node-autotask 0.18.0 → 0.20.0

package/dist/operations/index.cjs

@@ -36,26 +36,27 @@
 
 
 
-var _chunkWRWX6WIKcjs = require('../chunk-WRWX6WIK.cjs');
 
+var _chunkL6V66V22cjs = require('../chunk-L6V66V22.cjs');
 
-var _chunk5O5EPYBOcjs = require('../chunk-5O5EPYBO.cjs');
+
+var _chunkFLYTKJKVcjs = require('../chunk-FLYTKJKV.cjs');
 
 // src/operations/searchAcrossResources.ts
 var DEFAULT_LIMIT = 25;
 function resourceFor(client, key) {
-  return client[_chunkWRWX6WIKcjs.camelKey.call(void 0, key)];
+  return client[_chunkL6V66V22cjs.camelKey.call(void 0, key)];
 }
 async function searchAcrossResources(client, query, opts = {}) {
   const text = query.trim();
   if (text === "") {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("searchAcrossResources: query must be a non-empty string");
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("searchAcrossResources: query must be a non-empty string");
   }
-  const keys = _nullishCoalesce(opts.resources, () => ( _chunkWRWX6WIKcjs.WORKFLOW_RESOURCES));
+  const keys = _nullishCoalesce(opts.resources, () => ( _chunkL6V66V22cjs.WORKFLOW_RESOURCES));
   if (keys.length === 0) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("searchAcrossResources: no resources requested");
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("searchAcrossResources: no resources requested");
   }
-  const limit = _chunkWRWX6WIKcjs.clampPageSize.call(void 0, _nullishCoalesce(opts.limit, () => ( DEFAULT_LIMIT)));
+  const limit = _chunkL6V66V22cjs.clampPageSize.call(void 0, _nullishCoalesce(opts.limit, () => ( DEFAULT_LIMIT)));
   const results = [];
   const skipped = [];
   for (const key of keys) {
@@ -73,7 +74,7 @@ async function searchAcrossResources(client, query, opts = {}) {
 
 // src/operations/resolveAny.ts
 function resourceFor2(client, key) {
-  return client[_chunkWRWX6WIKcjs.camelKey.call(void 0, key)];
+  return client[_chunkL6V66V22cjs.camelKey.call(void 0, key)];
 }
 var FAULT_CATEGORIES = /* @__PURE__ */ new Set(["auth", "rate_limit", "server", "network", "timeout", "policy"]);
 function missCost(identifier) {
@@ -82,13 +83,13 @@ function missCost(identifier) {
 }
 async function resolveAny(client, identifier, opts = {}) {
   if (typeof identifier === "number") {
-    _chunkWRWX6WIKcjs.parseIdentifier.call(void 0, identifier, "identifier");
+    _chunkL6V66V22cjs.parseIdentifier.call(void 0, identifier, "identifier");
   } else if (identifier.trim() === "") {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("resolveAny: identifier must be non-empty");
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("resolveAny: identifier must be non-empty");
   }
-  const keys = _nullishCoalesce(opts.resources, () => ( _chunkWRWX6WIKcjs.WORKFLOW_RESOURCES));
+  const keys = _nullishCoalesce(opts.resources, () => ( _chunkL6V66V22cjs.WORKFLOW_RESOURCES));
   if (keys.length === 0) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("resolveAny: no resources requested");
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("resolveAny: no resources requested");
   }
   const results = [];
   for (const key of keys) {
@@ -118,9 +119,9 @@ async function resolveAny(client, identifier, opts = {}) {
     } catch (err) {
       let code;
       let candidates = [];
-      if (err instanceof _chunkWRWX6WIKcjs.AutotaskConfigError) {
+      if (err instanceof _chunkL6V66V22cjs.AutotaskConfigError) {
         code = "CONFIG_ERROR";
-      } else if (_chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err)) {
+      } else if (_chunkL6V66V22cjs.isAutotaskError.call(void 0, err)) {
         if (FAULT_CATEGORIES.has(err.category)) throw err;
         code = err.code;
         if (code === "RESOLUTION_AMBIGUOUS" && err.resourceIds !== void 0) {
@@ -147,7 +148,7 @@ async function resolveAny(client, identifier, opts = {}) {
 // src/operations/aggregate.ts
 var AGGREGATE_TOP_MAX = 100;
 var AGGREGATE_DEFAULT_TOP = 25;
-var AGGREGATE_DEFAULT_LIMIT = _chunkWRWX6WIKcjs.BOUNDED_QUERY_MAX_LIMIT;
+var AGGREGATE_DEFAULT_LIMIT = _chunkL6V66V22cjs.BOUNDED_QUERY_MAX_LIMIT;
 var AGGREGATE_DATE_BUCKETS = ["month", "week", "year"];
 var DATE_ONLY_RE = /^(\d{4})-(\d{2})-(\d{2})$/;
 var DATETIME_RE = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(\.\d{1,9})?(Z|[+-]\d{2}:?\d{2})?$/;
@@ -204,7 +205,7 @@ function dateBucketLabel(value, bucket) {
 }
 var QUERY_RESOURCE_KEYS = (() => {
   const s = /* @__PURE__ */ new Set();
-  for (const rec of _chunk5O5EPYBOcjs.CAPABILITIES) if (rec.operation === "query") s.add(rec.resource);
+  for (const rec of _chunkFLYTKJKVcjs.CAPABILITIES) if (rec.operation === "query") s.add(rec.resource);
   return s;
 })();
 var AGGREGATE_OPT_KEYS = ["groupBy", "sum", "top", "limit"];
@@ -239,14 +240,14 @@ function validateAggregate(operation, filter, opts) {
       conditions = [];
     } else {
       try {
-        conditions = _chunkWRWX6WIKcjs.buildFilter.call(void 0, conds).filter;
+        conditions = _chunkL6V66V22cjs.buildFilter.call(void 0, conds).filter;
       } catch (err) {
-        problems.push(err instanceof _chunkWRWX6WIKcjs.AutotaskConfigError ? err.message : `filter must be the query-bag filter (13 operators; caps 500 OR-conditions / 1 UDF / 8000 chars); ${String(err)}`);
+        problems.push(err instanceof _chunkL6V66V22cjs.AutotaskConfigError ? err.message : `filter must be the query-bag filter (13 operators; caps 500 OR-conditions / 1 UDF / 8000 chars); ${String(err)}`);
       }
     }
   }
   if (opts !== void 0 && (typeof opts !== "object" || opts === null || Array.isArray(opts))) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `aggregate: opts must be the options object (got ${Array.isArray(opts) ? "an array" : typeof opts})`,
       { operation: "operations.aggregate" }
     );
@@ -256,8 +257,8 @@ function validateAggregate(operation, filter, opts) {
       problems.push(`unknown opts key "${key}" \u2014 the bag is closed: ${AGGREGATE_OPT_KEYS.join(", ")}`);
     }
   }
-  const fieldSets = resourceKey !== void 0 ? _chunkWRWX6WIKcjs.MODEL_FIELD_SETS[resourceKey] : void 0;
-  const dateSets = resourceKey !== void 0 ? _chunkWRWX6WIKcjs.MODEL_DATE_FIELDS[resourceKey] : void 0;
+  const fieldSets = resourceKey !== void 0 ? _chunkL6V66V22cjs.MODEL_FIELD_SETS[resourceKey] : void 0;
+  const dateSets = resourceKey !== void 0 ? _chunkL6V66V22cjs.MODEL_DATE_FIELDS[resourceKey] : void 0;
   const checkFields = (name, fields) => {
     if (fields === void 0) return [];
     if (!Array.isArray(fields) || fields.length === 0 || fields.some((f) => typeof f !== "string" || f.trim() === "")) {
@@ -321,11 +322,11 @@ function validateAggregate(operation, filter, opts) {
     if (!Number.isInteger(opts.limit)) {
       problems.push(`limit must be an integer (got ${String(opts.limit)})`);
     } else {
-      limit = Math.min(Math.max(opts.limit, 1), _chunkWRWX6WIKcjs.BOUNDED_QUERY_MAX_LIMIT);
+      limit = Math.min(Math.max(opts.limit, 1), _chunkL6V66V22cjs.BOUNDED_QUERY_MAX_LIMIT);
     }
   }
   if (problems.length > 0) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `aggregate: ${problems.length} problem(s) found pre-request (zero wire was issued)
 - ` + problems.join("\n- "),
       { operation: "operations.aggregate" }
@@ -335,9 +336,9 @@ function validateAggregate(operation, filter, opts) {
 }
 async function aggregate(client, operation, filter, opts = {}) {
   const v = validateAggregate(operation, filter, opts);
-  const holder = client[_chunkWRWX6WIKcjs.camelKey.call(void 0, v.resourceKey)];
+  const holder = client[_chunkL6V66V22cjs.camelKey.call(void 0, v.resourceKey)];
   if (holder === void 0) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(`aggregate: the client exposes no accessor for resource "${v.resourceKey}"`, {
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(`aggregate: the client exposes no accessor for resource "${v.resourceKey}"`, {
       operation: "operations.aggregate",
       suggestedAction: "Rebuild the client from the SDK build that ships this registry (the resource set is pinned by the plan)."
