node-autotask 0.39.4 → 0.40.0

package/dist/{chunk-GHRB46YN.js → chunk-VDVBXXJW.js}

@@ -1,6 +1,6 @@
 import {
   CAPABILITIES
-} from "./chunk-GDSCYY2G.js";
+} from "./chunk-Y6YJYKBZ.js";
 import {
   wrapUntrusted
 } from "./chunk-5VHSLJMR.js";
@@ -181,14 +181,14 @@ var EmptyResponseError = class extends AutotaskError {
     this.name = "EmptyResponseError";
   }
 };
-var CircuitBreakerError = class extends AutotaskError {
-  /** Seconds remaining in the open period (absent when the half-open probe budget is in flight). */
+var MaintenanceError = class extends AutotaskError {
+  /** Seconds until the next probe slot. */
   retryAfter;
-  /** True when the call was refused locally (the circuit is open) and never sent. */
+  /** True on a local refusal (the call was never sent); undefined when the call received the page. */
   notSent;
   constructor(message, options = {}) {
-    super(message, { code: "CIRCUIT_BREAKER_OPEN", category: "policy", retryable: true, ...options });
-    this.name = "CircuitBreakerError";
+    super(message, { code: "MAINTENANCE", category: "server", retryable: true, ...options });
+    this.name = "MaintenanceError";
   }
 };
 var HostPolicyDeniedError = class extends AutotaskError {
@@ -588,53 +588,36 @@ var MoveRefusedError = class extends AutotaskError {
 
 // src/cache.ts
 var READ_CACHE_MAX_ENTRIES = 4096;
-var ReadCache = class {
-  /** The configured TTL in ms (the fallback for resources without an override). */
+var REFERENCE_TTL_MS = 36e5;
+var REFERENCE_ENTITIES = ["BillingCodes", "Countries", "Departments", "Phases", "Roles", "Services"];
+var FIELD_CACHE_KINDS = ["info", "fields", "udf"];
+function fieldKey(resourceKey, kind) {
+  return `${resourceKey}:${kind}`;
+}
+function readTtlFor(key, ttlMs) {
+  const entity = key.split("\0")[0].split("/").at(-2);
+  return entity !== void 0 && REFERENCE_ENTITIES.includes(entity) ? Math.max(ttlMs, REFERENCE_TTL_MS) : ttlMs;
+}
+var TtlCache = class {
   ttlMs;
-  /** The per-resource TTL overrides (issue #32; absent = every resource uses `ttlMs`). */
-  perResourceTtlMs;
+  maxEntries;
+  ttlFor;
   store = /* @__PURE__ */ new Map();
+  inflightMap = /* @__PURE__ */ new Map();
   epochCounter = 0;
-  constructor(ttlMs, perResourceTtlMs) {
+  constructor(ttlMs, options = {}) {
     if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
-      throw new AutotaskConfigError(`cache.ttlMs must be a positive integer (got ${ttlMs})`);
+      throw new AutotaskConfigError(`cache ttlMs must be a positive integer (got ${String(ttlMs)})`);
     }
-    if (perResourceTtlMs !== void 0) {
-      if (perResourceTtlMs === null || typeof perResourceTtlMs !== "object" || Array.isArray(perResourceTtlMs)) {
-        throw new AutotaskConfigError(
-          `cache.perResourceTtlMs must be an object of resource key -> ms (got ${String(perResourceTtlMs)})`
-        );
-      }
-      for (const [key, value] of Object.entries(perResourceTtlMs)) {
-        if (key === "") {
-          throw new AutotaskConfigError("cache.perResourceTtlMs keys must be non-empty resource keys");
-        }
-        if (!Number.isInteger(value) || value <= 0) {
-          throw new AutotaskConfigError(
-            `cache.perResourceTtlMs.${key} must be a positive integer (got ${String(value)})`
-          );
-        }
-      }
+    const maxEntries = options.maxEntries ?? READ_CACHE_MAX_ENTRIES;
+    if (!Number.isInteger(maxEntries) || maxEntries <= 0) {
+      throw new AutotaskConfigError(`cache maxEntries must be a positive integer (got ${String(maxEntries)})`);
     }
     this.ttlMs = ttlMs;
-    this.perResourceTtlMs = perResourceTtlMs;
-  }
-  /**
-   * The TTL (ms) for a resource plan key: the `perResourceTtlMs` override
-   * when the map is present and names the resource, else the base
-   * `ttlMs` (absent map, absent key, and `undefined` all fall back).
-   */
-  ttlFor(resource) {
-    if (resource !== void 0 && this.perResourceTtlMs !== void 0) {
-      const override = this.perResourceTtlMs[resource];
-      if (override !== void 0) return override;
-    }
-    return this.ttlMs;
+    this.maxEntries = maxEntries;
+    this.ttlFor = options.ttlFor ?? (() => ttlMs);
   }
-  /**
-   * Read-through lookup: the live entry's value, or `undefined` (absent OR
-   * expired — an expired entry is purged lazily on this read).
-   */
+  /** The live value (a copy), or `undefined` when absent or expired. */
   get(key) {
     const entry = this.store.get(key);
     if (entry === void 0) return void 0;
@@ -644,19 +627,46 @@ var ReadCache = class {
     }
     return structuredClone(entry.value);
   }
-  /** Store a successful read payload under `key`, live for `ttlFor(resource)`:
-   * the per-resource override (issue #32) when named, else `ttlMs`.
-   * `epoch` is the invalidation epoch the caller captured BEFORE its wire
-   * read: a read that straddled a `clear()` (a write) is dropped, never
-   * re-stored with its pre-write body. */
-  set(key, value, resource, epoch = this.epochCounter) {
+  /** Store `value` under `key`. `epoch` is the value the caller read BEFORE its
+   * wire request: a read that straddled a `clear()` (a write) is dropped. */
+  set(key, value, epoch = this.epochCounter) {
     if (epoch !== this.epochCounter) return;
-    if (this.store.size >= READ_CACHE_MAX_ENTRIES && this.purgeExpired() === 0) {
+    if (!this.store.has(key) && this.store.size >= this.maxEntries && this.purgeExpired() === 0) {
       const oldest = this.store.keys().next();
       if (!oldest.done) this.store.delete(oldest.value);
     }
+    const now = Date.now();
     this.store.delete(key);
-    this.store.set(key, { value: structuredClone(value), expiresAt: Date.now() + this.ttlFor(resource) });
+    this.store.set(key, { value: structuredClone(value), storedAt: now, expiresAt: now + this.ttlFor(key) });
+  }
+  /** `{ hit, age }` without consuming or cloning the entry (age in ms since stored). */
+  peek(key) {
+    const entry = this.store.get(key);
+    if (entry === void 0 || entry.expiresAt <= Date.now()) return { hit: false, age: null };
+    return { hit: true, age: Date.now() - entry.storedAt };
+  }
+  /** The shared in-flight read for `key`, if any. */
+  inflight(key) {
+    return this.inflightMap.get(key);
+  }
+  /** Register an in-flight read so concurrent callers share it; dropped on settle. */
+  track(key, promise) {
+    this.inflightMap.set(key, promise);
+    const drop = () => {
+      if (this.inflightMap.get(key) === promise) this.inflightMap.delete(key);
+    };
+    promise.then(drop, drop);
+    return promise;
+  }
+  /** Drop one key. */
+  delete(key) {
+    this.inflightMap.delete(key);
+    return this.store.delete(key);
+  }
+  /** Drop every stored and in-flight key that starts with `prefix`. */
+  invalidate(prefix) {
+    for (const key of [...this.store.keys()]) if (key.startsWith(prefix)) this.store.delete(key);
+    for (const key of [...this.inflightMap.keys()]) if (key.startsWith(prefix)) this.inflightMap.delete(key);
   }
   /** Drop every expired entry (returns the number removed). */
   purgeExpired() {
@@ -670,24 +680,19 @@ var ReadCache = class {
     }
     return removed;
   }
-  /** Current entry count (live + not-yet-purged expired). */
+  /** Stored entry count (live + not-yet-purged expired). */
   get size() {
     return this.store.size;
   }
-  /** Drop one key (issue #36: a later positive outcome clears a stale 'absent' marker). */
-  delete(key) {
-    return this.store.delete(key);
-  }
-  /** The invalidation epoch: bumped by `clear()`; capture it before a wire
-   * read and pass it to `set` so a read in flight across a write cannot
-   * re-store its stale answer. */
+  /** Bumped by `clear()`; capture it before a wire read and pass it to `set`. */
   get epoch() {
     return this.epochCounter;
   }
-  /** Drop everything (e.g. a caller that knows the tenant was reset). */
+  /** Drop everything and bump the epoch. */
   clear() {
     this.epochCounter += 1;
     this.store.clear();
+    this.inflightMap.clear();
   }
 };
 
@@ -790,279 +795,6 @@ var AGENT_PROFILE = {
   resolution: { maxScanRecords: 200, maxScanPages: 2 }
 };
 
-// src/cache-ttl-tables.ts
-var CACHE_TTL_REFERENCE_MS = 36e5;
-var CACHE_TTL_DEFAULT_MS = 3e5;
-var DEFAULT_PER_RESOURCE_TTL_MS = {
-  "appointments": 3e5,
-  "authenticate": 3e5,
-  "billing_codes": 36e5,
-  "billing_item_approval_levels": 3e5,
-  "billing_items": 3e5,
-  "change_request_links": 3e5,
-  "checklist_libraries": 3e5,
-  "checklist_library_checklist_items": 3e5,
-  "classification_icons": 3e5,
-  "companies": 3e5,
-  "company_alerts": 3e5,
-  "company_locations": 3e5,
-  "company_notes": 3e5,
-  "company_site_configurations": 3e5,
-  "company_webhooks": 3e5,
-  "configuration_item_billing_product_associations": 3e5,
-  "configuration_item_categories": 3e5,
-  "configuration_item_category_udf_associations": 3e5,
-  "configuration_item_dns_records": 3e5,
-  "configuration_item_notes": 3e5,
-  "configuration_item_related_items": 3e5,
-  "configuration_item_ssl_subject_alternative_names": 3e5,
-  "configuration_item_types": 3e5,
-  "configuration_item_webhooks": 3e5,
-  "configuration_items": 3e5,
-  "contact_group_contacts": 3e5,
-  "contact_groups": 3e5,
-  "contact_webhooks": 3e5,
-  "contacts": 3e5,
-  "contract_billing_rules": 3e5,
-  "contract_block_hour_factors": 3e5,
-  "contract_blocks": 3e5,
-  "contract_charges": 3e5,
-  "contract_exclusion_billing_codes": 3e5,
-  "contract_exclusion_roles": 3e5,
-  "contract_exclusion_set_excluded_roles": 3e5,
-  "contract_exclusion_set_excluded_work_types": 3e5,
-  "contract_exclusion_sets": 3e5,
-  "contract_milestones": 3e5,
-  "contract_notes": 3e5,
-  "contract_rates": 3e5,
-  "contract_retainers": 3e5,
-  "contract_role_costs": 3e5,
-  "contract_service_adjustments": 3e5,
-  "contract_service_bundle_adjustments": 3e5,
-  "contract_service_bundle_units": 3e5,
-  "contract_service_bundles": 3e5,
-  "contract_service_units": 3e5,
-  "contract_services": 3e5,
-  "contract_ticket_purchases": 3e5,
-  "contracts": 3e5,
-  "countries": 36e5,
-  "currencies": 3e5,
-  "departments": 36e5,
-  "domain_registrars": 3e5,
-  "entity_information": 3e5,
-  "expense_item_attachments": 3e5,
-  "expense_items": 3e5,
-  "expense_reports": 3e5,
-  "holiday_sets": 3e5,
-  "holidays": 3e5,
-  "inventory_products": 3e5,
-  "invoice_templates": 3e5,
-  "invoices": 3e5,
-  "modules": 3e5,
-  "notification_history": 3e5,
-  "opportunities": 3e5,
-  "opportunity_attachments": 3e5,
-  "opportunity_categories": 3e5,
-  "organizational_level1s": 3e5,
-  "organizational_level2s": 3e5,
-  "organizational_level_associations": 3e5,
-  "phases": 36e5,
-  "product_vendors": 3e5,
-  "products": 3e5,
-  "project_charges": 3e5,
-  "project_notes": 3e5,
-  "projects": 3e5,
-  "purchase_approvals": 3e5,
-  "purchase_order_item_receiving": 3e5,
-  "purchase_order_items": 3e5,
-  "purchase_orders": 3e5,
-  "quote_items": 3e5,
-  "quote_locations": 3e5,
-  "quote_templates": 3e5,
-  "quotes": 3e5,
-  "resource_role_queues": 3e5,
-  "resource_roles": 3e5,
-  "resource_skills": 3e5,
-  "resource_time_off_additional": 3e5,
-  "resource_time_off_approvers": 3e5,
-  "resource_time_off_balances": 3e5,
-  "resources": 3e5,
-  "roles": 36e5,
-  "sales_orders": 3e5,
-  "service_call_task_resources": 3e5,
-  "service_call_tasks": 3e5,
-  "service_call_ticket_resources": 3e5,
-  "service_call_tickets": 3e5,
-  "service_calls": 3e5,
-  "service_level_agreement_results": 3e5,
-  "services": 36e5,
-  "skills": 3e5,
-  "subscription_periods": 3e5,
-  "subscriptions": 3e5,
-  "survey_results": 3e5,
-  "surveys": 3e5,
-  "tag_aliases": 3e5,
-  "tag_groups": 3e5,
-  "tags": 3e5,
-  "task_secondary_resources": 3e5,
-  "tasks": 3e5,
-  "tax_regions": 3e5,
-  "threshold_information": 3e5,
-  "ticket_additional_configuration_items": 3e5,
-  "ticket_additional_contacts": 3e5,
-  "ticket_attachments": 3e5,
-  "ticket_categories": 3e5,
-  "ticket_category_field_defaults": 3e5,
-  "ticket_change_request_approvals": 3e5,
-  "ticket_charges": 3e5,
-  "ticket_checklist_items": 3e5,
-  "ticket_checklist_libraries": 3e5,
-  "ticket_history": 3e5,
