omnara 1.0.3 → 1.0.5

package/dist/bin.js

@@ -67,6 +67,7 @@ __export(sdk_gen_exports, {
   deleteSkill: () => deleteSkill,
   deleteSkillGrant: () => deleteSkillGrant,
   demoteSteeringInputToQueued: () => demoteSteeringInputToQueued,
+  downloadDaemonArtifact: () => downloadDaemonArtifact,
   endMachineDaemonRuntime: () => endMachineDaemonRuntime,
   getActor: () => getActor,
   getAgent: () => getAgent,
@@ -156,6 +157,7 @@ __export(sdk_gen_exports, {
   updateProjectMachinePoolGrant: () => updateProjectMachinePoolGrant,
   updateProjectModelGrant: () => updateProjectModelGrant,
   updateSecret: () => updateSecret,
+  updateSkill: () => updateSkill,
   uploadDaemonArtifact: () => uploadDaemonArtifact
 });
 
@@ -209,7 +211,7 @@ function createSseClient({
   sseMaxRetryAttempts,
   sseMaxRetryDelay,
   sseSleepFn,
-  url: url3,
+  url: url4,
   ...options
 }) {
   let lastEventId;
@@ -233,9 +235,9 @@ function createSseClient({
           headers,
           signal
         };
-        let request = new Request(url3, requestInit);
+        let request = new Request(url4, requestInit);
         if (onRequest) {
-          request = await onRequest(url3, requestInit);
+          request = await onRequest(url4, requestInit);
         }
         const _fetch = options.fetch ?? globalThis.fetch;
         const response = await _fetch(request);
@@ -452,7 +454,7 @@ var serializeObjectParam = ({
 // ../sdk/src/generated/core/utils.gen.ts
 var PATH_PARAM_RE = /\{[^{}]+\}/g;
 var defaultPathSerializer = ({ path, url: _url }) => {
-  let url3 = _url;
+  let url4 = _url;
   const matches = _url.match(PATH_PARAM_RE);
   if (matches) {
     for (const match of matches) {
@@ -475,11 +477,11 @@ var defaultPathSerializer = ({ path, url: _url }) => {
         continue;
       }
       if (Array.isArray(value)) {
-        url3 = url3.replace(match, serializeArrayParam({ explode, name, style, value }));
+        url4 = url4.replace(match, serializeArrayParam({ explode, name, style, value }));
         continue;
       }
       if (typeof value === "object") {
-        url3 = url3.replace(
+        url4 = url4.replace(
           match,
           serializeObjectParam({
             explode,
@@ -492,7 +494,7 @@ var defaultPathSerializer = ({ path, url: _url }) => {
         continue;
       }
       if (style === "matrix") {
-        url3 = url3.replace(
+        url4 = url4.replace(
           match,
           `;${serializePrimitiveParam({
             name,
@@ -504,10 +506,10 @@ var defaultPathSerializer = ({ path, url: _url }) => {
       const replaceValue = encodeURIComponent(
         style === "label" ? `.${value}` : value
       );
-      url3 = url3.replace(match, replaceValue);
+      url4 = url4.replace(match, replaceValue);
     }
   }
-  return url3;
+  return url4;
 };
 var getUrl = ({
   baseUrl,
@@ -517,18 +519,18 @@ var getUrl = ({
   url: _url
 }) => {
   const pathUrl = _url.startsWith("/") ? _url : `/${_url}`;
-  let url3 = (baseUrl ?? "") + pathUrl;
+  let url4 = (baseUrl ?? "") + pathUrl;
   if (path) {
-    url3 = defaultPathSerializer({ path, url: url3 });
+    url4 = defaultPathSerializer({ path, url: url4 });
   }
   let search = query ? querySerializer(query) : "";
   if (search.startsWith("?")) {
     search = search.substring(1);
   }
   if (search) {
-    url3 += `?${search}`;
+    url4 += `?${search}`;
   }
-  return url3;
+  return url4;
 };
 function getValidRequestBody(options) {
   const hasBody = options.body !== void 0;
@@ -804,8 +806,8 @@ var createClient = (config2 = {}) => {
       opts.headers.delete("Content-Type");
     }
     const resolvedOpts = opts;
-    const url3 = buildUrl(resolvedOpts);
-    return { opts: resolvedOpts, url: url3 };
+    const url4 = buildUrl(resolvedOpts);
+    return { opts: resolvedOpts, url: url4 };
   };
   const request = async (options) => {
     const throwOnError = options.throwOnError ?? _config.throwOnError;
@@ -813,13 +815,13 @@ var createClient = (config2 = {}) => {
     let request2;
     let response;
     try {
-      const { opts, url: url3 } = await beforeRequest(options);
+      const { opts, url: url4 } = await beforeRequest(options);
       const requestInit = {
         redirect: "follow",
         ...opts,
         body: getValidRequestBody(opts)
       };
-      request2 = new Request(url3, requestInit);
+      request2 = new Request(url4, requestInit);
       for (const fn of interceptors.request.fns) {
         if (fn) {
           request2 = await fn(request2, opts);
@@ -921,13 +923,13 @@ var createClient = (config2 = {}) => {
   };
   const makeMethodFn = (method) => (options) => request({ ...options, method });
   const makeSseFn = (method) => async (options) => {
-    const { opts, url: url3 } = await beforeRequest(options);
+    const { opts, url: url4 } = await beforeRequest(options);
     return createSseClient({
       ...opts,
       body: opts.body,
       method,
-      onRequest: async (url4, init) => {
-        let request2 = new Request(url4, init);
+      onRequest: async (url5, init) => {
+        let request2 = new Request(url5, init);
         for (const fn of interceptors.request.fns) {
           if (fn) {
             request2 = await fn(request2, opts);
@@ -936,7 +938,7 @@ var createClient = (config2 = {}) => {
         return request2;
       },
       serializedBody: getValidRequestBody(opts),
-      url: url3
+      url: url4
     });
   };
   const _buildUrl = (options) => buildUrl({ ..._config, ...options });
@@ -970,7 +972,7 @@ var createClient = (config2 = {}) => {
 };
 
 // ../sdk/src/generated/client.gen.ts
-var client = createClient(createConfig({ throwOnError: true }));
+var client = createClient(createConfig({ baseUrl: "https://api.omnara.com/v1", throwOnError: true }));
 
 // ../sdk/src/generated/zod.gen.ts
 import * as z from "zod";
@@ -991,8 +993,15 @@ var zCreatedResourceListSort = z.enum([
   "-created_at",
   "created_at"
 ]).default("-created_at");
+var zAgentConfigErrorIssue = z.object({
+  path: z.string(),
+  message: z.string(),
+  line: z.int().gte(1).optional(),
+  column: z.int().gte(1).optional()
+});
 var zError = z.object({
   error: z.string(),
+  issues: z.array(zAgentConfigErrorIssue).optional(),
   code: z.enum([
     "invalid_request",
     "unauthorized",
@@ -1328,6 +1337,21 @@ var zCreateSkillRequest = z.object({
   owner: zSkillOwnerInput,
   archive: z.string()
 });
+var zUpdateSkillRequest = z.intersection(z.union([
+  z.object({
+    archive: z.string()
+  }),
+  z.object({
+    skill_md: z.string()
+  })
+]), z.object({
+  archive: z.string().optional(),
+  skill_md: z.string().optional()
+}));
+var zSkillFile = z.object({
+  path: z.string(),