     });
@@ -392,20 +393,20 @@ async function aggregate(client, operation, filter, opts = {}) {
 async function relationshipMap(client, resourceKey) {
   void client;
   if (typeof resourceKey !== "string" || resourceKey.trim() === "") {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `relationshipMap: resourceKey must be a non-empty plan resource key string (e.g. 'tickets'; got ${typeof resourceKey === "string" ? "a blank string" : typeof resourceKey})`,
       { suggestedAction: "Pass the exact plan resource key (snake_case) from autotask_catalog \u2014 e.g. tickets, companies, configuration_items, ticket_notes." }
     );
   }
   const key = resourceKey.trim();
-  const entry = _chunkWRWX6WIKcjs.RELATIONSHIP_MAP[key];
+  const entry = _chunkL6V66V22cjs.RELATIONSHIP_MAP[key];
   if (entry === void 0) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
-      `relationshipMap: unknown resource "${key}" \u2014 the plan has ${Object.keys(_chunkWRWX6WIKcjs.RELATIONSHIP_MAP).length} resources`,
+    throw new (0, _chunkL6V66V22cjs.AutotaskError)(
+      `relationshipMap: unknown resource "${key}" \u2014 the plan has ${Object.keys(_chunkL6V66V22cjs.RELATIONSHIP_MAP).length} resources`,
       {
         code: "RESOURCE_UNKNOWN",
         category: "validation",
-        suggestedAction: `Pass the exact plan resource key (snake_case) from autotask_catalog (e.g. tickets, companies, configuration_items). Zone facts served are ${_chunkWRWX6WIKcjs.RELATIONSHIP_ZONE.label} (${_chunkWRWX6WIKcjs.RELATIONSHIP_ZONE.zone})-verified.`
+        suggestedAction: `Pass the exact plan resource key (snake_case) from autotask_catalog (e.g. tickets, companies, configuration_items). Zone facts served are ${_chunkL6V66V22cjs.RELATIONSHIP_ZONE.label} (${_chunkL6V66V22cjs.RELATIONSHIP_ZONE.zone})-verified.`
       }
     );
   }
@@ -422,24 +423,24 @@ var BLIND_SURFACE_KINDS = [
 async function blindSurfaces(client, opts) {
   void client;
   if (opts !== void 0 && (typeof opts !== "object" || opts === null || Array.isArray(opts))) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("blindSurfaces: opts must be an object { resource?: string, kind?: BlindSurfaceKind }");
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("blindSurfaces: opts must be an object { resource?: string, kind?: BlindSurfaceKind }");
   }
-  const inv = _chunkWRWX6WIKcjs.BLIND_SURFACE_INVENTORY;
+  const inv = _chunkL6V66V22cjs.BLIND_SURFACE_INVENTORY;
   if (inv === null) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("blindSurfaces: the reachability inventory is absent from the generated artifact \u2014 re-run the build");
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("blindSurfaces: the reachability inventory is absent from the generated artifact \u2014 re-run the build");
   }
   let surfaces = inv.surfaces;
   if (_optionalChain([opts, 'optionalAccess', _ => _.resource]) !== void 0) {
     const key = typeof opts.resource === "string" ? opts.resource.trim() : "";
     if (key === "") {
-      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+      throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
         "blindSurfaces: opts.resource must be a non-empty plan resource key string (e.g. 'tickets')",
         { suggestedAction: "Pass the exact plan resource key (snake_case) from autotask_catalog \u2014 e.g. tickets, companies, configuration_items." }
       );
     }
     if (!inv.surfaces.some((row) => row.resource === key)) {
-      throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
-        `blindSurfaces: unknown resource "${key}" \u2014 the plan has ${Object.keys(_chunkWRWX6WIKcjs.RELATIONSHIP_MAP).length} resources`,
+      throw new (0, _chunkL6V66V22cjs.AutotaskError)(
+        `blindSurfaces: unknown resource "${key}" \u2014 the plan has ${Object.keys(_chunkL6V66V22cjs.RELATIONSHIP_MAP).length} resources`,
         {
           code: "RESOURCE_UNKNOWN",
           category: "validation",
@@ -451,7 +452,7 @@ async function blindSurfaces(client, opts) {
   }
   if (_optionalChain([opts, 'optionalAccess', _2 => _2.kind]) !== void 0) {
     if (!BLIND_SURFACE_KINDS.includes(opts.kind)) {
-      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+      throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
         `blindSurfaces: unknown kind "${String(opts.kind)}" \u2014 the valid classes are: ${BLIND_SURFACE_KINDS.join(", ")}`,
         { suggestedAction: `Filter with one of: ${BLIND_SURFACE_KINDS.join(", ")} (or omit kind for the full 116-surface inventory).` }
       );
@@ -464,51 +465,51 @@ async function blindSurfaces(client, opts) {
 // src/operations/probeReachability.ts
 async function probeReachability(client, opts) {
   if (opts !== void 0 && (typeof opts !== "object" || opts === null || Array.isArray(opts))) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("probeReachability: opts must be an object { resources?: string[], limit?: 1|2, maxWireCalls?: number, confirmProbe?: true }");
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("probeReachability: opts must be an object { resources?: string[], limit?: 1|2, maxWireCalls?: number, confirmProbe?: true }");
   }
-  const defs = _chunkWRWX6WIKcjs.REACHABILITY_PROBE_DEFAULTS;
+  const defs = _chunkL6V66V22cjs.REACHABILITY_PROBE_DEFAULTS;
   if (_optionalChain([opts, 'optionalAccess', _3 => _3.confirmProbe]) !== true) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       "probeReachability: confirmProbe: true is required \u2014 the op deliberately fans out read wire across the tenant (one bounded query per surface); pass confirmProbe: true to run it",
       { suggestedAction: `Re-call with { confirmProbe: true } (plus resources/limit/maxWireCalls as needed). For the ZERO-wire pinned inventory use operations.blindSurfaces.` }
     );
   }
   const limit = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _4 => _4.limit]), () => ( defs.limitDefault));
