node-autotask 0.26.0 → 0.28.0

package/dist/{chunk-HQGE4WAV.cjs → chunk-D5IVS6GY.cjs}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2; var _class3; var _class4; var _class5; var _class6; var _class7; var _class8;
 
-var _chunkWM6E5O55cjs = require('./chunk-WM6E5O55.cjs');
+var _chunkZEGMVEF3cjs = require('./chunk-ZEGMVEF3.cjs');
 
 // src/auth.ts
 var AUTH_HEADERS = {
@@ -583,6 +583,111 @@ var MoveRefusedError = class extends AutotaskError {
   }
 };
 
+// src/cache.ts
+var READ_CACHE_MAX_ENTRIES = 4096;
+var ReadCache = (_class = class {
+  /** The configured TTL in ms (the fallback for resources without an override). */
+  
+  /** The per-resource TTL overrides (issue #32; absent = every resource uses `ttlMs`). */
+  
+  __init() {this.store = /* @__PURE__ */ new Map()}
+  __init2() {this.epochCounter = 0}
+  constructor(ttlMs, perResourceTtlMs) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);
+    if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
+      throw new AutotaskConfigError(`cache.ttlMs must be a positive integer (got ${ttlMs})`);
+    }
+    if (perResourceTtlMs !== void 0) {
+      if (perResourceTtlMs === null || typeof perResourceTtlMs !== "object" || Array.isArray(perResourceTtlMs)) {
+        throw new AutotaskConfigError(
+          `cache.perResourceTtlMs must be an object of resource key -> ms (got ${String(perResourceTtlMs)})`
+        );
+      }
+      for (const [key, value] of Object.entries(perResourceTtlMs)) {
+        if (key === "") {
+          throw new AutotaskConfigError("cache.perResourceTtlMs keys must be non-empty resource keys");
+        }
+        if (!Number.isInteger(value) || value <= 0) {
+          throw new AutotaskConfigError(
+            `cache.perResourceTtlMs.${key} must be a positive integer (got ${String(value)})`
+          );
+        }
+      }
+    }
+    this.ttlMs = ttlMs;
+    this.perResourceTtlMs = perResourceTtlMs;
+  }
+  /**
+   * The TTL (ms) for a resource plan key: the `perResourceTtlMs` override
+   * when the map is present and names the resource, else the base
+   * `ttlMs` (absent map, absent key, and `undefined` all fall back).
+   */
+  ttlFor(resource) {
+    if (resource !== void 0 && this.perResourceTtlMs !== void 0) {
+      const override = this.perResourceTtlMs[resource];
+      if (override !== void 0) return override;
+    }
+    return this.ttlMs;
+  }
+  /**
+   * Read-through lookup: the live entry's value, or `undefined` (absent OR
+   * expired — an expired entry is purged lazily on this read).
+   */
+  get(key) {
+    const entry = this.store.get(key);
+    if (entry === void 0) return void 0;
+    if (entry.expiresAt <= Date.now()) {
+      this.store.delete(key);
+      return void 0;
+    }
+    return structuredClone(entry.value);
+  }
+  /** Store a successful read payload under `key`, live for `ttlFor(resource)`:
+   * the per-resource override (issue #32) when named, else `ttlMs`.
+   * `epoch` is the invalidation epoch the caller captured BEFORE its wire
+   * read: a read that straddled a `clear()` (a write) is dropped, never
+   * re-stored with its pre-write body. */
+  set(key, value, resource, epoch = this.epochCounter) {
+    if (epoch !== this.epochCounter) return;
+    if (this.store.size >= READ_CACHE_MAX_ENTRIES && this.purgeExpired() === 0) {
+      const oldest = this.store.keys().next();
+      if (!oldest.done) this.store.delete(oldest.value);
+    }
+    this.store.delete(key);
+    this.store.set(key, { value: structuredClone(value), expiresAt: Date.now() + this.ttlFor(resource) });
+  }
+  /** Drop every expired entry (returns the number removed). */
+  purgeExpired() {
+    const now = Date.now();
+    let removed = 0;
+    for (const [key, entry] of this.store) {
+      if (entry.expiresAt <= now) {
+        this.store.delete(key);
+        removed += 1;
+      }
+    }
+    return removed;
+  }
+  /** Current entry count (live + not-yet-purged expired). */
+  get size() {
+    return this.store.size;
+  }
+  /** Drop one key (issue #36: a later positive outcome clears a stale 'absent' marker). */
+  delete(key) {
+    return this.store.delete(key);
+  }
+  /** The invalidation epoch: bumped by `clear()`; capture it before a wire
+   * read and pass it to `set` so a read in flight across a write cannot
+   * re-store its stale answer. */
+  get epoch() {
+    return this.epochCounter;
+  }
+  /** Drop everything (e.g. a caller that knows the tenant was reset). */
+  clear() {
+    this.epochCounter += 1;
+    this.store.clear();
+  }
+}, _class);
+
 // src/config/zones.ts
 var ZONE_CATALOG = {
   "pre-release": "https://webservices2.autotask.net/atservicesrest",
@@ -689,6 +794,7 @@ var DEFAULT_PER_RESOURCE_TTL_MS = {
   "appointments": 3e5,
   "authenticate": 3e5,
   "billing_codes": 36e5,
+  "billing_item_approval_levels": 3e5,
   "billing_items": 3e5,
   "change_request_links": 3e5,
   "checklist_libraries": 3e5,
@@ -747,12 +853,16 @@ var DEFAULT_PER_RESOURCE_TTL_MS = {
   "holiday_sets": 3e5,
   "holidays": 3e5,
   "inventory_products": 3e5,
+  "invoice_templates": 3e5,
   "invoices": 3e5,
   "modules": 3e5,
   "notification_history": 3e5,
   "opportunities": 3e5,
   "opportunity_attachments": 3e5,
   "opportunity_categories": 3e5,
+  "organizational_level1s": 3e5,
+  "organizational_level2s": 3e5,
+  "organizational_level_associations": 3e5,
   "phases": 36e5,
   "product_vendors": 3e5,
   "products": 3e5,
@@ -775,6 +885,7 @@ var DEFAULT_PER_RESOURCE_TTL_MS = {
   "resource_time_off_balances": 3e5,
   "resources": 3e5,
   "roles": 36e5,
+  "sales_orders": 3e5,
   "service_call_task_resources": 3e5,
   "service_call_tasks": 3e5,
   "service_call_ticket_resources": 3e5,
@@ -792,6 +903,7 @@ var DEFAULT_PER_RESOURCE_TTL_MS = {
   "tags": 3e5,
   "task_secondary_resources": 3e5,
   "tasks": 3e5,
+  "tax_regions": 3e5,
   "threshold_information": 3e5,
   "ticket_additional_configuration_items": 3e5,
   "ticket_additional_contacts": 3e5,
@@ -819,6 +931,7 @@ var DEFAULT_PER_RESOURCE_TTL_MS = {
 var RESOURCE_KEY_BY_PATH = {
   "/V1.0/Appointments": "appointments",
   "/V1.0/BillingCodes": "billing_codes",
+  "/V1.0/BillingItemApprovalLevels": "billing_item_approval_levels",
   "/V1.0/BillingItems": "billing_items",
   "/V1.0/ChangeRequestLinks": "change_request_links",
   "/V1.0/ChecklistLibraries": "checklist_libraries",
@@ -876,11 +989,15 @@ var RESOURCE_KEY_BY_PATH = {
   "/V1.0/HolidaySets": "holiday_sets",
   "/V1.0/Holidays": "holidays",
   "/V1.0/InventoryProducts": "inventory_products",
+  "/V1.0/InvoiceTemplates": "invoice_templates",
   "/V1.0/Invoices": "invoices",
   "/V1.0/NotificationHistory": "notification_history",
   "/V1.0/Opportunities": "opportunities",
   "/V1.0/OpportunityAttachments": "opportunity_attachments",
   "/V1.0/OpportunityCategories": "opportunity_categories",
+  "/V1.0/OrganizationalLevel1s": "organizational_level1s",
+  "/V1.0/OrganizationalLevel2s": "organizational_level2s",
+  "/V1.0/OrganizationalLevelAssociations": "organizational_level_associations",
   "/V1.0/Phases": "phases",
   "/V1.0/ProductVendors": "product_vendors",
   "/V1.0/Products": "products",
@@ -903,6 +1020,7 @@ var RESOURCE_KEY_BY_PATH = {
   "/V1.0/ResourceTimeOffBalances": "resource_time_off_balances",
   "/V1.0/Resources": "resources",
   "/V1.0/Roles": "roles",
+  "/V1.0/SalesOrders": "sales_orders",
   "/V1.0/ServiceCallTaskResources": "service_call_task_resources",
   "/V1.0/ServiceCallTasks": "service_call_tasks",
   "/V1.0/ServiceCallTicketResources": "service_call_ticket_resources",
@@ -920,6 +1038,7 @@ var RESOURCE_KEY_BY_PATH = {
   "/V1.0/Tags": "tags",
   "/V1.0/TaskSecondaryResources": "task_secondary_resources",
   "/V1.0/Tasks": "tasks",
+  "/V1.0/TaxRegions": "tax_regions",
   "/V1.0/TicketAdditionalConfigurationItems": "ticket_additional_configuration_items",
   "/V1.0/TicketAdditionalContacts": "ticket_additional_contacts",
   "/V1.0/TicketAttachments": "ticket_attachments",
@@ -984,14 +1103,14 @@ function credentialValueSummary(value) {
 // src/fieldCache.ts
 var FIELD_CACHE_MAX_ENTITIES = 256;
 var FIELD_CACHE_KINDS = ["info", "fields", "udf"];
-var FieldCache = (_class = class _FieldCache {
+var FieldCache = (_class2 = class _FieldCache {
   /** The configured TTL in ms. */
   
   /** The entity bound (the cap applies to STORED entries; inflight never counts). */
   
-  __init() {this.store = /* @__PURE__ */ new Map()}
-  __init2() {this.inflightMap = /* @__PURE__ */ new Map()}
-  constructor(ttlMs, maxEntities = FIELD_CACHE_MAX_ENTITIES) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);
+  __init3() {this.store = /* @__PURE__ */ new Map()}
+  __init4() {this.inflightMap = /* @__PURE__ */ new Map()}
+  constructor(ttlMs, maxEntities = FIELD_CACHE_MAX_ENTITIES) {;_class2.prototype.__init3.call(this);_class2.prototype.__init4.call(this);
     if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
       throw new AutotaskConfigError(`fieldCache.ttlMs must be a positive integer (got ${ttlMs})`);
     }
@@ -1113,7 +1232,7 @@ var FieldCache = (_class = class _FieldCache {
     this.store.clear();
     this.inflightMap.clear();
   }
-}, _class);
+}, _class2);
 
 // src/circuit-breaker.ts
 var DEFAULT_CIRCUIT_BREAKER_WINDOW_MS = 1e4;
@@ -1121,10 +1240,10 @@ var DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD = 5;
 var DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS = 3e4;
 var DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE = 2;
 var DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES = 1024;
-var InMemoryCircuitBreakerStore = (_class2 = class {
+var InMemoryCircuitBreakerStore = (_class3 = class {
   
-  __init3() {this.states = /* @__PURE__ */ new Map()}
-  constructor(maxEntries = DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES) {;_class2.prototype.__init3.call(this);
+  __init5() {this.states = /* @__PURE__ */ new Map()}
+  constructor(maxEntries = DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES) {;_class3.prototype.__init5.call(this);
     if (!Number.isInteger(maxEntries) || maxEntries <= 0) {
       throw new TypeError(`InMemoryCircuitBreakerStore maxEntries must be a positive integer (got ${String(maxEntries)})`);
     }
@@ -1159,7 +1278,7 @@ var InMemoryCircuitBreakerStore = (_class2 = class {
   clear() {
     this.states.clear();
   }
-}, _class2);
+}, _class3);
 var defaultStore;
 function defaultCircuitBreakerStore() {
   if (defaultStore === void 0) defaultStore = new InMemoryCircuitBreakerStore();
@@ -1189,10 +1308,10 @@ var DEFAULT_COOLDOWN_DEFAULT_MS = 6e4;
 var DEFAULT_COOLDOWN_MAX_ENTRIES = 1024;
 var THREAD_THRESHOLD_MAX_MS = 1e4;
 var THREAD_THRESHOLD_DEFAULT_MS = 5e3;
-var InMemoryCooldownStore = (_class3 = class {
+var InMemoryCooldownStore = (_class4 = class {
   
-  __init4() {this.deadlines = /* @__PURE__ */ new Map()}
-  constructor(maxEntries = DEFAULT_COOLDOWN_MAX_ENTRIES) {;_class3.prototype.__init4.call(this);
+  __init6() {this.deadlines = /* @__PURE__ */ new Map()}
+  constructor(maxEntries = DEFAULT_COOLDOWN_MAX_ENTRIES) {;_class4.prototype.__init6.call(this);
     if (!Number.isInteger(maxEntries) || maxEntries <= 0) {
       throw new TypeError(`InMemoryCooldownStore maxEntries must be a positive integer (got ${String(maxEntries)})`);
     }
@@ -1226,7 +1345,7 @@ var InMemoryCooldownStore = (_class3 = class {
   clear() {
     this.deadlines.clear();
   }
-}, _class3);
+}, _class4);
 var defaultStore2;
 function defaultCooldownStore() {
   if (defaultStore2 === void 0) defaultStore2 = new InMemoryCooldownStore();
@@ -1247,111 +1366,6 @@ function cooldownDurationMs(retryAfterSecs, opts) {
   return Math.min(rawMs, opts.maxMs);
 }
 
-// src/cache.ts
-var READ_CACHE_MAX_ENTRIES = 4096;
-var ReadCache = (_class4 = class {
-  /** The configured TTL in ms (the fallback for resources without an override). */
-  
-  /** The per-resource TTL overrides (issue #32; absent = every resource uses `ttlMs`). */
-  
-  __init5() {this.store = /* @__PURE__ */ new Map()}
-  __init6() {this.epochCounter = 0}
-  constructor(ttlMs, perResourceTtlMs) {;_class4.prototype.__init5.call(this);_class4.prototype.__init6.call(this);
-    if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
-      throw new AutotaskConfigError(`cache.ttlMs must be a positive integer (got ${ttlMs})`);
-    }
-    if (perResourceTtlMs !== void 0) {
-      if (perResourceTtlMs === null || typeof perResourceTtlMs !== "object" || Array.isArray(perResourceTtlMs)) {
-        throw new AutotaskConfigError(
-          `cache.perResourceTtlMs must be an object of resource key -> ms (got ${String(perResourceTtlMs)})`
-        );
-      }
-      for (const [key, value] of Object.entries(perResourceTtlMs)) {
-        if (key === "") {
-          throw new AutotaskConfigError("cache.perResourceTtlMs keys must be non-empty resource keys");
-        }
-        if (!Number.isInteger(value) || value <= 0) {
-          throw new AutotaskConfigError(
-            `cache.perResourceTtlMs.${key} must be a positive integer (got ${String(value)})`
-          );
-        }
-      }
-    }
-    this.ttlMs = ttlMs;
-    this.perResourceTtlMs = perResourceTtlMs;
-  }
-  /**
-   * The TTL (ms) for a resource plan key: the `perResourceTtlMs` override
-   * when the map is present and names the resource, else the base
-   * `ttlMs` (absent map, absent key, and `undefined` all fall back).
-   */
-  ttlFor(resource) {
-    if (resource !== void 0 && this.perResourceTtlMs !== void 0) {
-      const override = this.perResourceTtlMs[resource];
-      if (override !== void 0) return override;
-    }
-    return this.ttlMs;
-  }
-  /**
-   * Read-through lookup: the live entry's value, or `undefined` (absent OR
-   * expired — an expired entry is purged lazily on this read).
-   */
-  get(key) {
-    const entry = this.store.get(key);
-    if (entry === void 0) return void 0;
-    if (entry.expiresAt <= Date.now()) {
-      this.store.delete(key);
-      return void 0;
-    }
-    return structuredClone(entry.value);
-  }
-  /** Store a successful read payload under `key`, live for `ttlFor(resource)`:
-   * the per-resource override (issue #32) when named, else `ttlMs`.