+  size: z.coerce.bigint().gte(BigInt(0)).max(BigInt("9223372036854775807"), { error: "Invalid value: Expected int64 to be <= 9223372036854775807" })
+});
 var zSkill = z.object({
   id: zSkillId,
   org_id: zOrganizationId,
@@ -1337,6 +1361,7 @@ var zSkill = z.object({
   revision: z.int().gte(1).max(2147483647, { error: "Invalid value: Expected int32 to be <= 2147483647" }),
   description: z.string(),
   skill_md: z.string().optional(),
+  files: z.array(zSkillFile).optional(),
   created_at: zTimestamp,
   updated_at: zTimestamp
 });
@@ -1823,6 +1848,15 @@ var zInlineMediaContentBlock = z.object({
     "text/markdown",
     "text/csv",
     "text/tab-separated-values",
+    "text/x-iif",
+    "application/msword",
+    "application/rtf",
+    "application/vnd.oasis.opendocument.text",
+    "application/vnd.apple.pages",
+    "application/vnd.apple.keynote",
+    "application/vnd.apple.iwork",
+    "application/vnd.ms-powerpoint",
+    "application/vnd.ms-excel",
     "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
     "application/vnd.openxmlformats-officedocument.presentationml.presentation",
     "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
@@ -3248,6 +3282,11 @@ var zGetSkillPath = z.object({
   skillID: z.string().regex(/^skl_[a-z2-7]{26}$/)
 });
 var zGetSkillResponse = zSkill;
+var zUpdateSkillPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  skillID: z.string().regex(/^skl_[a-z2-7]{26}$/)
+});
+var zUpdateSkillResponse = zSkill;
 var zListSkillGrantsPath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
   skillID: zSkillId
@@ -4035,6 +4074,11 @@ var zUploadDaemonArtifactQuery = z.object({
   filename: z.string().min(1).max(255)
 });
 var zUploadDaemonArtifactResponse = zUploadArtifactResponse;
+var zDownloadDaemonArtifactPath = z.object({
+  toolCallID: zToolCallId,
+  artifactID: zArtifactId
+});
+var zDownloadDaemonArtifactResponse = z.string();
 
 // ../sdk/src/validate-response.ts
 function valueAt(data, path) {
@@ -4086,7 +4130,7 @@ var listPersonalAccessTokens = (options) => (options?.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/personal-access-tokens",
+  url: "/personal-access-tokens",
   ...options
 });
 var createPersonalAccessToken = (options) => (options.client ?? client).post({
@@ -4096,7 +4140,7 @@ var createPersonalAccessToken = (options) => (options.client ?? client).post({
     name: "__Host-omnara_session",
     type: "apiKey"
   }, { name: "X-Omnara-Csrf", type: "apiKey" }],
-  url: "/api/v1/personal-access-tokens",
+  url: "/personal-access-tokens",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4118,7 +4162,7 @@ var revokePersonalAccessToken = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/personal-access-tokens/{tokenID}/revoke",
+  url: "/personal-access-tokens/{tokenID}/revoke",
   ...options
 });
 var bootstrapDaemon = (options) => (options?.client ?? client).post({
@@ -4128,7 +4172,7 @@ var bootstrapDaemon = (options) => (options?.client ?? client).post({
     scheme: "bearer",
     type: "http"
   }],
-  url: "/api/v1/daemon/bootstrap",
+  url: "/daemon/bootstrap",
   ...options
 });
 var recordMachineFailure = (options) => (options.client ?? client).post({
@@ -4139,7 +4183,7 @@ var recordMachineFailure = (options) => (options.client ?? client).post({
     scheme: "bearer",
     type: "http"
   }],
-  url: "/api/v1/daemon/failures",
+  url: "/daemon/failures",
   ...options,
   headers: {
     "Content-Type": "text/plain",
@@ -4161,7 +4205,7 @@ var createOrganization = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs",
+  url: "/orgs",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4183,7 +4227,7 @@ var deleteOrganization = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}",
+  url: "/orgs/{orgID}",
   ...options
 });
 var deleteCurrentUser = (options) => (options?.client ?? client).delete({
@@ -4201,7 +4245,7 @@ var deleteCurrentUser = (options) => (options?.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/me",
+  url: "/me",
   ...options
 });
 var getCurrentUser = (options) => (options?.client ?? client).get({
@@ -4215,7 +4259,7 @@ var getCurrentUser = (options) => (options?.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/me",
+  url: "/me",
   ...options
 });
 var listPendingInvitations = (options) => (options?.client ?? client).get({
@@ -4229,7 +4273,7 @@ var listPendingInvitations = (options) => (options?.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/invitations",
+  url: "/invitations",
   ...options
 });
 var acceptInvitation = (options) => (options.client ?? client).post({
@@ -4247,7 +4291,7 @@ var acceptInvitation = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/invitations/{invitationID}/accept",
+  url: "/invitations/{invitationID}/accept",
   ...options
 });
 var declineInvitation = (options) => (options.client ?? client).post({
@@ -4265,7 +4309,7 @@ var declineInvitation = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/invitations/{invitationID}/decline",
+  url: "/invitations/{invitationID}/decline",
   ...options
 });
 var getOrgOverview = (options) => (options.client ?? client).get({
@@ -4279,7 +4323,7 @@ var getOrgOverview = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/overview",
+  url: "/orgs/{orgID}/overview",
   ...options
 });
 var listVisibleProjects = (options) => (options.client ?? client).get({
@@ -4293,7 +4337,7 @@ var listVisibleProjects = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects",
+  url: "/orgs/{orgID}/projects",
   ...options
 });
 var createProject = (options) => (options.client ?? client).post({
@@ -4311,7 +4355,7 @@ var createProject = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects",
+  url: "/orgs/{orgID}/projects",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4333,7 +4377,7 @@ var deleteProject = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}",
+  url: "/orgs/{orgID}/projects/{projectID}",
   ...options
 });
 var listOrgMembers = (options) => (options.client ?? client).get({
@@ -4347,7 +4391,7 @@ var listOrgMembers = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/members",
+  url: "/orgs/{orgID}/members",
   ...options
 });
 var removeOrgMember = (options) => (options.client ?? client).delete({
@@ -4365,7 +4409,7 @@ var removeOrgMember = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/members/{userID}",
+  url: "/orgs/{orgID}/members/{userID}",
   ...options
 });
 var updateOrgMember = (options) => (options.client ?? client).patch({
@@ -4383,7 +4427,7 @@ var updateOrgMember = (options) => (options.client ?? client).patch({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/members/{userID}",
+  url: "/orgs/{orgID}/members/{userID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4401,7 +4445,7 @@ var listMemberProjectAccess = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/members/{userID}/projects",