   if (!Number.isInteger(limit) || limit < 1 || limit > defs.limitMax) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `probeReachability: limit must be an integer 1..${defs.limitMax} (got ${String(limit)}) \u2014 the rows-per-surface bound for the discovery read`
     );
   }
   const cap = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _5 => _5.maxWireCalls]), () => ( defs.defaultCap));
   if (!Number.isInteger(cap) || cap < 1) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(`probeReachability: maxWireCalls must be a positive integer (got ${String(cap)})`);
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(`probeReachability: maxWireCalls must be a positive integer (got ${String(cap)})`);
   }
   if (cap > defs.hardCap) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `probeReachability: maxWireCalls ${cap} exceeds the hard wire cap of ${defs.hardCap} \u2014 the sweep is refused above it (never capped silently)`,
       { suggestedAction: `Pass maxWireCalls \u2264 ${defs.hardCap} and a resources set no larger than the cap (the refused set is never truncated).` }
     );
   }
-  const inv = _chunkWRWX6WIKcjs.BLIND_SURFACE_INVENTORY;
+  const inv = _chunkL6V66V22cjs.BLIND_SURFACE_INVENTORY;
   if (inv === null) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("probeReachability: the reachability inventory is absent from the generated artifact \u2014 re-run the build");
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("probeReachability: the reachability inventory is absent from the generated artifact \u2014 re-run the build");
   }
   let targets;
   if (_optionalChain([opts, 'optionalAccess', _6 => _6.resources]) === void 0) {
     targets = [...defs.defaultTargets];
   } else {
     if (!Array.isArray(opts.resources) || opts.resources.length === 0) {
-      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("probeReachability: opts.resources must be a non-empty string[] of plan resource keys (or omit it for the default non-data-full set)");
+      throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("probeReachability: opts.resources must be a non-empty string[] of plan resource keys (or omit it for the default non-data-full set)");
     }
     const seen = /* @__PURE__ */ new Set();
     for (const r of opts.resources) {
       if (typeof r !== "string" || r.trim() === "") {
-        throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(`probeReachability: opts.resources must contain non-empty plan resource key strings (got ${typeof r === "string" && r.trim() === "" ? "a blank string" : typeof r})`);
+        throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(`probeReachability: opts.resources must contain non-empty plan resource key strings (got ${typeof r === "string" && r.trim() === "" ? "a blank string" : typeof r})`);
       }
       const key = r.trim();
       if (!inv.surfaces.some((row) => row.resource === key)) {
         const surfaceCount = new Set(inv.surfaces.map((s) => s.resource)).size;
-        throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
+        throw new (0, _chunkL6V66V22cjs.AutotaskError)(
           `probeReachability: unknown resource "${key}" \u2014 the inventory has ${surfaceCount} surfaces`,
           {
             code: "RESOURCE_UNKNOWN",
@@ -522,7 +523,7 @@ async function probeReachability(client, opts) {
     targets = [...seen];
   }
   if (targets.length > cap) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `probeReachability: ${targets.length} requested surface(s) exceed the wire cap of ${cap} \u2014 the sweep is refused above its cap (never truncated)`,
       { suggestedAction: `Raise maxWireCalls (\u2264 ${defs.hardCap}) to cover the set, or pass a smaller resources list.` }
     );
@@ -532,7 +533,7 @@ async function probeReachability(client, opts) {
   for (const resource of targets.sort()) {
     const row = byResource.get(resource);
     if (row === void 0) continue;
-    const holder = client[_chunkWRWX6WIKcjs.camelKey.call(void 0, resource)];
+    const holder = client[_chunkL6V66V22cjs.camelKey.call(void 0, resource)];
     const probeFn = _optionalChain([holder, 'optionalAccess', _7 => _7.queryBounded]);
     if (typeof probeFn !== "function") {
       results.push({
@@ -551,7 +552,7 @@ async function probeReachability(client, opts) {
         probe: { ok: true, wire: 1, error: null }
       });
     } catch (err) {
-      const code = _chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err) ? err.code : "NETWORK_ERROR";
+      const code = _chunkL6V66V22cjs.isAutotaskError.call(void 0, err) ? err.code : "NETWORK_ERROR";
       const message = err instanceof Error ? err.message : String(err);
       results.push({
         ...row,
@@ -579,24 +580,24 @@ var CREATE_BLOCKER_KINDS = [
 async function createGuidance(client, opts) {
   void client;
   if (opts !== void 0 && (typeof opts !== "object" || opts === null || Array.isArray(opts))) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       "createGuidance: opts must be an object { resources?: string[], kind?: CreateBlockerKind }"
     );
   }
-  let rows = _chunkWRWX6WIKcjs.CREATE_GUIDANCE.rows;
+  let rows = _chunkL6V66V22cjs.CREATE_GUIDANCE.rows;
   if (_optionalChain([opts, 'optionalAccess', _9 => _9.resources]) !== void 0) {
     if (!Array.isArray(opts.resources) || opts.resources.length === 0) {
-      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("createGuidance: opts.resources must be a non-empty string[] of plan resource keys");
+      throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("createGuidance: opts.resources must be a non-empty string[] of plan resource keys");
     }
     const wanted = /* @__PURE__ */ new Set();
     for (const r of opts.resources) {
       if (typeof r !== "string" || r.trim() === "") {
-        throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)("createGuidance: opts.resources must contain non-empty plan resource key strings");
+        throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)("createGuidance: opts.resources must contain non-empty plan resource key strings");