-   * `epoch` is the invalidation epoch the caller captured BEFORE its wire
-   * read: a read that straddled a `clear()` (a write) is dropped, never
-   * re-stored with its pre-write body. */
-  set(key, value, resource, epoch = this.epochCounter) {
-    if (epoch !== this.epochCounter) return;
-    if (this.store.size >= READ_CACHE_MAX_ENTRIES && this.purgeExpired() === 0) {
-      const oldest = this.store.keys().next();
-      if (!oldest.done) this.store.delete(oldest.value);
-    }
-    this.store.delete(key);
-    this.store.set(key, { value: structuredClone(value), expiresAt: Date.now() + this.ttlFor(resource) });
-  }
-  /** Drop every expired entry (returns the number removed). */
-  purgeExpired() {
-    const now = Date.now();
-    let removed = 0;
-    for (const [key, entry] of this.store) {
-      if (entry.expiresAt <= now) {
-        this.store.delete(key);
-        removed += 1;
-      }
-    }
-    return removed;
-  }
-  /** Current entry count (live + not-yet-purged expired). */
-  get size() {
-    return this.store.size;
-  }
-  /** Drop one key (issue #36: a later positive outcome clears a stale 'absent' marker). */
-  delete(key) {
-    return this.store.delete(key);
-  }
-  /** The invalidation epoch: bumped by `clear()`; capture it before a wire
-   * read and pass it to `set` so a read in flight across a write cannot
-   * re-store its stale answer. */
-  get epoch() {
-    return this.epochCounter;
-  }
-  /** Drop everything (e.g. a caller that knows the tenant was reset). */
-  clear() {
-    this.epochCounter += 1;
-    this.store.clear();
-  }
-}, _class4);
-
 // src/resourceNameCache.ts
 var RESOURCE_NAME_CACHE_MAX_ENTRIES = 1024;
 var RESOURCE_NAME_CACHE_BLIND_TTL_MS = 6e4;
@@ -1835,22 +1849,41 @@ function resolveResolution(config, agent) {
 }
 function resolveCaches(config) {
   const cacheBlock = config.cache === false || config.cache === void 0 ? void 0 : config.cache;
+  resolveReadCacheStore(cacheBlock);
   const fieldCacheBlock = config.fieldCache === false || config.fieldCache === void 0 ? void 0 : config.fieldCache;
   const resourceNameCacheBlock = config.resourceNameCache === false || config.resourceNameCache === void 0 ? void 0 : config.resourceNameCache;
-  const readCache = config.cache === false ? void 0 : new ReadCache(
-    _nullishCoalesce(_optionalChain([cacheBlock, 'optionalAccess', _41 => _41.ttlMs]), () => ( DEFAULT_READ_CACHE_TTL_MS)),
-    { ...DEFAULT_PER_RESOURCE_TTL_MS, ..._optionalChain([cacheBlock, 'optionalAccess', _42 => _42.perResourceTtlMs]) }
-  );
+  const readCache = config.cache === false ? void 0 : _nullishCoalesce(_optionalChain([cacheBlock, 'optionalAccess', _41 => _41.store]), () => ( buildReadCache(config)));
   const fieldCache = config.fieldCache === false ? void 0 : new FieldCache(
-    _nullishCoalesce(_optionalChain([fieldCacheBlock, 'optionalAccess', _43 => _43.ttlMs]), () => ( DEFAULT_FIELD_CACHE_TTL_MS)),
-    _nullishCoalesce(_optionalChain([fieldCacheBlock, 'optionalAccess', _44 => _44.maxEntities]), () => ( FIELD_CACHE_MAX_ENTITIES))
+    _nullishCoalesce(_optionalChain([fieldCacheBlock, 'optionalAccess', _42 => _42.ttlMs]), () => ( DEFAULT_FIELD_CACHE_TTL_MS)),
+    _nullishCoalesce(_optionalChain([fieldCacheBlock, 'optionalAccess', _43 => _43.maxEntities]), () => ( FIELD_CACHE_MAX_ENTITIES))
   );
   const resourceNameCache = config.resourceNameCache === false ? void 0 : new ResourceNameCache(
-    _nullishCoalesce(_optionalChain([resourceNameCacheBlock, 'optionalAccess', _45 => _45.ttlMs]), () => ( DEFAULT_RESOURCE_NAME_CACHE_TTL_MS)),
-    _nullishCoalesce(_optionalChain([resourceNameCacheBlock, 'optionalAccess', _46 => _46.maxEntries]), () => ( RESOURCE_NAME_CACHE_MAX_ENTRIES))
+    _nullishCoalesce(_optionalChain([resourceNameCacheBlock, 'optionalAccess', _44 => _44.ttlMs]), () => ( DEFAULT_RESOURCE_NAME_CACHE_TTL_MS)),
+    _nullishCoalesce(_optionalChain([resourceNameCacheBlock, 'optionalAccess', _45 => _45.maxEntries]), () => ( RESOURCE_NAME_CACHE_MAX_ENTRIES))
   );
   return { readCache, fieldCache, resourceNameCache };
 }
+function resolveReadCacheStore(cacheBlock) {
+  if (cacheBlock === void 0 || cacheBlock === false || cacheBlock.store === void 0) return;
+  if (!(cacheBlock.store instanceof ReadCache)) {
+    throw new AutotaskConfigError(
+      "cache.store must be a ReadCache instance (import { ReadCache } from the SDK; the pool supplies its own)"
+    );
+  }
+  if (cacheBlock.ttlMs !== void 0 || cacheBlock.perResourceTtlMs !== void 0) {
+    throw new AutotaskConfigError(
+      "cache.store cannot be combined with cache.ttlMs or cache.perResourceTtlMs \u2014 the supplied ReadCache instance owns its TTLs"
+    );
+  }
+}
+function buildReadCache(config) {
+  if (config.cache === false) return void 0;
+  const cacheBlock = config.cache === void 0 ? void 0 : config.cache;
+  return new ReadCache(
+    _nullishCoalesce(_optionalChain([cacheBlock, 'optionalAccess', _46 => _46.ttlMs]), () => ( DEFAULT_READ_CACHE_TTL_MS)),
+    { ...DEFAULT_PER_RESOURCE_TTL_MS, ..._optionalChain([cacheBlock, 'optionalAccess', _47 => _47.perResourceTtlMs]) }
+  );
+}
 function resolveConfig(config) {
   if (config === null || typeof config !== "object") {
     throw new AutotaskConfigError("AutotaskConfig is required");
@@ -1866,12 +1899,12 @@ function resolveConfig(config) {
   const resolution = resolveResolution(config, agent);
   const redactPersonalData = _nullishCoalesce(config.redactPersonalData, () => ( true));
   const caches = resolveCaches(config);
-  const update = { putFallback: _optionalChain([config, 'access', _47 => _47.update, 'optionalAccess', _48 => _48.putFallback]) === true };
+  const update = { putFallback: _optionalChain([config, 'access', _48 => _48.update, 'optionalAccess', _49 => _49.putFallback]) === true };
   const reResolveZoneOn401 = config.reResolveZoneOn401 === true;
   const logger = _nullishCoalesce(config.logger, () => ( NoopLogger));
   if (credentials.baseUrl.startsWith("http:")) {
     const host = new URL(credentials.baseUrl).host;
-    _optionalChain([logger, 'access', _49 => _49.warn, 'optionalCall', _50 => _50(
+    _optionalChain([logger, 'access', _50 => _50.warn, 'optionalCall', _51 => _51(
       `[autotask] cleartext credentials to ${host} \u2014 https recommended (baseUrl uses http:; all catalog zones are https)`
     )]);
   }
@@ -1952,7 +1985,7 @@ function parseIdentifier(value, label = "id") {
   return parsed;
 }
 function flattenUdfs(record, options) {
-  const prefix = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _51 => _51.prefix]), () => ( "udf_"));
+  const prefix = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _52 => _52.prefix]), () => ( "udf_"));
   const out = { ...record };
   const udfs = record.userDefinedFields;
   if (!Array.isArray(udfs)) return out;
@@ -2355,6 +2388,52 @@ var RELATIONSHIP_MAP = {
     "deleteBoundary": null,
     "markerField": null
   },
+  "billing_item_approval_levels": {
+    "resource": "billing_item_approval_levels",
+    "apiEntity": "BillingItemApprovalLevel",
+    "kind": "entity",
+    "path": "BillingItemApprovalLevels",
+    "parentScoped": false,
+    "tier": "extended",
+    "workflowResource": false,
+    "group": "B",
+    "parent": null,
+    "children": [],
+    "naturalKeys": {
+      "hasSearch": false,
+      "searchCovers": null,
+      "findBy": []
+    },
+    "blindSurfaces": null,
+    "zoneFacts": {
+      "createGuidance": {
+        "createOp": "billing_item_approval_levels.create",
+        "parentScoped": false,
+        "liveProvenPrefix": [],
+        "unproven": true,
+        "blocker": {
+          "kind": "unknown",
+          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/time-entry-approve) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the conditions (timeEntryID and approvalResourceID must reference existing objects) and the side effect (TimeEntry.BillingApprovalLevelMostRecent is updated; approvalDateTime / approvalResourceID are not), but the acceptance of the model body is unverified.",
+          "remedy": "attempt one create against a time entry in a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        },
+        "vendorEvidence": [
+          'Vendor help, BillingItemApprovalLevels entity page (fetched 2026-10-26): "describes a multi-level approval record for an Autotask time entry ... This option is only available through the REST API."',
+          'Vendor help, BillingItemApprovalLevels entity page (fetched 2026-10-26): "When the BillingItemApprovalLevels entity is created, the TimeEntry.BillingApprovalLevelMostRecent field is updated, but approvalDateTime and approvalResourceID are not. Instead, the approvalDateTime and approvalResourceID fields are editable on the TimeEntry entity. Workaround: ... create the BillingItemApprovalLevel and then follow that call up with an update to the TimeEntry to set the BillingApprovalDateTime and BillingApprovalResourceID fields."',
+          "api-docs.json: POST /V1.0/BillingItemApprovalLevels consumes definitions.BillingItemApprovalLevelModel and answers OperationResultModel \u2014 the entity defines no PUT, PATCH or DELETE path."
+        ],
+        "deleteBoundary": {
+          "available": false,
+          "note": "the vendor defines no DELETE for billing_item_approval_levels (spec-derived) \u2014 an approval level cannot be removed or corrected through the API; record cleanup is UI-only."
+        },
+        "zone": "ww29"
+      }
+    },
+    "deleteBoundary": {
+      "note": "the vendor defines no DELETE for billing_item_approval_levels (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 an approval level cannot be removed or corrected through the API; record cleanup is UI-only.",
+      "proof": "spec-derived"
+    },
+    "markerField": null
+  },
   "billing_items": {
     "resource": "billing_items",
     "apiEntity": "BillingItems",
@@ -5078,8 +5157,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100, marker CONF100-1791187382): the W-A6 'blind parent' was companyID \u2014 an OWNED company satisfies it (seed 30132785). Proven contractType values: 1, 3 (Fixed Price), 4 (Block hours), 6 (Retainer), 7 (Recurring Services), 8 (PerTicket incident); type 5 is an invalid picklist value. Type-specific extra fields: types 1/3/4/6/8 require estimatedRevenue (type 1 additionally estimatedHours + estimatedCost); type 7 additionally contractPeriodType (2 valid) + setupFee. Proven ids 30131842-30131847 (residue \u2014 no vendor DELETE for contracts).",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "live-PROVEN 2026-10-06 (confirm-100, marker CONF100-1791187382): the W-A6 'blind parent' was companyID \u2014 an OWNED company satisfies it (seed 30132785). Proven contractType values: 1, 3 (Fixed Price), 4 (Block hours), 6 (Retainer), 7 (Recurring Services), 8 (PerTicket incident). The type-conditioned field gates are declared in requiresByValue / rejectedValues on this row (issue #219 N3) \u2014 they are no longer restated in prose here. Proven ids 30131842-30131847 (residue \u2014 no vendor DELETE for contracts).",
+          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 send the body with the contractType you need and satisfy that value's requiresByValue gate (plus the contractPeriodType value it names); residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contracts.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"25d4a730-6d6c-49ff-a038-96d3fd09165d","message":"Value does not exist for the required fiel',
@@ -5089,7 +5168,75 @@ var RELATIONSHIP_MAP = {
           "available": false,
           "note": "the vendor defines no DELETE for contracts (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "requiresByValue": [
+          {
+            "field": "contractType",
+            "value": 1,
+            "requires": {
+              "allOf": [
+                "estimatedRevenue",
+                "estimatedHours",
+                "estimatedCost"
+              ]
+            }
+          },
+          {
+            "field": "contractType",
+            "value": 3,
+            "requires": {
+              "allOf": [
+                "estimatedRevenue"
+              ]
+            }
+          },
+          {
+            "field": "contractType",
+            "value": 4,
+            "requires": {
+              "allOf": [
+                "estimatedRevenue"
+              ]
+            }
+          },
+          {
+            "field": "contractType",
+            "value": 6,
+            "requires": {
+              "allOf": [
+                "estimatedRevenue"
+              ]
+            }
+          },
+          {
+            "field": "contractType",
+            "value": 7,
+            "requires": {
+              "allOf": [
+                "contractPeriodType",
+                "setupFee"
+              ]
+            },
+            "values": {
+              "contractPeriodType": 2
+            }
+          },
+          {
+            "field": "contractType",
+            "value": 8,
+            "requires": {
+              "allOf": [
+                "estimatedRevenue"
+              ]
+            }
+          }
+        ],
+        "rejectedValues": [
+          {
+            "field": "contractType",
+            "value": 5
+          }
+        ]
       }
     },
     "deleteBoundary": {
@@ -5527,6 +5674,27 @@ var RELATIONSHIP_MAP = {
     "deleteBoundary": null,
     "markerField": null
   },
+  "invoice_templates": {
+    "resource": "invoice_templates",
+    "apiEntity": "InvoiceTemplate",
+    "kind": "entity",
+    "path": "InvoiceTemplates",
+    "parentScoped": false,
+    "tier": "advanced",
+    "workflowResource": false,
+    "group": "B",
+    "parent": null,
+    "children": [],
+    "naturalKeys": {
+      "hasSearch": false,
+      "searchCovers": null,
+      "findBy": []
+    },
+    "blindSurfaces": null,
+    "zoneFacts": null,
+    "deleteBoundary": null,
+    "markerField": null
+  },
   "invoices": {
     "resource": "invoices",
     "apiEntity": "Invoice",
@@ -5717,6 +5885,138 @@ var RELATIONSHIP_MAP = {
     "deleteBoundary": null,
     "markerField": null
   },
+  "organizational_level1s": {
+    "resource": "organizational_level1s",
+    "apiEntity": "OrganizationalLevel1",
+    "kind": "entity",
+    "path": "OrganizationalLevel1s",
+    "parentScoped": false,
+    "tier": "advanced",
+    "workflowResource": false,
+    "group": "B",
+    "parent": null,
+    "children": [],
+    "naturalKeys": {
+      "hasSearch": false,
+      "searchCovers": null,
+      "findBy": []
+    },
+    "blindSurfaces": null,
+    "zoneFacts": {
+      "createGuidance": {
+        "createOp": "organizational_level1s.create",
+        "parentScoped": false,
+        "liveProvenPrefix": [],
+        "unproven": true,
+        "blocker": {
+          "kind": "unknown",
+          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel1Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
+          "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        },
+        "vendorEvidence": [
+          "api-docs.json: POST /V1.0/OrganizationalLevel1s consumes definitions.OrganizationalLevel1Model and answers OperationResultModel \u2014 the entity defines no DELETE path."
+        ],
+        "deleteBoundary": {
+          "available": false,
+          "note": "the vendor defines no DELETE for organizational_level1s (spec-derived) \u2014 a record cannot be removed or corrected through the API; cleanup is UI-only."
+        },
+        "zone": "ww29"
+      }
+    },
+    "deleteBoundary": {
+      "note": "the vendor defines no DELETE for organizational_level1s (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
+      "proof": "spec-derived"
+    },
+    "markerField": null
+  },
+  "organizational_level2s": {
+    "resource": "organizational_level2s",
+    "apiEntity": "OrganizationalLevel2",
+    "kind": "entity",
+    "path": "OrganizationalLevel2s",
+    "parentScoped": false,
+    "tier": "advanced",
+    "workflowResource": false,
+    "group": "B",
+    "parent": null,
+    "children": [],
+    "naturalKeys": {
+      "hasSearch": false,
+      "searchCovers": null,
+      "findBy": []
+    },
+    "blindSurfaces": null,
+    "zoneFacts": {
+      "createGuidance": {
+        "createOp": "organizational_level2s.create",
+        "parentScoped": false,
+        "liveProvenPrefix": [],
+        "unproven": true,
+        "blocker": {
+          "kind": "unknown",
+          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel2Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
+          "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        },
+        "vendorEvidence": [
+          "api-docs.json: POST /V1.0/OrganizationalLevel2s consumes definitions.OrganizationalLevel2Model and answers OperationResultModel \u2014 the entity defines no DELETE path."
+        ],
+        "deleteBoundary": {
+          "available": false,
+          "note": "the vendor defines no DELETE for organizational_level2s (spec-derived) \u2014 a record cannot be removed or corrected through the API; cleanup is UI-only."
+        },
+        "zone": "ww29"
+      }
+    },
+    "deleteBoundary": {
+      "note": "the vendor defines no DELETE for organizational_level2s (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
+      "proof": "spec-derived"
+    },
+    "markerField": null
+  },
+  "organizational_level_associations": {
+    "resource": "organizational_level_associations",
+    "apiEntity": "OrganizationalLevelAssociation",
+    "kind": "entity",
+    "path": "OrganizationalLevelAssociations",
+    "parentScoped": false,
+    "tier": "advanced",
+    "workflowResource": false,
+    "group": "B",
+    "parent": null,
+    "children": [],
+    "naturalKeys": {
+      "hasSearch": false,
+      "searchCovers": null,
+      "findBy": []
+    },
+    "blindSurfaces": null,
+    "zoneFacts": {
+      "createGuidance": {
+        "createOp": "organizational_level_associations.create",
+        "parentScoped": false,
+        "liveProvenPrefix": [],
+        "unproven": true,
+        "blocker": {
+          "kind": "unknown",
+          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevelAssociationModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
+          "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        },
+        "vendorEvidence": [
+          "api-docs.json: POST /V1.0/OrganizationalLevelAssociations consumes definitions.OrganizationalLevelAssociationModel and answers OperationResultModel \u2014 the entity defines no DELETE path."
+        ],
+        "deleteBoundary": {
+          "available": false,
+          "note": "the vendor defines no DELETE for organizational_level_associations (spec-derived) \u2014 a record cannot be removed or corrected through the API; cleanup is UI-only."
+        },
+        "zone": "ww29"
+      }
+    },
+    "deleteBoundary": {
+      "note": "the vendor defines no DELETE for organizational_level_associations (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
+      "proof": "spec-derived"
+    },
+    "markerField": null
+  },
   "product_vendors": {
     "resource": "product_vendors",
     "apiEntity": "ProductVendors",
@@ -5869,7 +6169,13 @@ var RELATIONSHIP_MAP = {
         "blocker": {
           "kind": "blind-parent",
           "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the projects table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "remedy": "provision a parent record in the Autotask UI first \u2014 the projects table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id.",
+          "requires": {
+            "anyOf": [
+              "productID",
+              "billingCodeID"
+            ]
+          }
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"project_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"664ab2ea-408f-4834-a331-eb5dd55ac557","message":"A productID or a billingCodeID must '
@@ -6942,6 +7248,27 @@ var RELATIONSHIP_MAP = {
     },
     "markerField": "name"
   },
+  "sales_orders": {
+    "resource": "sales_orders",
+    "apiEntity": "SalesOrder",
+    "kind": "entity",
+    "path": "SalesOrders",
+    "parentScoped": false,
+    "tier": "extended",
+    "workflowResource": false,
+    "group": "B",
+    "parent": null,
+    "children": [],
+    "naturalKeys": {
+      "hasSearch": false,
+      "searchCovers": null,
+      "findBy": []
+    },
+    "blindSurfaces": null,
+    "zoneFacts": null,
+    "deleteBoundary": null,
+    "markerField": null
+  },
   "service_call_task_resources": {
     "resource": "service_call_task_resources",
     "apiEntity": "ServiceCallTaskResource",
@@ -7577,20 +7904,61 @@ var RELATIONSHIP_MAP = {
     "deleteBoundary": null,
     "markerField": null
   },
-  "task_secondary_resources": {
-    "resource": "task_secondary_resources",
-    "apiEntity": "TaskSecondaryResource",
+  "task_secondary_resources": {
+    "resource": "task_secondary_resources",
+    "apiEntity": "TaskSecondaryResource",
+    "kind": "entity",
+    "path": "TaskSecondaryResources",
+    "parentScoped": true,
+    "tier": "extended",
+    "workflowResource": false,
+    "group": "A",
+    "parent": {
+      "resource": "tasks",
+      "segment": "SecondaryResources",
+      "field": "taskID"
+    },
+    "children": [],
+    "naturalKeys": {
+      "hasSearch": false,
+      "searchCovers": null,
+      "findBy": []
+    },
+    "blindSurfaces": null,
+    "zoneFacts": {
+      "createGuidance": {
+        "createOp": "task_secondary_resources.create",
+        "parentScoped": true,
+        "liveProvenPrefix": [],
+        "unproven": true,
+        "blocker": {
+          "kind": "unknown",
+          "message": "vendor 500: reference rejection on r (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)",
+          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        },
+        "vendorEvidence": [
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"task_secondary_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d2783d1d-b23a-4c7d-9459-0089be7f9b0b","message":"Reference value on field: r'
+        ],
+        "deleteBoundary": {
+          "available": true,
+          "note": null
+        },
+        "zone": "ww29"
+      }
+    },
+    "deleteBoundary": null,
+    "markerField": null
+  },
+  "tax_regions": {
+    "resource": "tax_regions",
+    "apiEntity": "TaxRegion",
     "kind": "entity",
-    "path": "TaskSecondaryResources",
-    "parentScoped": true,
-    "tier": "extended",
+    "path": "TaxRegions",
+    "parentScoped": false,
+    "tier": "advanced",
     "workflowResource": false,
-    "group": "A",
-    "parent": {
-      "resource": "tasks",
-      "segment": "SecondaryResources",
-      "field": "taskID"
-    },
+    "group": "B",
+    "parent": null,
     "children": [],
     "naturalKeys": {
       "hasSearch": false,
@@ -7600,26 +7968,29 @@ var RELATIONSHIP_MAP = {
     "blindSurfaces": null,
     "zoneFacts": {
       "createGuidance": {
-        "createOp": "task_secondary_resources.create",
-        "parentScoped": true,
+        "createOp": "tax_regions.create",
+        "parentScoped": false,
         "liveProvenPrefix": [],
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "vendor 500: reference rejection on r (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.TaxRegionModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
+          "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"task_secondary_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d2783d1d-b23a-4c7d-9459-0089be7f9b0b","message":"Reference value on field: r'
+          "api-docs.json: POST /V1.0/TaxRegions consumes definitions.TaxRegionModel and answers OperationResultModel \u2014 the entity defines no DELETE path."