+  url: "/orgs/{orgID}/members/{userID}/projects",
   ...options
 });
 var removeMemberProjectAccess = (options) => (options.client ?? client).delete({
@@ -4419,7 +4463,7 @@ var removeMemberProjectAccess = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/members/{userID}/projects/{projectID}",
+  url: "/orgs/{orgID}/members/{userID}/projects/{projectID}",
   ...options
 });
 var setMemberProjectAccess = (options) => (options.client ?? client).put({
@@ -4437,7 +4481,7 @@ var setMemberProjectAccess = (options) => (options.client ?? client).put({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/members/{userID}/projects/{projectID}",
+  url: "/orgs/{orgID}/members/{userID}/projects/{projectID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4455,7 +4499,7 @@ var listOrgApiKeys = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/api-keys",
+  url: "/orgs/{orgID}/api-keys",
   ...options
 });
 var createOrgApiKey = (options) => (options.client ?? client).post({
@@ -4465,7 +4509,7 @@ var createOrgApiKey = (options) => (options.client ?? client).post({
     name: "__Host-omnara_session",
     type: "apiKey"
   }, { name: "X-Omnara-Csrf", type: "apiKey" }],
-  url: "/api/v1/orgs/{orgID}/api-keys",
+  url: "/orgs/{orgID}/api-keys",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4483,7 +4527,7 @@ var getOrgApiKey = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/api-keys/{keyID}",
+  url: "/orgs/{orgID}/api-keys/{keyID}",
   ...options
 });
 var updateOrgApiKey = (options) => (options.client ?? client).patch({
@@ -4493,7 +4537,7 @@ var updateOrgApiKey = (options) => (options.client ?? client).patch({
     name: "__Host-omnara_session",
     type: "apiKey"
   }, { name: "X-Omnara-Csrf", type: "apiKey" }],
-  url: "/api/v1/orgs/{orgID}/api-keys/{keyID}",
+  url: "/orgs/{orgID}/api-keys/{keyID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4507,7 +4551,7 @@ var revokeOrgApiKey = (options) => (options.client ?? client).post({
     name: "__Host-omnara_session",
     type: "apiKey"
   }, { name: "X-Omnara-Csrf", type: "apiKey" }],
-  url: "/api/v1/orgs/{orgID}/api-keys/{keyID}/revoke",
+  url: "/orgs/{orgID}/api-keys/{keyID}/revoke",
   ...options
 });
 var listOrgApiKeyProjectAccess = (options) => (options.client ?? client).get({
@@ -4521,7 +4565,7 @@ var listOrgApiKeyProjectAccess = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/api-keys/{keyID}/projects",
+  url: "/orgs/{orgID}/api-keys/{keyID}/projects",
   ...options
 });
 var removeOrgApiKeyProjectRole = (options) => (options.client ?? client).delete({
@@ -4531,7 +4575,7 @@ var removeOrgApiKeyProjectRole = (options) => (options.client ?? client).delete(
     name: "__Host-omnara_session",
     type: "apiKey"
   }, { name: "X-Omnara-Csrf", type: "apiKey" }],
-  url: "/api/v1/orgs/{orgID}/api-keys/{keyID}/projects/{projectID}",
+  url: "/orgs/{orgID}/api-keys/{keyID}/projects/{projectID}",
   ...options
 });
 var setOrgApiKeyProjectRole = (options) => (options.client ?? client).put({
@@ -4541,7 +4585,7 @@ var setOrgApiKeyProjectRole = (options) => (options.client ?? client).put({
     name: "__Host-omnara_session",
     type: "apiKey"
   }, { name: "X-Omnara-Csrf", type: "apiKey" }],
-  url: "/api/v1/orgs/{orgID}/api-keys/{keyID}/projects/{projectID}",
+  url: "/orgs/{orgID}/api-keys/{keyID}/projects/{projectID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4559,7 +4603,7 @@ var listOrgInvitations = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/invitations",
+  url: "/orgs/{orgID}/invitations",
   ...options
 });
 var createOrgInvitation = (options) => (options.client ?? client).post({
@@ -4577,7 +4621,7 @@ var createOrgInvitation = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/invitations",
+  url: "/orgs/{orgID}/invitations",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4599,7 +4643,7 @@ var deleteOrgInvitation = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/invitations/{invitationID}",
+  url: "/orgs/{orgID}/invitations/{invitationID}",
   ...options
 });
 var listSkills = (options) => (options.client ?? client).get({
@@ -4613,7 +4657,7 @@ var listSkills = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/skills",
+  url: "/orgs/{orgID}/skills",
   ...options
 });
 var createSkill = (options) => (options.client ?? client).post({
@@ -4632,7 +4676,7 @@ var createSkill = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/skills",
+  url: "/orgs/{orgID}/skills",
   ...options,
   headers: {
     "Content-Type": null,
@@ -4654,7 +4698,7 @@ var deleteSkill = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/skills/{skillID}",
+  url: "/orgs/{orgID}/skills/{skillID}",
   ...options
 });
 var getSkill = (options) => (options.client ?? client).get({
@@ -4668,9 +4712,32 @@ var getSkill = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/skills/{skillID}",
+  url: "/orgs/{orgID}/skills/{skillID}",
   ...options
 });
+var updateSkill = (options) => (options.client ?? client).post({
+  ...formDataBodySerializer,
+  responseValidator: async (data) => await validateResponse(zUpdateSkillResponse, data),
+  security: [
+    {
+      key: "bearerAuth",
+      scheme: "bearer",
+      type: "http"
+    },
+    {
+      in: "cookie",
+      name: "__Host-omnara_session",
+      type: "apiKey"
+    },
+    { name: "X-Omnara-Csrf", type: "apiKey" }
+  ],
+  url: "/orgs/{orgID}/skills/{skillID}",
+  ...options,
+  headers: {
+    "Content-Type": null,
+    ...options.headers
+  }
+});
 var listSkillGrants = (options) => (options.client ?? client).get({
   responseValidator: async (data) => await validateResponse(zListSkillGrantsResponse2, data),
   security: [{
@@ -4682,7 +4749,7 @@ var listSkillGrants = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/skills/{skillID}/grants",
+  url: "/orgs/{orgID}/skills/{skillID}/grants",
   ...options
 });
 var createSkillGrant = (options) => (options.client ?? client).post({
@@ -4700,7 +4767,7 @@ var createSkillGrant = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/skills/{skillID}/grants",
+  url: "/orgs/{orgID}/skills/{skillID}/grants",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4722,7 +4789,7 @@ var deleteSkillGrant = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/skills/{skillID}/grants/{grantID}",
+  url: "/orgs/{orgID}/skills/{skillID}/grants/{grantID}",
   ...options
 });
 var listProjectAvailableSkills = (options) => (options.client ?? client).get({
@@ -4736,7 +4803,7 @@ var listProjectAvailableSkills = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/skills",
+  url: "/orgs/{orgID}/projects/{projectID}/skills",
   ...options
 });
 var listSecrets = (options) => (options.client ?? client).get({
