotask_catalog (e.g. tickets, companies, configuration_items). Zone facts served are ${_chunkMAYYTYV5cjs.RELATIONSHIP_ZONE.label} (${_chunkMAYYTYV5cjs.RELATIONSHIP_ZONE.zone})-verified.`
+        suggestedAction: `Pass the exact plan resource key (snake_case) from autotask_catalog (e.g. tickets, companies, configuration_items). Zone facts served are ${_chunkWRWX6WIKcjs.RELATIONSHIP_ZONE.label} (${_chunkWRWX6WIKcjs.RELATIONSHIP_ZONE.zone})-verified.`
       }
     );
   }
@@ -422,24 +422,24 @@ var BLIND_SURFACE_KINDS = [
 async function blindSurfaces(client, opts) {
   void client;
   if (opts !== void 0 && (typeof opts !== "object" || opts === null || Array.isArray(opts))) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("blindSurfaces: opts must be an object { resource?: string, kind?: BlindSurfaceKind }");
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("blindSurfaces: opts must be an object { resource?: string, kind?: BlindSurfaceKind }");
   }
-  const inv = _chunkMAYYTYV5cjs.BLIND_SURFACE_INVENTORY;
+  const inv = _chunkWRWX6WIKcjs.BLIND_SURFACE_INVENTORY;
   if (inv === null) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("blindSurfaces: the reachability inventory is absent from the generated artifact \u2014 re-run the build");
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("blindSurfaces: the reachability inventory is absent from the generated artifact \u2014 re-run the build");
   }
   let surfaces = inv.surfaces;
   if (_optionalChain([opts, 'optionalAccess', _ => _.resource]) !== void 0) {
     const key = typeof opts.resource === "string" ? opts.resource.trim() : "";
     if (key === "") {
-      throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
         "blindSurfaces: opts.resource must be a non-empty plan resource key string (e.g. 'tickets')",
         { suggestedAction: "Pass the exact plan resource key (snake_case) from autotask_catalog \u2014 e.g. tickets, companies, configuration_items." }
       );
     }
     if (!inv.surfaces.some((row) => row.resource === key)) {
-      throw new (0, _chunkMAYYTYV5cjs.AutotaskError)(
-        `blindSurfaces: unknown resource "${key}" \u2014 the plan has ${Object.keys(_chunkMAYYTYV5cjs.RELATIONSHIP_MAP).length} resources`,
+      throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
+        `blindSurfaces: unknown resource "${key}" \u2014 the plan has ${Object.keys(_chunkWRWX6WIKcjs.RELATIONSHIP_MAP).length} resources`,
         {
           code: "RESOURCE_UNKNOWN",
           category: "validation",
@@ -451,7 +451,7 @@ async function blindSurfaces(client, opts) {
   }
   if (_optionalChain([opts, 'optionalAccess', _2 => _2.kind]) !== void 0) {
     if (!BLIND_SURFACE_KINDS.includes(opts.kind)) {
-      throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
         `blindSurfaces: unknown kind "${String(opts.kind)}" \u2014 the valid classes are: ${BLIND_SURFACE_KINDS.join(", ")}`,
         { suggestedAction: `Filter with one of: ${BLIND_SURFACE_KINDS.join(", ")} (or omit kind for the full 116-surface inventory).` }
       );
@@ -464,51 +464,51 @@ async function blindSurfaces(client, opts) {
 // src/operations/probeReachability.ts
 async function probeReachability(client, opts) {
   if (opts !== void 0 && (typeof opts !== "object" || opts === null || Array.isArray(opts))) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("probeReachability: opts must be an object { resources?: string[], limit?: 1|2, maxWireCalls?: number, confirmProbe?: true }");
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("probeReachability: opts must be an object { resources?: string[], limit?: 1|2, maxWireCalls?: number, confirmProbe?: true }");
   }
-  const defs = _chunkMAYYTYV5cjs.REACHABILITY_PROBE_DEFAULTS;
+  const defs = _chunkWRWX6WIKcjs.REACHABILITY_PROBE_DEFAULTS;
   if (_optionalChain([opts, 'optionalAccess', _3 => _3.confirmProbe]) !== true) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       "probeReachability: confirmProbe: true is required \u2014 the op deliberately fans out read wire across the tenant (one bounded query per surface); pass confirmProbe: true to run it",
       { suggestedAction: `Re-call with { confirmProbe: true } (plus resources/limit/maxWireCalls as needed). For the ZERO-wire pinned inventory use operations.blindSurfaces.` }
     );
   }
   const limit = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _4 => _4.limit]), () => ( defs.limitDefault));
   if (!Number.isInteger(limit) || limit < 1 || limit > defs.limitMax) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `probeReachability: limit must be an integer 1..${defs.limitMax} (got ${String(limit)}) \u2014 the rows-per-surface bound for the discovery read`
     );
   }
   const cap = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _5 => _5.maxWireCalls]), () => ( defs.defaultCap));