         ],
         "deleteBoundary": {
-          "available": true,
-          "note": null
+          "available": false,
+          "note": "the vendor defines no DELETE for tax_regions (spec-derived) \u2014 a record cannot be removed or corrected through the API; cleanup is UI-only."
         },
         "zone": "ww29"
       }
     },
-    "deleteBoundary": null,
+    "deleteBoundary": {
+      "note": "the vendor defines no DELETE for tax_regions (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
+      "proof": "spec-derived"
+    },
     "markerField": null
   },
   "ticket_additional_configuration_items": {
@@ -7911,7 +8282,13 @@ var RELATIONSHIP_MAP = {
         "blocker": {
           "kind": "blind-parent",
           "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "remedy": "provision a parent record in the Autotask UI first \u2014 the tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id.",
+          "requires": {
+            "anyOf": [
+              "productID",
+              "billingCodeID"
+            ]
+          }
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"b9b6939b-ccc5-4e9d-9ea2-e2f47d064f63","message":"A productID or a billingCodeID must b'
@@ -8977,6 +9354,7 @@ var BLIND_SURFACE_STAMPS = {
   }
 };
 var DELETE_BOUNDARY_NOTES = {
+  "billing_item_approval_levels": "the vendor defines no DELETE for billing_item_approval_levels (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 an approval level cannot be removed or corrected through the API; record cleanup is UI-only.",
   "companies": "the vendor defines no DELETE for companies (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "company_notes": "the vendor defines no DELETE for company_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "configuration_item_categories": "the vendor defines no DELETE for configuration_item_categories (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
@@ -9000,6 +9378,9 @@ var DELETE_BOUNDARY_NOTES = {
   "expense_items": "the vendor defines no DELETE for expense_items (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "expense_reports": "the vendor defines no DELETE for expense_reports (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "opportunities": "the vendor defines no DELETE for opportunities (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
+  "organizational_level1s": "the vendor defines no DELETE for organizational_level1s (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
+  "organizational_level2s": "the vendor defines no DELETE for organizational_level2s (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
+  "organizational_level_associations": "the vendor defines no DELETE for organizational_level_associations (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "phases": "the vendor defines no DELETE for phases (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "product_vendors": "the vendor defines no DELETE for product_vendors (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "products": "the vendor defines no DELETE for products (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
@@ -9014,6 +9395,7 @@ var DELETE_BOUNDARY_NOTES = {
   "roles": "the vendor defines no DELETE for roles (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "services": "the vendor defines no DELETE for services (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "tasks": "the vendor defines no DELETE for tasks (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
+  "tax_regions": "the vendor defines no DELETE for tax_regions (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "ticket_checklist_libraries": "the vendor defines no DELETE for ticket_checklist_libraries (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "ticket_notes": "the vendor defines no DELETE for ticket_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only.",
   "tickets": "the vendor defines no DELETE for tickets (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
@@ -10515,6 +10897,18 @@ var BLIND_SURFACE_INVENTORY = {
       "note": "billing_codes count/query are pinned blind in this zone (plan.blindSurfaces pin, byte-identical sentinel) \u2014 the discovery sweep confirmed 0 rows unfiltered (limit-2 read, marker FULL100-SEED-1791096521); get(id) is the authority.",
       "proof": "live-verified"
     },
+    {
+      "resource": "billing_item_approval_levels",
+      "ops": [
+        "count",
+        "query"
+      ],
+      "kind": "unknown",
+      "unfilteredRows": null,
+      "authority": "billing_item_approval_levels.get",
+      "note": "billing_item_approval_levels was added to the plan on 2026-10-26 (feat/time-entry-approve) and has NEVER been swept \u2014 no discovery read has run against this zone, so the surface is unverified, not blind. get(id) is the authority for a specific record; query by timeEntryID is the intended read.",
+      "proof": "spec-derived"
+    },
     {
       "resource": "billing_items",
       "ops": [
@@ -11175,6 +11569,18 @@ var BLIND_SURFACE_INVENTORY = {
       "note": "ww29 discovery sweep (marker FULL100-SEED-1791096521, 2026-10-04): the unfiltered limit-2 read returned 1 row(s) \u2014 data-full for this API user (unfiltered reads are safe here; no blind class assigned).",
       "proof": "discovery-sweep"
     },
+    {
+      "resource": "invoice_templates",
+      "ops": [
+        "count",
+        "query"
+      ],
+      "kind": "unknown",
+      "unfilteredRows": null,
+      "authority": "invoice_templates.get",
+      "note": "invoice_templates was added to the plan on 2026-10-26 (feat/guidance-contract-027) and has NEVER been swept \u2014 no discovery read has run against this zone, so the surface is unverified, not blind. get(id) is the authority for a specific record.",
+      "proof": "spec-derived"
+    },
     {
       "resource": "invoices",
       "ops": [
@@ -11235,6 +11641,42 @@ var BLIND_SURFACE_INVENTORY = {
       "note": "ww29 discovery sweep (marker FULL100-SEED-1791096521, 2026-10-04): the unfiltered limit-2 read returned 2 row(s) \u2014 data-full for this API user (unfiltered reads are safe here; no blind class assigned).",
       "proof": "discovery-sweep"
     },
+    {
+      "resource": "organizational_level1s",
+      "ops": [
+        "count",
+        "query"
+      ],
+      "kind": "unknown",
+      "unfilteredRows": null,
+      "authority": "organizational_level1s.get",
+      "note": "organizational_level1s was added to the plan on 2026-10-26 (feat/guidance-contract-027) and has NEVER been swept \u2014 no discovery read has run against this zone, so the surface is unverified, not blind. get(id) is the authority for a specific record.",
+      "proof": "spec-derived"
+    },
+    {
+      "resource": "organizational_level2s",
+      "ops": [
+        "count",
+        "query"
+      ],
+      "kind": "unknown",
+      "unfilteredRows": null,
+      "authority": "organizational_level2s.get",
+      "note": "organizational_level2s was added to the plan on 2026-10-26 (feat/guidance-contract-027) and has NEVER been swept \u2014 no discovery read has run against this zone, so the surface is unverified, not blind. get(id) is the authority for a specific record.",
+      "proof": "spec-derived"
+    },
+    {
+      "resource": "organizational_level_associations",
+      "ops": [
+        "count",
+        "query"
+      ],
+      "kind": "unknown",
+      "unfilteredRows": null,
+      "authority": "organizational_level_associations.get",
+      "note": "organizational_level_associations was added to the plan on 2026-10-26 (feat/guidance-contract-027) and has NEVER been swept \u2014 no discovery read has run against this zone, so the surface is unverified, not blind. get(id) is the authority for a specific record.",
+      "proof": "spec-derived"
+    },
     {
       "resource": "phases",
       "ops": [
@@ -11475,6 +11917,18 @@ var BLIND_SURFACE_INVENTORY = {
       "note": "ww29 discovery sweep (marker FULL100-SEED-1791096521, 2026-10-04): the unfiltered limit-2 read returned 2 row(s) \u2014 data-full for this API user (unfiltered reads are safe here; no blind class assigned).",
       "proof": "discovery-sweep"
     },
+    {
+      "resource": "sales_orders",
+      "ops": [
+        "count",
+        "query"
+      ],
+      "kind": "unknown",
+      "unfilteredRows": null,
+      "authority": "sales_orders.get",
+      "note": "sales_orders was added to the plan on 2026-10-26 (feat/guidance-contract-027) and has NEVER been swept \u2014 no discovery read has run against this zone, so the surface is unverified, not blind. get(id) is the authority for a specific record.",
+      "proof": "spec-derived"
+    },
     {
       "resource": "service_call_task_resources",
       "ops": [
@@ -11679,6 +12133,18 @@ var BLIND_SURFACE_INVENTORY = {
       "note": "ww29 discovery sweep (marker FULL100-SEED-1791096521, 2026-10-04): the unfiltered limit-2 read returned 2 row(s) \u2014 data-full for this API user (unfiltered reads are safe here; no blind class assigned).",
       "proof": "discovery-sweep"
     },
+    {
+      "resource": "tax_regions",
+      "ops": [
+        "count",
+        "query"
+      ],
+      "kind": "unknown",
+      "unfilteredRows": null,
+      "authority": "tax_regions.get",
+      "note": "tax_regions was added to the plan on 2026-10-26 (feat/guidance-contract-027) and has NEVER been swept \u2014 no discovery read has run against this zone, so the surface is unverified, not blind. get(id) is the authority for a specific record.",
+      "proof": "spec-derived"
+    },
     {
       "resource": "ticket_additional_configuration_items",
       "ops": [
@@ -11897,7 +12363,7 @@ var BLIND_SURFACE_INVENTORY = {
     }
   ],
   "counts": {
-    "total": 117,
+    "total": 124,
     "dataFull": 46,
     "blind": 69,
     "pinned": 6
@@ -11967,6 +12433,7 @@ var REACHABILITY_PROBE_DEFAULTS = {
   "defaultTargets": [
     "appointments",
     "billing_codes",
+    "billing_item_approval_levels",
     "billing_items",
     "change_request_links",
     "classification_icons",
@@ -12002,8 +12469,12 @@ var REACHABILITY_PROBE_DEFAULTS = {
     "currencies",
     "expense_items",
     "expense_reports",
+    "invoice_templates",
     "invoices",
     "notification_history",
+    "organizational_level1s",
+    "organizational_level2s",
+    "organizational_level_associations",
     "product_vendors",
     "products",
     "project_charges",
@@ -12018,6 +12489,7 @@ var REACHABILITY_PROBE_DEFAULTS = {
     "resource_roles",
     "resource_skills",
     "resources",
+    "sales_orders",
     "service_call_task_resources",
     "service_call_tasks",
     "service_call_ticket_resources",
@@ -12027,6 +12499,7 @@ var REACHABILITY_PROBE_DEFAULTS = {
     "skills",
     "subscription_periods",
     "subscriptions",
+    "tax_regions",
     "ticket_change_request_approvals",
     "ticket_charges",
     "ticket_history",
@@ -12067,6 +12540,28 @@ var CREATE_GUIDANCE = {
       },
       "zone": "ww29"
     },
+    {
+      "resource": "billing_item_approval_levels",
+      "createOp": "billing_item_approval_levels.create",
+      "parentScoped": false,
+      "liveProvenPrefix": [],
+      "unproven": true,
+      "blocker": {
+        "kind": "unknown",
+        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/time-entry-approve) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the conditions (timeEntryID and approvalResourceID must reference existing objects) and the side effect (TimeEntry.BillingApprovalLevelMostRecent is updated; approvalDateTime / approvalResourceID are not), but the acceptance of the model body is unverified.",
+        "remedy": "attempt one create against a time entry in a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+      },
+      "vendorEvidence": [
+        'Vendor help, BillingItemApprovalLevels entity page (fetched 2026-10-26): "describes a multi-level approval record for an Autotask time entry ... This option is only available through the REST API."',
+        'Vendor help, BillingItemApprovalLevels entity page (fetched 2026-10-26): "When the BillingItemApprovalLevels entity is created, the TimeEntry.BillingApprovalLevelMostRecent field is updated, but approvalDateTime and approvalResourceID are not. Instead, the approvalDateTime and approvalResourceID fields are editable on the TimeEntry entity. Workaround: ... create the BillingItemApprovalLevel and then follow that call up with an update to the TimeEntry to set the BillingApprovalDateTime and BillingApprovalResourceID fields."',
+        "api-docs.json: POST /V1.0/BillingItemApprovalLevels consumes definitions.BillingItemApprovalLevelModel and answers OperationResultModel \u2014 the entity defines no PUT, PATCH or DELETE path."
+      ],
+      "deleteBoundary": {
+        "available": false,
+        "note": "the vendor defines no DELETE for billing_item_approval_levels (spec-derived) \u2014 an approval level cannot be removed or corrected through the API; record cleanup is UI-only."
+      },
+      "zone": "ww29"
+    },
     {
       "resource": "change_request_links",
       "createOp": "change_request_links.create",
@@ -12998,8 +13493,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100, marker CONF100-1791187382): the W-A6 'blind parent' was companyID \u2014 an OWNED company satisfies it (seed 30132785). Proven contractType values: 1, 3 (Fixed Price), 4 (Block hours), 6 (Retainer), 7 (Recurring Services), 8 (PerTicket incident); type 5 is an invalid picklist value. Type-specific extra fields: types 1/3/4/6/8 require estimatedRevenue (type 1 additionally estimatedHours + estimatedCost); type 7 additionally contractPeriodType (2 valid) + setupFee. Proven ids 30131842-30131847 (residue \u2014 no vendor DELETE for contracts).",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "live-PROVEN 2026-10-06 (confirm-100, marker CONF100-1791187382): the W-A6 'blind parent' was companyID \u2014 an OWNED company satisfies it (seed 30132785). Proven contractType values: 1, 3 (Fixed Price), 4 (Block hours), 6 (Retainer), 7 (Recurring Services), 8 (PerTicket incident). The type-conditioned field gates are declared in requiresByValue / rejectedValues on this row (issue #219 N3) \u2014 they are no longer restated in prose here. Proven ids 30131842-30131847 (residue \u2014 no vendor DELETE for contracts).",
+        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 send the body with the contractType you need and satisfy that value's requiresByValue gate (plus the contractPeriodType value it names); residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contracts.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"25d4a730-6d6c-49ff-a038-96d3fd09165d","message":"Value does not exist for the required fiel',
@@ -13009,7 +13504,75 @@ var CREATE_GUIDANCE = {
         "available": false,
         "note": "the vendor defines no DELETE for contracts (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "requiresByValue": [
+        {
+          "field": "contractType",
+          "value": 1,
+          "requires": {
+            "allOf": [
+              "estimatedRevenue",
+              "estimatedHours",
+              "estimatedCost"
+            ]
+          }
+        },
+        {
+          "field": "contractType",
+          "value": 3,
+          "requires": {
+            "allOf": [
+              "estimatedRevenue"
+            ]
+          }
+        },
+        {
+          "field": "contractType",
+          "value": 4,
+          "requires": {
+            "allOf": [
+              "estimatedRevenue"
+            ]
+          }
+        },
+        {
+          "field": "contractType",
+          "value": 6,
+          "requires": {
+            "allOf": [
+              "estimatedRevenue"
+            ]
+          }
+        },
+        {
+          "field": "contractType",
+          "value": 7,
+          "requires": {
+            "allOf": [
+              "contractPeriodType",
+              "setupFee"
+            ]
+          },
+          "values": {
+            "contractPeriodType": 2
+          }
+        },
+        {
+          "field": "contractType",
+          "value": 8,
+          "requires": {
+            "allOf": [
+              "estimatedRevenue"
+            ]
+          }
+        }
+      ],
+      "rejectedValues": [
+        {
+          "field": "contractType",
+          "value": 5
+        }
+      ]
     },
     {
       "resource": "departments",
@@ -13255,6 +13818,66 @@ var CREATE_GUIDANCE = {
       },
       "zone": "ww29"
     },
+    {
+      "resource": "organizational_level1s",
+      "createOp": "organizational_level1s.create",
+      "parentScoped": false,
+      "liveProvenPrefix": [],
+      "unproven": true,
+      "blocker": {
+        "kind": "unknown",
+        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel1Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
+        "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+      },
+      "vendorEvidence": [
+        "api-docs.json: POST /V1.0/OrganizationalLevel1s consumes definitions.OrganizationalLevel1Model and answers OperationResultModel \u2014 the entity defines no DELETE path."
+      ],
+      "deleteBoundary": {
+        "available": false,
+        "note": "the vendor defines no DELETE for organizational_level1s (spec-derived) \u2014 a record cannot be removed or corrected through the API; cleanup is UI-only."
+      },
+      "zone": "ww29"
+    },
+    {
+      "resource": "organizational_level2s",
+      "createOp": "organizational_level2s.create",
+      "parentScoped": false,
+      "liveProvenPrefix": [],
+      "unproven": true,
+      "blocker": {
+        "kind": "unknown",
+        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel2Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
+        "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+      },
+      "vendorEvidence": [
+        "api-docs.json: POST /V1.0/OrganizationalLevel2s consumes definitions.OrganizationalLevel2Model and answers OperationResultModel \u2014 the entity defines no DELETE path."
+      ],
+      "deleteBoundary": {
+        "available": false,
+        "note": "the vendor defines no DELETE for organizational_level2s (spec-derived) \u2014 a record cannot be removed or corrected through the API; cleanup is UI-only."