-  "ticket_note_attachments": 3e5,
-  "ticket_note_webhooks": 3e5,
-  "ticket_notes": 3e5,
-  "ticket_secondary_resources": 3e5,
-  "ticket_webhooks": 3e5,
-  "tickets": 3e5,
-  "time_entries": 3e5,
-  "time_entry_attachments": 3e5,
-  "time_off_requests": 3e5,
-  "version": 3e5,
-  "version_information": 3e5,
-  "zone_information": 3e5
-};
-var RESOURCE_KEY_BY_PATH = {
-  "/V1.0/Appointments": "appointments",
-  "/V1.0/BillingCodes": "billing_codes",
-  "/V1.0/BillingItemApprovalLevels": "billing_item_approval_levels",
-  "/V1.0/BillingItems": "billing_items",
-  "/V1.0/ChangeRequestLinks": "change_request_links",
-  "/V1.0/ChecklistLibraries": "checklist_libraries",
-  "/V1.0/ChecklistLibraryChecklistItems": "checklist_library_checklist_items",
-  "/V1.0/ClassificationIcons": "classification_icons",
-  "/V1.0/Companies": "companies",
-  "/V1.0/CompanyAlerts": "company_alerts",
-  "/V1.0/CompanyLocations": "company_locations",
-  "/V1.0/CompanyNotes": "company_notes",
-  "/V1.0/CompanySiteConfigurations": "company_site_configurations",
-  "/V1.0/CompanyWebhooks": "company_webhooks",
-  "/V1.0/ConfigurationItemBillingProductAssociations": "configuration_item_billing_product_associations",
-  "/V1.0/ConfigurationItemCategories": "configuration_item_categories",
-  "/V1.0/ConfigurationItemCategoryUdfAssociations": "configuration_item_category_udf_associations",
-  "/V1.0/ConfigurationItemDnsRecords": "configuration_item_dns_records",
-  "/V1.0/ConfigurationItemNotes": "configuration_item_notes",
-  "/V1.0/ConfigurationItemRelatedItems": "configuration_item_related_items",
-  "/V1.0/ConfigurationItemSslSubjectAlternativeNames": "configuration_item_ssl_subject_alternative_names",
-  "/V1.0/ConfigurationItemTypes": "configuration_item_types",
-  "/V1.0/ConfigurationItemWebhooks": "configuration_item_webhooks",
-  "/V1.0/ConfigurationItems": "configuration_items",
-  "/V1.0/ContactGroupContacts": "contact_group_contacts",
-  "/V1.0/ContactGroups": "contact_groups",
-  "/V1.0/ContactWebhooks": "contact_webhooks",
-  "/V1.0/Contacts": "contacts",
-  "/V1.0/ContractBillingRules": "contract_billing_rules",
-  "/V1.0/ContractBlockHourFactors": "contract_block_hour_factors",
-  "/V1.0/ContractBlocks": "contract_blocks",
-  "/V1.0/ContractCharges": "contract_charges",
-  "/V1.0/ContractExclusionBillingCodes": "contract_exclusion_billing_codes",
-  "/V1.0/ContractExclusionRoles": "contract_exclusion_roles",
-  "/V1.0/ContractExclusionSetExcludedRoles": "contract_exclusion_set_excluded_roles",
-  "/V1.0/ContractExclusionSetExcludedWorkTypes": "contract_exclusion_set_excluded_work_types",
-  "/V1.0/ContractExclusionSets": "contract_exclusion_sets",
-  "/V1.0/ContractMilestones": "contract_milestones",
-  "/V1.0/ContractNotes": "contract_notes",
-  "/V1.0/ContractRates": "contract_rates",
-  "/V1.0/ContractRetainers": "contract_retainers",
-  "/V1.0/ContractRoleCosts": "contract_role_costs",
-  "/V1.0/ContractServiceAdjustments": "contract_service_adjustments",
-  "/V1.0/ContractServiceBundleAdjustments": "contract_service_bundle_adjustments",
-  "/V1.0/ContractServiceBundleUnits": "contract_service_bundle_units",
-  "/V1.0/ContractServiceBundles": "contract_service_bundles",
-  "/V1.0/ContractServiceUnits": "contract_service_units",
-  "/V1.0/ContractServices": "contract_services",
-  "/V1.0/ContractTicketPurchases": "contract_ticket_purchases",
-  "/V1.0/Contracts": "contracts",
-  "/V1.0/Countries": "countries",
-  "/V1.0/Currencies": "currencies",
-  "/V1.0/Departments": "departments",
-  "/V1.0/DomainRegistrars": "domain_registrars",
-  "/V1.0/ExpenseItemAttachments": "expense_item_attachments",
-  "/V1.0/ExpenseItems": "expense_items",
-  "/V1.0/ExpenseReports": "expense_reports",
-  "/V1.0/HolidaySets": "holiday_sets",
-  "/V1.0/Holidays": "holidays",
-  "/V1.0/InventoryProducts": "inventory_products",
-  "/V1.0/InvoiceTemplates": "invoice_templates",
-  "/V1.0/Invoices": "invoices",
-  "/V1.0/NotificationHistory": "notification_history",
-  "/V1.0/Opportunities": "opportunities",
-  "/V1.0/OpportunityAttachments": "opportunity_attachments",
-  "/V1.0/OpportunityCategories": "opportunity_categories",
-  "/V1.0/OrganizationalLevel1s": "organizational_level1s",
-  "/V1.0/OrganizationalLevel2s": "organizational_level2s",
-  "/V1.0/OrganizationalLevelAssociations": "organizational_level_associations",
-  "/V1.0/Phases": "phases",
-  "/V1.0/ProductVendors": "product_vendors",
-  "/V1.0/Products": "products",
-  "/V1.0/ProjectCharges": "project_charges",
-  "/V1.0/ProjectNotes": "project_notes",
-  "/V1.0/Projects": "projects",
-  "/V1.0/PurchaseApprovals": "purchase_approvals",
-  "/V1.0/PurchaseOrderItemReceiving": "purchase_order_item_receiving",
-  "/V1.0/PurchaseOrderItems": "purchase_order_items",
-  "/V1.0/PurchaseOrders": "purchase_orders",
-  "/V1.0/QuoteItems": "quote_items",
-  "/V1.0/QuoteLocations": "quote_locations",
-  "/V1.0/QuoteTemplates": "quote_templates",
-  "/V1.0/Quotes": "quotes",
-  "/V1.0/ResourceRoleQueues": "resource_role_queues",
-  "/V1.0/ResourceRoles": "resource_roles",
-  "/V1.0/ResourceSkills": "resource_skills",
-  "/V1.0/ResourceTimeOffAdditional": "resource_time_off_additional",
-  "/V1.0/ResourceTimeOffApprovers": "resource_time_off_approvers",
-  "/V1.0/ResourceTimeOffBalances": "resource_time_off_balances",
-  "/V1.0/Resources": "resources",
-  "/V1.0/Roles": "roles",
-  "/V1.0/SalesOrders": "sales_orders",
-  "/V1.0/ServiceCallTaskResources": "service_call_task_resources",
-  "/V1.0/ServiceCallTasks": "service_call_tasks",
-  "/V1.0/ServiceCallTicketResources": "service_call_ticket_resources",
-  "/V1.0/ServiceCallTickets": "service_call_tickets",
-  "/V1.0/ServiceCalls": "service_calls",
-  "/V1.0/ServiceLevelAgreementResults": "service_level_agreement_results",
-  "/V1.0/Services": "services",
-  "/V1.0/Skills": "skills",
-  "/V1.0/SubscriptionPeriods": "subscription_periods",
-  "/V1.0/Subscriptions": "subscriptions",
-  "/V1.0/SurveyResults": "survey_results",
-  "/V1.0/Surveys": "surveys",
-  "/V1.0/TagAliases": "tag_aliases",
-  "/V1.0/TagGroups": "tag_groups",
-  "/V1.0/Tags": "tags",
-  "/V1.0/TaskSecondaryResources": "task_secondary_resources",
-  "/V1.0/Tasks": "tasks",
-  "/V1.0/TaxRegions": "tax_regions",
-  "/V1.0/TicketAdditionalConfigurationItems": "ticket_additional_configuration_items",
-  "/V1.0/TicketAdditionalContacts": "ticket_additional_contacts",
-  "/V1.0/TicketAttachments": "ticket_attachments",
-  "/V1.0/TicketCategories": "ticket_categories",
-  "/V1.0/TicketCategoryFieldDefaults": "ticket_category_field_defaults",
-  "/V1.0/TicketChangeRequestApprovals": "ticket_change_request_approvals",
-  "/V1.0/TicketCharges": "ticket_charges",
-  "/V1.0/TicketChecklistItems": "ticket_checklist_items",
-  "/V1.0/TicketChecklistLibraries": "ticket_checklist_libraries",
-  "/V1.0/TicketHistory": "ticket_history",
-  "/V1.0/TicketNoteAttachments": "ticket_note_attachments",
-  "/V1.0/TicketNoteWebhooks": "ticket_note_webhooks",
-  "/V1.0/TicketNotes": "ticket_notes",
-  "/V1.0/TicketSecondaryResources": "ticket_secondary_resources",
-  "/V1.0/TicketWebhooks": "ticket_webhooks",
-  "/V1.0/Tickets": "tickets",
-  "/V1.0/TimeEntries": "time_entries",
-  "/V1.0/TimeEntryAttachments": "time_entry_attachments",
-  "/V1.0/TimeOffRequests": "time_off_requests"
-};
-
 // src/config/defaults.ts
 var DEFAULT_PAGE_SIZE = 10;
 var MAX_PAGE_SIZE = 500;
@@ -1075,9 +807,8 @@ var DEFAULT_MAX_CONCURRENT = 10;
 var DEFAULT_MAX_RESPONSE_BYTES = 64 * 1024 * 1024;
 var DEFAULT_MAX_SCAN_RECORDS = 500;
 var DEFAULT_MAX_SCAN_PAGES = 4;
-var DEFAULT_READ_CACHE_TTL_MS = CACHE_TTL_DEFAULT_MS;
-var DEFAULT_FIELD_CACHE_TTL_MS = CACHE_TTL_DEFAULT_MS;
-var DEFAULT_RESOURCE_NAME_CACHE_TTL_MS = CACHE_TTL_REFERENCE_MS;
+var DEFAULT_READ_CACHE_TTL_MS = 3e5;
+var DEFAULT_FIELD_CACHE_TTL_MS = 3e5;
 
 // src/credential-shape.ts
 var QUOTE_CHARS = /* @__PURE__ */ new Set(["'", '"']);
@@ -1104,390 +835,105 @@ function credentialValueSummary(value) {
   return value.length >= MIN_PREFIX_SUMMARY_LENGTH ? `len ${value.length}, starts "${value.slice(0, 2)}"` : "short value (length withheld)";
 }
 
-// src/fieldCache.ts
-var FIELD_CACHE_MAX_ENTITIES = 256;
-var FIELD_CACHE_KINDS = ["info", "fields", "udf"];
-var FieldCache = class _FieldCache {
-  /** The configured TTL in ms. */
-  ttlMs;
-  /** The entity bound (the cap applies to STORED entries; inflight never counts). */
-  maxEntities;
-  store = /* @__PURE__ */ new Map();
-  inflightMap = /* @__PURE__ */ new Map();
-  constructor(ttlMs, maxEntities = FIELD_CACHE_MAX_ENTITIES) {
-    if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
-      throw new AutotaskConfigError(`fieldCache.ttlMs must be a positive integer (got ${ttlMs})`);
-    }
-    if (!Number.isInteger(maxEntities) || maxEntities <= 0) {
-      throw new AutotaskConfigError(`fieldCache.maxEntities must be a positive integer (got ${maxEntities})`);
-    }
-    this.ttlMs = ttlMs;
-    this.maxEntities = maxEntities;
-  }
-  /** The composite key: one entity's catalogs are one key apart. */
-  static key(resourceKey, kind) {
-    return `${resourceKey}:${kind}`;
-  }
-  /**
-   * Read-through lookup: the live entry's value (a copy), or `undefined`
-   * (absent OR expired — an expired entry is purged lazily on this read).
-   */
-  get(resourceKey, kind) {
-    const entry = this.store.get(_FieldCache.key(resourceKey, kind));
-    if (entry === void 0) return void 0;
-    if (entry.expiresAt <= Date.now()) {
-      this.store.delete(_FieldCache.key(resourceKey, kind));
-      return void 0;
-    }
-    return structuredClone(entry.value);
-  }
-  /**
-   * Store a SUCCESSFUL, NON-EMPTY metadata value under (entity, kind),
-   * live for `ttlMs`. An EMPTY value (`[]` / `{}` / null) is refused
-   * silently (never cached — an empty is not an answer): the next call
-   * refetches.
-   */
-  set(resourceKey, kind, value) {
-    if (_FieldCache.isEmpty(value)) return;
-    const key = _FieldCache.key(resourceKey, kind);
-    if (this.store.size >= this.maxEntities && this.purgeExpired() === 0) {
-      const oldest = this.store.keys().next();
-      if (!oldest.done) this.store.delete(oldest.value);
-    }
-    this.store.delete(key);
-    this.store.set(key, { value: structuredClone(value), expiresAt: Date.now() + this.ttlMs });
-  }
-  /** True for the values that must never be cached (an empty is not an answer). */
-  static isEmpty(value) {
-    if (value === null || value === void 0) return true;
-    if (Array.isArray(value)) return value.length === 0;
-    if (typeof value === "object") return Object.keys(value).length === 0;
-    return false;
-  }
-  /**
-   * In-flight de-duplication: the shared in-flight promise for
-   * (entity, kind), or `undefined` (nothing in flight — the caller
-   * issues the request and registers it with `track`).
-   */
-  inflight(resourceKey, kind) {
-    return this.inflightMap.get(_FieldCache.key(resourceKey, kind));
-  }
-  /**
-   * Register an in-flight metadata read: concurrent callers for the same
-   * (entity, kind) await the SAME promise (one wire request). The entry
-   * is dropped on settle — success OR failure (a failure is never
-   * cached; the next caller refetches).
-   */
-  track(resourceKey, kind, promise) {
-    const key = _FieldCache.key(resourceKey, kind);
-    this.inflightMap.set(key, promise);
-    promise.then(
-      () => {
-        this.inflightMap.delete(key);
-      },
-      () => {
-        this.inflightMap.delete(key);
-      }
-    );
-    return promise;
-  }
-  /**
-   * The drift signal: drop the entity's STORED entries AND its in-flight
-   * promise (a refetch must not join a request whose premise just moved).
-   * A no-op when the entity holds nothing.
-   */
-  invalidate(resourceKey) {
-    for (const kind of FIELD_CACHE_KINDS) {
-      const key = _FieldCache.key(resourceKey, kind);
-      this.store.delete(key);
-      this.inflightMap.delete(key);
-    }
-  }
-  /**
-   * A non-mutating probe for the served op's per-row `cache` report:
-   * `hit` = a live (unexpired) entry exists; `age` = ms since that entry
-   * was stored (null when `hit` is false). Never purges, never clones.