@@ -4750,7 +4817,7 @@ var listSecrets = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/secrets",
+  url: "/orgs/{orgID}/secrets",
   ...options
 });
 var createSecret = (options) => (options.client ?? client).post({
@@ -4768,7 +4835,7 @@ var createSecret = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/secrets",
+  url: "/orgs/{orgID}/secrets",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4790,7 +4857,7 @@ var startSecretMcpoAuth = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/secrets/mcp-oauth",
+  url: "/orgs/{orgID}/secrets/mcp-oauth",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4812,7 +4879,7 @@ var deleteSecret = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/secrets/{secretID}",
+  url: "/orgs/{orgID}/secrets/{secretID}",
   ...options
 });
 var getSecret = (options) => (options.client ?? client).get({
@@ -4826,7 +4893,7 @@ var getSecret = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/secrets/{secretID}",
+  url: "/orgs/{orgID}/secrets/{secretID}",
   ...options
 });
 var updateSecret = (options) => (options.client ?? client).patch({
@@ -4844,7 +4911,7 @@ var updateSecret = (options) => (options.client ?? client).patch({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/secrets/{secretID}",
+  url: "/orgs/{orgID}/secrets/{secretID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4866,7 +4933,7 @@ var createSecretVersion = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/secrets/{secretID}/versions",
+  url: "/orgs/{orgID}/secrets/{secretID}/versions",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4884,7 +4951,7 @@ var listSecretGrants = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/secrets/{secretID}/grants",
+  url: "/orgs/{orgID}/secrets/{secretID}/grants",
   ...options
 });
 var createSecretGrant = (options) => (options.client ?? client).post({
@@ -4902,7 +4969,7 @@ var createSecretGrant = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/secrets/{secretID}/grants",
+  url: "/orgs/{orgID}/secrets/{secretID}/grants",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4924,7 +4991,7 @@ var deleteSecretGrant = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/secrets/{secretID}/grants/{grantID}",
+  url: "/orgs/{orgID}/secrets/{secretID}/grants/{grantID}",
   ...options
 });
 var listIntegrationInstalls = (options) => (options.client ?? client).get({
@@ -4938,7 +5005,7 @@ var listIntegrationInstalls = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/integration-installs",
+  url: "/orgs/{orgID}/projects/{projectID}/integration-installs",
   ...options
 });
 var deleteIntegrationInstall = (options) => (options.client ?? client).delete({
@@ -4956,7 +5023,7 @@ var deleteIntegrationInstall = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/integration-installs/{integrationInstallID}",
+  url: "/orgs/{orgID}/projects/{projectID}/integration-installs/{integrationInstallID}",
   ...options
 });
 var createAgentConfig = (options) => (options.client ?? client).post({
@@ -4974,7 +5041,7 @@ var createAgentConfig = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-configs",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-configs",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -4992,7 +5059,7 @@ var getToolCatalog = (options) => (options?.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/tool-catalog",
+  url: "/tool-catalog",
   ...options
 });
 var listMcpServers = (options) => (options?.client ?? client).get({
@@ -5006,7 +5073,7 @@ var listMcpServers = (options) => (options?.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/mcp-servers",
+  url: "/mcp-servers",
   ...options
 });
 var listMcpServerTools = (options) => (options.client ?? client).post({
@@ -5024,7 +5091,7 @@ var listMcpServerTools = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/mcp-servers/tools",
+  url: "/orgs/{orgID}/projects/{projectID}/mcp-servers/tools",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5042,7 +5109,7 @@ var getAgentConfig = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-configs/{agentConfigID}",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-configs/{agentConfigID}",
   ...options
 });
 var listAgentProfiles = (options) => (options.client ?? client).get({
@@ -5056,7 +5123,7 @@ var listAgentProfiles = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-profiles",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-profiles",
   ...options
 });
 var createAgentProfile = (options) => (options.client ?? client).post({
@@ -5074,7 +5141,7 @@ var createAgentProfile = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-profiles",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-profiles",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5096,7 +5163,7 @@ var deleteAgentProfile = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
   ...options
 });
 var getAgentProfile = (options) => (options.client ?? client).get({
@@ -5110,7 +5177,7 @@ var getAgentProfile = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
   ...options
 });
 var renameAgentProfile = (options) => (options.client ?? client).patch({
@@ -5128,7 +5195,7 @@ var renameAgentProfile = (options) => (options.client ?? client).patch({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5150,7 +5217,7 @@ var updateAgentProfile = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/config",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/config",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5172,7 +5239,7 @@ var createIntegrationOAuthSetup = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/integration-oauth/setup",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/integration-oauth/setup",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5194,7 +5261,7 @@ var createSlackSetup = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/slack-setup",
+  url: "/orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/slack-setup",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5212,7 +5279,7 @@ var listCronTriggers = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/cron-triggers",
+  url: "/orgs/{orgID}/projects/{projectID}/cron-triggers",
   ...options
 });
 var createCronTrigger = (options) => (options.client ?? client).post({
@@ -5230,7 +5297,7 @@ var createCronTrigger = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/cron-triggers",
+  url: "/orgs/{orgID}/projects/{projectID}/cron-triggers",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5252,7 +5319,7 @@ var deleteCronTrigger = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
+  url: "/orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
   ...options
 });
 var getCronTrigger = (options) => (options.client ?? client).get({
@@ -5266,7 +5333,7 @@ var getCronTrigger = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