+      },
+      "zone": "ww29"
+    },
+    {
+      "resource": "organizational_level_associations",
+      "createOp": "organizational_level_associations.create",
+      "parentScoped": false,
+      "liveProvenPrefix": [],
+      "unproven": true,
+      "blocker": {
+        "kind": "unknown",
+        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevelAssociationModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
+        "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+      },
+      "vendorEvidence": [
+        "api-docs.json: POST /V1.0/OrganizationalLevelAssociations consumes definitions.OrganizationalLevelAssociationModel and answers OperationResultModel \u2014 the entity defines no DELETE path."
+      ],
+      "deleteBoundary": {
+        "available": false,
+        "note": "the vendor defines no DELETE for organizational_level_associations (spec-derived) \u2014 a record cannot be removed or corrected through the API; cleanup is UI-only."
+      },
+      "zone": "ww29"
+    },
     {
       "resource": "phases",
       "createOp": "phases.create",
@@ -13336,7 +13959,13 @@ var CREATE_GUIDANCE = {
       "blocker": {
         "kind": "blind-parent",
         "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the projects table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "remedy": "provision a parent record in the Autotask UI first \u2014 the projects table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id.",
+        "requires": {
+          "anyOf": [
+            "productID",
+            "billingCodeID"
+          ]
+        }
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"project_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"664ab2ea-408f-4834-a331-eb5dd55ac557","message":"A productID or a billingCodeID must '
@@ -13840,6 +14469,26 @@ var CREATE_GUIDANCE = {
       },
       "zone": "ww29"
     },
+    {
+      "resource": "tax_regions",
+      "createOp": "tax_regions.create",
+      "parentScoped": false,
+      "liveProvenPrefix": [],
+      "unproven": true,
+      "blocker": {
+        "kind": "unknown",
+        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.TaxRegionModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
+        "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+      },
+      "vendorEvidence": [
+        "api-docs.json: POST /V1.0/TaxRegions consumes definitions.TaxRegionModel and answers OperationResultModel \u2014 the entity defines no DELETE path."
+      ],
+      "deleteBoundary": {
+        "available": false,
+        "note": "the vendor defines no DELETE for tax_regions (spec-derived) \u2014 a record cannot be removed or corrected through the API; cleanup is UI-only."
+      },
+      "zone": "ww29"
+    },
     {
       "resource": "ticket_additional_configuration_items",
       "createOp": "ticket_additional_configuration_items.create",
@@ -13945,7 +14594,13 @@ var CREATE_GUIDANCE = {
       "blocker": {
         "kind": "blind-parent",
         "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "remedy": "provision a parent record in the Autotask UI first \u2014 the tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id.",
+        "requires": {
+          "anyOf": [
+            "productID",
+            "billingCodeID"
+          ]
+        }
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"b9b6939b-ccc5-4e9d-9ea2-e2f47d064f63","message":"A productID or a billingCodeID must b'
@@ -14168,7 +14823,30 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "derived": [
+        {
+          "field": "hoursWorked",
+          "rule": "elapsed(startDateTime,endDateTime)"
+        },
+        {
+          "field": "timeEntryType",
+          "rule": "parent"
+        },
+        {
+          "field": "contractID",
+          "rule": "parent"
+        },
+        {
+          "field": "internalBillingCodeID",
+          "rule": "mirror(billingCodeID)"
+        },
+        {
+          "field": "billingApprovalLevelMostRecent",
+          "rule": "external",
+          "writableRoute": "billing_item_approval_levels.create"
+        }
+      ]
     },
     {
       "resource": "time_entry_attachments",
@@ -14197,7 +14875,7 @@ var CREATE_GUIDANCE = {
     }
   ],
   "counts": {
-    "total": 92,
+    "total": 97,
     "byKind": {
       "ok": 31,
       "blind-reference": 16,
@@ -14207,7 +14885,7 @@ var CREATE_GUIDANCE = {
       "resource-role-pair": 2,
       "delete-absent": 8,
       "non-mutable": 0,
-      "unknown": 12
+      "unknown": 17
     }
   }
 };
@@ -14507,6 +15185,13 @@ var UNTRUSTED_FIELDS_BY_RESOURCE = {
   "holidays": [
     "holidayName"
   ],
+  "invoice_templates": [
+    "coveredByBlockRetainerContractLabel",
+    "coveredByRecurringServiceFixedPricePerTicketContractLabel",
+    "name",
+    "nonBillableLaborLabel",
+    "rateCostExpression"
+  ],
   "invoices": [
     "comments",
     "taxRegionName"
@@ -14555,6 +15240,14 @@ var UNTRUSTED_FIELDS_BY_RESOURCE = {
     "name",
     "nickname"
   ],
+  "organizational_level1s": [
+    "description",
+    "name"
+  ],
+  "organizational_level2s": [
+    "description",
+    "name"
+  ],
   "products": [
     "UDF1",
     "UDF10",
@@ -14692,6 +15385,34 @@ var UNTRUSTED_FIELDS_BY_RESOURCE = {
     "description",
     "name"
   ],
+  "sales_orders": [
+    "UDF1",
+    "UDF10",
+    "UDF11",
+    "UDF12",
+    "UDF13",
+    "UDF14",
+    "UDF15",
+    "UDF16",
+    "UDF17",
+    "UDF18",
+    "UDF19",
+    "UDF2",
+    "UDF20",
+    "UDF3",
+    "UDF4",
+    "UDF5",
+    "UDF6",
+    "UDF7",
+    "UDF8",
+    "UDF9",
+    "additionalBillToAddressInformation",
+    "additionalShipToAddressInformation",
+    "billToPostalCode",
+    "shipToCity",
+    "shipToState",
+    "title"
+  ],
   "service_calls": [
     "description"
   ],
@@ -14766,6 +15487,9 @@ var UNTRUSTED_FIELDS_BY_RESOURCE = {
   "tags": [
     "label"
   ],
+  "tax_regions": [
+    "name"
+  ],
   "ticket_attachments": [
     "title"
   ],
@@ -14881,7 +15605,7 @@ function attachEmptyReasonDetails(err) {
   const resource = err.operation.slice(0, dot);
   const op = err.operation.slice(dot + 1);
   const surface = err.operation;
-  const stamp = _optionalChain([EMPTY_REASON_STAMPS, 'access', _52 => _52[resource], 'optionalAccess', _53 => _53[op]]);
+  const stamp = _optionalChain([EMPTY_REASON_STAMPS, 'access', _53 => _53[resource], 'optionalAccess', _54 => _54[op]]);
   const pointer = POINTER_NOTES[surface];
   const isGetMiss = err instanceof NotFoundError && op === "get";
   if (stamp === void 0 && pointer === void 0 && !isGetMiss) return;
@@ -15076,7 +15800,7 @@ async function readBodyText(res, max, what, ctx) {
   });
   const declared = Number(res.headers.get("Content-Length"));
   if (Number.isFinite(declared) && declared > max) {
-    await _optionalChain([res, 'access', _54 => _54.body, 'optionalAccess', _55 => _55.cancel, 'call', _56 => _56(), 'access', _57 => _57.catch, 'call', _58 => _58(() => void 0)]);
+    await _optionalChain([res, 'access', _55 => _55.body, 'optionalAccess', _56 => _56.cancel, 'call', _57 => _57(), 'access', _58 => _58.catch, 'call', _59 => _59(() => void 0)]);
     throw tooLarge();
   }
   if (res.body === null) return "";
@@ -15097,7 +15821,7 @@ async function readBodyText(res, max, what, ctx) {
   return text + decoder.decode();
 }
 function isJsonMediaType(header) {
-  const mediaType = _nullishCoalesce(_optionalChain([header, 'access', _59 => _59.split, 'call', _60 => _60(";"), 'access', _61 => _61[0], 'optionalAccess', _62 => _62.trim, 'call', _63 => _63(), 'access', _64 => _64.toLowerCase, 'call', _65 => _65()]), () => ( ""));
+  const mediaType = _nullishCoalesce(_optionalChain([header, 'access', _60 => _60.split, 'call', _61 => _61(";"), 'access', _62 => _62[0], 'optionalAccess', _63 => _63.trim, 'call', _64 => _64(), 'access', _65 => _65.toLowerCase, 'call', _66 => _66()]), () => ( ""));
   return mediaType.startsWith("application/json") || mediaType.endsWith("+json");
 }
 function bodySnippet(text, redactPersonalData) {
@@ -15177,7 +15901,7 @@ function recordSuccess(breaker, key, probe, logger) {
   };
   if (next.successes >= breaker.successesToClose) {
     breaker.store.delete(key);
-    _optionalChain([logger, 'access', _66 => _66.warn, 'optionalCall', _67 => _67(
+    _optionalChain([logger, 'access', _67 => _67.warn, 'optionalCall', _68 => _68(
       `[autotask] circuit breaker CLOSED for ${key} (${next.successes} probe successes)`,
       void 0
     )]);
@@ -15192,7 +15916,7 @@ function recordFailure(breaker, key, probe, logger, correlationId) {
     const failures = [...st.failures.filter((t) => t > now - breaker.failureWindowMs), now];
     if (failures.length >= breaker.failureThreshold) {
       breaker.store.set(key, { failures, openedAt: now, successes: 0, probes: 0 });
-      _optionalChain([logger, 'access', _68 => _68.warn, 'optionalCall', _69 => _69(
+      _optionalChain([logger, 'access', _69 => _69.warn, 'optionalCall', _70 => _70(
         `[autotask] circuit breaker OPEN for ${key} (${failures.length} counted failures in ${Math.round(breaker.failureWindowMs / 1e3)}s) \u2014 refusing locally for ${Math.round(breaker.openTimeoutMs / 1e3)}s`,
         correlationId
       )]);
@@ -15347,7 +16071,7 @@ async function discoverZoneBase(userName, maxResponseBytes, signal, ctx) {
     return void 0;
   }
   if (res.status < 200 || res.status >= 300) {
-    await _optionalChain([res, 'access', _70 => _70.body, 'optionalAccess', _71 => _71.cancel, 'call', _72 => _72(), 'access', _73 => _73.catch, 'call', _74 => _74(() => void 0)]);
+    await _optionalChain([res, 'access', _71 => _71.body, 'optionalAccess', _72 => _72.cancel, 'call', _73 => _73(), 'access', _74 => _74.catch, 'call', _75 => _75(() => void 0)]);
     return void 0;
   }
   let text;
@@ -15482,7 +16206,7 @@ var HttpClient = class {
     this.maintenanceMaxWaitMs = config.maintenanceMaxWaitMs;
     this.maintenancePollMs = config.maintenancePollMs;
     this.maxResponseBytes = config.maxResponseBytes;
-    this.hourly = _optionalChain([config, 'access', _75 => _75.rateLimit, 'optionalAccess', _76 => _76.perHour]) === void 0 ? void 0 : new HourlyBudget(config.rateLimit.perHour, config.profile);
+    this.hourly = _optionalChain([config, 'access', _76 => _76.rateLimit, 'optionalAccess', _77 => _77.perHour]) === void 0 ? void 0 : new HourlyBudget(config.rateLimit.perHour, config.profile);
     this.tenantKey = buildTenantKey(config.userName, config.baseUrl);
     this.cooldownStore = config.cooldown.enabled ? _nullishCoalesce(config.cooldown.store, () => ( defaultCooldownStore())) : void 0;
     this.cooldownMaxMs = config.cooldown.maxMs;
@@ -15512,7 +16236,7 @@ var HttpClient = class {
    * `thresholdInformation.get()`.
    */
   hourlyBudget() {
-    return _optionalChain([this, 'access', _77 => _77.hourly, 'optionalAccess', _78 => _78.snapshot, 'call', _79 => _79()]);
+    return _optionalChain([this, 'access', _78 => _78.hourly, 'optionalAccess', _79 => _79.snapshot, 'call', _80 => _80()]);
   }
   /**
    * One audit event per settled request (section 19.3): the correlation id,
@@ -15542,7 +16266,7 @@ var HttpClient = class {
     this.liveBaseUrl = to;
     this.tenantKey = buildTenantKey(this.auth.userName, to);
     this.breakerKey = buildBreakerKey(to);
-    _optionalChain([this, 'access', _80 => _80.logger, 'access', _81 => _81.warn, 'optionalCall', _82 => _82(
+    _optionalChain([this, 'access', _81 => _81.logger, 'access', _82 => _82.warn, 'optionalCall', _83 => _83(
       `[autotask] zone re-point ${from} -> ${to} (a 401 on the stale zone base; the vendor's unauthenticated zone discovery named the tenant's current zone) \u2014 retrying the request once against the new base`,
       void 0
     )]);
@@ -15571,7 +16295,7 @@ var HttpClient = class {
   /** The caller's signal wins over the deadline when both fired. */
   interrupted(s) {
     const { method, opts, ctx } = s;
-    return _optionalChain([s, 'access', _83 => _83.callerSignal, 'optionalAccess', _84 => _84.aborted]) ? new AutotaskAbortError(`Request aborted: ${method} ${opts.path}`, { ...ctx, suggestedAction: "The caller aborted; re-issue the call if still needed." }) : new AutotaskTimeoutError(`Request timed out after ${s.timeoutMs}ms: ${method} ${opts.path}`, ctx);
+    return _optionalChain([s, 'access', _84 => _84.callerSignal, 'optionalAccess', _85 => _85.aborted]) ? new AutotaskAbortError(`Request aborted: ${method} ${opts.path}`, { ...ctx, suggestedAction: "The caller aborted; re-issue the call if still needed." }) : new AutotaskTimeoutError(`Request timed out after ${s.timeoutMs}ms: ${method} ${opts.path}`, ctx);
   }
   /** A retry only runs when its wait fits inside what is left of the call budget. */
   canWait(s, delay) {
@@ -15592,7 +16316,7 @@ var HttpClient = class {
   /** If the retry's wait fits the budget: log, count the attempt, pause, and report true (loop again). */
   async retryAfterDelay(s, delay, what) {
     if (!this.canWait(s, delay)) return false;
-    _optionalChain([this, 'access', _85 => _85.logger, 'access', _86 => _86.warn, 'optionalCall', _87 => _87(
+    _optionalChain([this, 'access', _86 => _86.logger, 'access', _87 => _87.warn, 'optionalCall', _88 => _88(
       `[autotask] ${what}; retrying in ${delay}ms (attempt ${s.attempt + 1}/${s.maxRetries})`,
       s.correlationId
     )]);
@@ -15616,7 +16340,7 @@ var HttpClient = class {
       const wait = Math.min(s.maintenancePollMs, remaining);
       if (wait >= remaining) s.maintenanceBudgetSpent = true;
       s.maintenanceWaits += 1;
-      _optionalChain([this, 'access', _88 => _88.logger, 'access', _89 => _89.warn, 'optionalCall', _90 => _90(
+      _optionalChain([this, 'access', _89 => _89.logger, 'access', _90 => _90.warn, 'optionalCall', _91 => _91(
         `[autotask] maintenance window on ${s.method} ${s.opts.path}${statusLabel}; waiting ${Math.round(wait / 1e3)}s (retry ${s.maintenanceWaits}, up to ${Math.round(s.maintenanceMaxWaitMs / 6e4)} min)`,
         s.correlationId
       )]);
@@ -15666,7 +16390,7 @@ var HttpClient = class {
     if (this.cooldownStore === void 0 || s.opts.bypassCooldown) return;
     const err = cooldownRefusal(this.cooldownStore, this.tenantKey, s.ctx);
     if (err === void 0) return;
-    if (_optionalChain([s, 'access', _91 => _91.callerSignal, 'optionalAccess', _92 => _92.aborted])) throw this.interrupted(s);
+    if (_optionalChain([s, 'access', _92 => _92.callerSignal, 'optionalAccess', _93 => _93.aborted])) throw this.interrupted(s);
     this.auditNotSent(s, "RATE_LIMITED_COOLDOWN");
     throw err;
   }
@@ -15680,7 +16404,7 @@ var HttpClient = class {
    */
   gateBreaker(s) {
     if (this.breaker === void 0 || s.opts.bypassCircuitBreaker) return;
-    if (_optionalChain([s, 'access', _93 => _93.callerSignal, 'optionalAccess', _94 => _94.aborted])) throw this.interrupted(s);
+    if (_optionalChain([s, 'access', _94 => _94.callerSignal, 'optionalAccess', _95 => _95.aborted])) throw this.interrupted(s);
     const verdict = evaluateBreakerGate(this.breaker, this.breakerKey, s.ctx);
     if (verdict.refusal !== void 0) {
       this.auditNotSent(s, "CIRCUIT_BREAKER_OPEN");
@@ -15700,7 +16424,7 @@ var HttpClient = class {
   async sendOnce(s) {
     const { method, opts, ctx } = s;
     try {
-      await _optionalChain([this, 'access', _95 => _95.hourly, 'optionalAccess', _96 => _96.take, 'call', _97 => _97(s.deadlineAt, s.signal, ctx)]);
+      await _optionalChain([this, 'access', _96 => _96.hourly, 'optionalAccess', _97 => _97.take, 'call', _98 => _98(s.deadlineAt, s.signal, ctx)]);
     } catch (err) {
       if (s.signal.aborted) throw this.interrupted(s);
       throw err;
@@ -15726,7 +16450,7 @@ var HttpClient = class {
     try {
       status = res.status;
       if (status >= 300 && status < 400) {
-        await _optionalChain([res, 'access', _98 => _98.body, 'optionalAccess', _99 => _99.cancel, 'call', _100 => _100(), 'access', _101 => _101.catch, 'call', _102 => _102(() => void 0)]);
+        await _optionalChain([res, 'access', _99 => _99.body, 'optionalAccess', _100 => _100.cancel, 'call', _101 => _101(), 'access', _102 => _102.catch, 'call', _103 => _103(() => void 0)]);
         throw new ResponseRejectedError(
           `Refused to follow a ${status} redirect for ${method} ${opts.path}`,
           { ...ctx, code: "REDIRECT_BLOCKED", httpStatus: status, suggestedAction: "Check the configured zone/baseUrl; the API does not redirect." }