-   */
-  peek(resourceKey, kind) {
-    const entry = this.store.get(_FieldCache.key(resourceKey, kind));
-    if (entry === void 0 || entry.expiresAt <= Date.now()) {
-      return { hit: false, age: null };
-    }
-    return { hit: true, age: Date.now() - (entry.expiresAt - this.ttlMs) };
-  }
-  /** Drop every expired entry (returns the number removed). */
-  purgeExpired() {
-    const now = Date.now();
-    let removed = 0;
-    for (const [key, entry] of this.store) {
-      if (entry.expiresAt <= now) {
-        this.store.delete(key);
-        removed += 1;
-      }
-    }
-    return removed;
-  }
-  /** Current entry count (live + not-yet-purged expired). */
-  get size() {
-    return this.store.size;
-  }
-  /** Drop everything (e.g. a caller that knows the tenant was reset). */
-  clear() {
-    this.store.clear();
-    this.inflightMap.clear();
-  }
-};
-
-// src/circuit-breaker.ts
-var DEFAULT_CIRCUIT_BREAKER_WINDOW_MS = 1e4;
-var DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD = 5;
-var DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS = 3e4;
-var DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE = 2;
-var DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES = 1024;
-var InMemoryCircuitBreakerStore = class {
-  maxEntries;
-  states = /* @__PURE__ */ new Map();
-  constructor(maxEntries = DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES) {
-    if (!Number.isInteger(maxEntries) || maxEntries <= 0) {
-      throw new TypeError(`InMemoryCircuitBreakerStore maxEntries must be a positive integer (got ${String(maxEntries)})`);
-    }
-    this.maxEntries = maxEntries;
-  }
-  get(hostKey) {
-    return this.states.get(hostKey);
-  }
-  set(hostKey, state) {
-    if (this.states.has(hostKey)) {
-      this.states.set(hostKey, state);
-      return;
-    }
-    if (this.states.size >= this.maxEntries) {
-      let victim;
-      let victimActivity = Number.POSITIVE_INFINITY;
-      for (const [key, s] of this.states) {
-        const activity = s.openedAt !== null ? s.openedAt : s.failures.length > 0 ? s.failures[s.failures.length - 1] : 0;
-        if (activity < victimActivity) {
-          victimActivity = activity;
-          victim = key;
-        }
-      }
-      if (victim !== void 0) this.states.delete(victim);
-    }
-    this.states.set(hostKey, state);
-  }
-  delete(hostKey) {
-    this.states.delete(hostKey);
-  }
-  /** Drop every entry (test helper surface; also used by resetDefaultCircuitBreakerStore). */
-  clear() {
-    this.states.clear();
-  }
-};
-var defaultStore;
-function defaultCircuitBreakerStore() {
-  if (defaultStore === void 0) defaultStore = new InMemoryCircuitBreakerStore();
-  return defaultStore;
-}
-function resetDefaultCircuitBreakerStore() {
-  defaultStore?.clear();
-}
-function buildBreakerKey(baseUrl) {
-  return new URL(baseUrl).host.toLowerCase();
-}
-function isBreakerFailure(err) {
-  if (err.notSent === true) return false;
-  if (err.code === "NETWORK_ERROR" || err.code === "TIMEOUT") return true;
-  const status = err.httpStatus;
-  if (status === void 0) return false;
-  if (status === 429) return true;
-  if (status >= 500 && status < 600) {
-    return err.details?.deterministic !== true;
-  }
-  return err.code === "UNEXPECTED_CONTENT_TYPE";
-}
-
-// src/cooldown.ts
+// src/http/gates.ts
 var DEFAULT_COOLDOWN_MAX_MS = 15 * 60 * 1e3;
 var DEFAULT_COOLDOWN_DEFAULT_MS = 6e4;
-var DEFAULT_COOLDOWN_MAX_ENTRIES = 1024;
 var THREAD_THRESHOLD_MAX_MS = 1e4;
 var THREAD_THRESHOLD_DEFAULT_MS = 5e3;
-var InMemoryCooldownStore = class {
-  maxEntries;
-  deadlines = /* @__PURE__ */ new Map();
-  constructor(maxEntries = DEFAULT_COOLDOWN_MAX_ENTRIES) {
-    if (!Number.isInteger(maxEntries) || maxEntries <= 0) {
-      throw new TypeError(`InMemoryCooldownStore maxEntries must be a positive integer (got ${String(maxEntries)})`);
-    }
-    this.maxEntries = maxEntries;
-  }
-  get(tenantKey) {
-    return this.deadlines.get(tenantKey);
+var cooldowns = /* @__PURE__ */ new Map();
+var maintenance = /* @__PURE__ */ new Map();
+function hostKey(baseUrl) {
+  return new URL(baseUrl).host.toLowerCase();
+}
+function tenantKey(userName, baseUrl) {
+  return `${userName.toLowerCase()}@${hostKey(baseUrl)}`;
+}
+function cooldownRefusal(key, ctx) {
+  const deadline = cooldowns.get(key);
+  if (deadline === void 0) return void 0;
+  const remainingMs = deadline - Date.now();
+  if (remainingMs <= 0) {
+    cooldowns.delete(key);
+    return void 0;
   }
-  set(tenantKey, deadline) {
-    if (this.deadlines.has(tenantKey)) {
-      this.deadlines.set(tenantKey, deadline);
-      return;
-    }
-    if (this.deadlines.size >= this.maxEntries) {
-      let victim;
-      let victimDeadline = Number.POSITIVE_INFINITY;
-      for (const [key, d] of this.deadlines) {
-        if (d < victimDeadline) {
-          victimDeadline = d;
-          victim = key;
-        }
-      }
-      if (victim !== void 0) this.deadlines.delete(victim);
+  const seconds = Math.ceil(remainingMs / 1e3);
+  const err = new RateLimitError(
+    `Tenant is in a rate-limit cooldown; the call was NOT sent. ${seconds}s remain \u2014 do not retry before then, and narrow the query (filter/includeFields) before retrying.`,
+    {
+      ...ctx,
+      code: "RATE_LIMITED_COOLDOWN",
+      retryable: false,
+      suggestedAction: `Wait ${seconds}s (per-tenant 429 cooldown) and retry with a narrower query; the call was not sent and consumed no vendor budget.`
     }
-    this.deadlines.set(tenantKey, deadline);
-  }
-  delete(tenantKey) {
-    this.deadlines.delete(tenantKey);
-  }
-  /** Drop every entry (test helper surface; also used by resetDefaultCooldownStore). */
-  clear() {
-    this.deadlines.clear();
-  }
-};
-var defaultStore2;
-function defaultCooldownStore() {
-  if (defaultStore2 === void 0) defaultStore2 = new InMemoryCooldownStore();
-  return defaultStore2;
+  );
+  err.retryAfter = seconds;
+  err.notSent = true;
+  return err;
 }
-function resetDefaultCooldownStore() {
-  defaultStore2?.clear();
+function armCooldown(key, deadline) {
+  const now = Date.now();
+  for (const [k, d] of cooldowns) if (d <= now) cooldowns.delete(k);
+  cooldowns.set(key, deadline);
 }
-function buildTenantKey(userName, baseUrl) {
-  return `${userName.toLowerCase()}@${new URL(baseUrl).host.toLowerCase()}`;
+function clearCooldown(key) {
+  cooldowns.delete(key);
 }
 function cooldownDurationMs(retryAfterSecs, opts) {
   if (opts.threadThreshold) {
-    const secs = retryAfterSecs !== void 0 ? Math.min(retryAfterSecs, Math.round(THREAD_THRESHOLD_MAX_MS / 1e3)) : Math.round(THREAD_THRESHOLD_DEFAULT_MS / 1e3);
-    return Math.max(0, secs) * 1e3;
+    const ms = retryAfterSecs !== void 0 ? Math.min(retryAfterSecs * 1e3, THREAD_THRESHOLD_MAX_MS) : THREAD_THRESHOLD_DEFAULT_MS;
+    return Math.max(0, ms);
   }
-  const rawMs = retryAfterSecs !== void 0 ? retryAfterSecs * 1e3 : opts.defaultMs;
-  return Math.min(rawMs, opts.maxMs);
+  return Math.min(retryAfterSecs !== void 0 ? retryAfterSecs * 1e3 : opts.defaultMs, opts.maxMs);
 }
-
-// src/resourceNameCache.ts
-var RESOURCE_NAME_CACHE_MAX_ENTRIES = 1024;
-var RESOURCE_NAME_CACHE_BLIND_TTL_MS = 6e4;
-var ResourceNameCache = class _ResourceNameCache {
-  /** The configured TTL in ms. */
-  ttlMs;
-  /** The entry bound (the cap applies to STORED entries; inflight never counts). */
-  maxEntries;
-  store = /* @__PURE__ */ new Map();
-  inflightMap = /* @__PURE__ */ new Map();
-  epochCounter = 0;
-  constructor(ttlMs, maxEntries = RESOURCE_NAME_CACHE_MAX_ENTRIES) {
-    if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
-      throw new AutotaskConfigError(`resourceNameCache.ttlMs must be a positive integer (got ${ttlMs})`);
-    }
-    if (!Number.isInteger(maxEntries) || maxEntries <= 0) {
-      throw new AutotaskConfigError(`resourceNameCache.maxEntries must be a positive integer (got ${maxEntries})`);
-    }
-    this.ttlMs = ttlMs;
-    this.maxEntries = maxEntries;
-  }
-  /** The namespaced key: `resources:<canonical id>` (the namespace
-   * leaves a documented path to future FK tables — v1 serves
-   * `resources` only). */
-  static key(id) {
-    return `resources:${id}`;
-  }
-  /**
-   * Read-through lookup: the live entry (a copy), or `undefined`
-   * (absent OR expired — an expired entry is purged lazily on this
-   * read).
-   */
-  get(id) {
-    const entry = this.store.get(_ResourceNameCache.key(id));
-    if (entry === void 0) return void 0;
-    if (entry.expiresAt <= Date.now()) {
-      this.store.delete(_ResourceNameCache.key(id));
-      return void 0;
-    }
-    return structuredClone(entry.value);
-  }
-  /**
-   * Store a name answer under the id, live for `ttlMs`. ALWAYS stores
-   * (the no-name-part answer `{ name: null, blind: false }` is a stable
-   * fact and is cached — the documented difference from the fieldCache
-   * empty rule); past the cap, purge expired first, then evict the
-   * oldest-inserted (Map insertion order; refreshes re-insert so the
-   * memory guard drops the OLDEST-inserted entries first).
-   */
-  set(id, value, epoch = this.epochCounter) {
-    if (epoch !== this.epochCounter) return;
-    const key = _ResourceNameCache.key(id);
-    if (!this.store.has(key) && this.store.size >= this.maxEntries && this.purgeExpired() === 0) {
-      const oldest = this.store.keys().next();
-      if (!oldest.done) this.store.delete(oldest.value);
-    }
-    this.store.delete(key);
-    this.store.set(key, { value: structuredClone(value), expiresAt: Date.now() + (value.blind ? Math.min(this.ttlMs, RESOURCE_NAME_CACHE_BLIND_TTL_MS) : this.ttlMs) });
-  }
-  /**
-   * In-flight de-duplication: the shared in-flight promise for the id,
-   * or `undefined` (nothing in flight — the caller issues the request
-   * and registers it with `track`).
-   */
-  inflight(id) {
-    return this.inflightMap.get(_ResourceNameCache.key(id));
-  }
-  /**
-   * Register an in-flight name read: concurrent callers for the same id
-   * await the SAME promise (one wire request). The entry is dropped on
-   * settle — success OR failure (a failure is never cached; the next
-   * caller refetches).
-   */
-  track(id, promise) {
-    const key = _ResourceNameCache.key(id);
-    this.inflightMap.set(key, promise);
-    promise.then(
-      () => {
-        this.inflightMap.delete(key);
-      },
-      () => {
-        this.inflightMap.delete(key);
-      }
-    );
-    return promise;
-  }
-  /** Drop every expired entry (returns the number removed). */
-  purgeExpired() {
-    const now = Date.now();
-    let removed = 0;
-    for (const [key, entry] of this.store) {
-      if (entry.expiresAt <= now) {
-        this.store.delete(key);
-        removed += 1;
-      }
+function admitMaintenance(host, ctx) {
+  const gate = maintenance.get(host);
+  if (gate === void 0) return "send";
+  const now = Date.now();
+  if (!gate.probing && now >= gate.nextProbeAt) {
+    gate.probing = true;
+    return gate;
+  }
+  const retryAfterMs = gate.probing ? Math.max(gate.nextProbeAt - now, gate.pollMs) : Math.max(0, gate.nextProbeAt - now);
+  const seconds = Math.max(1, Math.ceil(retryAfterMs / 1e3));
+  const since = new Date(gate.since).toISOString();
+  const err = new MaintenanceError(
+    `Zone ${host} is in a maintenance window (since ${since}); the call was NOT sent. Retry in about ${seconds}s.`,
+    {
+      ...ctx,
+      details: { since, retryAfterMs },
+      suggestedAction: `The Autotask zone is in its maintenance window (since ${since}). The call was not sent; retry later (the next probe is in about ${seconds}s, windows usually last 30-90 min).`
     }
-    return removed;
-  }
-  /** The invalidation epoch: bumped by `clear()`; capture it before a wire
-   * read and pass it to `set` so a stale answer is dropped. */
-  get epoch() {
-    return this.epochCounter;
-  }
-  /** Current entry count (live + not-yet-purged expired). */
-  get size() {
-    return this.store.size;
-  }
-  /**
-   * Drop everything — the SCOPED invalidation target: a real write to
-   * the `resources` resource through the same client (a rename via this
-   * client is always fresh).
-   */
-  clear() {
-    this.epochCounter += 1;
-    this.store.clear();
-    this.inflightMap.clear();
-  }
-};
+  );
+  err.retryAfter = seconds;
+  err.notSent = true;
+  return err;
+}
+function openMaintenance(host, pollMs, logger, correlationId) {
+  if (maintenance.has(host)) return;
+  const now = Date.now();
+  maintenance.set(host, { since: now, pollMs, nextProbeAt: now + pollMs, probing: false });
+  logger.warn?.(`[autotask] maintenance gate OPEN for ${host}: other calls on this zone fail fast (MAINTENANCE) until a probe sees a normal response`, correlationId);
+}
+function claimMaintenanceProbe(host) {
+  const gate = maintenance.get(host);
+  if (gate === void 0 || gate.probing) return void 0;
+  gate.probing = true;
+  return gate;
+}
+function releaseMaintenanceProbe(host, gate) {
+  if (maintenance.get(host) !== gate) return;
+  gate.probing = false;
+  gate.nextProbeAt = Date.now() + gate.pollMs;
+}
+function closeMaintenance(host, logger, correlationId) {
+  const gate = maintenance.get(host);
+  if (gate === void 0) return;
+  maintenance.delete(host);
+  logger.warn?.(`[autotask] maintenance gate CLOSED for ${host} after ${Math.round((Date.now() - gate.since) / 1e3)}s`, correlationId);
+}
+function maintenanceSince(host) {
+  return maintenance.get(host)?.since;
+}
 
 // src/host-policy.ts
 function canonicalHost(origin) {
@@ -1779,61 +1225,10 @@ function resolveCooldown(config) {
   if (!Number.isInteger(cooldownDefaultMs) || cooldownDefaultMs <= 0) {
     throw new AutotaskConfigError("cooldown.defaultMs must be a positive integer (ms)");
   }
-  const cooldownStore = config.cooldown?.store;
-  if (cooldownStore !== void 0 && (typeof cooldownStore.get !== "function" || typeof cooldownStore.set !== "function" || typeof cooldownStore.delete !== "function")) {
-    throw new AutotaskConfigError("cooldown.store must implement get/set/delete (a CooldownStore)");
-  }
   return {
     enabled: cooldownEnabled,
     maxMs: cooldownMaxMs,
-    defaultMs: cooldownDefaultMs,
-    store: cooldownStore
-  };
-}
-function resolveCircuitBreaker(config) {
-  const breakerEnabled = config.circuitBreaker?.enabled ?? false;
-  const breakerWindowMs = config.circuitBreaker?.failureWindowMs ?? DEFAULT_CIRCUIT_BREAKER_WINDOW_MS;
-  if (!Number.isInteger(breakerWindowMs) || breakerWindowMs <= 0) {
-    throw new AutotaskConfigError("circuitBreaker.failureWindowMs must be a positive integer (ms)");
-  }
-  const breakerThreshold = config.circuitBreaker?.failureThreshold ?? DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD;
-  if (!Number.isInteger(breakerThreshold) || breakerThreshold <= 0) {
-    throw new AutotaskConfigError("circuitBreaker.failureThreshold must be a positive integer");
-  }
-  const breakerOpenTimeoutMs = config.circuitBreaker?.openTimeoutMs ?? DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS;
-  if (!Number.isInteger(breakerOpenTimeoutMs) || breakerOpenTimeoutMs <= 0) {
-    throw new AutotaskConfigError("circuitBreaker.openTimeoutMs must be a positive integer (ms)");
-  }
-  const breakerSuccessesToClose = config.circuitBreaker?.successesToClose ?? DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE;
-  if (!Number.isInteger(breakerSuccessesToClose) || breakerSuccessesToClose <= 0) {
-    throw new AutotaskConfigError("circuitBreaker.successesToClose must be a positive integer");
-  }
-  const breakerHalfOpenProbes = config.circuitBreaker?.halfOpenProbes ?? breakerSuccessesToClose;
-  if (!Number.isInteger(breakerHalfOpenProbes) || breakerHalfOpenProbes <= 0) {
-    throw new AutotaskConfigError("circuitBreaker.halfOpenProbes must be a positive integer");
-  }
-  if (breakerHalfOpenProbes < breakerSuccessesToClose) {
-    throw new AutotaskConfigError(
-      `circuitBreaker.halfOpenProbes (${breakerHalfOpenProbes}) must be >= successesToClose (${breakerSuccessesToClose}) \u2014 the breaker could never close`
-    );
-  }
-  const breakerStore = config.circuitBreaker?.store;
-  if (breakerStore !== void 0 && (typeof breakerStore.get !== "function" || typeof breakerStore.set !== "function" || typeof breakerStore.delete !== "function")) {
-    throw new AutotaskConfigError("circuitBreaker.store must implement get/set/delete (a CircuitBreakerStore)");
-  }
-  const breakerIsFailure = config.circuitBreaker?.isFailure;
-  if (breakerIsFailure !== void 0 && typeof breakerIsFailure !== "function") {
-    throw new AutotaskConfigError("circuitBreaker.isFailure must be a function");
-  }
-  return {
-    enabled: breakerEnabled,
-    failureWindowMs: breakerWindowMs,