+  url: "/orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
   ...options
 });
 var updateCronTrigger = (options) => (options.client ?? client).patch({
@@ -5284,7 +5351,7 @@ var updateCronTrigger = (options) => (options.client ?? client).patch({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
+  url: "/orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5302,7 +5369,7 @@ var listAgents = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents",
+  url: "/orgs/{orgID}/projects/{projectID}/agents",
   ...options
 });
 var createAgent = (options) => (options.client ?? client).post({
@@ -5320,7 +5387,7 @@ var createAgent = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents",
+  url: "/orgs/{orgID}/projects/{projectID}/agents",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5338,7 +5405,7 @@ var getAgent = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}",
   ...options
 });
 var archiveAgent = (options) => (options.client ?? client).post({
@@ -5356,7 +5423,7 @@ var archiveAgent = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/archive",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/archive",
   ...options
 });
 var updateAgentConfig = (options) => (options.client ?? client).post({
@@ -5374,7 +5441,7 @@ var updateAgentConfig = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/config",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/config",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5396,7 +5463,7 @@ var createAgentInput = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5414,7 +5481,7 @@ var listToolCalls = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls",
   ...options
 });
 var submitToolCallResult = (options) => (options.client ?? client).post({
@@ -5432,7 +5499,7 @@ var submitToolCallResult = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls/{toolCallID}/result",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls/{toolCallID}/result",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5450,7 +5517,7 @@ var listTurns = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/turns",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/turns",
   ...options
 });
 var listTurnEvents = (options) => (options.client ?? client).get({
@@ -5464,7 +5531,7 @@ var listTurnEvents = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/turns/{turnID}/events",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/turns/{turnID}/events",
   ...options
 });
 var listEvents = (options) => (options.client ?? client).get({
@@ -5478,7 +5545,7 @@ var listEvents = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/events",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/events",
   ...options
 });
 var streamEvents = (options) => (options.client ?? client).sse.get({
@@ -5492,7 +5559,7 @@ var streamEvents = (options) => (options.client ?? client).sse.get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/events/stream",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/events/stream",
   ...options
 });
 var cancelAgent = (options) => (options.client ?? client).post({
@@ -5510,7 +5577,7 @@ var cancelAgent = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/cancel",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/cancel",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5528,7 +5595,7 @@ var listAgentInteractions = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/interactions",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/interactions",
   ...options
 });
 var resolveAgentInteraction = (options) => (options.client ?? client).post({
@@ -5546,7 +5613,7 @@ var resolveAgentInteraction = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/interactions/{interactionID}/resolve",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/interactions/{interactionID}/resolve",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5564,7 +5631,7 @@ var listQueuedBacklogInputs = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/backlog",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/backlog",
   ...options
 });
 var cancelQueuedBacklogInput = (options) => (options.client ?? client).post({
@@ -5582,7 +5649,7 @@ var cancelQueuedBacklogInput = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/cancel",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/cancel",
   ...options
 });
 var moveQueuedBacklogInput = (options) => (options.client ?? client).post({
@@ -5600,7 +5667,7 @@ var moveQueuedBacklogInput = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/move",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/move",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5622,7 +5689,7 @@ var promoteQueuedInputToSteering = (options) => (options.client ?? client).post(
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/promote_to_steering",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/promote_to_steering",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5644,7 +5711,7 @@ var demoteSteeringInputToQueued = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/demote_to_queued",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/demote_to_queued",
   ...options
 });
 var getArtifact = (options) => (options.client ?? client).get({
@@ -5658,7 +5725,7 @@ var getArtifact = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/artifacts/{artifactID}",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/artifacts/{artifactID}",
   ...options
 });
 var getArtifactContent = (options) => (options.client ?? client).get({
@@ -5672,7 +5739,7 @@ var getArtifactContent = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/agents/{agentID}/artifacts/{artifactID}/content",
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/artifacts/{artifactID}/content",
   ...options
 });
 var listVisibleProjectMachines = (options) => (options.client ?? client).get({
@@ -5686,7 +5753,7 @@ var listVisibleProjectMachines = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machines",
+  url: "/orgs/{orgID}/projects/{projectID}/machines",
   ...options
 });
 var listProjectMachineGrants = (options) => (options.client ?? client).get({
@@ -5700,7 +5767,7 @@ var listProjectMachineGrants = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machine-grants",
+  url: "/orgs/{orgID}/projects/{projectID}/machine-grants",
   ...options
 });
 var createProjectMachineGrant = (options) => (options.client ?? client).post({
@@ -5718,7 +5785,7 @@ var createProjectMachineGrant = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machine-grants",
+  url: "/orgs/{orgID}/projects/{projectID}/machine-grants",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5740,7 +5807,7 @@ var deleteProjectMachineGrant = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machine-grants/{grantID}",