@@ -15808,11 +16532,11 @@ var HttpClient = class {
       const delay = retryAfter !== void 0 ? retryAfter * 1e3 : backoffDelay(s.attempt);
       if (await this.retryAfterDelay(s, delay, `non-JSON 2xx on ${method} ${opts.path}`)) return RETRY;
     }
-    const pageSnippet = typeof _optionalChain([err, 'access', _103 => _103.details, 'optionalAccess', _104 => _104.bodySnippet]) === "string" ? err.details.bodySnippet : "";
+    const pageSnippet = typeof _optionalChain([err, 'access', _104 => _104.details, 'optionalAccess', _105 => _105.bodySnippet]) === "string" ? err.details.bodySnippet : "";
     this.stampMaintenance(s, err);
     if (err.code === "UNEXPECTED_CONTENT_TYPE" && !looksLikeMaintenanceText(text) && isHtmlLike(res.headers.get("Content-Type"), text)) {
       err.details = { ..._nullishCoalesce(err.details, () => ( {})), maintenancePatternMiss: true };
-      _optionalChain([this, 'access', _105 => _105.logger, 'access', _106 => _106.debug, 'optionalCall', _107 => _107(
+      _optionalChain([this, 'access', _106 => _106.logger, 'access', _107 => _107.debug, 'optionalCall', _108 => _108(
         `[autotask] non-JSON body did not match the maintenance vocabulary on ${method} ${opts.path}: ${pageSnippet}`,
         s.correlationId
       )]);
@@ -15855,7 +16579,7 @@ var HttpClient = class {
       const target = await discoverZoneBase(this.userName, this.maxResponseBytes, s.signal, s.ctx);
       const targetViolation = target === void 0 || this.hostPolicy === void 0 ? null : decideHostPolicy(target, this.hostPolicy);
       if (targetViolation !== null) {
-        _optionalChain([this, 'access', _108 => _108.logger, 'access', _109 => _109.warn, 'optionalCall', _110 => _110(
+        _optionalChain([this, 'access', _109 => _109.logger, 'access', _110 => _110.warn, 'optionalCall', _111 => _111(
           `[autotask] zone re-point refused by hostPolicy (${targetViolation.bound}): ${targetViolation.origin} \u2014 the original 401 propagates, zero wire to the refused host`,
           void 0
         )]);
@@ -15884,7 +16608,7 @@ var HttpClient = class {
         err.suggestedAction = `A maintenance-shaped page answered ${method} ${opts.path} (HTTP ${status}); it was NOT waited out or re-sent \u2014 a non-2xx edge page can arrive after the request was forwarded, so verify the record before re-issuing (only a GET or an explicitly idempotent-flagged call waits this window out).`;
       } else if (!nonJsonIsMaintenance && nonJsonIsHtmlCandidate) {
         err.details = { ..._nullishCoalesce(err.details, () => ( {})), maintenancePatternMiss: true };
-        _optionalChain([this, 'access', _111 => _111.logger, 'access', _112 => _112.debug, 'optionalCall', _113 => _113(
+        _optionalChain([this, 'access', _112 => _112.logger, 'access', _113 => _113.debug, 'optionalCall', _114 => _114(
           `[autotask] non-JSON body did not match the maintenance vocabulary on ${method} ${opts.path}: ${nonJsonSnippet}`,
           s.correlationId
         )]);
@@ -15906,7 +16630,7 @@ var HttpClient = class {
         threadThreshold
       });
       this.cooldownStore.set(this.tenantKey, Date.now() + durationMs);
-      _optionalChain([this, 'access', _114 => _114.logger, 'access', _115 => _115.warn, 'optionalCall', _116 => _116(
+      _optionalChain([this, 'access', _115 => _115.logger, 'access', _116 => _116.warn, 'optionalCall', _117 => _117(
         `[autotask] 429 on ${method} ${opts.path} surfaces after ${s.attempt + 1} attempt(s); tenant cooldown armed for ${Math.round(durationMs / 1e3)}s`,
         s.correlationId
       )]);
@@ -15952,7 +16676,7 @@ var HttpClient = class {
     if (this.fieldCache !== void 0 && err instanceof AutotaskError) {
       const op = typeof opts.operation === "string" ? opts.operation : void 0;
       const verb = op !== void 0 ? op.slice(op.lastIndexOf(".") + 1) : "";
-      const drift = _optionalChain([err, 'access', _117 => _117.details, 'optionalAccess', _118 => _118.deterministic]) === true || err.code === "INVALID_RESPONSE" && META_TRIO_VERBS.has(verb);
+      const drift = _optionalChain([err, 'access', _118 => _118.details, 'optionalAccess', _119 => _119.deterministic]) === true || err.code === "INVALID_RESPONSE" && META_TRIO_VERBS.has(verb);
       if (drift && op !== void 0) {
         const dot = op.indexOf(".");
         if (dot > 0) this.fieldCache.invalidate(op.slice(0, dot));
@@ -15962,7 +16686,7 @@ var HttpClient = class {
   /** A real write (even a failed one — it may have partly applied) voids cached reads. */
   invalidateAfterWrite(opts) {
     if (opts.method === "GET" || opts.idempotent === true) return;
-    _optionalChain([this, 'access', _119 => _119.readCache, 'optionalAccess', _120 => _120.clear, 'call', _121 => _121()]);
+    _optionalChain([this, 'access', _120 => _120.readCache, 'optionalAccess', _121 => _121.clear, 'call', _122 => _122()]);
     this.latestCountCache.clear();
     const nameOp = typeof opts.operation === "string" ? opts.operation : void 0;
     const nameDot = nameOp !== void 0 ? nameOp.indexOf(".") : -1;
@@ -16043,7 +16767,7 @@ var HttpClient = class {
     try {
       this.gateCooldown(s);
       this.gateBreaker(s);
-      _optionalChain([this, 'access', _122 => _122.logger, 'access', _123 => _123.debug, 'optionalCall', _124 => _124(`[autotask] ${method} ${opts.path}`, correlationId)]);
+      _optionalChain([this, 'access', _123 => _123.logger, 'access', _124 => _124.debug, 'optionalCall', _125 => _125(`[autotask] ${method} ${opts.path}`, correlationId)]);
       try {
         for (; ; ) {
           const sent = await this.sendOnce(s);
@@ -16253,7 +16977,7 @@ async function expandResourceNames(client, ids, opts = {}) {
         continue;
       }
     }
-    const epoch = _nullishCoalesce(_optionalChain([cache, 'optionalAccess', _125 => _125.epoch]), () => ( 0));
+    const epoch = _nullishCoalesce(_optionalChain([cache, 'optionalAccess', _126 => _126.epoch]), () => ( 0));
     const work = (async () => {
       try {
         const record = await holder.get(id, { fresh });
@@ -16288,6 +17012,38 @@ async function expandResourceNames(client, ids, opts = {}) {
   return { results, resolved, blind, failed };
 }
 
+// src/operations/entityType.ts
+function buildEntityTypeMap() {
+  const exact = {};
+  for (const [resource, entry] of Object.entries(RELATIONSHIP_MAP)) {
+    const apiEntity = entry.apiEntity;
+    if (typeof apiEntity !== "string" || apiEntity === "") continue;
+    if (exact[apiEntity] === void 0) exact[apiEntity] = resource;
+  }
+  const aliases = {};
+  for (const [apiEntity, resource] of Object.entries(exact)) {
+    if (!apiEntity.endsWith("s") || apiEntity.endsWith("ss")) continue;
+    const singular = apiEntity.slice(0, -1);
+    if (exact[singular] !== void 0 || aliases[singular] !== void 0) continue;
+    aliases[singular] = resource;
+  }
+  return { ...exact, ...aliases };
+}
+var ENTITY_TYPE_TO_RESOURCE = buildEntityTypeMap();
+var ENUMERABLE_RESOURCES = new Set(
+  _chunkZEGMVEF3cjs.CAPABILITIES.filter((rec) => rec.resource !== "operations" && (rec.operation === "query" || rec.operation === "get")).map(
+    (rec) => rec.resource
+  )
+);
+function resourceForEntityType(entityType) {
+  if (typeof entityType !== "string" || entityType === "") return null;
+  return _nullishCoalesce(ENTITY_TYPE_TO_RESOURCE[entityType], () => ( null));
+}
+function isEnumerableResource(resource) {
+  if (typeof resource !== "string" || resource === "") return false;
+  return ENUMERABLE_RESOURCES.has(resource);
+}
+
 // src/operations/types.ts
 var WORKFLOW_RESOURCES = [
   "companies",
@@ -16301,24 +17057,36 @@ var WORKFLOW_RESOURCES = [
 var MAX_FIELD_CATALOG_WIRE = 60;
 var FIELD_CATALOG_HONESTY_NOTE = "Live field metadata reports the SHAPE of a field (existence, requiredness, type, maxLength, read-only, queryable, picklist-ness) as FLAGS and NAMES: picklist-ness as a flag (isPickList) and picklist field names (picklistFields). With the opt-in `labels: true`, picklist rows carry the vendor's exposed picklist VALUES (labels next to each value); without it the op serves no VALUES. It cannot resolve a picklist VALUE the vendor does not expose to this API user (the W-A4 wall \u2014 e.g. the attachments Type picklist): retrying the catalog will not surface a withheld value; that gap is vendor-side, not a client defect.";
 var FIELD_CATALOG_OPT_KEYS = ["resources", "include", "fresh", "fields", "labels"];
-function projectFieldRow(raw, labels = false) {
+function projectFieldRow(raw, labels = false, udf = false) {
   const r = typeof raw === "object" && raw !== null ? raw : {};
   const name = typeof r.name === "string" ? r.name : "";
   const type = typeof r.dataType === "string" ? r.dataType : typeof r.type === "string" ? r.type : "";
   const values = labels && r.isPickList === true && Array.isArray(r.picklistValues) && r.picklistValues.length > 0 ? r.picklistValues : void 0;
+  const referenceEntityType = typeof r.referenceEntityType === "string" ? r.referenceEntityType : "";
+  const targetResource = resourceForEntityType(referenceEntityType);
   return {
     name,
     ...typeof r.label === "string" && r.label !== "" ? { label: r.label } : {},
     type,
     isRequired: r.isRequired === true,
     isReadOnly: r.isReadOnly === true,
-    isQueryable: r.isQueryable === true,
+    // Issue #219 N7: a UDF row never serves the vendor's isQueryable (it is
+    // true for UDFs while a plain filter on a UDF name is refused); it serves
+    // the marker the filter actually needs.
+    ...udf ? { filterable: "udf-marker" } : { isQueryable: r.isQueryable === true },
     isPickList: r.isPickList === true,
+    ...isObjectOrArrayType(type) ? { writeShape: "replace-all" } : {},
     maxLength: typeof r.length === "number" ? r.length : null,
-    referenceEntityType: typeof r.referenceEntityType === "string" ? r.referenceEntityType : "",
+    referenceEntityType,
+    targetResource,
+    targetEnumerable: isEnumerableResource(targetResource),
     ...values !== void 0 ? { picklistValues: values } : {}
   };
 }
+function isObjectOrArrayType(type) {
+  const t = type.trim().toLowerCase();
+  return t === "object" || t === "array" || t === "collection" || t.endsWith("[]");
+}
 function exposesPicklistValues(raw) {
   const r = typeof raw === "object" && raw !== null ? raw : {};
   return Array.isArray(r.picklistValues) && r.picklistValues.length > 0;
@@ -16340,7 +17108,7 @@ function capabilitySets() {
   const fieldOps = /* @__PURE__ */ new Map();
   const udfOps = /* @__PURE__ */ new Map();
   const resources = /* @__PURE__ */ new Set();
-  for (const rec of _chunkWM6E5O55cjs.CAPABILITIES) {
+  for (const rec of _chunkZEGMVEF3cjs.CAPABILITIES) {
     if (rec.resource === "operations") continue;
     resources.add(rec.resource);
     if (rec.operation === "getFieldInfo") fieldOps.set(rec.resource, rec);
@@ -16348,6 +17116,27 @@ function capabilitySets() {
   }
   return { fieldOps, udfOps, resources };
 }
+var derivedIndex = null;
+function derivedFieldsFor(resource) {
+  if (derivedIndex === null) {
+    derivedIndex = /* @__PURE__ */ new Map();
+    for (const rec of _chunkZEGMVEF3cjs.CAPABILITIES) {
+      const declared = _optionalChain([rec, 'access', _127 => _127.metadata, 'optionalAccess', _128 => _128.derivedFields]);
+      if (!Array.isArray(declared) || derivedIndex.has(rec.resource)) continue;
+      const rows = [];
+      for (const row of declared) {
+        if (typeof _optionalChain([row, 'optionalAccess', _129 => _129.field]) !== "string" || typeof row.rule !== "string") continue;
+        rows.push({
+          field: row.field,
+          rule: row.rule,
+          ...typeof row.writableRoute === "string" ? { writableRoute: row.writableRoute } : {}
+        });
+      }
+      derivedIndex.set(rec.resource, rows);
+    }
+  }
+  return _nullishCoalesce(derivedIndex.get(resource), () => ( []));
+}
 function apiEntityFor(rec) {
   const m = /^GET \/V1\.0\/([^/]+)\/entityInformation\/fields$/.exec(_nullishCoalesce(rec.endpoint, () => ( "")));
   if (m === null) {
@@ -16374,7 +17163,7 @@ function validateCatalogOptsShape(opts) {
   }
 }
 function resolveInclude(opts) {
-  const includeRaw = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _126 => _126.include]), () => ( ["fields"]));
+  const includeRaw = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _130 => _130.include]), () => ( ["fields"]));
   if (!Array.isArray(includeRaw) || includeRaw.length === 0) {
     throw new AutotaskConfigError("fieldCatalog: opts.include must be a non-empty array of (info|fields|udf)");
   }
@@ -16391,7 +17180,7 @@ function resolveInclude(opts) {
   return include;
 }
 function resolveTargets(opts, fieldOps, allResources) {
-  const resourcesRaw = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _127 => _127.resources]), () => ( WORKFLOW_RESOURCES));
+  const resourcesRaw = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _131 => _131.resources]), () => ( WORKFLOW_RESOURCES));
   if (!Array.isArray(resourcesRaw) || resourcesRaw.length === 0) {
     throw new AutotaskConfigError("fieldCatalog: opts.resources must be a non-empty array of plan resource keys");
   }
@@ -16425,7 +17214,7 @@ function resolveTargets(opts, fieldOps, allResources) {
   return targets;
 }
 function resolveFieldsFilter(opts) {
-  const fieldsRaw = _optionalChain([opts, 'optionalAccess', _128 => _128.fields]);
+  const fieldsRaw = _optionalChain([opts, 'optionalAccess', _132 => _132.fields]);
   if (fieldsRaw === void 0) return void 0;
   if (!Array.isArray(fieldsRaw) || fieldsRaw.length === 0) {
     throw new AutotaskConfigError("fieldCatalog: opts.fields must be a non-empty array of vendor field name strings");
@@ -16448,7 +17237,7 @@ function resolveLabels(opts) {
       `fieldCatalog: opts.labels must be a boolean (got ${typeof opts.labels})`
     );
   }
-  return _optionalChain([opts, 'optionalAccess', _129 => _129.labels]) === true;
+  return _optionalChain([opts, 'optionalAccess', _133 => _133.labels]) === true;
 }
 function assertWithinWireCap(targetCount, kindCount) {
   const cost = targetCount * kindCount;
@@ -16461,9 +17250,9 @@ function assertWithinWireCap(targetCount, kindCount) {
 }
 function kindFetches(holder, resource) {
   return {
-    info: () => _nullishCoalesce(_optionalChain([holder, 'optionalAccess', _130 => _130.getEntityInfo, 'optionalCall', _131 => _131()]), () => ( Promise.reject(new AutotaskError(`fieldCatalog: the client exposes no getEntityInfo read for "${resource}"`, { code: "INVALID_RESPONSE", category: "server" })))),
-    fields: () => _nullishCoalesce(_optionalChain([holder, 'optionalAccess', _132 => _132.getFieldInfo, 'optionalCall', _133 => _133()]), () => ( Promise.reject(new AutotaskError(`fieldCatalog: the client exposes no getFieldInfo read for "${resource}"`, { code: "INVALID_RESPONSE", category: "server" })))),
-    udf: () => _nullishCoalesce(_optionalChain([holder, 'optionalAccess', _134 => _134.getUdfInfo, 'optionalCall', _135 => _135()]), () => ( Promise.reject(new AutotaskError(`fieldCatalog: the client exposes no getUdfInfo read for "${resource}"`, { code: "INVALID_RESPONSE", category: "server" }))))
+    info: () => _nullishCoalesce(_optionalChain([holder, 'optionalAccess', _134 => _134.getEntityInfo, 'optionalCall', _135 => _135()]), () => ( Promise.reject(new AutotaskError(`fieldCatalog: the client exposes no getEntityInfo read for "${resource}"`, { code: "INVALID_RESPONSE", category: "server" })))),
+    fields: () => _nullishCoalesce(_optionalChain([holder, 'optionalAccess', _136 => _136.getFieldInfo, 'optionalCall', _137 => _137()]), () => ( Promise.reject(new AutotaskError(`fieldCatalog: the client exposes no getFieldInfo read for "${resource}"`, { code: "INVALID_RESPONSE", category: "server" })))),
+    udf: () => _nullishCoalesce(_optionalChain([holder, 'optionalAccess', _138 => _138.getUdfInfo, 'optionalCall', _139 => _139()]), () => ( Promise.reject(new AutotaskError(`fieldCatalog: the client exposes no getUdfInfo read for "${resource}"`, { code: "INVALID_RESPONSE", category: "server" }))))
   };
 }
 async function sweepResource(ctx, resource, tally) {
@@ -16477,6 +17266,8 @@ async function sweepResource(ctx, resource, tally) {
     resource,
     apiEntity,
     udfCapable: ctx.udfOps.has(resource),
+    // Issue #219 N7: the UDF surface is declared with the mechanism, not a boolean.