-    failureThreshold: breakerThreshold,
-    openTimeoutMs: breakerOpenTimeoutMs,
-    successesToClose: breakerSuccessesToClose,
-    halfOpenProbes: breakerHalfOpenProbes,
-    store: breakerStore,
-    isFailure: breakerIsFailure
+    defaultMs: cooldownDefaultMs
   };
 }
 function resolveResolution(config, agent) {
@@ -1851,42 +1246,43 @@ function resolveResolution(config, agent) {
   }
   return { maxScanRecords, maxScanPages, scanOnMiss };
 }
+var FIELD_CACHE_MAX_ENTRIES = 256;
 function resolveCaches(config) {
-  const cacheBlock = config.cache === false || config.cache === void 0 ? void 0 : config.cache;
-  resolveReadCacheStore(cacheBlock);
-  const fieldCacheBlock = config.fieldCache === false || config.fieldCache === void 0 ? void 0 : config.fieldCache;
-  const resourceNameCacheBlock = config.resourceNameCache === false || config.resourceNameCache === void 0 ? void 0 : config.resourceNameCache;
-  const readCache = config.cache === false ? void 0 : cacheBlock?.store ?? buildReadCache(config);
-  const fieldCache = config.fieldCache === false ? void 0 : new FieldCache(
-    fieldCacheBlock?.ttlMs ?? DEFAULT_FIELD_CACHE_TTL_MS,
-    fieldCacheBlock?.maxEntities ?? FIELD_CACHE_MAX_ENTITIES
-  );
-  const resourceNameCache = config.resourceNameCache === false ? void 0 : new ResourceNameCache(
-    resourceNameCacheBlock?.ttlMs ?? DEFAULT_RESOURCE_NAME_CACHE_TTL_MS,
-    resourceNameCacheBlock?.maxEntries ?? RESOURCE_NAME_CACHE_MAX_ENTRIES
-  );
-  return { readCache, fieldCache, resourceNameCache };
-}
-function resolveReadCacheStore(cacheBlock) {
-  if (cacheBlock === void 0 || cacheBlock === false || cacheBlock.store === void 0) return;
-  if (!(cacheBlock.store instanceof ReadCache)) {
-    throw new AutotaskConfigError(
-      "cache.store must be a ReadCache instance (import { ReadCache } from the SDK; the pool supplies its own)"
-    );
+  for (const removed of ["fieldCache", "resourceNameCache"]) {
+    if (removed in config) {
+      throw new AutotaskConfigError(
+        `${removed} was removed in 0.40.0: use cache: false (every channel off) or cache: { ttlMs?, fieldTtlMs? }`
+      );
+    }
+  }
+  const block = config.cache;
+  if (block === false) return {};
+  if (block?.store !== void 0) {
+    if (!(block.store instanceof TtlCache)) {
+      throw new AutotaskConfigError("cache.store must be a TtlCache instance (import { TtlCache } from the SDK; the pool supplies its own)");
+    }
+    if (block.ttlMs !== void 0) {
+      throw new AutotaskConfigError("cache.store cannot be combined with cache.ttlMs: the supplied instance owns its TTL");
+    }
   }
-  if (cacheBlock.ttlMs !== void 0 || cacheBlock.perResourceTtlMs !== void 0) {
-    throw new AutotaskConfigError(
-      "cache.store cannot be combined with cache.ttlMs or cache.perResourceTtlMs \u2014 the supplied ReadCache instance owns its TTLs"
-    );
+  return {
+    readCache: block?.store ?? buildReadCache(config),
+    fieldCache: new TtlCache(ttlOption(block?.fieldTtlMs, DEFAULT_FIELD_CACHE_TTL_MS, "cache.fieldTtlMs"), {
+      maxEntries: FIELD_CACHE_MAX_ENTRIES
+    })
+  };
+}
+function ttlOption(value, fallback, name) {
+  const ms = value ?? fallback;
+  if (!Number.isInteger(ms) || ms <= 0) {
+    throw new AutotaskConfigError(`${name} must be a positive integer (got ${String(ms)})`);
   }
+  return ms;
 }
 function buildReadCache(config) {
   if (config.cache === false) return void 0;
-  const cacheBlock = config.cache === void 0 ? void 0 : config.cache;
-  return new ReadCache(
-    cacheBlock?.ttlMs ?? DEFAULT_READ_CACHE_TTL_MS,
-    { ...DEFAULT_PER_RESOURCE_TTL_MS, ...cacheBlock?.perResourceTtlMs }
-  );
+  const ttlMs = ttlOption(config.cache?.ttlMs, DEFAULT_READ_CACHE_TTL_MS, "cache.ttlMs");
+  return new TtlCache(ttlMs, { ttlFor: (key) => readTtlFor(key, ttlMs) });
 }
 function resolveConfig(config) {
   if (config === null || typeof config !== "object") {
@@ -1899,7 +1295,6 @@ function resolveConfig(config) {
   const limits = resolveLimits(config, agent);
   const rateLimit = resolveRateLimit(config, agent);
   const cooldown = resolveCooldown(config);
-  const circuitBreaker = resolveCircuitBreaker(config);
   const resolution = resolveResolution(config, agent);
   const redactPersonalData = config.redactPersonalData ?? true;
   const caches = resolveCaches(config);
@@ -1924,7 +1319,6 @@ function resolveConfig(config) {
     logger,
     rateLimit,
     cooldown,
-    circuitBreaker,
     resolution,
     onAudit: config.onAudit,
     redactPersonalData,
@@ -2311,7 +1705,7 @@ function maintenanceProbe(text) {
   return Buffer.from(text, "utf8").subarray(0, MAINTENANCE_PROBE_BYTES).toString("utf8");
 }
 function looksLikeMaintenanceText(text) {
-  return /maintenance|temporarily unavailable|service unavailable|outage|downtime|down for/i.test(
+  return /maintenance|outage|downtime|down for/i.test(
     maintenanceProbe(text)
   );
 }
@@ -16458,88 +15852,6 @@ function passthrough(body) {
   return body;
 }
 
-// src/latest-count-cache.ts
-var LATEST_COUNT_CACHE_TTL_MS = 3e4;
-var LATEST_COUNT_CACHE_MAX_ENTRIES = 4096;
-var LatestCountCache = class {
-  /** The TTL in ms. */
-  ttlMs;
-  /** The entry bound (applies to STORED entries). */
-  maxEntries;
-  store = /* @__PURE__ */ new Map();
-  /** The invalidation epoch (the `ReadCache` pattern — issue #139): bumped
-   * by `clear()`; capture it before a wire read and pass it to `set` so a
-   * probe in flight across a write cannot re-store its stale answer. */
-  epochCounter = 0;
-  constructor(ttlMs, maxEntries = LATEST_COUNT_CACHE_MAX_ENTRIES) {
-    if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
-      throw new AutotaskConfigError(`latestCountCache.ttlMs must be a positive integer (got ${String(ttlMs)})`);
-    }
-    if (!Number.isInteger(maxEntries) || maxEntries <= 0) {
-      throw new AutotaskConfigError(`latestCountCache.maxEntries must be a positive integer (got ${String(maxEntries)})`);
-    }
-    this.ttlMs = ttlMs;
-    this.maxEntries = maxEntries;
-  }
-  /** The composite key: (resource plan key, canonical filter serialisation)
-   * — the `\u0000` separator is unencodable in a filter value, so no two
-   * (resource, conditions) pairs collide. */
-  static key(resourceKey, conditions) {
-    return `${resourceKey}\0${JSON.stringify(conditions ?? [])}`;
-  }
-  /** The live entry's count, or `undefined` (absent OR expired — an expired
-   * entry is purged lazily on this read). */
-  get(key) {
-    const entry = this.store.get(key);
-    if (entry === void 0) return void 0;
-    if (entry.expiresAt <= Date.now()) {
-      this.store.delete(key);
-      return void 0;
-    }
-    return entry.value;
-  }
-  /** The invalidation epoch: bumped by `clear()`; capture it before a wire
-   * read and pass it to `set` so a probe in flight across a write cannot
-   * re-store its stale answer (issue #139, the `ReadCache` pattern). */
-  get epoch() {
-    return this.epochCounter;
-  }
-  /** Store a SUCCESSFUL plain-number count under `key`, live for `ttlMs`.
-   * `epoch` is the invalidation epoch the caller captured BEFORE its wire
-   * read: a probe that straddled a `clear()` (a write) is dropped, never
-   * re-stored with its pre-write body (issue #139). Past the cap: purge
-   * expired entries first, then evict the oldest-inserted (Map iteration
-   * order = insertion order). */
-  set(key, value, epoch = this.epochCounter) {
-    if (epoch !== this.epochCounter) return;
-    if (!Number.isFinite(value)) return;
-    const entry = { value, expiresAt: Date.now() + this.ttlMs };
-    if (!this.store.has(key) && this.store.size >= this.maxEntries) {
-      for (const [k, e] of this.store) {
-        if (e.expiresAt <= Date.now()) this.store.delete(k);
-      }
-      if (this.store.size >= this.maxEntries) {
-        const oldest = this.store.keys().next();
-        if (!oldest.done) this.store.delete(oldest.value);
-      }
-    }
-    this.store.set(key, entry);
-  }
-  /** Drop one entry (absent = no-op). Issue #157: the stale-LOW recovery
-   *  deletes the cached total before its one fresh wire re-probe, so the
-   *  re-probe cannot be served by the entry it is meant to replace. */
-  delete(key) {
-    this.store.delete(key);
-  }
-  /** Clear every entry (a real write through the owning client — the
-   * write-then-read re-fetch rule) and bump the invalidation epoch: a
-   * `set` captured before this `clear` is discarded (issue #139). */
-  clear() {
-    this.epochCounter += 1;
-    this.store.clear();
-  }
-};
-
 // src/http/body.ts
 async function readBodyText(res, max, what, ctx) {
   const tooLarge = () => new ResponseRejectedError(`Response for ${what} exceeds maxResponseBytes (${max})`, {
@@ -16578,120 +15890,7 @@ function bodySnippet(text, redactPersonalData) {
   return redactResponseBody(bytes, { redactPersonalData });
 }
 
-// src/http/breaker-budget.ts
-function cooldownRefusal(store, tenantKey, ctx) {
-  const deadline = store.get(tenantKey);
-  if (deadline === void 0) return void 0;
-  const remainingMs = deadline - Date.now();
-  if (remainingMs > 0) {
-    const seconds = Math.ceil(remainingMs / 1e3);
-    const err = new RateLimitError(
-      `Tenant is in a rate-limit cooldown; the call was NOT sent. ${seconds}s remain \u2014 do not retry before then, and narrow the query (filter/includeFields) before retrying.`,
-      {
-        ...ctx,
-        code: "RATE_LIMITED_COOLDOWN",
-        retryable: false,
-        suggestedAction: `Wait ${seconds}s (per-tenant 429 cooldown) and retry with a narrower query; the call was not sent and consumed no vendor budget.`
-      }
-    );
-    err.retryAfter = seconds;
-    err.notSent = true;
-    return err;
-  }
-  store.delete(tenantKey);
-  return void 0;
-}
-function evaluateBreakerGate(breaker, key, ctx) {
-  const now = Date.now();
-  const st = breaker.store.get(key);
-  if (st !== void 0 && st.openedAt !== null) {
-    const openUntil = st.openedAt + breaker.openTimeoutMs;
-    if (now < openUntil) {
-      const remainingMs = openUntil - now;
-      const seconds = Math.ceil(remainingMs / 1e3);
-      const err = new CircuitBreakerError(
-        `The circuit breaker for ${key} is open; the call was NOT sent. ${seconds}s remain \u2014 retry the same call after the wait (a host-scoped vendor fault, not the request).`,
-        {
-          ...ctx,
-          details: { state: "open", retryAfterMs: remainingMs, failureCount: st.failures.length },
-          suggestedAction: `Wait ${seconds}s (the circuit is open for ${key}) and retry the SAME call; the call was not sent and consumed no vendor budget.`
-        }
-      );
-      err.retryAfter = seconds;
-      err.notSent = true;
-      return { refusal: err };
-    }
-    if (st.probes >= breaker.halfOpenProbes) {
-      const err = new CircuitBreakerError(
-        `The circuit breaker for ${key} is half-open and its probes are in flight; the call was NOT sent \u2014 retry once a probe settles.`,
-        {
-          ...ctx,
-          details: { state: "half-open", retryAfterMs: 0, failureCount: st.failures.length },
-          suggestedAction: "A half-open probe is settling; retry shortly \u2014 the call was not sent and consumed no vendor budget."
-        }
-      );
-      err.notSent = true;
-      return { refusal: err };
-    }
-    const admitted = { ...st, probes: st.probes + 1 };
-    breaker.store.set(key, admitted);
-    return { probe: true, probeWindow: admitted.windowOpenedAt ?? void 0 };
-  }
-  return { probe: false };
-}
-function recordSuccess(breaker, key, probe, probeWindow, logger) {
-  const st = breaker.store.get(key);
-  if (st === void 0 || st.openedAt === null) return;
-  if (probe && probeWindow !== void 0 && st.windowOpenedAt !== probeWindow) return;
-  const next = {
-    failures: st.failures,
-    openedAt: st.openedAt,
-    successes: st.successes + 1,
-    probes: probe ? Math.max(0, st.probes - 1) : st.probes,
-    windowOpenedAt: st.windowOpenedAt
-    // a success never moves the window identity
-  };
-  if (next.successes >= breaker.successesToClose) {
-    breaker.store.delete(key);
-    logger.warn?.(
-      `[autotask] circuit breaker CLOSED for ${key} (${next.successes} probe successes)`,
-      void 0
-    );
-    return;
-  }
-  breaker.store.set(key, next);
-}
-function recordFailure(breaker, key, probe, probeWindow, logger, correlationId) {
-  const now = Date.now();
-  const st = breaker.store.get(key) ?? { failures: [], openedAt: null, successes: 0, probes: 0, windowOpenedAt: null };
-  if (probe && probeWindow !== void 0 && st.openedAt !== null && st.windowOpenedAt !== probeWindow) return;
-  if (st.openedAt === null) {
-    const failures = [...st.failures.filter((t) => t > now - breaker.failureWindowMs), now];
-    if (failures.length >= breaker.failureThreshold) {
-      breaker.store.set(key, { failures, openedAt: now, successes: 0, probes: 0, windowOpenedAt: now });
-      logger.warn?.(
-        `[autotask] circuit breaker OPEN for ${key} (${failures.length} counted failures in ${Math.round(breaker.failureWindowMs / 1e3)}s) \u2014 refusing locally for ${Math.round(breaker.openTimeoutMs / 1e3)}s`,
-        correlationId
-      );
-      return;
-    }
-    breaker.store.set(key, { ...st, failures });
-    return;
-  }
-  breaker.store.set(key, {
-    failures: st.failures,
-    openedAt: now,
-    successes: 0,
-    probes: probe ? Math.max(0, st.probes - 1) : st.probes,
-    windowOpenedAt: st.windowOpenedAt
-  });
-}
-function settleProbe(breaker, key, probeWindow) {
-  const st = breaker.store.get(key);
-  if (st === void 0 || st.openedAt === null || st.probes === 0) return;
-  if (probeWindow !== void 0 && st.windowOpenedAt !== probeWindow) return;
-  breaker.store.set(key, { ...st, probes: st.probes - 1 });
-}
+// src/http/limits.ts
 var HourlyBudget = class {
   constructor(perHour, profile) {
     this.perHour = perHour;
@@ -16878,17 +16077,10 @@ var HttpClient = class {
   timeoutMs;
   /** Bounded client-scan caps for resolution (section 19.2; per-client). */
   resolution;
-  /** Single-record read cache (issue #80: the default instance when `cache` is absent; undefined only when the user set `false` explicitly). */
+  /** Record-read cache (absent only for `cache: false`; issue #286). */
   readCache;
-  /** Field-metadata cache for the entityInformation trio (issue #80: the default instance when `fieldCache` is absent; undefined only when the user set `false` explicitly). */
+  /** Field-metadata cache for the entityInformation trio (absent only for `cache: false`). */
   fieldCache;
-  /** Resource-name cache for `operations.expandResourceNames` (issue #80: the default instance when `resourceNameCache` is absent; undefined only when the user set `false` explicitly, issue #65). */
-  resourceNameCache;
-  /** The `latest` walk's count-probe cache (issue #127: the short-TTL
-   * per-client count cache — ALWAYS on, process-internal: no config
-   * surface, no served keys; the plain `count` op and `operations.aggregate`
-   * bypass it by construction and promise fresh totals). */
-  latestCountCache;
   /** Resolved update fallback gate (issue #34; OFF by default). */
   update;
   auth;
@@ -16901,8 +16093,8 @@ var HttpClient = class {
   hourly;
   /** FIFO semaphore bounding in-flight requests to `maxConcurrent`. */
   semaphore;
-  /** Tenant 429 cooldown gate store (undefined when the gate is disabled). */
-  cooldownStore;
+  /** Tenant 429 cooldown gate (issue #6; ON by default). */
+  cooldownEnabled;
   cooldownMaxMs;
   cooldownDefaultMs;
   /** The live base URL (issue #43 — the `baseUrl` getter's backing field;
@@ -16921,18 +16113,9 @@ var HttpClient = class {
    * Gates the issue-#43 re-point target: a refused host is a discovery
    * fault (the original 401 propagates byte-identically, zero wire). */
   hostPolicy;
-  /** The gate key for this client's tenant (lowercased userName + host).
-   * Re-derived on a zone re-point (issue #43 — the re-pointed host starts
-   * with fresh per-host state). */
+  /** The cooldown key (`user@host`) and the maintenance-gate key (host); re-derived on a zone re-point (issue #43). */
   tenantKey;
-  /** The host circuit breaker settings (issue #26; undefined when the
-   * breaker is off — the default, in which case the gate/recording sites
-   * are skipped and no store entry is ever written). */
-  breaker;
-  /** The breaker key for this client's host (lowercased host of the base
-   * URL — host-only: vendor health is host-scoped, issue #26). Re-derived
-   * on a zone re-point (issue #43). */
-  breakerKey;
+  hostKey;
   logger;
   /** Response redaction policy (the INV-A1 hotfix; PII/CONFIDENTIAL default on, SECRET always).