   if (!Number.isInteger(cap) || cap < 1) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(`probeReachability: maxWireCalls must be a positive integer (got ${String(cap)})`);
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(`probeReachability: maxWireCalls must be a positive integer (got ${String(cap)})`);
   }
   if (cap > defs.hardCap) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `probeReachability: maxWireCalls ${cap} exceeds the hard wire cap of ${defs.hardCap} \u2014 the sweep is refused above it (never capped silently)`,
       { suggestedAction: `Pass maxWireCalls \u2264 ${defs.hardCap} and a resources set no larger than the cap (the refused set is never truncated).` }
     );
   }
-  const inv = _chunkMAYYTYV5cjs.BLIND_SURFACE_INVENTORY;
+  const inv = _chunkWRWX6WIKcjs.BLIND_SURFACE_INVENTORY;
   if (inv === null) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("probeReachability: the reachability inventory is absent from the generated artifact \u2014 re-run the build");
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("probeReachability: the reachability inventory is absent from the generated artifact \u2014 re-run the build");
   }
   let targets;
   if (_optionalChain([opts, 'optionalAccess', _6 => _6.resources]) === void 0) {
     targets = [...defs.defaultTargets];
   } else {
     if (!Array.isArray(opts.resources) || opts.resources.length === 0) {
-      throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("probeReachability: opts.resources must be a non-empty string[] of plan resource keys (or omit it for the default non-data-full set)");
+      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("probeReachability: opts.resources must be a non-empty string[] of plan resource keys (or omit it for the default non-data-full set)");
     }
     const seen = /* @__PURE__ */ new Set();
     for (const r of opts.resources) {
       if (typeof r !== "string" || r.trim() === "") {
-        throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(`probeReachability: opts.resources must contain non-empty plan resource key strings (got ${typeof r === "string" && r.trim() === "" ? "a blank string" : typeof r})`);
+        throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(`probeReachability: opts.resources must contain non-empty plan resource key strings (got ${typeof r === "string" && r.trim() === "" ? "a blank string" : typeof r})`);
       }
       const key = r.trim();
       if (!inv.surfaces.some((row) => row.resource === key)) {
         const surfaceCount = new Set(inv.surfaces.map((s) => s.resource)).size;
-        throw new (0, _chunkMAYYTYV5cjs.AutotaskError)(
+        throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
           `probeReachability: unknown resource "${key}" \u2014 the inventory has ${surfaceCount} surfaces`,
           {
             code: "RESOURCE_UNKNOWN",
@@ -522,7 +522,7 @@ async function probeReachability(client, opts) {
     targets = [...seen];
   }
   if (targets.length > cap) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `probeReachability: ${targets.length} requested surface(s) exceed the wire cap of ${cap} \u2014 the sweep is refused above its cap (never truncated)`,
       { suggestedAction: `Raise maxWireCalls (\u2264 ${defs.hardCap}) to cover the set, or pass a smaller resources list.` }
     );
@@ -532,7 +532,7 @@ async function probeReachability(client, opts) {
   for (const resource of targets.sort()) {
     const row = byResource.get(resource);
     if (row === void 0) continue;
-    const holder = client[_chunkMAYYTYV5cjs.camelKey.call(void 0, resource)];
+    const holder = client[_chunkWRWX6WIKcjs.camelKey.call(void 0, resource)];
     const probeFn = _optionalChain([holder, 'optionalAccess', _7 => _7.queryBounded]);
     if (typeof probeFn !== "function") {
       results.push({
@@ -551,7 +551,7 @@ async function probeReachability(client, opts) {
         probe: { ok: true, wire: 1, error: null }
       });
     } catch (err) {
-      const code = _chunkMAYYTYV5cjs.isAutotaskError.call(void 0, err) ? err.code : "NETWORK_ERROR";
+      const code = _chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err) ? err.code : "NETWORK_ERROR";
       const message = err instanceof Error ? err.message : String(err);
       results.push({
         ...row,
@@ -579,24 +579,24 @@ var CREATE_BLOCKER_KINDS = [
 async function createGuidance(client, opts) {
   void client;
   if (opts !== void 0 && (typeof opts !== "object" || opts === null || Array.isArray(opts))) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       "createGuidance: opts must be an object { resources?: string[], kind?: CreateBlockerKind }"
     );
   }
-  let rows = _chunkMAYYTYV5cjs.CREATE_GUIDANCE.rows;
+  let rows = _chunkWRWX6WIKcjs.CREATE_GUIDANCE.rows;
   if (_optionalChain([opts, 'optionalAccess', _9 => _9.resources]) !== void 0) {