+    ...ctx.udfOps.has(resource) ? { udfFilter: "udf-marker", udfWriteShape: "merge" } : {},
     unmatchedFields: [],
     required: [],
     readOnly: [],
@@ -16487,9 +17278,9 @@ async function sweepResource(ctx, resource, tally) {
     error: null
   };
   const fetches = kindFetches(holder, resource);
-  if (fresh) _optionalChain([cache, 'optionalAccess', _136 => _136.invalidate, 'call', _137 => _137(resource)]);
+  if (fresh) _optionalChain([cache, 'optionalAccess', _140 => _140.invalidate, 'call', _141 => _141(resource)]);
   const projectList = (kind, list) => {
-    const projected = list.map((f) => projectFieldRow(f, labels));
+    const projected = list.map((f) => projectFieldRow(f, labels, kind === "udf"));
     if (kind === "fields") applyFieldsFilter(projected, fieldsFilter, row);
     else row.udf = projected;
     for (const f of list) if (exposesPicklistValues(f)) tally.anyPicklistValues = true;
@@ -16529,6 +17320,19 @@ async function sweepResource(ctx, resource, tally) {
     }
   }
   row.cache = allCached ? { hit: true, age: ages.length > 0 ? Math.max(...ages) : 0 } : { hit: false, age: null };
+  const declared = derivedFieldsFor(resource);
+  if (declared.length > 0) {
+    const byField = new Map(declared.map((d) => [d.field, d]));
+    row.derivedFields = declared;
+    for (const field of _nullishCoalesce(row.fields, () => ( []))) {
+      const derivation = byField.get(field.name);
+      if (derivation === void 0) continue;
+      field.derived = {
+        rule: derivation.rule,
+        ...derivation.writableRoute !== void 0 ? { writableRoute: derivation.writableRoute } : {}
+      };
+    }
+  }
   return row;
 }
 async function fieldCatalog(client, opts) {
@@ -16543,7 +17347,7 @@ async function fieldCatalog(client, opts) {
   const zone = _nullishCoalesce(client.config.zone, () => ( "unknown"));
   const rows = [];
   const tally = { wireUsed: 0, anyPicklistValues: false };
-  const ctx = { client, include, fieldsFilter, labels, fresh: _optionalChain([opts, 'optionalAccess', _138 => _138.fresh]) === true, fieldOps, udfOps };
+  const ctx = { client, include, fieldsFilter, labels, fresh: _optionalChain([opts, 'optionalAccess', _142 => _142.fresh]) === true, fieldOps, udfOps };
   for (const resource of targets) {
     const row = await sweepResource(ctx, resource, tally);
     if (row !== void 0) rows.push(row);
@@ -16553,7 +17357,7 @@ async function fieldCatalog(client, opts) {
     label: zone,
     cached: cache !== void 0,
     labels,
-    ttlMs: _nullishCoalesce(_optionalChain([cache, 'optionalAccess', _139 => _139.ttlMs]), () => ( null)),
+    ttlMs: _nullishCoalesce(_optionalChain([cache, 'optionalAccess', _143 => _143.ttlMs]), () => ( null)),
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString(),
     rows,
     wireUsed: tally.wireUsed,
@@ -16718,7 +17522,7 @@ async function resolveCompositeNames(http, plan, opts = {}) {
       } else {
         for (const f of plan.labelFields) {
           const frow = row.fields.find((x) => x.name === f);
-          picklists[f] = _optionalChain([frow, 'optionalAccess', _140 => _140.picklistValues]);
+          picklists[f] = _optionalChain([frow, 'optionalAccess', _144 => _144.picklistValues]);
         }
       }
     } catch (err) {
@@ -16729,8 +17533,8 @@ async function resolveCompositeNames(http, plan, opts = {}) {
   }
   return {
     section,
-    resourceName: (id) => _nullishCoalesce(_optionalChain([section, 'access', _141 => _141.rows, 'access', _142 => _142[`resource:${id}`], 'optionalAccess', _143 => _143.name]), () => ( null)),
-    recordName: (table, id) => _nullishCoalesce(_optionalChain([section, 'access', _144 => _144.rows, 'access', _145 => _145[`${table}:${id}`], 'optionalAccess', _146 => _146.name]), () => ( null)),
+    resourceName: (id) => _nullishCoalesce(_optionalChain([section, 'access', _145 => _145.rows, 'access', _146 => _146[`resource:${id}`], 'optionalAccess', _147 => _147.name]), () => ( null)),
+    recordName: (table, id) => _nullishCoalesce(_optionalChain([section, 'access', _148 => _148.rows, 'access', _149 => _149[`${table}:${id}`], 'optionalAccess', _150 => _150.name]), () => ( null)),
     labelFor: (field, value) => {
       if (value === null || value === void 0) return null;
       const values = picklists[field];
@@ -16752,6 +17556,7 @@ async function resolveCompositeNames(http, plan, opts = {}) {
 var MODEL_FIELD_SETS = {
   "appointments": ["id", "createDateTime", "creatorResourceID", "description", "endDateTime", "resourceID", "startDateTime", "title", "updateDateTime"],
   "billing_codes": ["id", "afterHoursWorkType", "billingCodeType", "department", "description", "externalNumber", "generalLedgerAccount", "isActive", "isExcludedFromNewContracts", "markupRate", "name", "taxCategoryID", "unitCost", "unitPrice", "useType"],
+  "billing_item_approval_levels": ["id", "approvalDateTime", "approvalLevel", "approvalResourceID", "timeEntryID"],
   "billing_items": ["id", "accountManagerWhenApprovedID", "billingCodeID", "billingItemType", "companyID", "configurationItemID", "contractBlockID", "contractChargeID", "contractID", "contractServiceAdjustmentID", "contractServiceBundleAdjustmentID", "contractServiceBundleID", "contractServiceBundlePeriodID", "contractServiceID", "contractServicePeriodID", "description", "expenseItemID", "extendedPrice", "internalCurrencyExtendedPrice", "internalCurrencyRate", "internalCurrencyTaxDollars", "internalCurrencyTotalAmount", "invoiceID", "itemApproverID", "itemDate", "itemName", "lineItemFullDescription", "lineItemGroupDescription", "milestoneID", "nonBillable", "organizationalLevelAssociationID", "ourCost", "postedDate", "postedOnTime", "projectChargeID", "projectID", "purchaseOrderNumber", "quantity", "rate", "roleID", "serviceBundleID", "serviceID", "sortOrderID", "subType", "taskID", "taxDollars", "ticketChargeID", "ticketID", "timeEntryID", "totalAmount", "vendorID", "webServiceDate"],
   "change_request_links": ["id", "changeRequestTicketID", "problemOrIncidentTicketID"],
   "checklist_libraries": ["id", "description", "entityType", "isActive", "name"],
@@ -16807,11 +17612,15 @@ var MODEL_FIELD_SETS = {
   "holiday_sets": ["id", "holidaySetDescription", "holidaySetName"],
   "holidays": ["id", "holidayDate", "holidayName", "holidaySetID", "soapParentPropertyId"],
   "inventory_products": ["id", "availableUnits", "backOrderQuantity", "bin", "createDateTime", "createdByResourceID", "inventoryLocationID", "onHandUnits", "pickedUnits", "productID", "quantityMaximum", "quantityMinimum", "referenceNumber", "reservedUnits", "unitsOnOrder"],
+  "invoice_templates": ["id", "coveredByBlockRetainerContractLabel", "coveredByRecurringServiceFixedPricePerTicketContractLabel", "currencyNegativeFormat", "currencyPositiveFormat", "dateFormat", "displayFixedPriceContractLabor", "displayRecurringServiceContractLabor", "displaySeparateLineItemForEachTax", "displayTaxCategory", "displayTaxCategorySuperscripts", "displayZeroAmountRecurringServicesAndBundles", "groupBy", "itemizeItemsInEachGroup", "itemizeServicesAndBundles", "name", "nonBillableLaborLabel", "numberFormat", "pageLayout", "pageNumberFormat", "paymentTerms", "rateCostExpression", "showGridHeader", "showVerticalGridLines", "sortBy", "timeFormat"],
   "invoices": ["id", "batchID", "comments", "companyID", "createDateTime", "creatorResourceID", "dueDate", "fromDate", "invoiceDateTime", "invoiceEditorTemplateID", "invoiceNumber", "invoiceTotal", "isVoided", "orderNumber", "paidDate", "paymentTerm", "taxGroup", "taxRegionName", "toDate", "totalTaxValue", "voidedByResourceID", "voidedDate", "webServiceDate"],
   "notification_history": ["id", "companyID", "entityNumber", "entityTitle", "initiatingContactID", "initiatingResourceID", "isActive", "isDeleted", "isTemplateJob", "notificationHistoryTypeID", "notificationSentTime", "opportunityID", "projectID", "quoteID", "recipientDisplayName", "recipientEmailAddress", "taskID", "templateName", "ticketID", "timeEntryID"],
   "opportunities": ["id", "advancedField1", "advancedField2", "advancedField3", "advancedField4", "advancedField5", "amount", "assessmentScore", "barriers", "closedDate", "companyID", "contactID", "cost", "createDate", "creatorResourceID", "description", "helpNeeded", "impersonatorCreatorResourceID", "lastActivity", "leadSource", "lossReason", "lossReasonDetail", "lostDate", "market", "monthlyCost", "monthlyRevenue", "nextStep", "onetimeCost", "onetimeRevenue", "opportunityCategoryID", "organizationalLevelAssociationID", "ownerResourceID", "primaryCompetitor", "probability", "productID", "projectedCloseDate", "promisedFulfillmentDate", "promotionName", "quarterlyCost", "quarterlyRevenue", "rating", "relationshipAssessmentScore", "revenueSpread", "revenueSpreadUnit", "salesOrderID", "salesProcessPercentComplete", "semiannualCost", "semiannualRevenue", "stage", "startDate", "status", "technicalAssessmentScore", "throughDate", "title", "totalAmountMonths", "useQuoteTotals", "winReason", "winReasonDetail", "yearlyCost", "yearlyRevenue", "userDefinedFields"],
   "opportunity_attachments": ["id", "attachDate", "attachedByContactID", "attachedByResourceID", "attachmentType", "contentType", "creatorType", "fileSize", "fullPath", "impersonatorCreatorResourceID", "opportunityID", "parentAttachmentID", "parentID", "publish", "title", "data", "parentType", "soapParentPropertyId", "isTaskAttachment"],
   "opportunity_categories": ["id", "displayColorRGB", "isActive", "isGlobalDefault", "name", "nickname"],
+  "organizational_level1s": ["id", "description", "isActive", "name"],
+  "organizational_level2s": ["id", "description", "isActive", "name"],
+  "organizational_level_associations": ["id", "isActive", "organizationalLevel1ID", "organizationalLevel2ID"],
   "phases": ["id", "createDate", "creatorResourceID", "description", "dueDate", "estimatedHours", "externalID", "isScheduled", "lastActivityDateTime", "parentPhaseID", "phaseNumber", "projectID", "startDate", "title", "soapParentPropertyId"],
   "product_vendors": ["id", "isActive", "isDefault", "productID", "vendorCost", "vendorID", "vendorPartNumber", "soapParentPropertyId"],
   "products": ["id", "billingType", "chargeBillingCodeID", "createdByResourceID", "createdTime", "defaultVendorID", "description", "doesNotRequireProcurement", "externalProductID", "impersonatorCreatorResourceID", "internalProductID", "isActive", "isEligibleForRma", "isSerialized", "link", "manufacturerName", "manufacturerProductName", "markupRate", "msrp", "name", "periodType", "priceCostMethod", "productBillingCodeID", "productCategory", "sku", "unitCost", "unitPrice", "vendorProductNumber", "defaultInstalledProductCategoryID", "userDefinedFields"],
@@ -16833,6 +17642,7 @@ var MODEL_FIELD_SETS = {
   "resource_time_off_balances": ["id", "resourceID", "floatingHolidayAnnualAllowance", "floatingHolidayBalance", "floatingHolidayPlanned", "floatingHolidayUsed", "floatingHolidayWaitingApproval", "personalTimeAnnualAllowance", "personalTimeBalance", "personalTimePlanned", "personalTimeUsed", "personalTimeWaitingApproval", "sickTimeAnnualAllowance", "sickTimeBalance", "sickTimePlanned", "sickTimeUsed", "sickTimeWaitingApproval", "vacationTimeAnnualAllowance", "vacationTimeBalance", "vacationTimePlanned", "vacationTimeUsed", "vacationTimeWaitingApproval", "year", "soapParentPropertyId"],
   "resources": ["id", "accountingReferenceID", "dateFormat", "defaultServiceDeskRoleID", "email", "email2", "email3", "emailTypeCode", "emailTypeCode2", "emailTypeCode3", "firstName", "gender", "greeting", "hireDate", "homePhone", "initials", "internalCost", "isActive", "lastName", "licenseType", "locationID", "middleName", "mobilePhone", "numberFormat", "officeExtension", "officePhone", "payrollIdentifier", "payrollType", "resourceType", "suffix", "surveyResourceRating", "timeFormat", "title", "travelAvailabilityPct", "userName", "userType"],
   "roles": ["id", "description", "hourlyFactor", "hourlyRate", "isActive", "isExcludedFromNewContracts", "isSystemRole", "name", "quoteItemDefaultTaxCategoryId", "roleType"],
+  "sales_orders": ["id", "additionalBillToAddressInformation", "additionalShipToAddressInformation", "billingAddress1", "billingAddress2", "billToCity", "billToCountryID", "billToPostalCode", "billToState", "companyID", "contactID", "impersonatorCreatorResourceID", "opportunityID", "organizationalLevelAssociationID", "ownerResourceID", "promisedFulfillmentDate", "salesOrderDate", "shipToAddress1", "shipToAddress2", "shipToCity", "shipToCountryID", "shipToPostalCode", "shipToState", "status", "title", "soapParentPropertyId", "userDefinedFields"],
   "service_call_task_resources": ["id", "resourceID", "serviceCallTaskID", "soapParentPropertyId"],
   "service_call_tasks": ["id", "serviceCallID", "taskID", "soapParentPropertyId"],
   "service_call_ticket_resources": ["id", "resourceID", "serviceCallTicketID", "soapParentPropertyId"],
@@ -16850,6 +17660,7 @@ var MODEL_FIELD_SETS = {
   "tags": ["id", "createDateTime", "isActive", "isExcludedFromAutomaticTagging", "isSystem", "label", "lastModifiedDateTime", "tagGroupID"],
   "task_secondary_resources": ["id", "resourceID", "roleID", "taskID", "soapParentPropertyId"],
   "tasks": ["id", "assignedResourceID", "assignedResourceRoleID", "billingCodeID", "canClientPortalUserCompleteTask", "companyLocationID", "completedByResourceID", "completedByType", "completedDateTime", "createDateTime", "creatorResourceID", "creatorType", "departmentID", "description", "endDateTime", "estimatedHours", "externalID", "hoursToBeScheduled", "isTaskBillable", "isVisibleInClientPortal", "lastActivityDateTime", "lastActivityPersonType", "lastActivityResourceID", "phaseID", "priority", "priorityLabel", "projectID", "purchaseOrderNumber", "remainingHours", "startDateTime", "status", "taskCategoryID", "taskNumber", "taskType", "title", "soapParentPropertyId", "userDefinedFields"],
+  "tax_regions": ["id", "isActive", "name"],
   "ticket_additional_configuration_items": ["id", "configurationItemID", "ticketID", "soapParentPropertyId"],
   "ticket_additional_contacts": ["id", "contactID", "ticketID", "soapParentPropertyId"],
   "ticket_attachments": ["id", "attachDate", "attachedByContactID", "attachedByResourceID", "attachmentType", "contentType", "creatorType", "fileSize", "fullPath", "impersonatorCreatorResourceID", "opportunityID", "parentAttachmentID", "parentID", "publish", "ticketID", "ticketNoteID", "timeEntryID", "title", "data", "parentType", "soapParentPropertyId", "isTaskAttachment"],
@@ -16871,6 +17682,7 @@ var MODEL_FIELD_SETS = {
 };
 var MODEL_DATE_FIELDS = {
   "appointments": ["createDateTime", "endDateTime", "startDateTime", "updateDateTime"],
+  "billing_item_approval_levels": ["approvalDateTime"],
   "billing_items": ["itemDate", "postedDate", "postedOnTime", "webServiceDate"],
   "companies": ["createDate", "lastActivityDate", "lastTrackedModifiedDateTime"],
   "company_notes": ["completedDateTime", "createDateTime", "endDateTime", "lastModifiedDate", "startDateTime"],
@@ -16910,6 +17722,7 @@ var MODEL_DATE_FIELDS = {
   "quote_templates": ["createDate", "lastActivityDate"],
   "quotes": ["approvalStatusChangedDate", "createDate", "effectiveDate", "expirationDate", "extApprovalResponseDate", "lastActivityDate", "lastPublishedDateTime"],
   "resources": ["hireDate"],
+  "sales_orders": ["promisedFulfillmentDate", "salesOrderDate"],
   "service_calls": ["canceledDateTime", "createDateTime", "endDateTime", "lastModifiedDateTime", "startDateTime"],
   "services": ["createDate", "lastModifiedDate"],
   "subscription_periods": ["periodDate", "postedDate"],
@@ -17003,8 +17816,8 @@ function validateFetchManyItems(items, cap, opName = "fetchMany", capRef = `FETC
         problems.push(`${at}.fields: must be an array of exact vendor field names (discover them via operations.fieldCatalog)`);
         continue;
       }
-      if (_optionalChain([validation, 'optionalAccess', _147 => _147.fieldCheck]) !== false) {
-        const authoritative = _nullishCoalesce(_optionalChain([validation, 'optionalAccess', _148 => _148.fieldSetsByResource, 'optionalAccess', _149 => _149.get, 'call', _150 => _150(resourceKey)]), () => ( fields));
+      if (_optionalChain([validation, 'optionalAccess', _151 => _151.fieldCheck]) !== false) {
+        const authoritative = _nullishCoalesce(_optionalChain([validation, 'optionalAccess', _152 => _152.fieldSetsByResource, 'optionalAccess', _153 => _153.get, 'call', _154 => _154(resourceKey)]), () => ( fields));
         for (const f of item.fields) {
           if (!authoritative.includes(f)) {
             problems.push(
@@ -17108,7 +17921,7 @@ function project2(value, fields) {
   return out;
 }
 function resourcePathOf(key, holder) {
-  const path = _optionalChain([holder, 'optionalAccess', _151 => _151.resourcePath]);
+  const path = _optionalChain([holder, 'optionalAccess', _155 => _155.resourcePath]);
   if (typeof path !== "string" || path === "") {
     throw new AutotaskConfigError(`fetchByIds: the client exposes no ${key} resource path (registry drift)`, {
       suggestedAction: "Rebuild the client from the SDK build that ships this registry (the resource set is pinned by the plan)."