    *  Public read so the single dry-run envelope builder (base.ts `buildDryRunResult`)
@@ -16949,8 +16132,6 @@ var HttpClient = class {
     this.resolution = config.resolution;
     this.readCache = config.readCache;
     this.fieldCache = config.fieldCache;
-    this.resourceNameCache = config.resourceNameCache;
-    this.latestCountCache = new LatestCountCache(LATEST_COUNT_CACHE_TTL_MS);
     this.update = config.update;
     this.zone = config.zone;
     this.reResolveZoneOn401 = config.reResolveZoneOn401;
@@ -16967,20 +16148,11 @@ var HttpClient = class {
     this.maintenancePollMs = config.maintenancePollMs;
     this.maxResponseBytes = config.maxResponseBytes;
     this.hourly = config.rateLimit?.perHour === void 0 ? void 0 : new HourlyBudget(config.rateLimit.perHour, config.profile);
-    this.tenantKey = buildTenantKey(config.userName, config.baseUrl);
-    this.cooldownStore = config.cooldown.enabled ? config.cooldown.store ?? defaultCooldownStore() : void 0;
+    this.tenantKey = tenantKey(config.userName, config.baseUrl);
+    this.hostKey = hostKey(config.baseUrl);
+    this.cooldownEnabled = config.cooldown.enabled;
     this.cooldownMaxMs = config.cooldown.maxMs;
     this.cooldownDefaultMs = config.cooldown.defaultMs;
-    this.breakerKey = buildBreakerKey(config.baseUrl);
-    this.breaker = config.circuitBreaker.enabled ? {
-      failureWindowMs: config.circuitBreaker.failureWindowMs,
-      failureThreshold: config.circuitBreaker.failureThreshold,
-      openTimeoutMs: config.circuitBreaker.openTimeoutMs,
-      successesToClose: config.circuitBreaker.successesToClose,
-      halfOpenProbes: config.circuitBreaker.halfOpenProbes,
-      store: config.circuitBreaker.store ?? defaultCircuitBreakerStore(),
-      isFailure: config.circuitBreaker.isFailure ?? isBreakerFailure
-    } : void 0;
     this.maxConcurrent = config.maxConcurrent;
     this.semaphore = new Semaphore(config.maxConcurrent);
     this.timeoutMs = config.timeoutMs;
@@ -17012,11 +16184,9 @@ var HttpClient = class {
   }
   /**
    * Issue #43: re-point the client to the tenant's newly resolved zone
-   * base. The transport's PER-HOST state is RE-DERIVED, so the re-pointed
-   * host starts FRESH: no cooldown/breaker/tenant-rate inheritance from
-   * the stale host (conservative — the stale host's armed entries stay in
-   * the shared stores for the other clients that still talk to it; nothing
-   * is copied across). The configured base (config.baseUrl) is untouched;
+   * base. The gate keys are RE-DERIVED, so the re-pointed host starts
+   * fresh: no cooldown/maintenance inheritance from the stale host (its
+   * entries stay for the other clients that still talk to it). The configured base (config.baseUrl) is untouched;
    * the LIVE base is `baseUrl` (the getter over liveBaseUrl), and the
    * re-point is logged (a transport fact — the success path is unchanged,
    * no envelope change).
@@ -17024,53 +16194,13 @@ var HttpClient = class {
   repointZoneBase(to) {
     const from = this.liveBaseUrl;
     this.liveBaseUrl = to;
-    this.tenantKey = buildTenantKey(this.auth.userName, to);
-    this.breakerKey = buildBreakerKey(to);
+    this.tenantKey = tenantKey(this.auth.userName, to);
+    this.hostKey = hostKey(to);
     this.logger.warn?.(
       `[autotask] zone re-point ${from} -> ${to} (a 401 on the stale zone base; the vendor's unauthenticated zone discovery named the tenant's current zone) \u2014 retrying the request once against the new base`,
       void 0
     );
   }
-  /**
-   * Breaker success recording (issue #26). A probe admitted on one host must
-   * never record onto another: if the call re-pointed (issue #43) the
-   * outcome was measured on a different host — void the probe (the admitted
-   * budget on the original host dangles for the rest of the open period;
-   * bounded, conservative, nothing crosses hosts).
-   */
-  recordBreakerSuccess(s) {
-    const { breakerProbe: probe, breakerProbeKey: probeKey, breakerProbeWindow: probeWindow } = s;
-    const breaker = this.breaker;
-    if (breaker === void 0) return;
-    if (probe && (probeKey === void 0 || probeKey !== this.breakerKey)) return;
-    recordSuccess(breaker, probe && probeKey !== void 0 ? probeKey : this.breakerKey, probe, probeWindow, this.logger);
-  }
-  /** Breaker failure recording (issue #26); same host-pinning as the success recorder (issue #43). */
-  recordBreakerFailure(s) {
-    const { breakerProbe: probe, breakerProbeKey: probeKey, breakerProbeWindow: probeWindow, correlationId } = s;
-    const breaker = this.breaker;
-    if (breaker === void 0) return;
-    if (probe && (probeKey === void 0 || probeKey !== this.breakerKey)) return;
-    recordFailure(breaker, probe && probeKey !== void 0 ? probeKey : this.breakerKey, probe, probeWindow, this.logger, correlationId);
-  }
-  /**
-   * Breaker probe settlement for a NON-COUNTED outcome (issue #262): the
-   * failure predicate said the outcome is not a service failure (any 4xx,
-   * ABORTED, EMPTY_RESPONSE, INVALID_RESPONSE, REDIRECT_BLOCKED, the
-   * deterministic validation 500), so nothing is counted and the open
-   * period is NOT re-armed — but the probe SETTLED, so its admitted
-   * half-open slot is released (the contract in `circuit-breaker.ts`: every
-   * probe completion decrements `probes`). Same host-pinning as the
-   * recorders (issue #43): a re-pointed probe is voided, never settled
-   * cross-host.
-   */
-  settleBreakerProbe(s) {
-    const { breakerProbe: probe, breakerProbeKey: probeKey, breakerProbeWindow: probeWindow } = s;
-    const breaker = this.breaker;
-    if (breaker === void 0 || !probe) return;
-    if (probeKey === void 0 || probeKey !== this.breakerKey) return;
-    settleProbe(breaker, probeKey, probeWindow);
-  }
   // ---- per-call helpers ---------------------------------------------------
   /** The caller's signal wins over the deadline when both fired. */
   interrupted(s) {
@@ -17109,10 +16239,18 @@ var HttpClient = class {
    * `maintenanceMaxWaitMs` from the FIRST such response (one budget shared
    * by the 2xx-page and any-status sites), polling `maintenancePollMs`, a
    * fresh per-attempt deadline after each wait; does not consume
-   * `maxRetries`. True when a wait happened (loop again); false when the
-   * budget is spent (`maintenanceBudgetSpent` is set).
+   * `maxRetries`. Only the call that owns the zone's probe slot waits (one
+   * prober per zone); any other call gets false at once. True when a wait
+   * happened (loop again); false when the budget is spent
+   * (`maintenanceBudgetSpent` is set) or another call owns the slot.
    */
   async waitOutMaintenance(s, statusLabel) {
+    if (s.maintenanceMaxWaitMs <= 0) return false;
+    if (s.maintenanceProbe === void 0) {
+      const gate = claimMaintenanceProbe(this.hostKey);
+      if (gate === void 0) return false;
+      s.maintenanceProbe = { host: this.hostKey, gate };
+    }
     const now = Date.now();
     s.firstMaintenanceAt ??= now;
     const remaining = s.maintenanceMaxWaitMs - (now - s.firstMaintenanceAt);
@@ -17148,6 +16286,41 @@ var HttpClient = class {
       err.suggestedAction = maintenanceExhaustedAction(s.maintenanceMaxWaitMs, s.maintenanceWaits);
     }
   }
+  /**
+   * Issue #285: the call itself received the maintenance page and will not
+   * (or may not) wait it out — the same typed `MAINTENANCE` the gate's
+   * refusals carry, so a consumer maps one code. Unlike a refusal the call
+   * WAS sent (`httpStatus` set, no `notSent`). A mutation answered at a
+   * non-2xx status (review F1) is not retryable: a proxy can serve that page
+   * after forwarding the write, so the outcome is unknown.
+   */
+  maintenancePageError(s, status, contentType, text) {
+    const { method, opts, ctx } = s;
+    const since = new Date(maintenanceSince(this.hostKey) ?? Date.now()).toISOString();
+    const unknownWrite = (status < 200 || status >= 300) && !s.retriable5xx;
+    const err = new MaintenanceError(
+      `Zone ${this.hostKey} answered ${method} ${opts.path} with its maintenance page (HTTP ${status}; window since ${since})`,
+      {
+        ...ctx,
+        httpStatus: status,
+        retryable: !unknownWrite,
+        details: {
+          since,
+          retryAfterMs: s.maintenancePollMs,
+          httpStatus: status,
+          contentType,
+          bodySnippet: bodySnippet(text, this.redactPersonalData),
+          maintenanceDetected: true
+        },
+        suggestedAction: unknownWrite ? `A maintenance-shaped page answered ${method} ${opts.path} (HTTP ${status}); it was NOT waited out or re-sent \u2014 a non-2xx edge page can arrive after the request was forwarded, so verify the record before re-issuing (only a GET or an explicitly idempotent-flagged call waits this window out).` : `The Autotask zone is in its maintenance window (since ${since}); retry after the window (windows usually last 30-90 min).`
+      }
+    );
+    err.retryAfter = Math.max(1, Math.ceil(s.maintenancePollMs / 1e3));
+    const action = err.suggestedAction;
+    this.stampMaintenance(s, err);
+    if (unknownWrite) err.suggestedAction = action;
+    return err;
+  }
   // ---- pre-send gates -----------------------------------------------------
   auditNotSent(s, errorCode) {
     this.emitAudit({
@@ -17162,39 +16335,23 @@ var HttpClient = class {
     });
   }
   /**
-   * Tenant 429 cooldown gate (issue #6): a 429 armed the gate for this
-   * tenant — fail LOCALLY (before the semaphore, the hourly limiter and
-   * fetch: zero upstream calls) until the deadline passes.
-   */
-  gateCooldown(s) {
-    if (this.cooldownStore === void 0 || s.opts.bypassCooldown) return;
-    const err = cooldownRefusal(this.cooldownStore, this.tenantKey, s.ctx);
-    if (err === void 0) return;
-    if (s.callerSignal?.aborted) throw this.interrupted(s);
-    this.auditNotSent(s, "RATE_LIMITED_COOLDOWN");
-    throw err;
-  }
-  /**
-   * Host circuit breaker gate (issue #26): the SAME pre-send slot as the
-   * #6 cooldown gate (cooldown first): OUTSIDE the retry loop, before the
-   * hourly limiter, the semaphore and fetch — a refusal makes zero fetches,
-   * consumes no hourly stamp and no concurrency slot.
-   * `thresholdInformation.get()` bypasses the REFUSAL
-   * (`bypassCircuitBreaker`) but its outcome is still recorded.
+   * The pre-send gates (OUTSIDE the retry loop, before the hourly limiter,
+   * the semaphore and fetch: a refusal makes zero fetches). The tenant 429
+   * cooldown (issue #6; `thresholdInformation.get()` bypasses it), then the
+   * zone maintenance gate (issue #285), which admits one probe per poll
+   * interval while open. An already-aborted caller still gets the abort error.
    */
-  gateBreaker(s) {
-    if (this.breaker === void 0 || s.opts.bypassCircuitBreaker) return;
-    if (s.callerSignal?.aborted) throw this.interrupted(s);
-    const verdict = evaluateBreakerGate(this.breaker, this.breakerKey, s.ctx);
-    if (verdict.refusal !== void 0) {
-      this.auditNotSent(s, "CIRCUIT_BREAKER_OPEN");
-      throw verdict.refusal;
-    }
-    if (verdict.probe) {
-      s.breakerProbe = true;
-      s.breakerProbeKey = this.breakerKey;
-      s.breakerProbeWindow = verdict.probeWindow;
+  gate(s) {
+    const cooldown = this.cooldownEnabled && !s.opts.bypassCooldown ? cooldownRefusal(this.tenantKey, s.ctx) : void 0;
+    const verdict = cooldown ?? admitMaintenance(this.hostKey, s.ctx);
+    if (verdict === "send") return;
+    if (!(verdict instanceof AutotaskError)) {
+      s.maintenanceProbe = { host: this.hostKey, gate: verdict };
+      return;
     }
+    if (s.callerSignal?.aborted) throw this.interrupted(s);
+    this.auditNotSent(s, verdict.code);
+    throw verdict;
   }
   // ---- the attempt --------------------------------------------------------
   /**
@@ -17254,7 +16411,7 @@ var HttpClient = class {
   /** Classify a 2xx: empty body, JSON (redacted), or a non-JSON page (maintenance wait / retry / typed error). */
   async handleSuccess(s, res, status, text) {
     const { method, opts, ctx } = s;
-    if (this.cooldownStore !== void 0) this.cooldownStore.delete(this.tenantKey);
+    if (this.cooldownEnabled) clearCooldown(this.tenantKey);
     if (text.length === 0) {
       if (s.expectBody) {
         const err = new EmptyResponseError(`Empty ${status} response for ${method} ${opts.path}`, {
@@ -17305,17 +16462,17 @@ var HttpClient = class {
       httpStatus: status,
       suggestedAction: "The zone returned a non-JSON 2xx body; verify baseUrl points at the REST API."