       }
       const key = r.trim();
-      if (!_chunkWRWX6WIKcjs.CREATE_GUIDANCE.rows.some((row) => row.resource === key)) {
-        throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
-          `createGuidance: unknown resource "${key}" \u2014 the catalog has ${_chunkWRWX6WIKcjs.CREATE_GUIDANCE.rows.length} create entities`,
+      if (!_chunkL6V66V22cjs.CREATE_GUIDANCE.rows.some((row) => row.resource === key)) {
+        throw new (0, _chunkL6V66V22cjs.AutotaskError)(
+          `createGuidance: unknown resource "${key}" \u2014 the catalog has ${_chunkL6V66V22cjs.CREATE_GUIDANCE.rows.length} create entities`,
           {
             code: "RESOURCE_UNKNOWN",
             category: "validation",
@@ -610,18 +611,18 @@ async function createGuidance(client, opts) {
   }
   if (_optionalChain([opts, 'optionalAccess', _10 => _10.kind]) !== void 0) {
     if (!CREATE_BLOCKER_KINDS.includes(opts.kind)) {
-      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+      throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
         `createGuidance: unknown kind "${String(opts.kind)}" \u2014 the valid kinds are: ${CREATE_BLOCKER_KINDS.join(", ")}`
       );
     }
     rows = rows.filter((row) => _optionalChain([row, 'access', _11 => _11.blocker, 'optionalAccess', _12 => _12.kind]) === opts.kind);
   }
   return {
-    zone: _chunkWRWX6WIKcjs.CREATE_GUIDANCE.zone,
-    label: _chunkWRWX6WIKcjs.CREATE_GUIDANCE.label,
-    verifiedAt: _chunkWRWX6WIKcjs.CREATE_GUIDANCE.verifiedAt,
+    zone: _chunkL6V66V22cjs.CREATE_GUIDANCE.zone,
+    label: _chunkL6V66V22cjs.CREATE_GUIDANCE.label,
+    verifiedAt: _chunkL6V66V22cjs.CREATE_GUIDANCE.verifiedAt,
     rows,
-    counts: _chunkWRWX6WIKcjs.CREATE_GUIDANCE.counts
+    counts: _chunkL6V66V22cjs.CREATE_GUIDANCE.counts
   };
 }
 
@@ -630,7 +631,7 @@ var RECOVERY_CONFIRM = "operations.recovery";
 var RECOVERY_DEFAULT_LIMIT = 25;
 var RECOVERY_MAX_LIMIT = 100;
 function configError(message, operation, suggestedAction) {
-  throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(message, { operation, suggestedAction });
+  throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(message, { operation, suggestedAction });
 }
 function parseMatchId(record) {
   const raw = record.id;
@@ -647,7 +648,7 @@ function parseMatchId(record) {
 }
 async function recovery(client, input, opts = {}) {
   const operation = RECOVERY_CONFIRM;
-  if (!_chunkWRWX6WIKcjs.isRecord.call(void 0, input)) {
+  if (!_chunkL6V66V22cjs.isRecord.call(void 0, input)) {
     configError(
       `recovery: input must be an object { resource, marker, ... } (got ${typeof input})`,
       operation,
@@ -678,10 +679,10 @@ async function recovery(client, input, opts = {}) {
       "Pass action: 'delete' for the destructive path (dry-run-first; the apply requires the confirm string)."
     );
   }
-  const entry = _chunkWRWX6WIKcjs.RELATIONSHIP_MAP[resource];
+  const entry = _chunkL6V66V22cjs.RELATIONSHIP_MAP[resource];
   if (entry === void 0) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskError)(
-      `recovery: unknown resource "${resource}" \u2014 the plan has ${Object.keys(_chunkWRWX6WIKcjs.RELATIONSHIP_MAP).length} resources`,
+    throw new (0, _chunkL6V66V22cjs.AutotaskError)(
+      `recovery: unknown resource "${resource}" \u2014 the plan has ${Object.keys(_chunkL6V66V22cjs.RELATIONSHIP_MAP).length} resources`,
       {
         code: "RESOURCE_UNKNOWN",
         category: "validation",
@@ -690,7 +691,7 @@ async function recovery(client, input, opts = {}) {
       }
     );
   }
-  const holder = client[_chunkWRWX6WIKcjs.camelKey.call(void 0, resource)];
+  const holder = client[_chunkL6V66V22cjs.camelKey.call(void 0, resource)];
   if (!holder || typeof holder.queryBounded !== "function") {
     configError(
       `recovery: ${resource} exposes no bounded query surface \u2014 the marker search cannot run`,
@@ -698,7 +699,7 @@ async function recovery(client, input, opts = {}) {
       "Use a resource with a query surface, or address the record by id directly (get/fetchMany)."
     );
   }
-  const field = input.field !== void 0 ? String(input.field) : _chunkWRWX6WIKcjs.MARKER_FIELDS[resource];
+  const field = input.field !== void 0 ? String(input.field) : _chunkL6V66V22cjs.MARKER_FIELDS[resource];
   if (typeof field !== "string" || field.trim() === "") {
     configError(
       `recovery: ${resource} has no plan markerField and no input.field was passed \u2014 the marker search needs a name-like field to filter on`,
@@ -734,7 +735,7 @@ async function recovery(client, input, opts = {}) {
       );
     }
     for (const c of input.filter) {
-      if (!_chunkWRWX6WIKcjs.isRecord.call(void 0, c) || typeof c.op !== "string" || c.op === "and" || c.op === "or") {
+      if (!_chunkL6V66V22cjs.isRecord.call(void 0, c) || typeof c.op !== "string" || c.op === "and" || c.op === "or") {
         configError(
           "recovery: input.filter accepts only plain leaf conditions ({ field, op, value }) \u2014 no grouping",
           operation,
@@ -755,7 +756,7 @@ async function recovery(client, input, opts = {}) {
     }
     limit = input.limit;
   }
-  const boundaryNote = _chunkWRWX6WIKcjs.DELETE_BOUNDARY_NOTES[resource];
+  const boundaryNote = _chunkL6V66V22cjs.DELETE_BOUNDARY_NOTES[resource];
   const boundary = {
     available: boundaryNote === void 0,
     reason: _nullishCoalesce(boundaryNote, () => ( null)),
@@ -767,7 +768,7 @@ async function recovery(client, input, opts = {}) {
   };
   const isDelete = action === "delete";
   if (isDelete && boundaryNote !== void 0) {
-    throw new (0, _chunkWRWX6WIKcjs.DeleteBoundaryError)(
+    throw new (0, _chunkL6V66V22cjs.DeleteBoundaryError)(
       `recovery: the vendor defines no DELETE for ${resource} \u2014 the delete cannot be issued through the API (zero wire was issued)`,
       {
         operation,
@@ -779,7 +780,7 @@ async function recovery(client, input, opts = {}) {