     if (!Array.isArray(opts.resources) || opts.resources.length === 0) {
-      throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("createGuidance: opts.resources must be a non-empty string[] of plan resource keys");
+      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("createGuidance: opts.resources must be a non-empty string[] of plan resource keys");
     }
     const wanted = /* @__PURE__ */ new Set();
     for (const r of opts.resources) {
       if (typeof r !== "string" || r.trim() === "") {
-        throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)("createGuidance: opts.resources must contain non-empty plan resource key strings");
+        throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("createGuidance: opts.resources must contain non-empty plan resource key strings");
       }
       const key = r.trim();
-      if (!_chunkMAYYTYV5cjs.CREATE_GUIDANCE.rows.some((row) => row.resource === key)) {
-        throw new (0, _chunkMAYYTYV5cjs.AutotaskError)(
-          `createGuidance: unknown resource "${key}" \u2014 the catalog has ${_chunkMAYYTYV5cjs.CREATE_GUIDANCE.rows.length} create entities`,
+      if (!_chunkWRWX6WIKcjs.CREATE_GUIDANCE.rows.some((row) => row.resource === key)) {
+        throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
+          `createGuidance: unknown resource "${key}" \u2014 the catalog has ${_chunkWRWX6WIKcjs.CREATE_GUIDANCE.rows.length} create entities`,
           {
             code: "RESOURCE_UNKNOWN",
             category: "validation",
@@ -610,18 +610,18 @@ async function createGuidance(client, opts) {
   }
   if (_optionalChain([opts, 'optionalAccess', _10 => _10.kind]) !== void 0) {
     if (!CREATE_BLOCKER_KINDS.includes(opts.kind)) {
-      throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
         `createGuidance: unknown kind "${String(opts.kind)}" \u2014 the valid kinds are: ${CREATE_BLOCKER_KINDS.join(", ")}`
       );
     }
     rows = rows.filter((row) => _optionalChain([row, 'access', _11 => _11.blocker, 'optionalAccess', _12 => _12.kind]) === opts.kind);
   }
   return {
-    zone: _chunkMAYYTYV5cjs.CREATE_GUIDANCE.zone,
-    label: _chunkMAYYTYV5cjs.CREATE_GUIDANCE.label,
-    verifiedAt: _chunkMAYYTYV5cjs.CREATE_GUIDANCE.verifiedAt,
+    zone: _chunkWRWX6WIKcjs.CREATE_GUIDANCE.zone,
+    label: _chunkWRWX6WIKcjs.CREATE_GUIDANCE.label,
+    verifiedAt: _chunkWRWX6WIKcjs.CREATE_GUIDANCE.verifiedAt,
     rows,
-    counts: _chunkMAYYTYV5cjs.CREATE_GUIDANCE.counts
+    counts: _chunkWRWX6WIKcjs.CREATE_GUIDANCE.counts
   };
 }
 
@@ -630,7 +630,7 @@ var RECOVERY_CONFIRM = "operations.recovery";
 var RECOVERY_DEFAULT_LIMIT = 25;
 var RECOVERY_MAX_LIMIT = 100;
 function configError(message, operation, suggestedAction) {
-  throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(message, { operation, suggestedAction });
+  throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(message, { operation, suggestedAction });
 }
 function parseMatchId(record) {
   const raw = record.id;
@@ -647,7 +647,7 @@ function parseMatchId(record) {
 }
 async function recovery(client, input, opts = {}) {
   const operation = RECOVERY_CONFIRM;
-  if (!_chunkMAYYTYV5cjs.isRecord.call(void 0, input)) {
+  if (!_chunkWRWX6WIKcjs.isRecord.call(void 0, input)) {
     configError(
       `recovery: input must be an object { resource, marker, ... } (got ${typeof input})`,
       operation,
@@ -678,10 +678,10 @@ async function recovery(client, input, opts = {}) {
       "Pass action: 'delete' for the destructive path (dry-run-first; the apply requires the confirm string)."
     );
   }
-  const entry = _chunkMAYYTYV5cjs.RELATIONSHIP_MAP[resource];
+  const entry = _chunkWRWX6WIKcjs.RELATIONSHIP_MAP[resource];
   if (entry === void 0) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskError)(
-      `recovery: unknown resource "${resource}" \u2014 the plan has ${Object.keys(_chunkMAYYTYV5cjs.RELATIONSHIP_MAP).length} resources`,
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
+      `recovery: unknown resource "${resource}" \u2014 the plan has ${Object.keys(_chunkWRWX6WIKcjs.RELATIONSHIP_MAP).length} resources`,
       {
         code: "RESOURCE_UNKNOWN",
         category: "validation",
@@ -690,7 +690,7 @@ async function recovery(client, input, opts = {}) {
       }
     );
   }
-  const holder = client[_chunkMAYYTYV5cjs.camelKey.call(void 0, resource)];
+  const holder = client[_chunkWRWX6WIKcjs.camelKey.call(void 0, resource)];
   if (!holder || typeof holder.queryBounded !== "function") {
     configError(
       `recovery: ${resource} exposes no bounded query surface \u2014 the marker search cannot run`,
@@ -698,7 +698,7 @@ async function recovery(client, input, opts = {}) {
       "Use a resource with a query surface, or address the record by id directly (get/fetchMany)."