+  url: "/orgs/{orgID}/projects/{projectID}/machine-grants/{grantID}",
   ...options
 });
 var listProjectAvailableSecrets = (options) => (options.client ?? client).get({
@@ -5754,7 +5821,7 @@ var listProjectAvailableSecrets = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/secrets",
+  url: "/orgs/{orgID}/projects/{projectID}/secrets",
   ...options
 });
 var getProjectAvailableSecret = (options) => (options.client ?? client).get({
@@ -5768,7 +5835,7 @@ var getProjectAvailableSecret = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/secrets/{secretID}",
+  url: "/orgs/{orgID}/projects/{projectID}/secrets/{secretID}",
   ...options
 });
 var listActors = (options) => (options.client ?? client).get({
@@ -5782,7 +5849,7 @@ var listActors = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/actors",
+  url: "/orgs/{orgID}/projects/{projectID}/actors",
   ...options
 });
 var putActor = (options) => (options.client ?? client).put({
@@ -5800,7 +5867,7 @@ var putActor = (options) => (options.client ?? client).put({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/actors",
+  url: "/orgs/{orgID}/projects/{projectID}/actors",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5818,7 +5885,7 @@ var getActor = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/actors/{actorID}",
+  url: "/orgs/{orgID}/projects/{projectID}/actors/{actorID}",
   ...options
 });
 var listVisibleMachines = (options) => (options.client ?? client).get({
@@ -5832,7 +5899,7 @@ var listVisibleMachines = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/machines",
+  url: "/orgs/{orgID}/machines",
   ...options
 });
 var createMachine = (options) => (options.client ?? client).post({
@@ -5850,7 +5917,7 @@ var createMachine = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machines",
+  url: "/orgs/{orgID}/machines",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5872,7 +5939,7 @@ var connectByoMachine = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machines/connect",
+  url: "/orgs/{orgID}/machines/connect",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5894,7 +5961,7 @@ var deleteMachine = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machines/{machineID}",
+  url: "/orgs/{orgID}/machines/{machineID}",
   ...options
 });
 var getMachine = (options) => (options.client ?? client).get({
@@ -5908,7 +5975,7 @@ var getMachine = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/machines/{machineID}",
+  url: "/orgs/{orgID}/machines/{machineID}",
   ...options
 });
 var updateMachine = (options) => (options.client ?? client).patch({
@@ -5926,7 +5993,7 @@ var updateMachine = (options) => (options.client ?? client).patch({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machines/{machineID}",
+  url: "/orgs/{orgID}/machines/{machineID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5944,7 +6011,7 @@ var listModelProviderConfigs = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs",
+  url: "/orgs/{orgID}/model-provider-configs",
   ...options
 });
 var createModelProviderConfig = (options) => (options.client ?? client).post({
@@ -5962,7 +6029,7 @@ var createModelProviderConfig = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs",
+  url: "/orgs/{orgID}/model-provider-configs",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -5984,7 +6051,7 @@ var deleteModelProviderConfig = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
   ...options
 });
 var getModelProviderConfig = (options) => (options.client ?? client).get({
@@ -5998,7 +6065,7 @@ var getModelProviderConfig = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
   ...options
 });
 var updateModelProviderConfig = (options) => (options.client ?? client).put({
@@ -6016,7 +6083,7 @@ var updateModelProviderConfig = (options) => (options.client ?? client).put({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6034,7 +6101,7 @@ var getModelCatalog = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/model-catalog",
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/model-catalog",
   ...options
 });
 var listConfiguredModels = (options) => (options.client ?? client).get({
@@ -6048,7 +6115,7 @@ var listConfiguredModels = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models",
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models",
   ...options
 });
 var createConfiguredModel = (options) => (options.client ?? client).post({
@@ -6066,7 +6133,7 @@ var createConfiguredModel = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models",
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6088,7 +6155,7 @@ var deleteConfiguredModel = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
   ...options
 });
 var updateConfiguredModel = (options) => (options.client ?? client).put({
@@ -6106,7 +6173,7 @@ var updateConfiguredModel = (options) => (options.client ?? client).put({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6124,7 +6191,7 @@ var listProjectModelGrants = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/model-grants",
+  url: "/orgs/{orgID}/projects/{projectID}/model-grants",
   ...options
 });
 var createProjectModelGrant = (options) => (options.client ?? client).post({
@@ -6142,7 +6209,7 @@ var createProjectModelGrant = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/model-grants",
+  url: "/orgs/{orgID}/projects/{projectID}/model-grants",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6164,7 +6231,7 @@ var deleteProjectModelGrant = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
+  url: "/orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
   ...options
 });
 var updateProjectModelGrant = (options) => (options.client ?? client).patch({
@@ -6182,7 +6249,7 @@ var updateProjectModelGrant = (options) => (options.client ?? client).patch({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
+  url: "/orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6200,7 +6267,7 @@ var listMachinePools = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/machine-pools",
+  url: "/orgs/{orgID}/machine-pools",
   ...options
 });
 var createMachinePool = (options) => (options.client ?? client).post({
@@ -6218,7 +6285,7 @@ var createMachinePool = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machine-pools",
+  url: "/orgs/{orgID}/machine-pools",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6240,7 +6307,7 @@ var deleteMachinePool = (options) => (options.client ?? client).delete({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machine-pools/{poolID}",
+  url: "/orgs/{orgID}/machine-pools/{poolID}",
   ...options
 });
 var getMachinePool = (options) => (options.client ?? client).get({
@@ -6254,7 +6321,7 @@ var getMachinePool = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/machine-pools/{poolID}",
+  url: "/orgs/{orgID}/machine-pools/{poolID}",