   const dryRun = _optionalChain([opts, 'optionalAccess', _13 => _13.dryRun]) !== false;
   const confirm = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _14 => _14.confirm]), () => ( input.confirm));
   if (isDelete && !dryRun && confirm !== RECOVERY_CONFIRM) {
-    throw new (0, _chunkWRWX6WIKcjs.ConfirmationRequiredError)(
+    throw new (0, _chunkL6V66V22cjs.ConfirmationRequiredError)(
       `recovery: action 'delete' apply is destructive and requires its confirmation flag: pass confirm: "${RECOVERY_CONFIRM}"`,
       {
         operation: RECOVERY_CONFIRM,
@@ -795,7 +796,7 @@ async function recovery(client, input, opts = {}) {
   const query = await holder.queryBounded({ filter: conditions, limit });
   if (query.hasMore) {
     const wire = isDelete ? "DELETE wire" : "mutating wire";
-    throw new (0, _chunkWRWX6WIKcjs.RecoveryTruncatedError)(
+    throw new (0, _chunkL6V66V22cjs.RecoveryTruncatedError)(
       `recovery: the marker search on ${resource} TRIPPED its match cap (${limit}) \u2014 more matches exist than were returned (zero ${wire} was issued)`,
       {
         operation,
@@ -834,7 +835,7 @@ async function recovery(client, input, opts = {}) {
     return { ...base, simulated: true, dryRun: true };
   }
   if (unsafeId) {
-    throw new (0, _chunkWRWX6WIKcjs.MarkerUnsafeIdError)(
+    throw new (0, _chunkL6V66V22cjs.MarkerUnsafeIdError)(
       `recovery: ${unsafeIds.length} of ${matches.length} match(es) on ${resource} have ids beyond Number.MAX_SAFE_INTEGER \u2014 they CANNOT be addressed through the SDK's typed delete surface (zero DELETE wire was issued)`,
       {
         operation,
@@ -845,7 +846,7 @@ async function recovery(client, input, opts = {}) {
   }
   const deleteMethod = holder.delete;
   if (deleteMethod === void 0) {
-    throw new (0, _chunkWRWX6WIKcjs.DeleteBoundaryError)(
+    throw new (0, _chunkL6V66V22cjs.DeleteBoundaryError)(
       `recovery: ${resource} has no delete method on the client \u2014 the boundary is marked available in the plan but the typed delete surface is missing`,
       {
         operation,
@@ -874,14 +875,14 @@ async function recovery(client, input, opts = {}) {
           verify = "still-present";
         }
       } catch (err) {
-        if (err instanceof _chunkWRWX6WIKcjs.NotFoundError) verify = "not-found";
+        if (err instanceof _chunkL6V66V22cjs.NotFoundError) verify = "not-found";
         else {
           verify = "error";
-          code = _chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err) ? err.code : "SERVER_ERROR";
+          code = _chunkL6V66V22cjs.isAutotaskError.call(void 0, err) ? err.code : "SERVER_ERROR";
         }
       }
     } catch (err) {
-      code = _chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err) ? err.code : "SERVER_ERROR";
+      code = _chunkL6V66V22cjs.isAutotaskError.call(void 0, err) ? err.code : "SERVER_ERROR";
     }
     deleted.push({ id, verified: verify === "not-found", code });
   }
@@ -889,13 +890,13 @@ async function recovery(client, input, opts = {}) {
 }
 
 // src/operations/invoke.ts
-var RECORDS = _chunk5O5EPYBOcjs.CAPABILITIES;
+var RECORDS = _chunkFLYTKJKVcjs.CAPABILITIES;
 var byId = new Map(RECORDS.map((r) => [r.id, r]));
 function needsConfirmation(record) {
   return record.effect === "destructive" || (_nullishCoalesce(record.flags, () => ( []))).includes("requiresApproval");
 }
 function refuse(message, operation, suggestedAction) {
-  throw new (0, _chunkWRWX6WIKcjs.ConfirmationRequiredError)(message, { operation, suggestedAction });
+  throw new (0, _chunkL6V66V22cjs.ConfirmationRequiredError)(message, { operation, suggestedAction });
 }
 var MODE_BY_EFFECT = {
   read: "read",
@@ -939,7 +940,7 @@ function looseTypeOk(type, value) {
     case "string[]":
       return Array.isArray(value) && value.every((v) => typeof v === "string");
     case "object":
-      return _chunkWRWX6WIKcjs.isRecord.call(void 0, value);
+      return _chunkL6V66V22cjs.isRecord.call(void 0, value);
     default:
       return true;
   }
@@ -956,7 +957,7 @@ function validateDispatchArgs(record, argsIn) {
   const schema = _nullishCoalesce(record.inputSchema, () => ( {}));
   const names = Object.keys(schema);
   if (args.length > names.length) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `invoke: "${operation}" declares ${names.length} positional arg(s) (${declaredArgList(record)}) but ${args.length} were passed \u2014 extra args are refused, not dropped (v0.2.0 silently dropped them)`,
       {
         operation,
@@ -966,7 +967,7 @@ function validateDispatchArgs(record, argsIn) {
   }
   const required = names.filter((n) => schema[n].required);
   if (args.length < required.length) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `invoke: "${operation}" requires ${required.length} positional arg(s) (${required.map((n) => `${n}: ${schema[n].type}`).join(", ")}) but only ${args.length} were passed \u2014 declared args: ${declaredArgList(record)}`,
       { operation }
     );
@@ -977,7 +978,7 @@ function validateDispatchArgs(record, argsIn) {
     const name = names[i];
     const spec = schema[name];
     if (!looseTypeOk(spec.type, value)) {
-      throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+      throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
         `invoke: "${operation}" arg ${i + 1} is declared ${name}: ${spec.type} \u2014 the value has the wrong type (pass a ${spec.type} value)`,
         { operation }
       );
@@ -992,7 +993,10 @@ var PARAMS_BAG_KEYS = {
   // cannot silently open the bag (the keys are the vendor `QueryParams` set
   // the raw method accepts).
   queryAll: ["filter", "maxRecords", "includeFields", "maxTotalRecords", "via"],
-  count: ["filter"]
+  // issue #145: the count bag carries the fieldCheck opt-out — the #140
+  // refusal's advised remedy (before, the closed bag refused the very key it
+  // advised, and the remedy looped into a second CONFIG_ERROR).