     );
   }
-  const field = input.field !== void 0 ? String(input.field) : _chunkMAYYTYV5cjs.MARKER_FIELDS[resource];
+  const field = input.field !== void 0 ? String(input.field) : _chunkWRWX6WIKcjs.MARKER_FIELDS[resource];
   if (typeof field !== "string" || field.trim() === "") {
     configError(
       `recovery: ${resource} has no plan markerField and no input.field was passed \u2014 the marker search needs a name-like field to filter on`,
@@ -734,7 +734,7 @@ async function recovery(client, input, opts = {}) {
       );
     }
     for (const c of input.filter) {
-      if (!_chunkMAYYTYV5cjs.isRecord.call(void 0, c) || typeof c.op !== "string" || c.op === "and" || c.op === "or") {
+      if (!_chunkWRWX6WIKcjs.isRecord.call(void 0, c) || typeof c.op !== "string" || c.op === "and" || c.op === "or") {
         configError(
           "recovery: input.filter accepts only plain leaf conditions ({ field, op, value }) \u2014 no grouping",
           operation,
@@ -755,7 +755,7 @@ async function recovery(client, input, opts = {}) {
     }
     limit = input.limit;
   }
-  const boundaryNote = _chunkMAYYTYV5cjs.DELETE_BOUNDARY_NOTES[resource];
+  const boundaryNote = _chunkWRWX6WIKcjs.DELETE_BOUNDARY_NOTES[resource];
   const boundary = {
     available: boundaryNote === void 0,
     reason: _nullishCoalesce(boundaryNote, () => ( null)),
@@ -767,7 +767,7 @@ async function recovery(client, input, opts = {}) {
   };
   const isDelete = action === "delete";
   if (isDelete && boundaryNote !== void 0) {
-    throw new (0, _chunkMAYYTYV5cjs.DeleteBoundaryError)(
+    throw new (0, _chunkWRWX6WIKcjs.DeleteBoundaryError)(
       `recovery: the vendor defines no DELETE for ${resource} \u2014 the delete cannot be issued through the API (zero wire was issued)`,
       {
         operation,
@@ -779,7 +779,7 @@ async function recovery(client, input, opts = {}) {
   const dryRun = _optionalChain([opts, 'optionalAccess', _13 => _13.dryRun]) !== false;
   const confirm = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _14 => _14.confirm]), () => ( input.confirm));
   if (isDelete && !dryRun && confirm !== RECOVERY_CONFIRM) {
-    throw new (0, _chunkMAYYTYV5cjs.ConfirmationRequiredError)(
+    throw new (0, _chunkWRWX6WIKcjs.ConfirmationRequiredError)(
       `recovery: action 'delete' apply is destructive and requires its confirmation flag: pass confirm: "${RECOVERY_CONFIRM}"`,
       {
         operation: RECOVERY_CONFIRM,
@@ -795,7 +795,7 @@ async function recovery(client, input, opts = {}) {
   const query = await holder.queryBounded({ filter: conditions, limit });
   if (query.hasMore) {
     const wire = isDelete ? "DELETE wire" : "mutating wire";
-    throw new (0, _chunkMAYYTYV5cjs.RecoveryTruncatedError)(
+    throw new (0, _chunkWRWX6WIKcjs.RecoveryTruncatedError)(
       `recovery: the marker search on ${resource} TRIPPED its match cap (${limit}) \u2014 more matches exist than were returned (zero ${wire} was issued)`,
       {
         operation,
@@ -834,7 +834,7 @@ async function recovery(client, input, opts = {}) {
     return { ...base, simulated: true, dryRun: true };
   }
   if (unsafeId) {
-    throw new (0, _chunkMAYYTYV5cjs.MarkerUnsafeIdError)(
+    throw new (0, _chunkWRWX6WIKcjs.MarkerUnsafeIdError)(
       `recovery: ${unsafeIds.length} of ${matches.length} match(es) on ${resource} have ids beyond Number.MAX_SAFE_INTEGER \u2014 they CANNOT be addressed through the SDK's typed delete surface (zero DELETE wire was issued)`,
       {
         operation,
@@ -845,7 +845,7 @@ async function recovery(client, input, opts = {}) {
   }
   const deleteMethod = holder.delete;
   if (deleteMethod === void 0) {
-    throw new (0, _chunkMAYYTYV5cjs.DeleteBoundaryError)(
+    throw new (0, _chunkWRWX6WIKcjs.DeleteBoundaryError)(
       `recovery: ${resource} has no delete method on the client \u2014 the boundary is marked available in the plan but the typed delete surface is missing`,
       {
         operation,
@@ -874,14 +874,14 @@ async function recovery(client, input, opts = {}) {
           verify = "still-present";
         }
       } catch (err) {
-        if (err instanceof _chunkMAYYTYV5cjs.NotFoundError) verify = "not-found";
+        if (err instanceof _chunkWRWX6WIKcjs.NotFoundError) verify = "not-found";
         else {
           verify = "error";
-          code = _chunkMAYYTYV5cjs.isAutotaskError.call(void 0, err) ? err.code : "SERVER_ERROR";
+          code = _chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err) ? err.code : "SERVER_ERROR";
         }
       }
     } catch (err) {
-      code = _chunkMAYYTYV5cjs.isAutotaskError.call(void 0, err) ? err.code : "SERVER_ERROR";
+      code = _chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err) ? err.code : "SERVER_ERROR";
     }
     deleted.push({ id, verified: verify === "not-found", code });
   }
@@ -889,13 +889,13 @@ async function recovery(client, input, opts = {}) {
 }
 
 // src/operations/invoke.ts
-var RECORDS = _chunkEWMG3HHUcjs.CAPABILITIES;
+var RECORDS = _chunk5O5EPYBOcjs.CAPABILITIES;
 var byId = new Map(RECORDS.map((r) => [r.id, r]));
 function needsConfirmation(record) {
   return record.effect === "destructive" || (_nullishCoalesce(record.flags, () => ( []))).includes("requiresApproval");
 }
 function refuse(message, operation, suggestedAction) {
-  throw new (0, _chunkMAYYTYV5cjs.ConfirmationRequiredError)(message, { operation, suggestedAction });
+  throw new (0, _chunkWRWX6WIKcjs.ConfirmationRequiredError)(message, { operation, suggestedAction });
 }