   ...options
 });
 var updateMachinePool = (options) => (options.client ?? client).put({
@@ -6272,7 +6339,7 @@ var updateMachinePool = (options) => (options.client ?? client).put({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machine-pools/{poolID}",
+  url: "/orgs/{orgID}/machine-pools/{poolID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6290,7 +6357,7 @@ var listProjectMachinePoolGrants = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machine-pool-grants",
+  url: "/orgs/{orgID}/projects/{projectID}/machine-pool-grants",
   ...options
 });
 var createProjectMachinePoolGrant = (options) => (options.client ?? client).post({
@@ -6308,7 +6375,7 @@ var createProjectMachinePoolGrant = (options) => (options.client ?? client).post
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machine-pool-grants",
+  url: "/orgs/{orgID}/projects/{projectID}/machine-pool-grants",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6330,7 +6397,7 @@ var deleteProjectMachinePoolGrant = (options) => (options.client ?? client).dele
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
+  url: "/orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
   ...options
 });
 var getProjectMachinePoolGrant = (options) => (options.client ?? client).get({
@@ -6344,7 +6411,7 @@ var getProjectMachinePoolGrant = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
+  url: "/orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
   ...options
 });
 var updateProjectMachinePoolGrant = (options) => (options.client ?? client).patch({
@@ -6362,7 +6429,7 @@ var updateProjectMachinePoolGrant = (options) => (options.client ?? client).patc
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
+  url: "/orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6380,7 +6447,7 @@ var listByoMachineDaemonTokens = (options) => (options.client ?? client).get({
     name: "__Host-omnara_session",
     type: "apiKey"
   }],
-  url: "/api/v1/orgs/{orgID}/machines/{machineID}/daemon-tokens",
+  url: "/orgs/{orgID}/machines/{machineID}/daemon-tokens",
   ...options
 });
 var createByoMachineDaemonToken = (options) => (options.client ?? client).post({
@@ -6398,7 +6465,7 @@ var createByoMachineDaemonToken = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machines/{machineID}/daemon-tokens",
+  url: "/orgs/{orgID}/machines/{machineID}/daemon-tokens",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6420,7 +6487,7 @@ var revokeMachineDaemonToken = (options) => (options.client ?? client).post({
     },
     { name: "X-Omnara-Csrf", type: "apiKey" }
   ],
-  url: "/api/v1/orgs/{orgID}/machines/{machineID}/daemon-tokens/{tokenID}/revoke",
+  url: "/orgs/{orgID}/machines/{machineID}/daemon-tokens/{tokenID}/revoke",
   ...options
 });
 var registerMachineDaemonRuntime = (options) => (options.client ?? client).post({
@@ -6430,7 +6497,7 @@ var registerMachineDaemonRuntime = (options) => (options.client ?? client).post(
     scheme: "bearer",
     type: "http"
   }],
-  url: "/api/v1/daemon/runtimes",
+  url: "/daemon/runtimes",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -6443,7 +6510,7 @@ var socketMachineDaemonRuntime = (options) => (options.client ?? client).get({
     scheme: "bearer",
     type: "http"
   }],
-  url: "/api/v1/daemon/runtimes/{runtimeID}/socket",
+  url: "/daemon/runtimes/{runtimeID}/socket",
   ...options
 });
 var endMachineDaemonRuntime = (options) => (options.client ?? client).post({
@@ -6453,7 +6520,7 @@ var endMachineDaemonRuntime = (options) => (options.client ?? client).post({
     scheme: "bearer",
     type: "http"
   }],
-  url: "/api/v1/daemon/runtimes/{runtimeID}/end",
+  url: "/daemon/runtimes/{runtimeID}/end",
   ...options
 });
 var sleepMachineDaemonRuntime = (options) => (options.client ?? client).post({
@@ -6463,7 +6530,7 @@ var sleepMachineDaemonRuntime = (options) => (options.client ?? client).post({
     scheme: "bearer",
     type: "http"
   }],
-  url: "/api/v1/daemon/runtimes/{runtimeID}/sleep",
+  url: "/daemon/runtimes/{runtimeID}/sleep",
   ...options
 });
 var getDaemonSkillArchive = (options) => (options.client ?? client).get({
@@ -6473,7 +6540,7 @@ var getDaemonSkillArchive = (options) => (options.client ?? client).get({
     scheme: "bearer",
     type: "http"
   }],
-  url: "/api/v1/daemon/skills/{skillID}/archive",
+  url: "/daemon/skills/{skillID}/archive",
   ...options
 });
 var uploadDaemonArtifact = (options) => (options.client ?? client).post({
@@ -6484,13 +6551,23 @@ var uploadDaemonArtifact = (options) => (options.client ?? client).post({
     scheme: "bearer",
     type: "http"
   }],
-  url: "/api/v1/daemon/tool-calls/{toolCallID}/artifact",
+  url: "/daemon/tool-calls/{toolCallID}/artifact",
   ...options,
   headers: {
     "Content-Type": "application/octet-stream",
     ...options.headers
   }
 });
+var downloadDaemonArtifact = (options) => (options.client ?? client).get({
+  responseValidator: async (data) => await validateResponse(zDownloadDaemonArtifactResponse, data),
+  security: [{
+    key: "machineDaemonAuth",
+    scheme: "bearer",
+    type: "http"
+  }],
+  url: "/daemon/tool-calls/{toolCallID}/artifacts/{artifactID}/content",
+  ...options
+});
 
 // ../sdk/src/auth.ts
 function bearerToken(token) {
@@ -6503,17 +6580,33 @@ function bearerToken(token) {
   };
 }
 
+// ../sdk/src/cli-login-token.ts
+var cliLoginTokenPrefix = "Omnara CLI";
+var cliLoginTokenHostSeparator = " on ";
+function cliLoginTokenName(hostName) {
+  if (hostName === void 0) return cliLoginTokenPrefix;
+  return `${cliLoginTokenPrefix}${cliLoginTokenHostSeparator}${hostName}`;
+}
+
 // ../sdk/src/errors.ts
+import * as z2 from "zod";
+var errorIssuesSchema = z2.object({ issues: z2.array(zAgentConfigErrorIssue).optional() });
+function issuesFromBody(body) {
+  const parsed = errorIssuesSchema.safeParse(body);
+  return parsed.success ? parsed.data.issues ?? [] : [];
+}
 var ApiError = class _ApiError extends Error {
   status;
   code;
   body;
+  issues;
   constructor(status, message, code, body) {
     super(message);
     this.name = "ApiError";
     this.status = status;
     this.code = code;
     this.body = body;
+    this.issues = issuesFromBody(body);
   }
   static async fromResponse(response) {
     let message = `request failed with status ${response.status}`;
@@ -6525,7 +6618,9 @@ var ApiError = class _ApiError extends Error {
       data = void 0;
     }
     if (data && typeof data === "object") {
-      if ("error" in data && typeof data.error === "string") {
+      if ("error_description" in data && typeof data.error_description === "string") {
+        message = data.error_description;
+      } else if ("error" in data && typeof data.error === "string") {
         message = data.error;