+  count: ["filter", "fieldCheck"]
 };
 var BAG_KEY_SYNONYMS = {
   filters: "filter",
@@ -1034,11 +1038,11 @@ function validateParamsBag(record, args) {
   const valid = PARAMS_BAG_KEYS[record.operation];
   if (valid === void 0) return;
   const bag = _optionalChain([args, 'optionalAccess', _15 => _15[0]]);
-  if (bag === void 0 || bag === null || !_chunkWRWX6WIKcjs.isRecord.call(void 0, bag)) return;
+  if (bag === void 0 || bag === null || !_chunkL6V66V22cjs.isRecord.call(void 0, bag)) return;
   const unknown = Object.keys(bag).filter((k) => !valid.includes(k));
   if (unknown.length === 0) return;
   const suggestions = unknown.map((k) => [k, suggestForKey(k, valid)]).filter((pair) => pair[1] !== null).map(([k, s]) => `"${k}" \u2192 "${s}"`);
-  throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+  throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
     `invoke: "${record.id}" params bag has unknown key(s) ${unknown.map((k) => `"${k}"`).join(", ")} \u2014 the bag is closed (valid keys: ${valid.join(", ")})`,
     {
       operation: record.id,
@@ -1051,62 +1055,105 @@ async function liveFieldNames(holder) {
   if (typeof reader !== "function") return null;
   try {
     const rows = await reader.call(holder);
+    if (!Array.isArray(rows)) return null;
     const names = [];
     for (const row of rows) {
       if (typeof row.name === "string") names.push(row.name);
     }
     return names.length > 0 ? names : null;
   } catch (err) {
-    if (!_chunkWRWX6WIKcjs.isAutotaskError.call(void 0, err) || err.code === "ABORTED") throw err;
+    if (!_chunkL6V66V22cjs.isAutotaskError.call(void 0, err) || err.code === "ABORTED") throw err;
     return null;
   }
 }
 var UNKNOWN_NAME_LIST_CAP = 20;
 var UNKNOWN_NAME_DISPLAY_CHARS = 80;
-async function validateQueryIncludeFields(record, holder, args) {
+function formatUnknownNameList(names) {
+  const listed = names.slice(0, UNKNOWN_NAME_LIST_CAP).map((n) => `"${n.length > UNKNOWN_NAME_DISPLAY_CHARS ? `${n.slice(0, UNKNOWN_NAME_DISPLAY_CHARS)}\u2026` : n}"`).join(", ");
+  const more = names.length > UNKNOWN_NAME_LIST_CAP ? ` (and ${names.length - UNKNOWN_NAME_LIST_CAP} more)` : "";
+  return `${listed}${more}`;
+}
+function collectFilterFieldNames(conditions) {
+  const out = [];
+  const walk = (conds) => {
+    for (const cond of conds) {
+      if (!_chunkL6V66V22cjs.isRecord.call(void 0, cond)) continue;
+      if (cond.op === "and" || cond.op === "or") {
+        if (Array.isArray(cond.items)) walk(cond.items);
+        continue;
+      }
+      if (cond.udf === true) continue;
+      if (typeof cond.field === "string" && cond.field.length > 0) out.push(cond.field);
+    }
+  };
+  walk(conditions);
+  return out;
+}
+async function validateQueryFieldNames(record, holder, args) {
   const bag = args[0];
-  if (!_chunkWRWX6WIKcjs.isRecord.call(void 0, bag)) return;
+  if (!_chunkL6V66V22cjs.isRecord.call(void 0, bag)) return;
   const fieldCheck = bag["fieldCheck"];
   if (fieldCheck !== void 0 && typeof fieldCheck !== "boolean") {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `invoke: "${record.id}" params bag fieldCheck must be a boolean (got ${typeof fieldCheck}) \u2014 the request was not issued`,
-      { operation: record.id, suggestedAction: "Pass fieldCheck: true (default) or fieldCheck: false (disable the includeFields name check)." }
+      { operation: record.id, suggestedAction: "Pass fieldCheck: true (default) or fieldCheck: false (disable the field-name checks \u2014 includeFields AND filter condition names)." }
     );
   }
   const includeFields = bag["includeFields"];
-  if (includeFields === void 0) return;
-  let shapeOk = Array.isArray(includeFields);
-  const names = [];
-  if (shapeOk) {
-    for (const entry of includeFields) {
-      if (typeof entry !== "string" || entry.length === 0) {
-        shapeOk = false;
-        break;
+  let includeNames;
+  if (includeFields !== void 0) {
+    let shapeOk = Array.isArray(includeFields);
+    const names = [];
+    if (shapeOk) {
+      for (const entry of includeFields) {
+        if (typeof entry !== "string" || entry.length === 0) {
+          shapeOk = false;
+          break;
+        }
+        names.push(entry);
       }
-      names.push(entry);
     }
+    if (!shapeOk) {
+      throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
+        `invoke: "${record.id}" params bag includeFields must be an array of non-empty field-name strings \u2014 the request was not issued`,
+        {
+          operation: record.id,
+          suggestedAction: 'Pass includeFields as an array of exact vendor field names, e.g. ["id", "title"]; the live set is in operations.fieldCatalog.'
+        }
+      );
+    }
+    includeNames = names;
   }
-  if (!shapeOk) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
-      `invoke: "${record.id}" params bag includeFields must be an array of non-empty field-name strings \u2014 the request was not issued`,
-      {
-        operation: record.id,
-        suggestedAction: 'Pass includeFields as an array of exact vendor field names, e.g. ["id", "title"]; the live set is in operations.fieldCatalog.'
-      }
-    );
+  let filterNames;
+  if (bag["filter"] !== void 0) {
+    const conditions = _chunkL6V66V22cjs.normalizedConditions.call(void 0, bag["filter"]);
+    filterNames = collectFilterFieldNames(_nullishCoalesce(conditions, () => ( [])));
   }
-  if (names.length === 0) return;
   if (fieldCheck === false) return;
+  const hasInclude = includeNames !== void 0 && includeNames.length > 0;
+  const hasFilter = filterNames !== void 0 && filterNames.length > 0;
+  if (!hasInclude && !hasFilter) return;
   const live = await liveFieldNames(holder);
-  const known = _nullishCoalesce(live, () => ( _chunkWRWX6WIKcjs.MODEL_FIELD_SETS[record.resource]));
+  let known;
+  let liveOnlyExempt = [];
+  if (live !== null) {
+    known = live;
+  } else {
+    const vendored = _chunkL6V66V22cjs.MODEL_FIELD_SETS[record.resource];
+    liveOnlyExempt = Array.isArray(_optionalChain([record, 'access', _16 => _16.metadata, 'optionalAccess', _17 => _17.liveOnlyFields])) ? record.metadata.liveOnlyFields : [];
+    known = vendored === void 0 ? void 0 : [...vendored, ...liveOnlyExempt];
+  }
   if (known === void 0) return;
-  const unknown = names.filter((name) => !known.includes(name));
-  if (unknown.length === 0) return;
-  const authority = live !== null ? "the tenant's live entity field metadata" : "the vendored spec (src/field-sets.ts)";
-  const listed = unknown.slice(0, UNKNOWN_NAME_LIST_CAP).map((n) => `"${n.length > UNKNOWN_NAME_DISPLAY_CHARS ? `${n.slice(0, UNKNOWN_NAME_DISPLAY_CHARS)}\u2026` : n}"`).join(", ");
-  const more = unknown.length > UNKNOWN_NAME_LIST_CAP ? ` (and ${unknown.length - UNKNOWN_NAME_LIST_CAP} more)` : "";
-  throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
-    `invoke: "${record.id}" includeFields has unknown field name(s) ${listed}${more} against ${authority} \u2014 the query POST was not issued`,