 var MODE_BY_EFFECT = {
   read: "read",
@@ -939,7 +939,7 @@ function looseTypeOk(type, value) {
     case "string[]":
       return Array.isArray(value) && value.every((v) => typeof v === "string");
     case "object":
-      return _chunkMAYYTYV5cjs.isRecord.call(void 0, value);
+      return _chunkWRWX6WIKcjs.isRecord.call(void 0, value);
     default:
       return true;
   }
@@ -956,7 +956,7 @@ function validateDispatchArgs(record, argsIn) {
   const schema = _nullishCoalesce(record.inputSchema, () => ( {}));
   const names = Object.keys(schema);
   if (args.length > names.length) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `invoke: "${operation}" declares ${names.length} positional arg(s) (${declaredArgList(record)}) but ${args.length} were passed \u2014 extra args are refused, not dropped (v0.2.0 silently dropped them)`,
       {
         operation,
@@ -966,7 +966,7 @@ function validateDispatchArgs(record, argsIn) {
   }
   const required = names.filter((n) => schema[n].required);
   if (args.length < required.length) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `invoke: "${operation}" requires ${required.length} positional arg(s) (${required.map((n) => `${n}: ${schema[n].type}`).join(", ")}) but only ${args.length} were passed \u2014 declared args: ${declaredArgList(record)}`,
       { operation }
     );
@@ -977,7 +977,7 @@ function validateDispatchArgs(record, argsIn) {
     const name = names[i];
     const spec = schema[name];
     if (!looseTypeOk(spec.type, value)) {
-      throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
         `invoke: "${operation}" arg ${i + 1} is declared ${name}: ${spec.type} \u2014 the value has the wrong type (pass a ${spec.type} value)`,
         { operation }
       );
@@ -985,7 +985,12 @@ function validateDispatchArgs(record, argsIn) {
   }
 }
 var PARAMS_BAG_KEYS = {
-  query: ["filter", "limit", "includeFields", "via", "latest", "noteChars", "fieldsPreset"],
+  query: ["filter", "limit", "includeFields", "via", "latest", "noteChars", "fieldsPreset", "fieldCheck"],
+  // No registry row DECLARES `queryAll` today (a plan decision: the raw walk is
+  // called directly), so this entry never fires. It is KEPT so that a future
+  // `queryAll` row — which `invoke` WOULD dispatch via holder[operation] —
+  // cannot silently open the bag (the keys are the vendor `QueryParams` set
+  // the raw method accepts).
   queryAll: ["filter", "maxRecords", "includeFields", "maxTotalRecords", "via"],
   count: ["filter"]
 };
@@ -1029,11 +1034,11 @@ function validateParamsBag(record, args) {
   const valid = PARAMS_BAG_KEYS[record.operation];
   if (valid === void 0) return;
   const bag = _optionalChain([args, 'optionalAccess', _15 => _15[0]]);
-  if (bag === void 0 || bag === null || !_chunkMAYYTYV5cjs.isRecord.call(void 0, bag)) return;
+  if (bag === void 0 || bag === null || !_chunkWRWX6WIKcjs.isRecord.call(void 0, bag)) return;
   const unknown = Object.keys(bag).filter((k) => !valid.includes(k));
   if (unknown.length === 0) return;
   const suggestions = unknown.map((k) => [k, suggestForKey(k, valid)]).filter((pair) => pair[1] !== null).map(([k, s]) => `"${k}" \u2192 "${s}"`);
-  throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+  throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
     `invoke: "${record.id}" params bag has unknown key(s) ${unknown.map((k) => `"${k}"`).join(", ")} \u2014 the bag is closed (valid keys: ${valid.join(", ")})`,
     {
       operation: record.id,
@@ -1041,13 +1046,80 @@ function validateParamsBag(record, args) {
     }
   );
 }
+async function liveFieldNames(holder) {
+  const reader = holder.getFieldInfo;
+  if (typeof reader !== "function") return null;
+  try {
+    const rows = await reader.call(holder);
+    const names = [];
+    for (const row of rows) {
+      if (typeof row.name === "string") names.push(row.name);
+    }
+    return names.length > 0 ? names : null;
+  } catch (err) {
+    if (!_chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err) || err.code === "ABORTED") throw err;
+    return null;
+  }
+}
+var UNKNOWN_NAME_LIST_CAP = 20;
+var UNKNOWN_NAME_DISPLAY_CHARS = 80;
+async function validateQueryIncludeFields(record, holder, args) {
+  const bag = args[0];
+  if (!_chunkWRWX6WIKcjs.isRecord.call(void 0, bag)) return;
+  const fieldCheck = bag["fieldCheck"];
+  if (fieldCheck !== void 0 && typeof fieldCheck !== "boolean") {
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+      `invoke: "${record.id}" params bag fieldCheck must be a boolean (got ${typeof fieldCheck}) \u2014 the request was not issued`,
+      { operation: record.id, suggestedAction: "Pass fieldCheck: true (default) or fieldCheck: false (disable the includeFields name check)." }
+    );
+  }
+  const includeFields = bag["includeFields"];
+  if (includeFields === void 0) return;
+  let shapeOk = Array.isArray(includeFields);
+  const names = [];
+  if (shapeOk) {
+    for (const entry of includeFields) {
+      if (typeof entry !== "string" || entry.length === 0) {
+        shapeOk = false;
+        break;
+      }
+      names.push(entry);
+    }
+  }
+  if (!shapeOk) {
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+      `invoke: "${record.id}" params bag includeFields must be an array of non-empty field-name strings \u2014 the request was not issued`,
+      {
+        operation: record.id,
+        suggestedAction: 'Pass includeFields as an array of exact vendor field names, e.g. ["id", "title"]; the live set is in operations.fieldCatalog.'