     });
-    if (err.code === "UNEXPECTED_CONTENT_TYPE" && s.maintenanceMaxWaitMs > 0 && looksLikeMaintenanceText(text)) {
+    if (s.maintenancePage) {
       if (await this.waitOutMaintenance(s, "")) return RETRY;
-    }
-    if (err.code === "UNEXPECTED_CONTENT_TYPE" && retriable5xx && s.attempt < s.maxRetries) {
+      throw this.maintenancePageError(s, status, res.headers.get("Content-Type"), text);
+    } else if (err.code === "UNEXPECTED_CONTENT_TYPE" && retriable5xx && s.attempt < s.maxRetries) {
       const retryAfter = parseRetryAfter(res.headers.get("Retry-After"));
       const delay = retryAfter !== void 0 ? retryAfter * 1e3 : backoffDelay(s.attempt);
       if (await this.retryAfterDelay(s, delay, `non-JSON 2xx on ${method} ${opts.path}`)) return RETRY;
     }
     const pageSnippet = typeof err.details?.bodySnippet === "string" ? err.details.bodySnippet : "";
     this.stampMaintenance(s, err);
-    if (err.code === "UNEXPECTED_CONTENT_TYPE" && !looksLikeMaintenanceText(text) && isHtmlLike(res.headers.get("Content-Type"), text)) {
+    if (err.code === "UNEXPECTED_CONTENT_TYPE" && !s.maintenancePage && isHtmlLike(res.headers.get("Content-Type"), text)) {
       err.details = { ...err.details ?? {}, maintenancePatternMiss: true };
       this.logger.debug?.(
         `[autotask] non-JSON body did not match the maintenance vocabulary on ${method} ${opts.path}: ${pageSnippet}`,
@@ -17343,15 +16500,15 @@ var HttpClient = class {
       }
     }
     const nonJsonSnippet = nonJsonBody === void 0 ? void 0 : bodySnippet(nonJsonBody, this.redactPersonalData);
-    const nonJsonIsMaintenance = nonJsonBody !== void 0 && looksLikeMaintenanceText(nonJsonBody);
+    const nonJsonIsMaintenance = s.maintenancePage;
     const nonJsonIsHtmlCandidate = nonJsonBody !== void 0 && isHtmlLike(res.headers.get("Content-Type"), nonJsonBody);
-    const nonJsonMaintenanceMayWait = nonJsonIsMaintenance && s.retriable5xx;
-    if (nonJsonBody !== void 0 && s.maintenanceMaxWaitMs > 0 && nonJsonMaintenanceMayWait) {
-      if (await this.waitOutMaintenance(s, ` (HTTP ${status})`)) return RETRY;
+    if (nonJsonIsMaintenance) {
+      if (s.retriable5xx && await this.waitOutMaintenance(s, ` (HTTP ${status})`)) return RETRY;
+      throw this.maintenancePageError(s, status, res.headers.get("Content-Type"), text);
     }
     const deterministic500 = status >= 500 && isDeterministicVendor500(parseVendorErrors(body));
     const retryableStatus = status === 429 || status >= 500;
-    if (retryableStatus && !deterministic500 && s.attempt < s.maxRetries && (status === 429 ? s.retriable : s.retriable5xx)) {
+    if (retryableStatus && !deterministic500 && !nonJsonIsMaintenance && s.attempt < s.maxRetries && (status === 429 ? s.retriable : s.retriable5xx)) {
       const retryAfter = parseRetryAfter(res.headers.get("Retry-After"));
       const delay = retryAfter !== void 0 ? retryAfter * 1e3 : backoffDelay(s.attempt);
       if (await this.retryAfterDelay(s, delay, `${status} on ${method} ${opts.path}`)) return RETRY;
@@ -17384,10 +16541,7 @@ var HttpClient = class {
     err.correlationId = s.correlationId;
     this.stampMaintenance(s, err);
     if (nonJsonBody !== void 0) {
-      if (nonJsonIsMaintenance && !s.retriable5xx) {
-        err.details = { ...err.details ?? {}, maintenanceDetected: true };
-        err.suggestedAction = `A maintenance-shaped page answered ${method} ${opts.path} (HTTP ${status}); it was NOT waited out or re-sent \u2014 a non-2xx edge page can arrive after the request was forwarded, so verify the record before re-issuing (only a GET or an explicitly idempotent-flagged call waits this window out).`;
-      } else if (!nonJsonIsMaintenance && nonJsonIsHtmlCandidate) {
+      if (nonJsonIsHtmlCandidate) {
         err.details = { ...err.details ?? {}, maintenancePatternMiss: true };
         this.logger.debug?.(
           `[autotask] non-JSON body did not match the maintenance vocabulary on ${method} ${opts.path}: ${nonJsonSnippet}`,
@@ -17403,14 +16557,14 @@ var HttpClient = class {
     }
     attachEmptyReasonDetails(err);
     if (err instanceof RateLimitError && retryAfterSecs !== void 0) err.retryAfter = retryAfterSecs;
-    if (status === 429 && this.cooldownStore !== void 0) {
+    if (status === 429 && this.cooldownEnabled) {
       const threadThreshold = err.code.toLowerCase() === "itgenatr005";
       const durationMs = cooldownDurationMs(retryAfterSecs, {
         maxMs: this.cooldownMaxMs,
         defaultMs: this.cooldownDefaultMs,
         threadThreshold
       });
-      this.cooldownStore.set(this.tenantKey, Date.now() + durationMs);
+      armCooldown(this.tenantKey, Date.now() + durationMs);
       this.logger.warn?.(
         `[autotask] 429 on ${method} ${opts.path} surfaces after ${s.attempt + 1} attempt(s); tenant cooldown armed for ${Math.round(durationMs / 1e3)}s`,
         s.correlationId
@@ -17429,25 +16583,9 @@ var HttpClient = class {
       durationMs: Date.now() - s.started,
       body: s.auditBody
     });
-    if (this.breaker !== void 0) {
-      try {
-        this.recordBreakerSuccess(s);
-      } catch {
-      }
-    }
   }
   onFailure(s, err) {
     const { opts } = s;
-    if (this.breaker !== void 0 && err instanceof AutotaskError && err.notSent !== true) {
-      try {
-        if (this.breaker.isFailure(err)) {
-          this.recordBreakerFailure(s);
-        } else if (s.breakerProbe) {
-          this.settleBreakerProbe(s);
-        }
-      } catch {
-      }
-    }
     this.emitAudit({
       correlationId: s.correlationId,
       operation: opts.operation,
@@ -17464,7 +16602,7 @@ var HttpClient = class {
       const drift = err.details?.deterministic === true || err.code === "INVALID_RESPONSE" && META_TRIO_VERBS.has(verb);
       if (drift && op !== void 0) {
         const dot = op.indexOf(".");
-        if (dot > 0) this.fieldCache.invalidate(op.slice(0, dot));
+        if (dot > 0) this.fieldCache.invalidate(`${op.slice(0, dot)}:`);
       }
     }
   }
@@ -17472,12 +16610,6 @@ var HttpClient = class {
   invalidateAfterWrite(opts) {
     if (opts.method === "GET" || opts.idempotent === true && /\/query(\/|\?|$)/.test(opts.path)) return;
     this.readCache?.clear();
-    this.latestCountCache.clear();
-    const nameOp = typeof opts.operation === "string" ? opts.operation : void 0;
-    const nameDot = nameOp !== void 0 ? nameOp.indexOf(".") : -1;
-    if (this.resourceNameCache !== void 0 && nameOp !== void 0 && nameDot > 0 && nameOp.slice(0, nameDot) === "resources") {
-      this.resourceNameCache.clear();
-    }
   }
   /**
    * One request: build URL/headers, apply the whole-call deadline, retry
@@ -17544,22 +16676,23 @@ var HttpClient = class {
       lastStatus: void 0,
       zoneRetry: void 0,
       attempt: 0,
-      breakerProbe: false,
-      breakerProbeKey: void 0,
-      breakerProbeWindow: void 0,
+      maintenanceProbe: void 0,
+      maintenancePage: false,
       // Armed LAST in the literal: nothing after this can throw, and the single
       // try/finally below clears it on every exit path (#190).
       deadlineTimer: setTimeout(() => deadline.abort(), timeoutMs)
     };
     try {
-      this.gateCooldown(s);
-      this.gateBreaker(s);
+      this.gate(s);
       this.logger.debug?.(`[autotask] ${method} ${opts.path}`, correlationId);
       try {
         for (; ; ) {
           const sent = await this.sendOnce(s);
           if (sent.retry) continue;
           const { res, status, text } = sent;
+          s.maintenancePage = isMaintenancePage(status, res.headers.get("Content-Type"), text);
+          if (s.maintenancePage) openMaintenance(this.hostKey, s.maintenancePollMs, this.logger, correlationId);
+          else closeMaintenance(this.hostKey, this.logger, correlationId);
           const step = status >= 200 && status < 300 ? await this.handleSuccess(s, res, status, text) : await this.handleFailureStatus(s, res, status, text);
           if (step.done) {
             this.onSuccess(s, step.status);
@@ -17574,9 +16707,20 @@ var HttpClient = class {
       }
     } finally {
       clearTimeout(s.deadlineTimer);
+      if (s.maintenanceProbe !== void 0) releaseMaintenanceProbe(s.maintenanceProbe.host, s.maintenanceProbe.gate);
     }
   }
 };
+function isMaintenancePage(status, contentType, text) {
+  if (text.length === 0 || !looksLikeMaintenanceText(text)) return false;
+  if (status >= 200 && status < 300 && (contentType === null || contentType === "" || isJsonMediaType(contentType))) return false;
+  try {
+    JSON.parse(text);
+    return false;
+  } catch {
+    return true;
+  }
+}
 function assertNoQueryRelationLeaf(opts) {
   const operation = opts.operation ?? opts.path;
   const body = opts.body;
@@ -17701,18 +16845,171 @@ function resolveFieldsPreset(name, resourceKey, explicitIncludeFields) {
       `fieldsPreset: "${name}" cannot be combined with an explicit includeFields \u2014 the bag is closed (pass ONE of the two: the preset name OR the field list)`
     );
   }
-  const preset = Object.hasOwn(FIELD_PRESETS, name) ? FIELD_PRESETS[name] : void 0;
-  if (preset === void 0) {
-    throw new AutotaskConfigError(
-      `fieldsPreset: unknown preset "${name}" \u2014 the preset list is closed (valid names: ${FIELD_PRESET_NAMES.join(", ")})`
-    );
+  const preset = Object.hasOwn(FIELD_PRESETS, name) ? FIELD_PRESETS[name] : void 0;
+  if (preset === void 0) {
+    throw new AutotaskConfigError(
+      `fieldsPreset: unknown preset "${name}" \u2014 the preset list is closed (valid names: ${FIELD_PRESET_NAMES.join(", ")})`
+    );
+  }
+  if (preset.resource !== resourceKey) {
+    throw new AutotaskConfigError(
+      `fieldsPreset: "${name}" is a ${preset.resource} preset \u2014 it cannot be resolved on ${resourceKey} (the preset names its resource; the valid names are: ${FIELD_PRESET_NAMES.join(", ")})`
+    );
+  }
+  return [...preset.fields];
+}
+
+// src/resources/base/helpers.ts
+function describeResponseShape(body) {
+  if (body === null) return "null";
+  if (Array.isArray(body)) return `array(len=${body.length})`;
+  if (typeof body !== "object") return typeof body;
+  const rec = body;
+  const keys = Object.keys(rec).sort();
+  const typeOf = (v) => v === null ? "null" : Array.isArray(v) ? "array" : typeof v;
+  const parts = keys.slice(0, 16).map((k) => `${k}:${typeOf(rec[k])}`);
+  const more = keys.length > 16 ? `, +${keys.length - 16} more` : "";
+  return `{ ${parts.join(", ")}${more} }`;
+}
+function defaultMarkerToken(data) {
+  for (const field of ["name", "title"]) {
+    const v = data[field];
+    if (typeof v === "string" && v.trim() !== "") return v.trim();
+  }
+  return null;
+}
+var CONTEXT_ABSENT_MARKER = "#context-absent";
+function contextAbsentKey(path) {
+  return path + "\0context-absent";
+}
+function noteCharsTruncationMarker(charsRemoved) {
+  return `\u2026 [+${charsRemoved} chars truncated]`;
+}
+function truncateNoteChars(items, cap, fields) {
+  let truncated = 0;
+  const out = items.map((item) => {
+    if (!isRecord2(item)) return item;
+    let changed = false;
+    const copy = { ...item };
+    for (const field of fields) {
+      const v = copy[field];
+      if (typeof v === "string" && v.length > cap) {
+        const end = cap > 0 && (v.charCodeAt(cap - 1) & 64512) === 55296 ? cap - 1 : cap;
+        copy[field] = v.slice(0, end) + noteCharsTruncationMarker(v.length - end);
+        truncated += 1;
+        changed = true;
+      }
+    }
+    return changed ? copy : item;
+  });
+  return [out, truncated];
+}
+function blindEmptyReason(stamp) {
+  return {
+    surface: stamp.surface,
+    kind: "blind-surface",
+    note: stamp.note,
+    authority: stamp.authority,
+    remedy: "the note is the remedy \u2014 the authority op answers for a record"
+  };
+}
+function attachUpdateTargetMissReason(err, key) {
+  const pinned = EMPTY_REASON_STAMPS[key]?.update;
+  if (pinned === void 0) return;
+  err.details = { ...err.details ?? {}, emptyReason: pinned };
+}
+function buildDryRunResult(spec, policy = { redactPersonalData: true }) {
+  if (spec.operation === "") {
+    throw new AutotaskConfigError("dry-run: the operation name is required");
+  }
+  const wouldApply = spec.checks.every((check) => check.ok);
+  const resource = spec.operation.split(".")[0] ?? spec.operation;
+  const diffPart = spec.diff !== void 0 ? {
+    diff: spec.diff.map((entry) => {
+      if (entry.to === void 0) return entry;
+      const to = isRedactedFieldName(entry.field, policy) ? REDACTED : redactResponseBody(entry.to, policy);
+      return { ...entry, to };
+    })
+  } : {};
+  const dataPart = spec.data !== void 0 ? { data: redactResponseBody(spec.data, policy) } : {};
+  return {
+    operation: spec.operation,
+    wouldApply,
+    target: { resource, ids: spec.ids },
+    request: { method: spec.method, path: spec.path },
+    ...diffPart,
+    checks: spec.checks,
+    impact: spec.impact,
+    simulated: true,
+    warnings: spec.warnings ?? [],
+    ...dataPart,
+    ...spec.emptyReason !== void 0 ? { emptyReason: spec.emptyReason } : {}
+  };
+}
+function computeFieldDiff(current, data) {
+  const out = [];
+  for (const [field, to] of Object.entries(data)) {
+    if (field === "id" || to === void 0) continue;
+    const from = current[field];
+    if (from !== void 0 && JSON.stringify(from) === JSON.stringify(to)) continue;
+    out.push({ field, from: from === void 0 ? null : from, to });
+  }
+  return out;
+}
+function mergePartialBody(current, data) {
+  const merged = { ...current };
+  for (const [key, value] of Object.entries(data)) {
+    if (value === void 0) continue;
+    merged[key] = value;
+  }
+  return merged;
+}
+function normalizeUdfInput(value) {
+  if (Array.isArray(value)) {
+    return value.map((entry) => {
+      if (!isRecord2(entry) || typeof entry.name !== "string" || entry.name === "") {
+        throw new AutotaskConfigError("userDefinedFields array entries must be { name, value } objects");
+      }
+      return { name: entry.name, value: entry.value };
+    });
+  }
+  if (isRecord2(value)) {
+    return Object.entries(value).map(([name, entryValue]) => ({ name, value: entryValue }));
   }
-  if (preset.resource !== resourceKey) {
-    throw new AutotaskConfigError(
-      `fieldsPreset: "${name}" is a ${preset.resource} preset \u2014 it cannot be resolved on ${resourceKey} (the preset names its resource; the valid names are: ${FIELD_PRESET_NAMES.join(", ")})`
-    );
+  throw new AutotaskConfigError("userDefinedFields must be an array of { name, value } entries or a name-to-value map");
+}
+function blindStampFor(stamp, filter) {
+  if (stamp === void 0) return void 0;
+  if (stamp.kind !== "unfiltered-blind") return stamp;
+  const conditions = normalizedConditions(filter);
+  return conditions === void 0 || conditions.length === 0 ? stamp : void 0;
+}
+function decodeFileData(body) {
+  if (isRecord2(body)) {
+    const data = body.data;
+    if (typeof data === "string") return Buffer.from(data, "base64");
+    if (Array.isArray(data) && data.every((b) => typeof b === "number")) {
+      return Buffer.from(data);
+    }
   }
-  return [...preset.fields];
+  if (typeof body === "string") return Buffer.from(body, "base64");
+  throw new AutotaskError(
+    "Expected the file envelope FileQueryResultModel { data } (or a base64 string); got a different shape",
+    { code: "INVALID_RESPONSE", category: "server" }
+  );
+}
+var DEPLURAL_EXCEPTIONS = {
+  tag_aliase: "tag_alias"
+};
+function entityNameFromPath(resourcePath) {
+  const segment = resourcePath.slice(resourcePath.lastIndexOf("/") + 1);
+  const snake = segment.replace(/([A-Z])/g, (_m, c, i) => (i > 0 ? `_` : "") + c.toLowerCase()).replace(/_{2,}/g, "_");
+  if (snake.endsWith("ies")) return `${snake.slice(0, -3)}y`;
+  if (snake.endsWith("s")) {
+    const stripped = snake.slice(0, -1);
+    return DEPLURAL_EXCEPTIONS[stripped] ?? stripped;
+  }
+  return snake;
 }
 
 // src/operations/expandResourceNames.ts
@@ -17775,54 +17072,35 @@ async function expandResourceNames(client, ids2, opts = {}) {
     }
   }
   const holder = client.resources;
-  const cache = client.http.resourceNameCache;