+  const authority = live !== null ? "the tenant's live entity field metadata" : liveOnlyExempt.length > 0 ? "the vendored spec (src/field-sets.ts) + the plan-pinned live-only fields (exempt from the vendored refusal)" : "the vendored spec (src/field-sets.ts)";
+  const unknownInclude = hasInclude ? includeNames.filter((name) => !known.includes(name)) : [];
+  const unknownFilter = hasFilter ? [...new Set(filterNames.filter((name) => !known.includes(name)))] : [];
+  if (unknownInclude.length === 0 && unknownFilter.length === 0) return;
+  const parts = [];
+  if (unknownInclude.length > 0) parts.push(`includeFields has unknown field name(s) ${formatUnknownNameList(unknownInclude)}`);
+  if (unknownFilter.length > 0) parts.push(`filter condition(s) carry unknown field name(s) ${formatUnknownNameList(unknownFilter)}`);
+  const wireClause = record.operation === "count" ? "the count request was not issued" : "the query POST was not issued";
+  throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
+    `invoke: "${record.id}" ${parts.join("; ")} against ${authority} \u2014 ${wireClause}`,
     {
       operation: record.id,
       suggestedAction: `Use exact vendor field names (operations.fieldCatalog lists the live set for the entity); pass fieldCheck: false to disable this name check. The authority here was ${authority}.`
@@ -1119,7 +1166,7 @@ function validateInvokeOptions(opts, operation) {
   const unknown = Object.keys(opts).filter((k) => !INVOKE_OPTION_KEYS.includes(k));
   if (unknown.length === 0) return;
   const suggestions = unknown.map((k) => [k, suggestForKey(k, ["dryRun", "confirm", "lastModifiedDate", "maxRetries"])]).filter((pair) => pair[1] !== null).map(([k, s]) => `"${k}" \u2192 "${s}"`);
-  throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+  throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
     `invoke: "${operation}" has unknown option key(s) ${unknown.map((k) => `"${k}"`).join(", ")} \u2014 the options set is closed (valid: dryRun, confirm, lastModifiedDate, maxRetries; "mode" is internal to the mode wrappers)`,
     {
       operation,
@@ -1132,7 +1179,7 @@ function unknownKeysRefusal(raw, validKeys, subject, operation) {
   const unknown = Object.keys(raw).filter((k) => !validKeys.includes(k));
   if (unknown.length === 0) return null;
   const suggestions = unknown.map((k) => [k, suggestForKey(k, [...validKeys])]).filter((pair) => pair[1] !== null).map(([k, s]) => `"${k}" \u2192 "${s}"`);
-  return new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+  return new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
     `unknown ${subject} ${unknown.map((k) => `"${k}"`).join(", ")} \u2014 the ${subject} set is closed (valid keys: ${validKeys.join(", ")})`,
     {
       ...operation !== void 0 ? { operation } : {},
@@ -1144,7 +1191,7 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
   const args = _nullishCoalesce(argsIn, () => ( []));
   const record = byId.get(operation);
   if (record === void 0) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `invoke: unknown operation "${operation}" \u2014 it is not in the capability registry`,
       { operation, suggestedAction: "List the registry (the ./capabilities subpath) for the exact operation key." }
     );
@@ -1152,17 +1199,17 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
   validateInvokeOptions(opts, operation);
   const mode = opts.mode;
   if (mode !== void 0 && MODE_BY_EFFECT[record.effect] !== mode) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(crossModeRefusal(operation, record.effect, mode), { operation });
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(crossModeRefusal(operation, record.effect, mode), { operation });
   }
   if (opts.dryRun !== void 0 && typeof opts.dryRun !== "boolean") {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `invoke: dryRun must be a boolean (got ${typeof opts.dryRun}) \u2014 "${operation}" was not issued`,
       { operation, suggestedAction: "Pass dryRun: true (simulate) or dryRun: false (apply) as a real boolean." }
     );
   }
   const isWrite = record.effect !== "read";
   if (!isWrite && opts.dryRun === true) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `invoke: "${operation}" is a read \u2014 dryRun is not applicable (reads issue their request as-is)`,
       { operation }
     );
@@ -1177,15 +1224,16 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
   validateDispatchArgs(record, args);
   validateParamsBag(record, args);
   const boundedQuery = record.kind === "primitive" && record.operation === "query";
-  let holder = client[_chunkWRWX6WIKcjs.camelKey.call(void 0, record.resource)];
+  const countedQuery = record.kind === "primitive" && record.operation === "count";
+  let holder = client[_chunkL6V66V22cjs.camelKey.call(void 0, record.resource)];
   if (typeof holder === "function") {
-    holder = _nullishCoalesce(client[`${_chunkWRWX6WIKcjs.camelKey.call(void 0, record.resource)}Resource`], () => ( holder));
+    holder = _nullishCoalesce(client[`${_chunkL6V66V22cjs.camelKey.call(void 0, record.resource)}Resource`], () => ( holder));
   }
   if (holder === void 0 && record.resource === "operations") {
     holder = {
       resolveAny: (identifier, opts2) => resolveAny(client, identifier, opts2),
       searchAcrossResources: (query, opts2) => searchAcrossResources(client, query, opts2),
-      fetchMany: (items, opts2) => _chunkWRWX6WIKcjs.fetchMany.call(void 0, client, items, opts2),
+      fetchMany: (items, opts2) => _chunkL6V66V22cjs.fetchMany.call(void 0, client, items, opts2),
       // Issue #62: the generic aggregate + the cheap count — the
       // groupBy/sum-absent mode is ONE vendor /query/count (the S12-C blind
       // sentinel rides through); the group/sum modes walk the named
@@ -1195,12 +1243,12 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
       // Issue #59 PR-B: the bulk fetch by ids — query-first chunked `id in`
       // reads + the per-id `get` fallback (blind-surface-safe; per-item
       // typed outcomes reuse the fetchMany shapes).
-      fetchByIds: (items, opts2) => _chunkWRWX6WIKcjs.fetchByIds.call(void 0, client, items, opts2),
+      fetchByIds: (items, opts2) => _chunkL6V66V22cjs.fetchByIds.call(void 0, client, items, opts2),
       // Issue #65: opt-in resource name expansion — per-id resources.get
       // reads ONLY (never an id-in query — the resources table can be blind
       // to count/query while per-id reads work); blind-marked rows for ids
       // the API user cannot resolve; the name cache (default-on).
-      expandResourceNames: (ids, opts2) => _chunkWRWX6WIKcjs.expandResourceNames.call(void 0, client, ids, opts2),
+      expandResourceNames: (ids, opts2) => _chunkL6V66V22cjs.expandResourceNames.call(void 0, client, ids, opts2),
       relationshipMap: (resourceKey) => relationshipMap(client, resourceKey),
       // Issue #11: the served blind-surface inventory (zero wire) + the
       // bounded caller-opted reachability sweep (read-only, confirmProbe-
@@ -1213,7 +1261,7 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
       // entityInformation GETs (the op's own cap refuses over-cap fan-outs
       // pre-request; per-resource failures are recorded on the row and
       // never abort the call).