+      }
+    );
+  }
+  if (names.length === 0) return;
+  if (fieldCheck === false) return;
+  const live = await liveFieldNames(holder);
+  const known = _nullishCoalesce(live, () => ( _chunkWRWX6WIKcjs.MODEL_FIELD_SETS[record.resource]));
+  if (known === void 0) return;
+  const unknown = names.filter((name) => !known.includes(name));
+  if (unknown.length === 0) return;
+  const authority = live !== null ? "the tenant's live entity field metadata" : "the vendored spec (src/field-sets.ts)";
+  const listed = unknown.slice(0, UNKNOWN_NAME_LIST_CAP).map((n) => `"${n.length > UNKNOWN_NAME_DISPLAY_CHARS ? `${n.slice(0, UNKNOWN_NAME_DISPLAY_CHARS)}\u2026` : n}"`).join(", ");
+  const more = unknown.length > UNKNOWN_NAME_LIST_CAP ? ` (and ${unknown.length - UNKNOWN_NAME_LIST_CAP} more)` : "";
+  throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    `invoke: "${record.id}" includeFields has unknown field name(s) ${listed}${more} against ${authority} \u2014 the query POST was not issued`,
+    {
+      operation: record.id,
+      suggestedAction: `Use exact vendor field names (operations.fieldCatalog lists the live set for the entity); pass fieldCheck: false to disable this name check. The authority here was ${authority}.`
+    }
+  );
+}
 var INVOKE_OPTION_KEYS = ["dryRun", "confirm", "lastModifiedDate", "maxRetries", "mode"];
 function validateInvokeOptions(opts, operation) {
   if (opts === void 0 || opts === null) return;
   const unknown = Object.keys(opts).filter((k) => !INVOKE_OPTION_KEYS.includes(k));
   if (unknown.length === 0) return;
   const suggestions = unknown.map((k) => [k, suggestForKey(k, ["dryRun", "confirm", "lastModifiedDate", "maxRetries"])]).filter((pair) => pair[1] !== null).map(([k, s]) => `"${k}" \u2192 "${s}"`);
-  throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+  throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
     `invoke: "${operation}" has unknown option key(s) ${unknown.map((k) => `"${k}"`).join(", ")} \u2014 the options set is closed (valid: dryRun, confirm, lastModifiedDate, maxRetries; "mode" is internal to the mode wrappers)`,
     {
       operation,
@@ -1060,11 +1132,11 @@ function unknownKeysRefusal(raw, validKeys, subject, operation) {
   const unknown = Object.keys(raw).filter((k) => !validKeys.includes(k));
   if (unknown.length === 0) return null;
   const suggestions = unknown.map((k) => [k, suggestForKey(k, [...validKeys])]).filter((pair) => pair[1] !== null).map(([k, s]) => `"${k}" \u2192 "${s}"`);
-  return new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+  return new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
     `unknown ${subject} ${unknown.map((k) => `"${k}"`).join(", ")} \u2014 the ${subject} set is closed (valid keys: ${validKeys.join(", ")})`,
     {
       ...operation !== void 0 ? { operation } : {},
-      suggestedAction: suggestions.length > 0 ? `Fix the ${subject} name (${suggestions.join(", ")}); the full contract is in the tool's inputSchema (autotask_describe).` : `Pass only the valid keys (${validKeys.join(", ")}).`
+      suggestedAction: suggestions.length > 0 ? operation === void 0 ? `Fix the ${subject} name (${suggestions.join(", ")}); the tool's full contract is in the tool's inputSchema, served by the MCP client's list_tools.` : `Fix the ${subject} name (${suggestions.join(", ")}); the full contract is in the tool's inputSchema (autotask_describe).` : `Pass only the valid keys (${validKeys.join(", ")}).`
     }
   );
 }
@@ -1072,7 +1144,7 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
   const args = _nullishCoalesce(argsIn, () => ( []));
   const record = byId.get(operation);
   if (record === void 0) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `invoke: unknown operation "${operation}" \u2014 it is not in the capability registry`,
       { operation, suggestedAction: "List the registry (the ./capabilities subpath) for the exact operation key." }
     );
@@ -1080,17 +1152,17 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
   validateInvokeOptions(opts, operation);
   const mode = opts.mode;
   if (mode !== void 0 && MODE_BY_EFFECT[record.effect] !== mode) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(crossModeRefusal(operation, record.effect, mode), { operation });
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(crossModeRefusal(operation, record.effect, mode), { operation });
   }
   if (opts.dryRun !== void 0 && typeof opts.dryRun !== "boolean") {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `invoke: dryRun must be a boolean (got ${typeof opts.dryRun}) \u2014 "${operation}" was not issued`,
       { operation, suggestedAction: "Pass dryRun: true (simulate) or dryRun: false (apply) as a real boolean." }
     );
   }
   const isWrite = record.effect !== "read";
   if (!isWrite && opts.dryRun === true) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `invoke: "${operation}" is a read \u2014 dryRun is not applicable (reads issue their request as-is)`,
       { operation }
     );
@@ -1105,15 +1177,15 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
   validateDispatchArgs(record, args);
   validateParamsBag(record, args);
   const boundedQuery = record.kind === "primitive" && record.operation === "query";
-  let holder = client[_chunkMAYYTYV5cjs.camelKey.call(void 0, record.resource)];
+  let holder = client[_chunkWRWX6WIKcjs.camelKey.call(void 0, record.resource)];
   if (typeof holder === "function") {
-    holder = _nullishCoalesce(client[`${_chunkMAYYTYV5cjs.camelKey.call(void 0, record.resource)}Resource`], () => ( holder));
+    holder = _nullishCoalesce(client[`${_chunkWRWX6WIKcjs.camelKey.call(void 0, record.resource)}Resource`], () => ( holder));
   }
   if (holder === void 0 && record.resource === "operations") {
     holder = {
       resolveAny: (identifier, opts2) => resolveAny(client, identifier, opts2),
       searchAcrossResources: (query, opts2) => searchAcrossResources(client, query, opts2),
-      fetchMany: (items, opts2) => _chunkMAYYTYV5cjs.fetchMany.call(void 0, client, items, opts2),
+      fetchMany: (items, opts2) => _chunkWRWX6WIKcjs.fetchMany.call(void 0, client, items, opts2),
       // Issue #62: the generic aggregate + the cheap count — the
       // groupBy/sum-absent mode is ONE vendor /query/count (the S12-C blind
       // sentinel rides through); the group/sum modes walk the named
@@ -1123,12 +1195,12 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
       // Issue #59 PR-B: the bulk fetch by ids — query-first chunked `id in`
       // reads + the per-id `get` fallback (blind-surface-safe; per-item
       // typed outcomes reuse the fetchMany shapes).