+  const cache = client.http.readCache;
   const fresh = opts.fresh === true;
   const byId = /* @__PURE__ */ new Map();
   for (const id of unique) {
     const k = String(id);
-    if (cache !== void 0 && !fresh) {
-      const shared = cache.inflight(id);
-      if (shared !== void 0) {
-        let joined;
-        try {
-          joined = await shared;
-        } catch (err) {
-          if (!isAutotaskError(err) || err.code !== "ABORTED") throw err;
-        }
-        if (joined !== void 0) {
-          byId.set(k, joined);
-          continue;
-        }
+    const absentKey = contextAbsentKey(`/V1.0/Resources/${k}`);
+    if (cache !== void 0 && !fresh && cache.get(absentKey) !== void 0) {
+      byId.set(k, { name: null, blind: true });
+      continue;
+    }
+    const epoch = cache?.epoch ?? 0;
+    try {
+      const record = await holder.get(id, { fresh });
+      cache?.delete(absentKey);
+      byId.set(k, { name: composeName(record), blind: false });
+    } catch (err) {
+      if (err instanceof NotFoundError) {
+        cache?.set(absentKey, CONTEXT_ABSENT_MARKER, epoch);
+        byId.set(k, { name: null, blind: true });
+        continue;
       }
-      const hit = cache.get(id);
-      if (hit !== void 0) {
-        byId.set(k, { name: hit.name, blind: hit.blind });
+      if (isAutotaskError(err) && err.code !== "ABORTED") {
+        const e = { code: err.code, message: err.message };
+        if (err.httpStatus !== void 0) e.httpStatus = err.httpStatus;
+        byId.set(k, { name: null, blind: false, error: e });
         continue;
       }
+      throw err;
     }
-    const epoch = cache?.epoch ?? 0;
-    const work = (async () => {
-      try {
-        const record = await holder.get(id, { fresh });
-        const name = composeName(record);
-        if (cache !== void 0 && name !== null) cache.set(id, { name, blind: false }, epoch);
-        return { name, blind: false };
-      } catch (err) {
-        if (err instanceof NotFoundError) {
-          const entry = { name: null, blind: true };
-          if (cache !== void 0) cache.set(id, entry, epoch);
-          return { name: null, blind: true };
-        }
-        if (isAutotaskError(err) && err.code !== "ABORTED") {
-          const e = { code: err.code, message: err.message };
-          if (err.httpStatus !== void 0) e.httpStatus = err.httpStatus;
-          return { name: null, blind: false, error: e };
-        }
-        throw err;
-      }
-    })();
-    const settled = cache !== void 0 ? await cache.track(id, work) : await work;
-    byId.set(k, settled);
   }
   const results = [];
   for (const id of canonical) {
@@ -18167,7 +17445,7 @@ async function sweepResource(ctx, resource, tally) {
     error: null
   };
   const fetches = kindFetches(holder, resource);
-  if (fresh) cache?.invalidate(resource);
+  if (fresh) cache?.invalidate(`${resource}:`);
   const projectList = (kind, list) => {
     const projected = list.map((f) => projectFieldRow(f, labels, kind === "udf"));
     if (kind === "fields") applyFieldsFilter(projected, fieldsFilter, row);
@@ -18177,10 +17455,10 @@ async function sweepResource(ctx, resource, tally) {
   let allCached = true;
   const ages = [];
   for (const kind of include) {
-    const peek = cache !== void 0 && !fresh ? cache.peek(resource, kind) : { hit: false, age: null };
+    const peek = cache !== void 0 && !fresh ? cache.peek(fieldKey(resource, kind)) : { hit: false, age: null };
     if (peek.hit !== true) allCached = false;
     if (peek.hit === true && cache !== void 0) {
-      const value2 = cache.get(resource, kind);
+      const value2 = cache.get(fieldKey(resource, kind));
       if (kind === "info") row.info = value2 ?? null;
       else projectList(kind, Array.isArray(value2) ? value2 : []);
       if (peek.age !== null) ages.push(peek.age);
@@ -18471,159 +17749,6 @@ var BOUNDED_QUERY_MAX_LIMIT = 2500;
 var LATEST_MAX_COUNT_PROBES = 64;
 var MARKER_RECOVERY_LIMIT = 5;
 
-// src/resources/base/helpers.ts
-function describeResponseShape(body) {
-  if (body === null) return "null";
-  if (Array.isArray(body)) return `array(len=${body.length})`;
-  if (typeof body !== "object") return typeof body;
-  const rec = body;
-  const keys = Object.keys(rec).sort();
-  const typeOf = (v) => v === null ? "null" : Array.isArray(v) ? "array" : typeof v;
-  const parts = keys.slice(0, 16).map((k) => `${k}:${typeOf(rec[k])}`);
-  const more = keys.length > 16 ? `, +${keys.length - 16} more` : "";
-  return `{ ${parts.join(", ")}${more} }`;
-}
-function defaultMarkerToken(data) {
-  for (const field of ["name", "title"]) {
-    const v = data[field];
-    if (typeof v === "string" && v.trim() !== "") return v.trim();
-  }
-  return null;
-}
-var CONTEXT_ABSENT_MARKER = "#context-absent";
-function contextAbsentKey(path) {
-  return path + "\0context-absent";
-}
-function noteCharsTruncationMarker(charsRemoved) {
-  return `\u2026 [+${charsRemoved} chars truncated]`;
-}
-function truncateNoteChars(items, cap, fields) {
-  let truncated = 0;
-  const out = items.map((item) => {
-    if (!isRecord2(item)) return item;
-    let changed = false;
-    const copy = { ...item };
-    for (const field of fields) {
-      const v = copy[field];
-      if (typeof v === "string" && v.length > cap) {
-        const end = cap > 0 && (v.charCodeAt(cap - 1) & 64512) === 55296 ? cap - 1 : cap;
-        copy[field] = v.slice(0, end) + noteCharsTruncationMarker(v.length - end);
-        truncated += 1;
-        changed = true;
-      }
-    }
-    return changed ? copy : item;
-  });
-  return [out, truncated];
-}
-function blindEmptyReason(stamp) {
-  return {
-    surface: stamp.surface,
-    kind: "blind-surface",
-    note: stamp.note,
-    authority: stamp.authority,
-    remedy: "the note is the remedy \u2014 the authority op answers for a record"
-  };
-}
-function attachUpdateTargetMissReason(err, key) {
-  const pinned = EMPTY_REASON_STAMPS[key]?.update;
-  if (pinned === void 0) return;
-  err.details = { ...err.details ?? {}, emptyReason: pinned };
-}
-function buildDryRunResult(spec, policy = { redactPersonalData: true }) {
-  if (spec.operation === "") {
-    throw new AutotaskConfigError("dry-run: the operation name is required");
-  }
-  const wouldApply = spec.checks.every((check) => check.ok);
-  const resource = spec.operation.split(".")[0] ?? spec.operation;
-  const diffPart = spec.diff !== void 0 ? {
-    diff: spec.diff.map((entry) => {
-      if (entry.to === void 0) return entry;
-      const to = isRedactedFieldName(entry.field, policy) ? REDACTED : redactResponseBody(entry.to, policy);
-      return { ...entry, to };
-    })
-  } : {};
-  const dataPart = spec.data !== void 0 ? { data: redactResponseBody(spec.data, policy) } : {};
-  return {
-    operation: spec.operation,
-    wouldApply,
-    target: { resource, ids: spec.ids },
-    request: { method: spec.method, path: spec.path },
-    ...diffPart,
-    checks: spec.checks,
-    impact: spec.impact,
-    simulated: true,
-    warnings: spec.warnings ?? [],
-    ...dataPart,
-    ...spec.emptyReason !== void 0 ? { emptyReason: spec.emptyReason } : {}
-  };
-}
-function computeFieldDiff(current, data) {
-  const out = [];
-  for (const [field, to] of Object.entries(data)) {
-    if (field === "id" || to === void 0) continue;
-    const from = current[field];
-    if (from !== void 0 && JSON.stringify(from) === JSON.stringify(to)) continue;
-    out.push({ field, from: from === void 0 ? null : from, to });
-  }
-  return out;
-}
-function mergePartialBody(current, data) {
-  const merged = { ...current };
-  for (const [key, value] of Object.entries(data)) {
-    if (value === void 0) continue;
-    merged[key] = value;
-  }
-  return merged;
-}
-function normalizeUdfInput(value) {
-  if (Array.isArray(value)) {
-    return value.map((entry) => {
-      if (!isRecord2(entry) || typeof entry.name !== "string" || entry.name === "") {
-        throw new AutotaskConfigError("userDefinedFields array entries must be { name, value } objects");
-      }
-      return { name: entry.name, value: entry.value };
-    });
-  }
-  if (isRecord2(value)) {
-    return Object.entries(value).map(([name, entryValue]) => ({ name, value: entryValue }));
-  }
-  throw new AutotaskConfigError("userDefinedFields must be an array of { name, value } entries or a name-to-value map");
-}
-function blindStampFor(stamp, filter) {
-  if (stamp === void 0) return void 0;
-  if (stamp.kind !== "unfiltered-blind") return stamp;
-  const conditions = normalizedConditions(filter);
-  return conditions === void 0 || conditions.length === 0 ? stamp : void 0;
-}
-function decodeFileData(body) {
-  if (isRecord2(body)) {
-    const data = body.data;
-    if (typeof data === "string") return Buffer.from(data, "base64");
-    if (Array.isArray(data) && data.every((b) => typeof b === "number")) {
-      return Buffer.from(data);
-    }
-  }
-  if (typeof body === "string") return Buffer.from(body, "base64");
-  throw new AutotaskError(
-    "Expected the file envelope FileQueryResultModel { data } (or a base64 string); got a different shape",
-    { code: "INVALID_RESPONSE", category: "server" }
-  );
-}
-var DEPLURAL_EXCEPTIONS = {
-  tag_aliase: "tag_alias"
-};
-function entityNameFromPath(resourcePath) {
-  const segment = resourcePath.slice(resourcePath.lastIndexOf("/") + 1);
-  const snake = segment.replace(/([A-Z])/g, (_m, c, i) => (i > 0 ? `_` : "") + c.toLowerCase()).replace(/_{2,}/g, "_");
-  if (snake.endsWith("ies")) return `${snake.slice(0, -3)}y`;
-  if (snake.endsWith("s")) {
-    const stripped = snake.slice(0, -1);
-    return DEPLURAL_EXCEPTIONS[stripped] ?? stripped;
-  }
-  return snake;
-}
-
 // src/resources/special/_shared/bounded-part.ts
 async function boundedPart(http, path, conditions, limit, operation, includeFields) {
   const body = { MaxRecords: limit, filter: conditions };
@@ -19039,59 +18164,18 @@ var QueryBase = class {
     const bigB = typeof b === "number" ? BigInt(String(b)) : BigInt(b);
     return bigA < bigB ? -1 : bigA > bigB ? 1 : 0;
   }
-  /** Issue #127: the `latest` walk's count probes through the per-client
-   *  short-TTL count cache (`LatestCountCache` — fixed 30 s TTL, the
-   *  memory guard; cleared on every real write through this client, the
-   *  write-then-read re-fetch rule). Only a SUCCESSFUL plain-number vendor
-   *  count answer is stored: the blind-surface / pinned-empty sentinels are
-   *  RECORDS and pass through un-stored (the plan-pinned stamps stay fresh
-   *  and re-derive on every call), and an error rejects before any store.
-   *  The key is (resource plan key, canonical filter serialisation — the
-   *  normalised conditions' JSON): the initial `count(F)` probe and every
-   *  `id gt T` threshold probe are separate entries, and a re-asked
-   *  "top N" within the TTL makes ZERO extra count calls for every CACHED
-   *  probe (the bracket/search sequence is deterministic given the counts);
-   *  a probe that answered 0 is never cached, so it re-wires (issue #157).
-   *  Issue #157: two corrections to the snapshot trade. (1) A total of 0 is
-   *  NEVER stored — a 0 is rare and cheap to re-probe, and a cached 0 fed
-   *  the false-empty branch (a repeat after an out-of-band insert returned
-   *  no rows without walking). (2) `fresh: true` DELETES the entry before
-   *  the wire read and re-stores the fresh answer — the ONE re-probe the
-   *  stale-LOW recovery in `latestWalk` is allowed. Counts are snapshots,
-   *  not contracts: the truncation guard covers the growth-of-total
-   *  direction; a stale-LOW total within the TTL is resolved by that one
-   *  fresh re-probe (never by the guard alone). The plain `count` op and
-   *  `operations.aggregate` call `countGlobal` directly and promise fresh
-   *  totals — this wrapper is used ONLY on the latest-walk probe path.
-   * @internal
-   */
-  async latestProbeCount(filter, opts = {}) {
-    const cache = this.http.latestCountCache;
-    const key = LatestCountCache.key(this.config.key, normalizedConditions(filter));
-    if (opts.fresh === true) {
-      cache.delete(key);
-    } else {
-      const hit = cache.get(key);
-      if (hit !== void 0) return { value: hit, cached: true };
-    }
-    const epoch = cache.epoch;
-    const res = await this.countGlobal({ filter });
-    const value = res;
-    if (typeof value === "number" && value !== 0) cache.set(key, value, epoch);
-    return { value, cached: false };
-  }
   /** Issue #59: one `latest` threshold count probe — a ROWLESS
    *  `count(F ∧ id gt T)` call (the vendor caps — ≤500 OR-conditions,
    *  8000 chars serialised — leave a single `gt` condition room on any
-   *  filter). Issue #127: it rides the per-client short-TTL count cache — the same (resource, conditions) probe within the 30 s window is reused (zero vendor calls); a sentinel answer is never cached. The `BlindCountResult` sentinel (a record, not a number —
+   *  filter). Counts are never cached. The `BlindCountResult` sentinel (a record, not a number —
    *  the declared `number` return is the documented under-type) unwraps to
    *  its `count` value (always 0): at or above the max matching id the
    *  count is 0, which is exactly the bracket-termination signal.
    * @internal */
   async countAboveId(baseConds, t) {
     const value = t <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(t) : t.toString();
-    const probed = await this.latestProbeCount([...baseConds, { op: "gt", field: "id", value }]);
-    return typeof probed.value === "object" && probed.value !== null && "count" in probed.value ? probed.value.count : probed.value;
+    const probed = await this.countGlobal({ filter: [...baseConds, { op: "gt", field: "id", value }] });
+    return typeof probed === "object" && probed !== null && "count" in probed ? probed.count : probed;
   }
   /**
    * Issue #59: the `latest: N` mechanism — the N highest-`id` rows,
@@ -19109,10 +18193,7 @@ var QueryBase = class {
    *      1 + ceil(C/500) <= 6, independent of table size. A truncated walk
    *      (the vendor's rows disagree with its own count) is
    *      LATEST_WINDOW_INCOMPLETE — the top-N of a truncated set is
-   *      unprovable — EXCEPT issue #157: when `C` came from the CACHE, the
-   *      total is re-probed ONCE fresh (the stale-LOW recovery: a larger
-   *      fresh total continues the walk against it; the refusal stands only
-   *      when the fresh probe confirms the cached value). Sort
+   *      unprovable. Sort
    *      id-descending; return the top N (a set of C < N returns itself).
    *    - `C > 2500` → THRESHOLD mode: find the smallest id threshold `T`
    *      with `count(F ∧ id gt T) <= N` by exponential bracketing
@@ -19140,30 +18221,15 @@ var QueryBase = class {
    *    answer.
    * `includeFields` always carries `id` (the P1 id-append,
    * `buildQueryRequest`), which `latest` sorts on. Pure read; no mutation
-   * paths involved. Issue #127: every count probe of this walk (the
-   * initial `count(F)` + the `id gt T` threshold probes) rides the
-   * per-client short-TTL count cache (30 s; a real write through this
-   * client clears it) — a re-asked "top N" within the window reuses every
-   * CACHED probe (zero extra vendor count calls); sentinel answers are
-   * never cached (the plan-pinned stamps stay fresh), and a 0 total is
-   * never cached either (issue #157: a 0 is cheap to re-probe and a cached
-   * 0 would shadow an out-of-band insert), so a 0-answering probe re-wires.
-   * The stale-LOW direction is closed by the ONE fresh re-probe above. The
-   * stale-HIGH direction is the documented snapshot trade, NOT "safe by
-   * construction": the threshold probes are cache-served like every other
-   * probe (no fresh re-probe exists on that path), so a cached threshold
-   * count higher than reality can under-report the ROW COUNT within the
-   * TTL — the returned top-N stays correct, and full-set mode ends when the
-   * cursor exhausts. The plain `count` op and
-   * `operations.aggregate` bypass the cache by construction and promise
-   * fresh totals.
+   * paths involved; every count probe goes to the wire (counts are never
+   * cached).