-      fieldCatalog: (opts2) => _chunkWRWX6WIKcjs.fieldCatalog.call(void 0, client, opts2),
+      fieldCatalog: (opts2) => _chunkL6V66V22cjs.fieldCatalog.call(void 0, client, opts2),
       // Issue #9: the one-call recovery/cleanup op — effect write in the
       // registry (the governor's dry-run-first applies to it); the op's own
       // confirm gate makes the destructive action deliberate (the governor
@@ -1222,16 +1270,16 @@ async function invokeMode(client, operation, argsIn = [], opts = {}) {
     };
   }
   if (holder === void 0) {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `invoke: the client exposes no accessor for resource "${record.resource}"`,
       { operation }
     );
   }
-  if (boundedQuery) await validateQueryIncludeFields(record, holder, args);
+  if (boundedQuery || countedQuery) await validateQueryFieldNames(record, holder, args);
   const methodName = boundedQuery ? "queryBounded" : record.operation;
   const method = holder[methodName];
   if (typeof method !== "function") {
-    throw new (0, _chunkWRWX6WIKcjs.AutotaskConfigError)(
+    throw new (0, _chunkL6V66V22cjs.AutotaskConfigError)(
       `invoke: "${record.resource}.${methodName}" is not a callable method on the client`,
       { operation }
     );
@@ -1338,4 +1386,4 @@ async function invokeDelete(client, operation, args = [], opts = {}) {
 
 
 
-exports.AGGREGATE_DATE_BUCKETS = AGGREGATE_DATE_BUCKETS; exports.AGGREGATE_DEFAULT_LIMIT = AGGREGATE_DEFAULT_LIMIT; exports.AGGREGATE_DEFAULT_TOP = AGGREGATE_DEFAULT_TOP; exports.AGGREGATE_TOP_MAX = AGGREGATE_TOP_MAX; exports.BLIND_SURFACE_KINDS = BLIND_SURFACE_KINDS; exports.CREATE_BLOCKER_KINDS = CREATE_BLOCKER_KINDS; exports.EXPAND_RESOURCE_NAMES_MAX_IDS = _chunkWRWX6WIKcjs.EXPAND_RESOURCE_NAMES_MAX_IDS; exports.FETCH_BY_IDS_CHUNK_SIZE = _chunkWRWX6WIKcjs.FETCH_BY_IDS_CHUNK_SIZE; exports.FETCH_BY_IDS_MAX_ITEMS = _chunkWRWX6WIKcjs.FETCH_BY_IDS_MAX_ITEMS; exports.FETCH_MANY_MAX_ITEMS = _chunkWRWX6WIKcjs.FETCH_MANY_MAX_ITEMS; exports.FIELD_CACHE_KINDS = _chunkWRWX6WIKcjs.FIELD_CACHE_KINDS; exports.FIELD_CATALOG_HONESTY_NOTE = _chunkWRWX6WIKcjs.FIELD_CATALOG_HONESTY_NOTE; exports.INVOKE_OPTION_KEYS = INVOKE_OPTION_KEYS; exports.MAX_FIELD_CATALOG_WIRE = _chunkWRWX6WIKcjs.MAX_FIELD_CATALOG_WIRE; exports.PARAMS_BAG_KEYS = PARAMS_BAG_KEYS; exports.PICKLIST_VALUE_NOT_SERVED_NOTE = _chunkWRWX6WIKcjs.PICKLIST_VALUE_NOT_SERVED_NOTE; exports.RECOVERY_CONFIRM = RECOVERY_CONFIRM; exports.RECOVERY_DEFAULT_LIMIT = RECOVERY_DEFAULT_LIMIT; exports.RECOVERY_MAX_LIMIT = RECOVERY_MAX_LIMIT; exports.WORKFLOW_RESOURCES = _chunkWRWX6WIKcjs.WORKFLOW_RESOURCES; exports.aggregate = aggregate; exports.blindSurfaces = blindSurfaces; exports.createGuidance = createGuidance; exports.dateBucketLabel = dateBucketLabel; exports.expandResourceNames = _chunkWRWX6WIKcjs.expandResourceNames; exports.fetchByIds = _chunkWRWX6WIKcjs.fetchByIds; exports.fetchMany = _chunkWRWX6WIKcjs.fetchMany; exports.fieldCatalog = _chunkWRWX6WIKcjs.fieldCatalog; exports.invoke = invoke; exports.invokeDelete = invokeDelete; exports.invokeRead = invokeRead; exports.invokeWrite = invokeWrite; exports.needsConfirmation = needsConfirmation; exports.probeReachability = probeReachability; exports.recovery = recovery; exports.relationshipMap = relationshipMap; exports.resolveAny = resolveAny; exports.searchAcrossResources = searchAcrossResources; exports.unknownKeysRefusal = unknownKeysRefusal; exports.validateDispatchArgs = validateDispatchArgs; exports.validateFetchManyItems = _chunkWRWX6WIKcjs.validateFetchManyItems; exports.validateInvokeOptions = validateInvokeOptions; exports.validateParamsBag = validateParamsBag;
+exports.AGGREGATE_DATE_BUCKETS = AGGREGATE_DATE_BUCKETS; exports.AGGREGATE_DEFAULT_LIMIT = AGGREGATE_DEFAULT_LIMIT; exports.AGGREGATE_DEFAULT_TOP = AGGREGATE_DEFAULT_TOP; exports.AGGREGATE_TOP_MAX = AGGREGATE_TOP_MAX; exports.BLIND_SURFACE_KINDS = BLIND_SURFACE_KINDS; exports.CREATE_BLOCKER_KINDS = CREATE_BLOCKER_KINDS; exports.EXPAND_RESOURCE_NAMES_MAX_IDS = _chunkL6V66V22cjs.EXPAND_RESOURCE_NAMES_MAX_IDS; exports.FETCH_BY_IDS_CHUNK_SIZE = _chunkL6V66V22cjs.FETCH_BY_IDS_CHUNK_SIZE; exports.FETCH_BY_IDS_MAX_ITEMS = _chunkL6V66V22cjs.FETCH_BY_IDS_MAX_ITEMS; exports.FETCH_MANY_MAX_ITEMS = _chunkL6V66V22cjs.FETCH_MANY_MAX_ITEMS; exports.FIELD_CACHE_KINDS = _chunkL6V66V22cjs.FIELD_CACHE_KINDS; exports.FIELD_CATALOG_HONESTY_NOTE = _chunkL6V66V22cjs.FIELD_CATALOG_HONESTY_NOTE; exports.INVOKE_OPTION_KEYS = INVOKE_OPTION_KEYS; exports.MAX_FIELD_CATALOG_WIRE = _chunkL6V66V22cjs.MAX_FIELD_CATALOG_WIRE; exports.PARAMS_BAG_KEYS = PARAMS_BAG_KEYS; exports.PICKLIST_VALUE_NOT_SERVED_NOTE = _chunkL6V66V22cjs.PICKLIST_VALUE_NOT_SERVED_NOTE; exports.RECOVERY_CONFIRM = RECOVERY_CONFIRM; exports.RECOVERY_DEFAULT_LIMIT = RECOVERY_DEFAULT_LIMIT; exports.RECOVERY_MAX_LIMIT = RECOVERY_MAX_LIMIT; exports.WORKFLOW_RESOURCES = _chunkL6V66V22cjs.WORKFLOW_RESOURCES; exports.aggregate = aggregate; exports.blindSurfaces = blindSurfaces; exports.createGuidance = createGuidance; exports.dateBucketLabel = dateBucketLabel; exports.expandResourceNames = _chunkL6V66V22cjs.expandResourceNames; exports.fetchByIds = _chunkL6V66V22cjs.fetchByIds; exports.fetchMany = _chunkL6V66V22cjs.fetchMany; exports.fieldCatalog = _chunkL6V66V22cjs.fieldCatalog; exports.invoke = invoke; exports.invokeDelete = invokeDelete; exports.invokeRead = invokeRead; exports.invokeWrite = invokeWrite; exports.needsConfirmation = needsConfirmation; exports.probeReachability = probeReachability; exports.recovery = recovery; exports.relationshipMap = relationshipMap; exports.resolveAny = resolveAny; exports.searchAcrossResources = searchAcrossResources; exports.unknownKeysRefusal = unknownKeysRefusal; exports.validateDispatchArgs = validateDispatchArgs; exports.validateFetchManyItems = _chunkL6V66V22cjs.validateFetchManyItems; exports.validateInvokeOptions = validateInvokeOptions; exports.validateParamsBag = validateParamsBag;