@@ -17244,7 +18057,7 @@ function uiHostFromBase(baseUrl) {
   } catch (e18) {
     return void 0;
   }
-  const n = _optionalChain([REST_HOST, 'access', _152 => _152.exec, 'call', _153 => _153(hostname), 'optionalAccess', _154 => _154[1]]);
+  const n = _optionalChain([REST_HOST, 'access', _156 => _156.exec, 'call', _157 => _157(hostname), 'optionalAccess', _158 => _158[1]]);
   return n === void 0 ? void 0 : `ww${n}.autotask.net`;
 }
 function buildUiLink(input) {
@@ -17350,7 +18163,7 @@ function blindEmptyReason(stamp) {
   };
 }
 function attachUpdateTargetMissReason(err, key) {
-  const pinned = _optionalChain([EMPTY_REASON_STAMPS, 'access', _155 => _155[key], 'optionalAccess', _156 => _156.update]);
+  const pinned = _optionalChain([EMPTY_REASON_STAMPS, 'access', _159 => _159[key], 'optionalAccess', _160 => _160.update]);
   if (pinned === void 0) return;
   err.details = { ..._nullishCoalesce(err.details, () => ( {})), emptyReason: pinned };
 }
@@ -17535,7 +18348,7 @@ var QueryBase = class {
   }
   /** @internal */
   walkPageSize(params) {
-    return clampPageSize(_nullishCoalesce(_optionalChain([params, 'optionalAccess', _157 => _157.maxRecords]), () => ( this.defaultPageSize)));
+    return clampPageSize(_nullishCoalesce(_optionalChain([params, 'optionalAccess', _161 => _161.maxRecords]), () => ( this.defaultPageSize)));
   }
   /** Stream items across pages (the resource `query` surface). */
   queryItems(params) {
@@ -17547,7 +18360,7 @@ var QueryBase = class {
   }
   /** Collect every item across all pages (the resource `queryAll` surface; 1000-page guarded). */
   async queryAllItems(params) {
-    return collectAll(this.pageFetcher(params), { pageSize: this.walkPageSize(params), maxRecords: _optionalChain([params, 'optionalAccess', _158 => _158.maxTotalRecords]) });
+    return collectAll(this.pageFetcher(params), { pageSize: this.walkPageSize(params), maxRecords: _optionalChain([params, 'optionalAccess', _162 => _162.maxTotalRecords]) });
   }
   /**
    * `queryBounded` — server-side pagination (the MCP query surface): ONE call
@@ -17584,19 +18397,19 @@ var QueryBase = class {
         "queryBounded: params must be an object { filter?, limit?, latest?, includeFields? } \u2014 a bare conditions array is not accepted (wrap it: { filter: [...] })"
       );
     }
-    const limit = _nullishCoalesce(_optionalChain([params, 'optionalAccess', _159 => _159.limit]), () => ( BOUNDED_QUERY_DEFAULT_LIMIT));
+    const limit = _nullishCoalesce(_optionalChain([params, 'optionalAccess', _163 => _163.limit]), () => ( BOUNDED_QUERY_DEFAULT_LIMIT));
     if (!Number.isInteger(limit) || limit < 1 || limit > BOUNDED_QUERY_MAX_LIMIT) {
       throw new AutotaskConfigError(
         `queryBounded: limit must be an integer 1..${BOUNDED_QUERY_MAX_LIMIT} (got ${String(limit)}) \u2014 it is the TOTAL record cap, not a page size`
       );
     }
-    const noteChars = _optionalChain([params, 'optionalAccess', _160 => _160.noteChars]);
+    const noteChars = _optionalChain([params, 'optionalAccess', _164 => _164.noteChars]);
     if (noteChars !== void 0 && (!Number.isInteger(noteChars) || noteChars < 1)) {
       throw new AutotaskConfigError(
         `queryBounded: noteChars must be an integer >= 1 (got ${String(noteChars)}) \u2014 it is the per-field char cap on the untrusted-class free-text fields (absent = the raw, untruncated result)`
       );
     }
-    const walkParams = _optionalChain([params, 'optionalAccess', _161 => _161.fieldsPreset]) !== void 0 ? { ...params, includeFields: resolveFieldsPreset(params.fieldsPreset, this.config.key, params.includeFields) } : _nullishCoalesce(params, () => ( {}));
+    const walkParams = _optionalChain([params, 'optionalAccess', _165 => _165.fieldsPreset]) !== void 0 ? { ...params, includeFields: resolveFieldsPreset(params.fieldsPreset, this.config.key, params.includeFields) } : _nullishCoalesce(params, () => ( {}));
     const latest = walkParams.latest;
     if (latest !== void 0) {
       if (!Number.isInteger(latest) || latest < 1 || latest > BOUNDED_QUERY_MAX_LIMIT) {
@@ -17604,7 +18417,7 @@ var QueryBase = class {
           `queryBounded: latest must be an integer 1..${BOUNDED_QUERY_MAX_LIMIT} (got ${String(latest)}) \u2014 it is the count of the highest-id rows to return`
         );
       }
-      if (_optionalChain([params, 'optionalAccess', _162 => _162.limit]) !== void 0 && limit < latest) {
+      if (_optionalChain([params, 'optionalAccess', _166 => _166.limit]) !== void 0 && limit < latest) {
         throw new AutotaskConfigError(
           `queryBounded: limit (${String(limit)}) must be >= latest (${String(latest)}) \u2014 latest governs the returned count and limit is the walk window`
         );
@@ -17690,8 +18503,8 @@ var QueryBase = class {
    * @internal */
   stampEmptyQueryResult(result, params) {
     if (result.items.length !== 0) return;
-    result.blindSurface = blindStampFor(_optionalChain([BLIND_SURFACE_STAMPS, 'access', _163 => _163[this.config.key], 'optionalAccess', _164 => _164.query]), _optionalChain([params, 'optionalAccess', _165 => _165.filter]));
-    const pinnedReason = normalizedConditions(_optionalChain([params, 'optionalAccess', _166 => _166.filter])) === void 0 ? _optionalChain([EMPTY_REASON_STAMPS, 'access', _167 => _167[this.config.key], 'optionalAccess', _168 => _168.query]) : void 0;
+    result.blindSurface = blindStampFor(_optionalChain([BLIND_SURFACE_STAMPS, 'access', _167 => _167[this.config.key], 'optionalAccess', _168 => _168.query]), _optionalChain([params, 'optionalAccess', _169 => _169.filter]));
+    const pinnedReason = normalizedConditions(_optionalChain([params, 'optionalAccess', _170 => _170.filter])) === void 0 ? _optionalChain([EMPTY_REASON_STAMPS, 'access', _171 => _171[this.config.key], 'optionalAccess', _172 => _172.query]) : void 0;
     if (result.blindSurface !== void 0 || pinnedReason !== void 0) {
       result.emptyReason = result.blindSurface !== void 0 ? blindEmptyReason(result.blindSurface) : pinnedReason;
     }
@@ -17920,7 +18733,7 @@ var QueryBase = class {
     if (result.items.length === 0) {
       this.stampEmptyQueryResult(result, params);
     } else {
-      result.blindSurface = blindStampFor(_optionalChain([BLIND_SURFACE_STAMPS, 'access', _169 => _169[this.config.key], 'optionalAccess', _170 => _170.query]), params.filter);
+      result.blindSurface = blindStampFor(_optionalChain([BLIND_SURFACE_STAMPS, 'access', _173 => _173[this.config.key], 'optionalAccess', _174 => _174.query]), params.filter);
     }
     return result;
   }
@@ -17961,7 +18774,7 @@ var QueryBase = class {
    *  or, on a plan-pinned blind surface, the `{ count: 0, blindSurface }`
    *  typed sentinel (S12-C T10; see `BlindCountResult`). */
   async countGlobal(params) {
-    const conditions = normalizedConditions(_optionalChain([params, 'optionalAccess', _171 => _171.filter]));
+    const conditions = normalizedConditions(_optionalChain([params, 'optionalAccess', _175 => _175.filter]));
     const body = {};
     body.filter = conditions === void 0 ? [] : buildFilter(conditions).filter;
     const res = await this.http.request({
@@ -17972,9 +18785,9 @@ var QueryBase = class {
       idempotent: true
     });
     const count = unwrapQueryCount(res, `${this.config.key}.count`);
-    const stamp = blindStampFor(_optionalChain([BLIND_SURFACE_STAMPS, 'access', _172 => _172[this.config.key], 'optionalAccess', _173 => _173.count]), _optionalChain([params, 'optionalAccess', _174 => _174.filter]));
+    const stamp = blindStampFor(_optionalChain([BLIND_SURFACE_STAMPS, 'access', _176 => _176[this.config.key], 'optionalAccess', _177 => _177.count]), _optionalChain([params, 'optionalAccess', _178 => _178.filter]));
     if (count === 0) {
-      const pinnedReason = conditions === void 0 ? _optionalChain([EMPTY_REASON_STAMPS, 'access', _175 => _175[this.config.key], 'optionalAccess', _176 => _176.count]) : void 0;
+      const pinnedReason = conditions === void 0 ? _optionalChain([EMPTY_REASON_STAMPS, 'access', _179 => _179[this.config.key], 'optionalAccess', _180 => _180.count]) : void 0;
       if (stamp !== void 0 || pinnedReason !== void 0) {
         return {
           count,
@@ -18010,9 +18823,9 @@ var MetaBase = class extends QueryBase {
       const hit = cache.get(path);
       if (hit !== void 0) return hit;
     }
-    const epoch = _optionalChain([cache, 'optionalAccess', _177 => _177.epoch]);
+    const epoch = _optionalChain([cache, 'optionalAccess', _181 => _181.epoch]);
     const res = await this.http.request({ method: "GET", path, operation });
-    _optionalChain([cache, 'optionalAccess', _178 => _178.set, 'call', _179 => _179(path, res, resource, epoch)]);
+    _optionalChain([cache, 'optionalAccess', _182 => _182.set, 'call', _183 => _183(path, res, resource, epoch)]);
     return res;
   }
   /**
@@ -18052,7 +18865,7 @@ var MetaBase = class extends QueryBase {
       return value;
     });
     work.catch((err) => {
-      if (err instanceof AutotaskError && (err.code === "INVALID_RESPONSE" || _optionalChain([err, 'access', _180 => _180.details, 'optionalAccess', _181 => _181.deterministic]) === true)) {
+      if (err instanceof AutotaskError && (err.code === "INVALID_RESPONSE" || _optionalChain([err, 'access', _184 => _184.details, 'optionalAccess', _185 => _185.deterministic]) === true)) {
         cache.invalidate(key);
       }
     });
@@ -18082,7 +18895,7 @@ var MetaBase = class extends QueryBase {
       path: `${this.resourcePath}/${numeric}`,
       operation: `${this.config.key}.get`,
       skipResponseRedaction: true,
-      maxRetries: _optionalChain([readOpts, 'optionalAccess', _182 => _182.maxRetries])
+      maxRetries: _optionalChain([readOpts, 'optionalAccess', _186 => _186.maxRetries])
     });
     return unwrapItem(res, numeric, `${this.config.key}.get`, this.entityName);
   }
@@ -18101,7 +18914,7 @@ var MetaBase = class extends QueryBase {
       path: this.scopedItemPath(parentId, numeric),
       operation: `${this.config.key}.get`,
       skipResponseRedaction: true,
-      maxRetries: _optionalChain([readOpts, 'optionalAccess', _183 => _183.maxRetries])
+      maxRetries: _optionalChain([readOpts, 'optionalAccess', _187 => _187.maxRetries])
     });
     return unwrapItem(res, numeric, `${this.config.key}.get`, this.entityName);
   }
@@ -18310,12 +19123,12 @@ var MetaBase = class extends QueryBase {
         return null;
       }
     }
-    const epoch = _optionalChain([cache, 'optionalAccess', _184 => _184.epoch]);
+    const epoch = _optionalChain([cache, 'optionalAccess', _188 => _188.epoch]);
     try {
       return await this.fetchRecordRaw(entityPath, referenceId);
     } catch (err) {
       if (err instanceof NotFoundError) {
-        _optionalChain([cache, 'optionalAccess', _185 => _185.set, 'call', _186 => _186(absentKey, CONTEXT_ABSENT_MARKER, RESOURCE_KEY_BY_PATH[entityPath], epoch)]);
+        _optionalChain([cache, 'optionalAccess', _189 => _189.set, 'call', _190 => _190(absentKey, CONTEXT_ABSENT_MARKER, RESOURCE_KEY_BY_PATH[entityPath], epoch)]);
         return null;
       }
       throw err;
@@ -18432,7 +19245,7 @@ var MetaBase = class extends QueryBase {
   missDetail(operator, fields) {
     const key = this.config.key;
     const probe = fields.map((field) => ({ field, op: operator, value: "" }));
-    const blind = blindStampFor(_optionalChain([BLIND_SURFACE_STAMPS, 'access', _187 => _187[key], 'optionalAccess', _188 => _188.query]), probe);
+    const blind = blindStampFor(_optionalChain([BLIND_SURFACE_STAMPS, 'access', _191 => _191[key], 'optionalAccess', _192 => _192.query]), probe);
     const next = [];
     if (blind !== void 0) {
       next.push(`This surface is blind to records the API user does not own, so a miss is not proof of absence: ${blind.authority} returns the record when the id is known.`);
@@ -19091,7 +19904,7 @@ var MutationBase = class extends MetaBase {
       current = parentId === void 0 ? await this.getGlobal(id, true) : this.config.attachmentGet ? await this.getScopedModel(parentId, id, true) : await this.getScopedRaw(parentId, id, true);
     } catch (err) {
       if (err instanceof NotFoundError) {
-        const updateReason = _optionalChain([EMPTY_REASON_STAMPS, 'access', _189 => _189[this.config.key], 'optionalAccess', _190 => _190.update]);
+        const updateReason = _optionalChain([EMPTY_REASON_STAMPS, 'access', _193 => _193[this.config.key], 'optionalAccess', _194 => _194.update]);
         checks.push({
           name: "current-record-exists",
           ok: false,
@@ -19262,7 +20075,7 @@ function readIncludeNames(record, includeFields) {
 function resolveAuthority(record, live) {
   if (live !== null) return { known: live, authority: "the tenant's live entity field metadata" };
   const vendored = MODEL_FIELD_SETS[record.resource];
-  const liveOnlyExempt = Array.isArray(_optionalChain([record, 'access', _191 => _191.metadata, 'optionalAccess', _192 => _192.liveOnlyFields])) ? record.metadata.liveOnlyFields : [];
+  const liveOnlyExempt = Array.isArray(_optionalChain([record, 'access', _195 => _195.metadata, 'optionalAccess', _196 => _196.liveOnlyFields])) ? record.metadata.liveOnlyFields : [];
   if (vendored === void 0) return void 0;
   return {
     known: [...vendored, ...liveOnlyExempt],
@@ -19488,4 +20301,10 @@ async function validateQueryFieldNames(record, holder, args) {
 
 
 