-      fetchByIds: (items, opts2) => _chunkMAYYTYV5cjs.fetchByIds.call(void 0, client, items, opts2),
+      fetchByIds: (items, opts2) => _chunkWRWX6WIKcjs.fetchByIds.call(void 0, client, items, opts2),
       // Issue #65: opt-in resource name expansion — per-id resources.get
       // reads ONLY (never an id-in query — the resources table can be blind
       // to count/query while per-id reads work); blind-marked rows for ids
       // the API user cannot resolve; the name cache (default-on).
-      expandResourceNames: (ids, opts2) => _chunkMAYYTYV5cjs.expandResourceNames.call(void 0, client, ids, opts2),
+      expandResourceNames: (ids, opts2) => _chunkWRWX6WIKcjs.expandResourceNames.call(void 0, client, ids, opts2),
       relationshipMap: (resourceKey) => relationshipMap(client, resourceKey),
       // Issue #11: the served blind-surface inventory (zero wire) + the
       // bounded caller-opted reachability sweep (read-only, confirmProbe-
@@ -1141,7 +1213,7 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
       // entityInformation GETs (the op's own cap refuses over-cap fan-outs
       // pre-request; per-resource failures are recorded on the row and
       // never abort the call).
-      fieldCatalog: (opts2) => _chunkMAYYTYV5cjs.fieldCatalog.call(void 0, client, opts2),
+      fieldCatalog: (opts2) => _chunkWRWX6WIKcjs.fieldCatalog.call(void 0, client, opts2),
       // Issue #9: the one-call recovery/cleanup op — effect write in the
       // registry (the governor's dry-run-first applies to it); the op's own
       // confirm gate makes the destructive action deliberate (the governor
@@ -1150,15 +1222,16 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
     };
   }
   if (holder === void 0) {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `invoke: the client exposes no accessor for resource "${record.resource}"`,
       { operation }
     );
   }
+  if (boundedQuery) await validateQueryIncludeFields(record, holder, args);
   const methodName = boundedQuery ? "queryBounded" : record.operation;
   const method = holder[methodName];
   if (typeof method !== "function") {
-    throw new (0, _chunkMAYYTYV5cjs.AutotaskConfigError)(
+    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
       `invoke: "${record.resource}.${methodName}" is not a callable method on the client`,
       { operation }
     );
@@ -1265,4 +1338,4 @@ async function invokeDelete(client, operation, args = [], opts = {}) {
 
 
 
-exports.AGGREGATE_DATE_BUCKETS = AGGREGATE_DATE_BUCKETS; exports.AGGREGATE_DEFAULT_LIMIT = AGGREGATE_DEFAULT_LIMIT; exports.AGGREGATE_DEFAULT_TOP = AGGREGATE_DEFAULT_TOP; exports.AGGREGATE_TOP_MAX = AGGREGATE_TOP_MAX; exports.BLIND_SURFACE_KINDS = BLIND_SURFACE_KINDS; exports.CREATE_BLOCKER_KINDS = CREATE_BLOCKER_KINDS; exports.EXPAND_RESOURCE_NAMES_MAX_IDS = _chunkMAYYTYV5cjs.EXPAND_RESOURCE_NAMES_MAX_IDS; exports.FETCH_BY_IDS_CHUNK_SIZE = _chunkMAYYTYV5cjs.FETCH_BY_IDS_CHUNK_SIZE; exports.FETCH_BY_IDS_MAX_ITEMS = _chunkMAYYTYV5cjs.FETCH_BY_IDS_MAX_ITEMS; exports.FETCH_MANY_MAX_ITEMS = _chunkMAYYTYV5cjs.FETCH_MANY_MAX_ITEMS; exports.FIELD_CACHE_KINDS = _chunkMAYYTYV5cjs.FIELD_CACHE_KINDS; exports.FIELD_CATALOG_HONESTY_NOTE = _chunkMAYYTYV5cjs.FIELD_CATALOG_HONESTY_NOTE; exports.INVOKE_OPTION_KEYS = INVOKE_OPTION_KEYS; exports.MAX_FIELD_CATALOG_WIRE = _chunkMAYYTYV5cjs.MAX_FIELD_CATALOG_WIRE; exports.PARAMS_BAG_KEYS = PARAMS_BAG_KEYS; exports.PICKLIST_VALUE_NOT_SERVED_NOTE = _chunkMAYYTYV5cjs.PICKLIST_VALUE_NOT_SERVED_NOTE; exports.RECOVERY_CONFIRM = RECOVERY_CONFIRM; exports.RECOVERY_DEFAULT_LIMIT = RECOVERY_DEFAULT_LIMIT; exports.RECOVERY_MAX_LIMIT = RECOVERY_MAX_LIMIT; exports.WORKFLOW_RESOURCES = _chunkMAYYTYV5cjs.WORKFLOW_RESOURCES; exports.aggregate = aggregate; exports.blindSurfaces = blindSurfaces; exports.createGuidance = createGuidance; exports.dateBucketLabel = dateBucketLabel; exports.expandResourceNames = _chunkMAYYTYV5cjs.expandResourceNames; exports.fetchByIds = _chunkMAYYTYV5cjs.fetchByIds; exports.fetchMany = _chunkMAYYTYV5cjs.fetchMany; exports.fieldCatalog = _chunkMAYYTYV5cjs.fieldCatalog; exports.invoke = invoke; exports.invokeDelete = invokeDelete; exports.invokeRead = invokeRead; exports.invokeWrite = invokeWrite; exports.needsConfirmation = needsConfirmation; exports.probeReachability = probeReachability; exports.recovery = recovery; exports.relationshipMap = relationshipMap; exports.resolveAny = resolveAny; exports.searchAcrossResources = searchAcrossResources; exports.unknownKeysRefusal = unknownKeysRefusal; exports.validateDispatchArgs = validateDispatchArgs; exports.validateFetchManyItems = _chunkMAYYTYV5cjs.validateFetchManyItems; exports.validateInvokeOptions = validateInvokeOptions; exports.validateParamsBag = validateParamsBag;
+exports.AGGREGATE_DATE_BUCKETS = AGGREGATE_DATE_BUCKETS; exports.AGGREGATE_DEFAULT_LIMIT = AGGREGATE_DEFAULT_LIMIT; exports.AGGREGATE_DEFAULT_TOP = AGGREGATE_DEFAULT_TOP; exports.AGGREGATE_TOP_MAX = AGGREGATE_TOP_MAX; exports.BLIND_SURFACE_KINDS = BLIND_SURFACE_KINDS; exports.CREATE_BLOCKER_KINDS = CREATE_BLOCKER_KINDS; exports.EXPAND_RESOURCE_NAMES_MAX_IDS = _chunkWRWX6WIKcjs.EXPAND_RESOURCE_NAMES_MAX_IDS; exports.FETCH_BY_IDS_CHUNK_SIZE = _chunkWRWX6WIKcjs.FETCH_BY_IDS_CHUNK_SIZE; exports.FETCH_BY_IDS_MAX_ITEMS = _chunkWRWX6WIKcjs.FETCH_BY_IDS_MAX_ITEMS; exports.FETCH_MANY_MAX_ITEMS = _chunkWRWX6WIKcjs.FETCH_MANY_MAX_ITEMS; exports.FIELD_CACHE_KINDS = _chunkWRWX6WIKcjs.FIELD_CACHE_KINDS; exports.FIELD_CATALOG_HONESTY_NOTE = _chunkWRWX6WIKcjs.FIELD_CATALOG_HONESTY_NOTE; exports.INVOKE_OPTION_KEYS = INVOKE_OPTION_KEYS; exports.MAX_FIELD_CATALOG_WIRE = _chunkWRWX6WIKcjs.MAX_FIELD_CATALOG_WIRE; exports.PARAMS_BAG_KEYS = PARAMS_BAG_KEYS; exports.PICKLIST_VALUE_NOT_SERVED_NOTE = _chunkWRWX6WIKcjs.PICKLIST_VALUE_NOT_SERVED_NOTE; exports.RECOVERY_CONFIRM = RECOVERY_CONFIRM; exports.RECOVERY_DEFAULT_LIMIT = RECOVERY_DEFAULT_LIMIT; exports.RECOVERY_MAX_LIMIT = RECOVERY_MAX_LIMIT; exports.WORKFLOW_RESOURCES = _chunkWRWX6WIKcjs.WORKFLOW_RESOURCES; exports.aggregate = aggregate; exports.blindSurfaces = blindSurfaces; exports.createGuidance = createGuidance; exports.dateBucketLabel = dateBucketLabel; exports.expandResourceNames = _chunkWRWX6WIKcjs.expandResourceNames; exports.fetchByIds = _chunkWRWX6WIKcjs.fetchByIds; exports.fetchMany = _chunkWRWX6WIKcjs.fetchMany; exports.fieldCatalog = _chunkWRWX6WIKcjs.fieldCatalog; exports.invoke = invoke; exports.invokeDelete = invokeDelete; exports.invokeRead = invokeRead; exports.invokeWrite = invokeWrite; exports.needsConfirmation = needsConfirmation; exports.probeReachability = probeReachability; exports.recovery = recovery; exports.relationshipMap = relationshipMap; exports.resolveAny = resolveAny; exports.searchAcrossResources = searchAcrossResources; exports.unknownKeysRefusal = unknownKeysRefusal; exports.validateDispatchArgs = validateDispatchArgs; exports.validateFetchManyItems = _chunkWRWX6WIKcjs.validateFetchManyItems; exports.validateInvokeOptions = validateInvokeOptions; exports.validateParamsBag = validateParamsBag;