    * @internal
    */
   async latestWalk(params, limit, latest) {
     const baseConds = normalizedConditions(params.filter) ?? [];
-    const probe = await this.latestProbeCount(params.filter);
-    if (typeof probe.value === "object" && probe.value !== null) {
-      const rec = probe.value;
+    const total = await this.countGlobal({ filter: params.filter });
+    if (typeof total === "object" && total !== null) {
+      const rec = total;
       if (rec.blindSurface !== void 0) {
         return this.latestBlindWalk(params, limit, latest);
       }
@@ -19171,60 +18237,46 @@ var QueryBase = class {
       this.stampEmptyQueryResult(result, params);
       return result;
     }
-    let total = probe.value;
-    let cacheSourced = probe.cached;
-    let reProbed = false;
-    for (; ; ) {
-      if (total === 0) {
-        const result = { items: [], fetched: 0, hasMore: false, pagesWalked: 0 };
-        this.stampEmptyQueryResult(result, params);
-        return result;
-      }
-      if (total <= BOUNDED_QUERY_MAX_LIMIT) {
-        const { items: items2, pages: pages2, guard: guard2, sliced: sliced2, cursor: cursor2 } = await this.walkBounded(params, total);
-        if (this.walkTruncated(total, { itemsLength: items2.length, guard: guard2, sliced: sliced2, cursor: cursor2 })) {
-          if (cacheSourced && !reProbed) {
-            reProbed = true;
-            const fresh = await this.latestProbeCount(params.filter, { fresh: true });
-            if (typeof fresh.value === "number" && fresh.value > total) {
-              total = fresh.value;
-              cacheSourced = false;
-              continue;
-            }
-          }
-          throw this.latestWindowIncompleteError(total);
-        }
-        return this.finishLatest(items2, latest, pages2);
-      }
-      let probes = reProbed ? 2 : 1;
-      const spend = () => {
-        probes += 1;
-        if (probes > LATEST_MAX_COUNT_PROBES) throw this.latestThresholdUnresolvedError();
-      };
-      let lo = 0n;
-      let hi = 0n;
-      for (let t = 1n; ; t = t << 1n) {
-        spend();
-        if (await this.countAboveId(baseConds, t) <= latest) {
-          hi = t;
-          break;
-        }
-        lo = t;
-      }
-      while (hi - lo > 1n) {
-        const mid = lo + hi >> 1n;
-        spend();
-        if (await this.countAboveId(baseConds, mid) <= latest) hi = mid;
-        else lo = mid;
+    if (total === 0) {
+      const result = { items: [], fetched: 0, hasMore: false, pagesWalked: 0 };
+      this.stampEmptyQueryResult(result, params);
+      return result;
+    }
+    if (total <= BOUNDED_QUERY_MAX_LIMIT) {
+      const { items: items2, pages: pages2, guard: guard2, sliced: sliced2, cursor: cursor2 } = await this.walkBounded(params, total);
+      if (this.walkTruncated(total, { itemsLength: items2.length, guard: guard2, sliced: sliced2, cursor: cursor2 })) {
+        throw this.latestWindowIncompleteError(total);
       }
-      const windowValue = hi <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(hi) : hi.toString();
-      const window = [...baseConds, { op: "gte", field: "id", value: windowValue }];
-      const { items, pages, guard, sliced, cursor } = await this.walkBounded({ ...params, filter: window }, latest + 1);
-      if (this.walkTruncated(latest + 1, { itemsLength: items.length, guard, sliced, cursor })) {
-        throw this.latestWindowIncompleteError(latest + 1);
+      return this.finishLatest(items2, latest, pages2);
+    }
+    let probes = 1;
+    const spend = () => {
+      probes += 1;
+      if (probes > LATEST_MAX_COUNT_PROBES) throw this.latestThresholdUnresolvedError();
+    };
+    let lo = 0n;
+    let hi = 0n;
+    for (let t = 1n; ; t = t << 1n) {
+      spend();
+      if (await this.countAboveId(baseConds, t) <= latest) {
+        hi = t;
+        break;
       }
-      return this.finishLatest(items, latest, pages);
+      lo = t;
+    }
+    while (hi - lo > 1n) {
+      const mid = lo + hi >> 1n;
+      spend();
+      if (await this.countAboveId(baseConds, mid) <= latest) hi = mid;
+      else lo = mid;
     }
+    const windowValue = hi <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(hi) : hi.toString();
+    const window = [...baseConds, { op: "gte", field: "id", value: windowValue }];
+    const { items, pages, guard, sliced, cursor } = await this.walkBounded({ ...params, filter: window }, latest + 1);
+    if (this.walkTruncated(latest + 1, { itemsLength: items.length, guard, sliced, cursor })) {
+      throw this.latestWindowIncompleteError(latest + 1);
+    }
+    return this.finishLatest(items, latest, pages);
   }
   /** The shared `latest` completion: the (provably complete or
    *  stamp-scoped) set sorted id-descending, top N taken. `hasMore: false`
@@ -19335,11 +18387,9 @@ var MetaBase = class extends QueryBase {
    *  other callers): mutation-path reads (stale-object guard, dry-run diff)
    *  and the composite ROOT read of a hot resource (issue #36 — the
    *  ticket-composite root) must see the live record, never a snapshot.
-   *  `resource` (issue #32) is the plan key of the entity this path
-   *  points to: the stored entry's TTL is the per-resource override for
-   *  that key when `cache.perResourceTtlMs` names it, else `ttlMs`.
+   *  The entry's TTL follows the path (`readTtlFor`: reference tables 1 h).
    * @internal */
-  async cachedGet(path, operation, fresh = false, resource) {
+  async cachedGet(path, operation, fresh = false) {
     const cache = this.http.readCache;
     if (cache !== void 0 && !fresh) {
       const hit = cache.get(path);
@@ -19347,7 +18397,7 @@ var MetaBase = class extends QueryBase {
     }
     const epoch = cache?.epoch;
     const res = await this.http.request({ method: "GET", path, operation });
-    cache?.set(path, res, resource, epoch);
+    cache?.set(path, res, epoch);
     return res;
   }
   /**
@@ -19374,29 +18424,29 @@ var MetaBase = class extends QueryBase {
       const res = await this.http.request({ method: "GET", path, operation });
       return unwrap(res);
     }
-    const key = this.config.key;
+    const key = fieldKey(this.config.key, kind);
     if (!fresh) {
-      const shared = cache.inflight(key, kind);
+      const shared = cache.inflight(key);
       if (shared !== void 0) return shared;
-      const hit = cache.get(key, kind);
+      const hit = cache.get(key);
       if (hit !== void 0) return hit;
     }
     const work = this.http.request({ method: "GET", path, operation }).then((body) => {
       const value = unwrap(body);
-      cache.set(key, kind, value);
+      if (!isEmpty(value)) cache.set(key, value);
       return value;
     });
     work.catch((err) => {
       if (err instanceof AutotaskError && (err.code === "INVALID_RESPONSE" || err.details?.deterministic === true)) {
-        cache.invalidate(key);
+        cache.invalidate(`${this.config.key}:`);
       }
     });
-    return cache.track(key, kind, work);
+    return cache.track(key, work);
   }
   /** `GET /V1.0/<E>/{id}` → `{ item }` unwrapped (`item: null` → NotFoundError). */
   async getGlobal(id, fresh = false) {
     const numeric = parseIdentifier(id, "id");
-    const res = await this.cachedGet(`${this.resourcePath}/${numeric}`, `${this.config.key}.get`, fresh, this.config.key);
+    const res = await this.cachedGet(`${this.resourcePath}/${numeric}`, `${this.config.key}.get`, fresh);
     return unwrapItem(res, numeric, `${this.config.key}.get`, this.entityName);
   }
   /**
@@ -19443,7 +18493,7 @@ var MetaBase = class extends QueryBase {
   /** Parent-scoped `GET .../{parentId}/<Child>/{id}` → `{ item }` unwrapped. */
   async getScopedRaw(parentId, id, fresh = false) {
     const numeric = parseIdentifier(id, "id");
-    const res = await this.cachedGet(this.scopedItemPath(parentId, id), `${this.config.key}.get`, fresh, this.config.key);
+    const res = await this.cachedGet(this.scopedItemPath(parentId, id), `${this.config.key}.get`, fresh);
     return unwrapItem(res, numeric, `${this.config.key}.get`, this.entityName);
   }
   /**
@@ -19453,7 +18503,7 @@ var MetaBase = class extends QueryBase {
    */
   async getScopedModel(parentId, id, fresh = false) {
     const numeric = parseIdentifier(id, "id");
-    const res = await this.cachedGet(this.scopedItemPath(parentId, id), `${this.config.key}.get`, fresh, this.config.key);
+    const res = await this.cachedGet(this.scopedItemPath(parentId, id), `${this.config.key}.get`, fresh);
     return this.unwrapModelLike(res, numeric, this.entityName);
   }
   /** @internal */
@@ -19492,7 +18542,7 @@ var MetaBase = class extends QueryBase {
   // ------------------------------------------------------------------
   /** `GET /V1.0/<E>/entityInformation` → `{ info }` unwrapped.
    *  Goes through the field cache when it is present (issue #80:
-   *  default-on; `fieldCache: false` = the bit-for-bit uncached wire
+   *  default-on; `cache: false` = the bit-for-bit uncached wire
    *  path). A fresh
    *  (bypass + refresh) metadata read is the caller's act: drop the
    *  entity's entries via the fieldCache's `invalidate` first — the trio
@@ -19516,7 +18566,7 @@ var MetaBase = class extends QueryBase {
   }
   /** `GET /V1.0/<E>/entityInformation/fields` → `{ fields }` unwrapped.
    *  Goes through the field cache when it is present (issue #80:
-   *  default-on; `fieldCache: false` = the bit-for-bit uncached wire
+   *  default-on; `cache: false` = the bit-for-bit uncached wire
    *  path). A fresh
    *  (bypass + refresh) metadata read is the caller's act: drop the
    *  entity's entries via the fieldCache's `invalidate` first — the trio
@@ -19531,7 +18581,7 @@ var MetaBase = class extends QueryBase {
   }
   /** `GET /V1.0/<E>/entityInformation/userDefinedFields` → `{ fields }` unwrapped.
    *  Goes through the field cache when it is present (issue #80:
-   *  default-on; `fieldCache: false` = the bit-for-bit uncached wire
+   *  default-on; `cache: false` = the bit-for-bit uncached wire
    *  path). A fresh
    *  (bypass + refresh) metadata read is the caller's act: drop the
    *  entity's entries via the fieldCache's `invalidate` first — the trio
@@ -19598,8 +18648,7 @@ var MetaBase = class extends QueryBase {
    *  record, never a snapshot. */
   async fetchRecordRaw(entityPath, id, fresh = false) {
     const numeric = parseIdentifier(id, "id");
-    const resource = RESOURCE_KEY_BY_PATH[entityPath];
-    const res = await this.cachedGet(`${entityPath}/${numeric}`, `${this.config.key}.fetchRecord`, fresh, resource);
+    const res = await this.cachedGet(`${entityPath}/${numeric}`, `${this.config.key}.fetchRecord`, fresh);
     if (this.config.attachmentGet) {
       return this.unwrapModelLike(res, numeric, entityNameFromPath(entityPath));
     }
@@ -19613,16 +18662,16 @@ var MetaBase = class extends QueryBase {
    *
    *  Issue #36 (negative caching, the pinned hazard): the vendor's true
    *  not-found (the HTTP 404 or the 200 `item: null` signal — both surface
-   *  as `NotFoundError`) is stored as an ABSENT marker in the SAME ReadCache
+   *  as `NotFoundError`) is stored as an ABSENT marker in the SAME read cache
    *  under a namespaced key the positive get path never constructs, so a
    *  repeat composite call serves 'absent' with zero wire for that part.
-   *  The marker expires on the READ entity's TTL (the #32 per-resource
-   *  table / `perResourceTtlMs` override, via `set`'s resource key) and is
-   *  cleared by any real write through the client (the ReadCache clear).
+   *  The marker expires on the READ entity's TTL (the key carries the read
+   *  path, so `readTtlFor` applies) and is
+   *  cleared by any real write through the client (the read cache clear).
    *  A transient fault (5xx, shape drift, network) is NEVER stored as an
    *  ABSENT marker — it propagates and the next call re-wires (no
    *  poisoning; a malformed 200 body may still land under the POSITIVE
-   *  key — pre-existing ReadCache behaviour, out of this mechanism's
+   *  key — pre-existing read cache behaviour, out of this mechanism's
    *  scope). The marker is consulted BEFORE the positive lookup, but a
    *  POSITIVE entry that exists alongside a live marker means a newer
    *  positive outcome (this client read/created the record after the
@@ -19650,7 +18699,7 @@ var MetaBase = class extends QueryBase {
       return await this.fetchRecordRaw(entityPath, referenceId);
     } catch (err) {
       if (err instanceof NotFoundError) {
-        cache?.set(absentKey, CONTEXT_ABSENT_MARKER, RESOURCE_KEY_BY_PATH[entityPath], epoch);
+        cache?.set(absentKey, CONTEXT_ABSENT_MARKER, epoch);
         return null;
       }
       throw err;
@@ -19895,6 +18944,11 @@ var MetaBase = class extends QueryBase {
     });
   }
 };
+function isEmpty(value) {
+  if (value === null || value === void 0) return true;
+  if (Array.isArray(value)) return value.length === 0;
+  return typeof value === "object" && Object.keys(value).length === 0;
+}
 
 // src/resources/base/mutations.ts
 var MutationBase = class extends MetaBase {
@@ -20714,15 +19768,14 @@ async function resolveCompositeNames(http, plan, opts = {}) {
     throw new AutotaskConfigError("composite names: the transport is not wired to an AutotaskClient (the composite must run through the client)");
   }
   const readCache = http.readCache;
-  const nameCache = http.resourceNameCache;
   const section = { truncated: false, rows: {}, reasons: {} };
   let remaining = budget;
   let contractLobPointer;
   let contractLobUnread;
   const coldResource = [];
   for (const id of plan.resourceIds) {
-    if (nameCache !== void 0 && nameCache.get(id) !== void 0) continue;
-    if (readCache !== void 0 && readCache.get(`/V1.0/Resources/${id}`) !== void 0) continue;
+    const path = `/V1.0/Resources/${id}`;
+    if (readCache !== void 0 && (readCache.peek(path).hit || readCache.peek(contextAbsentKey(path)).hit)) continue;
     coldResource.push(id);
   }
   const withinBudget = coldResource.slice(0, remaining);
@@ -22022,11 +21075,11 @@ function picklistOf(fields) {
 }
 async function readFields(http, fresh) {
   const cache = http.fieldCache;
-  const key = "tickets";
+  const key = fieldKey("tickets", "fields");
   if (!fresh && cache !== void 0) {
-    const shared = cache.inflight(key, "fields");
+    const shared = cache.inflight(key);
     if (shared !== void 0) return await shared;
-    const hit = cache.get(key, "fields");
+    const hit = cache.get(key);
     if (hit !== void 0) return hit;
   }
   const res = await http.request({ method: "GET", path: "/V1.0/Tickets/entityInformation/fields", operation: OP, maxRetries: 0 });
@@ -22034,7 +21087,7 @@ async function readFields(http, fresh) {
   if (!Array.isArray(fields)) {
     throw new AutotaskError("Expected the FieldInformationResultModel envelope { fields: [] }; got a different shape", { code: "INVALID_RESPONSE", category: "server" });
   }
-  cache?.set(key, "fields", fields);
+  if (fields.length > 0) cache?.set(key, fields);
   return fields;
 }
 function assumed(allowAssumed, operation) {
@@ -26519,7 +25572,7 @@ export {
   ServerError,
   UnexpectedContentTypeError,
   EmptyResponseError,
-  CircuitBreakerError,
+  MaintenanceError,
   HostPolicyDeniedError,
   ResolutionError,
   PaginationLimitError,
@@ -26547,7 +25600,12 @@ export {
   RecoveryTruncatedError,
   MoveRefusedError,
   READ_CACHE_MAX_ENTRIES,
-  ReadCache,
+  REFERENCE_TTL_MS,
+  REFERENCE_ENTITIES,
+  FIELD_CACHE_KINDS,
+  fieldKey,
+  readTtlFor,
+  TtlCache,
   ZONE_CATALOG,
   ZONES,
   DEFAULT_ZONE,
@@ -26567,31 +25625,11 @@ export {
   DEFAULT_MAX_SCAN_PAGES,
   DEFAULT_READ_CACHE_TTL_MS,
   DEFAULT_FIELD_CACHE_TTL_MS,
-  DEFAULT_RESOURCE_NAME_CACHE_TTL_MS,
   hasSurroundingQuotes,
   credentialShapeProblem,
   CREDENTIAL_ENV_LOAD_ACTION,
   MIN_PREFIX_SUMMARY_LENGTH,
   credentialValueSummary,
-  FIELD_CACHE_KINDS,
-  DEFAULT_CIRCUIT_BREAKER_WINDOW_MS,
-  DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD,
-  DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS,
-  DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE,
-  DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES,
-  InMemoryCircuitBreakerStore,
-  defaultCircuitBreakerStore,
-  resetDefaultCircuitBreakerStore,
-  buildBreakerKey,
-  isBreakerFailure,
-  DEFAULT_COOLDOWN_MAX_MS,
-  DEFAULT_COOLDOWN_DEFAULT_MS,
-  DEFAULT_COOLDOWN_MAX_ENTRIES,
-  InMemoryCooldownStore,
-  defaultCooldownStore,
-  resetDefaultCooldownStore,
-  buildTenantKey,
-  cooldownDurationMs,
   resolveCredentials,
   buildReadCache,
   resolveConfig,