-exports.AUTH_HEADERS = AUTH_HEADERS; exports.buildAuthHeaders = buildAuthHeaders; exports.withAuthHeaders = withAuthHeaders; exports.AutotaskError = AutotaskError; exports.AutotaskConfigError = AutotaskConfigError; exports.isAutotaskError = isAutotaskError; exports.AutotaskNetworkError = AutotaskNetworkError; exports.AutotaskTimeoutError = AutotaskTimeoutError; exports.AutotaskAbortError = AutotaskAbortError; exports.ResponseRejectedError = ResponseRejectedError; exports.BadRequestError = BadRequestError; exports.UnauthorizedError = UnauthorizedError; exports.ForbiddenError = ForbiddenError; exports.NotFoundError = NotFoundError; exports.ConflictError = ConflictError; exports.UnprocessableEntityError = UnprocessableEntityError; exports.RateLimitError = RateLimitError; exports.ServerError = ServerError; exports.UnexpectedContentTypeError = UnexpectedContentTypeError; exports.EmptyResponseError = EmptyResponseError; exports.CircuitBreakerError = CircuitBreakerError; exports.HostPolicyDeniedError = HostPolicyDeniedError; exports.ResolutionError = ResolutionError; exports.PaginationLimitError = PaginationLimitError; exports.QueryTooLongError = QueryTooLongError; exports.parseVendorErrors = parseVendorErrors; exports.isDeterministicVendor500 = isDeterministicVendor500; exports.formatVendorDetail = formatVendorDetail; exports.NoopLogger = NoopLogger; exports.REDACTED = REDACTED; exports.CREDENTIAL_HEADER_NAMES = CREDENTIAL_HEADER_NAMES; exports.isCredentialHeaderName = isCredentialHeaderName; exports.redactRecord = redactRecord; exports.SECRET_RESPONSE_FIELDS = SECRET_RESPONSE_FIELDS; exports.PERSONAL_RESPONSE_FIELDS = PERSONAL_RESPONSE_FIELDS; exports.CONFIDENTIAL_RESPONSE_FIELDS = CONFIDENTIAL_RESPONSE_FIELDS; exports.isRedactedFieldName = isRedactedFieldName; exports.redactResponseBody = redactResponseBody; exports.CREDENTIAL_SHAPE_POINTER = CREDENTIAL_SHAPE_POINTER; exports.mergeDetails = mergeDetails; exports.errorFromStatus = errorFromStatus; exports.StaleObjectError = StaleObjectError; exports.ConfirmationRequiredError = ConfirmationRequiredError; exports.DeleteBoundaryError = DeleteBoundaryError; exports.MarkerUnsafeIdError = MarkerUnsafeIdError; exports.RecoveryTruncatedError = RecoveryTruncatedError; exports.MoveRefusedError = MoveRefusedError; exports.ZONE_CATALOG = ZONE_CATALOG; exports.ZONES = ZONES; exports.DEFAULT_ZONE = DEFAULT_ZONE; exports.zoneUrl = zoneUrl; exports.resolveBaseUrl = resolveBaseUrl; exports.AGENT_PROFILE = AGENT_PROFILE; exports.DEFAULT_PAGE_SIZE = DEFAULT_PAGE_SIZE; exports.MAX_PAGE_SIZE = MAX_PAGE_SIZE; exports.DEFAULT_TIMEOUT_MS = DEFAULT_TIMEOUT_MS; exports.DEFAULT_MAX_RETRIES = DEFAULT_MAX_RETRIES; exports.DEFAULT_MAINTENANCE_MAX_WAIT_MS = DEFAULT_MAINTENANCE_MAX_WAIT_MS; exports.DEFAULT_MAINTENANCE_POLL_MS = DEFAULT_MAINTENANCE_POLL_MS; exports.MAINTENANCE_WINDOW_MAX_MS = MAINTENANCE_WINDOW_MAX_MS; exports.DEFAULT_MAX_CONCURRENT = DEFAULT_MAX_CONCURRENT; exports.DEFAULT_MAX_RESPONSE_BYTES = DEFAULT_MAX_RESPONSE_BYTES; exports.DEFAULT_MAX_SCAN_RECORDS = DEFAULT_MAX_SCAN_RECORDS; exports.DEFAULT_MAX_SCAN_PAGES = DEFAULT_MAX_SCAN_PAGES; exports.DEFAULT_READ_CACHE_TTL_MS = DEFAULT_READ_CACHE_TTL_MS; exports.DEFAULT_FIELD_CACHE_TTL_MS = DEFAULT_FIELD_CACHE_TTL_MS; exports.DEFAULT_RESOURCE_NAME_CACHE_TTL_MS = DEFAULT_RESOURCE_NAME_CACHE_TTL_MS; exports.hasSurroundingQuotes = hasSurroundingQuotes; exports.credentialShapeProblem = credentialShapeProblem; exports.CREDENTIAL_ENV_LOAD_ACTION = CREDENTIAL_ENV_LOAD_ACTION; exports.MIN_PREFIX_SUMMARY_LENGTH = MIN_PREFIX_SUMMARY_LENGTH; exports.credentialValueSummary = credentialValueSummary; exports.FIELD_CACHE_KINDS = FIELD_CACHE_KINDS; exports.DEFAULT_CIRCUIT_BREAKER_WINDOW_MS = DEFAULT_CIRCUIT_BREAKER_WINDOW_MS; exports.DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD = DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD; exports.DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS = DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS; exports.DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE = DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE; exports.DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES = DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES; exports.InMemoryCircuitBreakerStore = InMemoryCircuitBreakerStore; exports.defaultCircuitBreakerStore = defaultCircuitBreakerStore; exports.resetDefaultCircuitBreakerStore = resetDefaultCircuitBreakerStore; exports.buildBreakerKey = buildBreakerKey; exports.isBreakerFailure = isBreakerFailure; exports.DEFAULT_COOLDOWN_MAX_MS = DEFAULT_COOLDOWN_MAX_MS; exports.DEFAULT_COOLDOWN_DEFAULT_MS = DEFAULT_COOLDOWN_DEFAULT_MS; exports.DEFAULT_COOLDOWN_MAX_ENTRIES = DEFAULT_COOLDOWN_MAX_ENTRIES; exports.InMemoryCooldownStore = InMemoryCooldownStore; exports.defaultCooldownStore = defaultCooldownStore; exports.resetDefaultCooldownStore = resetDefaultCooldownStore; exports.buildTenantKey = buildTenantKey; exports.cooldownDurationMs = cooldownDurationMs; exports.resolveCredentials = resolveCredentials; exports.resolveConfig = resolveConfig; exports.IDEMPOTENT_METHODS = IDEMPOTENT_METHODS; exports.isRecord = isRecord2; exports.assertRecord = assertRecord; exports.deepMergeParams = deepMergeParams; exports.isIdentifierCandidate = isIdentifierCandidate; exports.parseIdentifier = parseIdentifier; exports.flattenUdfs = flattenUdfs; exports.newCorrelationId = newCorrelationId; exports.redactAuditBody = redactAuditBody; exports.camelKey = camelKey; exports.FILTER_OPERATORS = FILTER_OPERATORS; exports.GROUPING_OPERATORS = GROUPING_OPERATORS; exports.MAX_OR_CONDITIONS = MAX_OR_CONDITIONS; exports.MAX_UDF_PER_QUERY = MAX_UDF_PER_QUERY; exports.MAX_QUERY_LENGTH = MAX_QUERY_LENGTH; exports.MAX_GET_LENGTH = MAX_GET_LENGTH; exports.MAX_FIELD_LENGTH = MAX_FIELD_LENGTH; exports.isFilterOperator = isFilterOperator; exports.serializeFilter = serializeFilter; exports.validateFilter = validateFilter; exports.buildFilter = buildFilter; exports.normalizedConditions = normalizedConditions; exports.buildUrl = buildUrl; exports.cursorToPath = cursorToPath; exports.buildQueryBody = buildQueryBody; exports.buildQueryRequest = buildQueryRequest; exports.runWithSignal = runWithSignal; exports.RELATIONSHIP_ZONE = RELATIONSHIP_ZONE; exports.RELATIONSHIP_MAP = RELATIONSHIP_MAP; exports.BLIND_SURFACE_STAMPS = BLIND_SURFACE_STAMPS; exports.DELETE_BOUNDARY_NOTES = DELETE_BOUNDARY_NOTES; exports.MARKER_FIELDS = MARKER_FIELDS; exports.EMPTY_REASON_STAMPS = EMPTY_REASON_STAMPS; exports.BLIND_SURFACE_INVENTORY = BLIND_SURFACE_INVENTORY; exports.REACHABILITY_PROBE_DEFAULTS = REACHABILITY_PROBE_DEFAULTS; exports.CREATE_GUIDANCE = CREATE_GUIDANCE; exports.UNTRUSTED_FIELDS_BY_RESOURCE = UNTRUSTED_FIELDS_BY_RESOURCE; exports.unwrapItems = unwrapItems; exports.unwrapItem = unwrapItem; exports.unwrapQueryCount = unwrapQueryCount; exports.unwrapOperation = unwrapOperation; exports.passthrough = passthrough; exports.HttpClient = HttpClient; exports.BOUNDED_QUERY_MAX_LIMIT = BOUNDED_QUERY_MAX_LIMIT; exports.truncateNoteChars = truncateNoteChars; exports.buildDryRunResult = buildDryRunResult; exports.mergePartialBody = mergePartialBody; exports.blindStampFor = blindStampFor; exports.decodeFileData = decodeFileData; exports.MAX_PAGES = MAX_PAGES; exports.clampPageSize = clampPageSize; exports.totalPagesFor = totalPagesFor; exports.paginate = paginate; exports.paginateItems = paginateItems; exports.collectAll = collectAll; exports.toArray = toArray; exports.FIELD_PRESETS = FIELD_PRESETS; exports.FIELD_PRESET_NAMES = FIELD_PRESET_NAMES; exports.resolveFieldsPreset = resolveFieldsPreset; exports.BaseResource = BaseResource; exports.MODEL_FIELD_SETS = MODEL_FIELD_SETS; exports.MODEL_DATE_FIELDS = MODEL_DATE_FIELDS; exports.formatUnknownNameList = formatUnknownNameList; exports.validateQueryFieldNames = validateQueryFieldNames; exports.EXPAND_RESOURCE_NAMES_MAX_IDS = EXPAND_RESOURCE_NAMES_MAX_IDS; exports.expandResourceNames = expandResourceNames; exports.WORKFLOW_RESOURCES = WORKFLOW_RESOURCES; exports.MAX_FIELD_CATALOG_WIRE = MAX_FIELD_CATALOG_WIRE; exports.FIELD_CATALOG_HONESTY_NOTE = FIELD_CATALOG_HONESTY_NOTE; exports.fieldCatalog = fieldCatalog; exports.PICKLIST_VALUE_NOT_SERVED_NOTE = PICKLIST_VALUE_NOT_SERVED_NOTE; exports.TICKET_LABEL_FIELDS = TICKET_LABEL_FIELDS; exports.createNamePlan = createNamePlan; exports.addNameSibling = addNameSibling; exports.addLabelSibling = addLabelSibling; exports.resolveCompositeNames = resolveCompositeNames; exports.FETCH_MANY_MAX_ITEMS = FETCH_MANY_MAX_ITEMS; exports.validateFetchManyItems = validateFetchManyItems; exports.fetchMany = fetchMany; exports.FETCH_BY_IDS_MAX_ITEMS = FETCH_BY_IDS_MAX_ITEMS; exports.FETCH_BY_IDS_CHUNK_SIZE = FETCH_BY_IDS_CHUNK_SIZE; exports.fetchByIds = fetchByIds; exports.UI_LINK_ENTITIES = UI_LINK_ENTITIES; exports.buildUiLink = buildUiLink; exports.uiLink = uiLink;
+
+
+
+
+
+
+exports.AUTH_HEADERS = AUTH_HEADERS; exports.buildAuthHeaders = buildAuthHeaders; exports.withAuthHeaders = withAuthHeaders; exports.AutotaskError = AutotaskError; exports.AutotaskConfigError = AutotaskConfigError; exports.isAutotaskError = isAutotaskError; exports.AutotaskNetworkError = AutotaskNetworkError; exports.AutotaskTimeoutError = AutotaskTimeoutError; exports.AutotaskAbortError = AutotaskAbortError; exports.ResponseRejectedError = ResponseRejectedError; exports.BadRequestError = BadRequestError; exports.UnauthorizedError = UnauthorizedError; exports.ForbiddenError = ForbiddenError; exports.NotFoundError = NotFoundError; exports.ConflictError = ConflictError; exports.UnprocessableEntityError = UnprocessableEntityError; exports.RateLimitError = RateLimitError; exports.ServerError = ServerError; exports.UnexpectedContentTypeError = UnexpectedContentTypeError; exports.EmptyResponseError = EmptyResponseError; exports.CircuitBreakerError = CircuitBreakerError; exports.HostPolicyDeniedError = HostPolicyDeniedError; exports.ResolutionError = ResolutionError; exports.PaginationLimitError = PaginationLimitError; exports.QueryTooLongError = QueryTooLongError; exports.parseVendorErrors = parseVendorErrors; exports.isDeterministicVendor500 = isDeterministicVendor500; exports.formatVendorDetail = formatVendorDetail; exports.NoopLogger = NoopLogger; exports.REDACTED = REDACTED; exports.CREDENTIAL_HEADER_NAMES = CREDENTIAL_HEADER_NAMES; exports.isCredentialHeaderName = isCredentialHeaderName; exports.redactRecord = redactRecord; exports.SECRET_RESPONSE_FIELDS = SECRET_RESPONSE_FIELDS; exports.PERSONAL_RESPONSE_FIELDS = PERSONAL_RESPONSE_FIELDS; exports.CONFIDENTIAL_RESPONSE_FIELDS = CONFIDENTIAL_RESPONSE_FIELDS; exports.isRedactedFieldName = isRedactedFieldName; exports.redactResponseBody = redactResponseBody; exports.CREDENTIAL_SHAPE_POINTER = CREDENTIAL_SHAPE_POINTER; exports.mergeDetails = mergeDetails; exports.errorFromStatus = errorFromStatus; exports.StaleObjectError = StaleObjectError; exports.ConfirmationRequiredError = ConfirmationRequiredError; exports.DeleteBoundaryError = DeleteBoundaryError; exports.MarkerUnsafeIdError = MarkerUnsafeIdError; exports.RecoveryTruncatedError = RecoveryTruncatedError; exports.MoveRefusedError = MoveRefusedError; exports.READ_CACHE_MAX_ENTRIES = READ_CACHE_MAX_ENTRIES; exports.ReadCache = ReadCache; exports.ZONE_CATALOG = ZONE_CATALOG; exports.ZONES = ZONES; exports.DEFAULT_ZONE = DEFAULT_ZONE; exports.zoneUrl = zoneUrl; exports.resolveBaseUrl = resolveBaseUrl; exports.AGENT_PROFILE = AGENT_PROFILE; exports.DEFAULT_PAGE_SIZE = DEFAULT_PAGE_SIZE; exports.MAX_PAGE_SIZE = MAX_PAGE_SIZE; exports.DEFAULT_TIMEOUT_MS = DEFAULT_TIMEOUT_MS; exports.DEFAULT_MAX_RETRIES = DEFAULT_MAX_RETRIES; exports.DEFAULT_MAINTENANCE_MAX_WAIT_MS = DEFAULT_MAINTENANCE_MAX_WAIT_MS; exports.DEFAULT_MAINTENANCE_POLL_MS = DEFAULT_MAINTENANCE_POLL_MS; exports.MAINTENANCE_WINDOW_MAX_MS = MAINTENANCE_WINDOW_MAX_MS; exports.DEFAULT_MAX_CONCURRENT = DEFAULT_MAX_CONCURRENT; exports.DEFAULT_MAX_RESPONSE_BYTES = DEFAULT_MAX_RESPONSE_BYTES; exports.DEFAULT_MAX_SCAN_RECORDS = DEFAULT_MAX_SCAN_RECORDS; exports.DEFAULT_MAX_SCAN_PAGES = DEFAULT_MAX_SCAN_PAGES; exports.DEFAULT_READ_CACHE_TTL_MS = DEFAULT_READ_CACHE_TTL_MS; exports.DEFAULT_FIELD_CACHE_TTL_MS = DEFAULT_FIELD_CACHE_TTL_MS; exports.DEFAULT_RESOURCE_NAME_CACHE_TTL_MS = DEFAULT_RESOURCE_NAME_CACHE_TTL_MS; exports.hasSurroundingQuotes = hasSurroundingQuotes; exports.credentialShapeProblem = credentialShapeProblem; exports.CREDENTIAL_ENV_LOAD_ACTION = CREDENTIAL_ENV_LOAD_ACTION; exports.MIN_PREFIX_SUMMARY_LENGTH = MIN_PREFIX_SUMMARY_LENGTH; exports.credentialValueSummary = credentialValueSummary; exports.FIELD_CACHE_KINDS = FIELD_CACHE_KINDS; exports.DEFAULT_CIRCUIT_BREAKER_WINDOW_MS = DEFAULT_CIRCUIT_BREAKER_WINDOW_MS; exports.DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD = DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD; exports.DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS = DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS; exports.DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE = DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE; exports.DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES = DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES; exports.InMemoryCircuitBreakerStore = InMemoryCircuitBreakerStore; exports.defaultCircuitBreakerStore = defaultCircuitBreakerStore; exports.resetDefaultCircuitBreakerStore = resetDefaultCircuitBreakerStore; exports.buildBreakerKey = buildBreakerKey; exports.isBreakerFailure = isBreakerFailure; exports.DEFAULT_COOLDOWN_MAX_MS = DEFAULT_COOLDOWN_MAX_MS; exports.DEFAULT_COOLDOWN_DEFAULT_MS = DEFAULT_COOLDOWN_DEFAULT_MS; exports.DEFAULT_COOLDOWN_MAX_ENTRIES = DEFAULT_COOLDOWN_MAX_ENTRIES; exports.InMemoryCooldownStore = InMemoryCooldownStore; exports.defaultCooldownStore = defaultCooldownStore; exports.resetDefaultCooldownStore = resetDefaultCooldownStore; exports.buildTenantKey = buildTenantKey; exports.cooldownDurationMs = cooldownDurationMs; exports.resolveCredentials = resolveCredentials; exports.buildReadCache = buildReadCache; exports.resolveConfig = resolveConfig; exports.IDEMPOTENT_METHODS = IDEMPOTENT_METHODS; exports.isRecord = isRecord2; exports.assertRecord = assertRecord; exports.deepMergeParams = deepMergeParams; exports.isIdentifierCandidate = isIdentifierCandidate; exports.parseIdentifier = parseIdentifier; exports.flattenUdfs = flattenUdfs; exports.newCorrelationId = newCorrelationId; exports.redactAuditBody = redactAuditBody; exports.camelKey = camelKey; exports.FILTER_OPERATORS = FILTER_OPERATORS; exports.GROUPING_OPERATORS = GROUPING_OPERATORS; exports.MAX_OR_CONDITIONS = MAX_OR_CONDITIONS; exports.MAX_UDF_PER_QUERY = MAX_UDF_PER_QUERY; exports.MAX_QUERY_LENGTH = MAX_QUERY_LENGTH; exports.MAX_GET_LENGTH = MAX_GET_LENGTH; exports.MAX_FIELD_LENGTH = MAX_FIELD_LENGTH; exports.isFilterOperator = isFilterOperator; exports.serializeFilter = serializeFilter; exports.validateFilter = validateFilter; exports.buildFilter = buildFilter; exports.normalizedConditions = normalizedConditions; exports.buildUrl = buildUrl; exports.cursorToPath = cursorToPath; exports.buildQueryBody = buildQueryBody; exports.buildQueryRequest = buildQueryRequest; exports.runWithSignal = runWithSignal; exports.RELATIONSHIP_ZONE = RELATIONSHIP_ZONE; exports.RELATIONSHIP_MAP = RELATIONSHIP_MAP; exports.BLIND_SURFACE_STAMPS = BLIND_SURFACE_STAMPS; exports.DELETE_BOUNDARY_NOTES = DELETE_BOUNDARY_NOTES; exports.MARKER_FIELDS = MARKER_FIELDS; exports.EMPTY_REASON_STAMPS = EMPTY_REASON_STAMPS; exports.BLIND_SURFACE_INVENTORY = BLIND_SURFACE_INVENTORY; exports.REACHABILITY_PROBE_DEFAULTS = REACHABILITY_PROBE_DEFAULTS; exports.CREATE_GUIDANCE = CREATE_GUIDANCE; exports.UNTRUSTED_FIELDS_BY_RESOURCE = UNTRUSTED_FIELDS_BY_RESOURCE; exports.unwrapItems = unwrapItems; exports.unwrapItem = unwrapItem; exports.unwrapQueryCount = unwrapQueryCount; exports.unwrapOperation = unwrapOperation; exports.passthrough = passthrough; exports.HttpClient = HttpClient; exports.BOUNDED_QUERY_MAX_LIMIT = BOUNDED_QUERY_MAX_LIMIT; exports.truncateNoteChars = truncateNoteChars; exports.buildDryRunResult = buildDryRunResult; exports.mergePartialBody = mergePartialBody; exports.blindStampFor = blindStampFor; exports.decodeFileData = decodeFileData; exports.MAX_PAGES = MAX_PAGES; exports.clampPageSize = clampPageSize; exports.totalPagesFor = totalPagesFor; exports.paginate = paginate; exports.paginateItems = paginateItems; exports.collectAll = collectAll; exports.toArray = toArray; exports.FIELD_PRESETS = FIELD_PRESETS; exports.FIELD_PRESET_NAMES = FIELD_PRESET_NAMES; exports.resolveFieldsPreset = resolveFieldsPreset; exports.BaseResource = BaseResource; exports.MODEL_FIELD_SETS = MODEL_FIELD_SETS; exports.MODEL_DATE_FIELDS = MODEL_DATE_FIELDS; exports.formatUnknownNameList = formatUnknownNameList; exports.validateQueryFieldNames = validateQueryFieldNames; exports.EXPAND_RESOURCE_NAMES_MAX_IDS = EXPAND_RESOURCE_NAMES_MAX_IDS; exports.expandResourceNames = expandResourceNames; exports.ENTITY_TYPE_TO_RESOURCE = ENTITY_TYPE_TO_RESOURCE; exports.resourceForEntityType = resourceForEntityType; exports.isEnumerableResource = isEnumerableResource; exports.WORKFLOW_RESOURCES = WORKFLOW_RESOURCES; exports.MAX_FIELD_CATALOG_WIRE = MAX_FIELD_CATALOG_WIRE; exports.FIELD_CATALOG_HONESTY_NOTE = FIELD_CATALOG_HONESTY_NOTE; exports.fieldCatalog = fieldCatalog; exports.PICKLIST_VALUE_NOT_SERVED_NOTE = PICKLIST_VALUE_NOT_SERVED_NOTE; exports.TICKET_LABEL_FIELDS = TICKET_LABEL_FIELDS; exports.createNamePlan = createNamePlan; exports.addNameSibling = addNameSibling; exports.addLabelSibling = addLabelSibling; exports.resolveCompositeNames = resolveCompositeNames; exports.FETCH_MANY_MAX_ITEMS = FETCH_MANY_MAX_ITEMS; exports.validateFetchManyItems = validateFetchManyItems; exports.fetchMany = fetchMany; exports.FETCH_BY_IDS_MAX_ITEMS = FETCH_BY_IDS_MAX_ITEMS; exports.FETCH_BY_IDS_CHUNK_SIZE = FETCH_BY_IDS_CHUNK_SIZE; exports.fetchByIds = fetchByIds; exports.UI_LINK_ENTITIES = UI_LINK_ENTITIES; exports.buildUiLink = buildUiLink; exports.uiLink = uiLink;