       }
       if ("code" in data && typeof data.code === "string") {
@@ -6570,7 +6665,7 @@ function createOmnaraClient(options = {}) {
     })
   );
   client2.setConfig({
-    baseUrl: options.baseUrl ?? "",
+    baseUrl: options.baseUrl ?? client.getConfig().baseUrl,
     credentials: options.credentials,
     headers: options.headers
   });
@@ -6590,24 +6685,31 @@ function createOmnaraClient(options = {}) {
 }
 
 // ../sdk/src/device.ts
-import * as z2 from "zod";
-var zDeviceAuthStartResponse = z2.object({
-  device_code: z2.string().min(1),
-  user_code: z2.string().min(1),
-  verification_uri: z2.string().min(1),
-  verification_uri_complete: z2.string().min(1),
-  expires_in: z2.number().int().positive(),
-  interval: z2.number().int().positive()
-});
-var zDeviceAuthWaitingResponse = z2.object({
-  interval: z2.number().int().positive()
-});
-var zDeviceAuthFailureResponse = z2.object({
-  error: z2.enum(["access_denied", "expired_token"])
-});
-var zDeviceAuthApprovedResponse = z2.object({
-  access_token: z2.string().min(1),
-  token_type: z2.string()
+import * as z3 from "zod";
+var OMNARA_CLI_OAUTH_CLIENT_ID = "omnara-cli";
+var OAUTH_DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+var zAuthorizationServerMetadata = z3.object({
+  issuer: z3.url(),
+  device_authorization_endpoint: z3.url(),
+  token_endpoint: z3.url(),
+  grant_types_supported: z3.array(z3.string()),
+  token_endpoint_auth_methods_supported: z3.array(z3.string())
+});
+var zDeviceAuthStartResponse = z3.object({
+  device_code: z3.string().min(1),
+  user_code: z3.string().min(1),
+  verification_uri: z3.string().min(1),
+  verification_uri_complete: z3.string().min(1),
+  expires_in: z3.number().int().positive(),
+  interval: z3.number().int().positive()
+});
+var zDeviceAuthErrorResponse = z3.object({
+  error: z3.string().min(1),
+  error_description: z3.string().optional()
+});
+var zDeviceAuthApprovedResponse = z3.object({
+  access_token: z3.string().min(1),
+  token_type: z3.string()
 });
 var DEVICE_AUTH_FAILURE_MESSAGES = {
   access_denied: "the login request was denied",
@@ -6621,29 +6723,55 @@ var DeviceAuthError = class extends Error {
     this.code = code;
   }
 };
-async function postDeviceAuthJSON(fetchImpl, baseUrl, path, body) {
-  return fetchImpl(`${baseUrl.replace(/\/+$/, "")}${path}`, {
+async function postOAuthForm(fetchImpl, endpoint, body) {
+  return fetchImpl(endpoint, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(body)
+    headers: {
+      Accept: "application/json",
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: new URLSearchParams(body).toString()
   });
 }
+function normalizeIssuer(raw) {
+  const issuer = new URL(raw);
+  if (issuer.username !== "" || issuer.password !== "" || issuer.pathname !== "/" || issuer.search !== "" || issuer.hash !== "") {
+    throw new Error("authorization server issuer must be an origin");
+  }
+  return issuer.origin;
+}
 async function startDeviceAuth(options) {
-  const response = await postDeviceAuthJSON(
-    options.fetch ?? fetch,
-    options.baseUrl,
-    "/api/auth/device/code",
-    { client_name: options.clientName, token_name: options.tokenName }
-  );
+  const fetchImpl = options.fetch ?? fetch;
+  const expectedIssuer = normalizeIssuer(options.issuerUrl);
+  const metadataUrl = new URL("/.well-known/oauth-authorization-server", `${expectedIssuer}/`);
+  const metadataResponse = await fetchImpl(metadataUrl, { headers: { Accept: "application/json" } });
+  if (!metadataResponse.ok) throw await ApiError.fromResponse(metadataResponse);
+  const metadata = zAuthorizationServerMetadata.parse(await metadataResponse.json());
+  if (normalizeIssuer(metadata.issuer) !== expectedIssuer) {
+    throw new Error(
+      `authorization server issuer mismatch: expected ${expectedIssuer}, received ${metadata.issuer}`
+    );
+  }
+  if (!metadata.grant_types_supported.includes(OAUTH_DEVICE_GRANT_TYPE)) {
+    throw new Error("authorization server does not support the OAuth device grant");
+  }
+  if (!metadata.token_endpoint_auth_methods_supported.includes("none")) {
+    throw new Error("authorization server does not support public OAuth clients");
+  }
+  const body = { client_id: options.clientId };
+  if (options.tokenName !== void 0) body.token_name = options.tokenName;
+  const response = await postOAuthForm(fetchImpl, metadata.device_authorization_endpoint, body);
   if (!response.ok) throw await ApiError.fromResponse(response);
   const data = zDeviceAuthStartResponse.parse(await response.json());
   return {
     deviceCode: data.device_code,
     userCode: data.user_code,
-    verificationUri: new URL(data.verification_uri, options.baseUrl).toString(),
-    verificationUriComplete: new URL(data.verification_uri_complete, options.baseUrl).toString(),
+    verificationUri: new URL(data.verification_uri, metadata.issuer).toString(),
+    verificationUriComplete: new URL(data.verification_uri_complete, metadata.issuer).toString(),
     expiresInSeconds: data.expires_in,
-    intervalSeconds: data.interval
+    intervalSeconds: data.interval,
+    tokenEndpoint: metadata.token_endpoint,
+    clientId: options.clientId
   };
 }
 function defaultSleep(seconds) {
@@ -6655,40 +6783,42 @@ async function pollDeviceAuthToken(options) {
   let interval = options.intervalSeconds;
   while (true) {
     await sleep2(interval);
-    const response = await postDeviceAuthJSON(
-      fetchImpl,
-      options.baseUrl,
-      "/api/auth/device/token",
-      {
-        device_code: options.deviceCode
-      }
-    );
+    const response = await postOAuthForm(fetchImpl, options.tokenEndpoint, {
+      grant_type: OAUTH_DEVICE_GRANT_TYPE,
+      device_code: options.deviceCode,
+      client_id: options.clientId
+    });
     if (response.status === 200) {
       return zDeviceAuthApprovedResponse.parse(await response.json()).access_token;
     }
-    if (response.status === 202) {
-      interval = zDeviceAuthWaitingResponse.parse(await response.json()).interval;
-      continue;
-    }
     if (response.status === 400) {
-      const failure = zDeviceAuthFailureResponse.safeParse(
+      const failure = zDeviceAuthErrorResponse.safeParse(
         await response.clone().json().catch(() => void 0)
       );
-      if (failure.success) throw new DeviceAuthError(failure.data.error);
+      if (failure.success) {
+        if (failure.data.error === "authorization_pending") continue;
+        if (failure.data.error === "slow_down") {
+          interval += 5;
+          continue;
+        }
+        if (failure.data.error === "access_denied" || failure.data.error === "expired_token") {
+          throw new DeviceAuthError(failure.data.error);
+        }
+      }
     }
     throw await ApiError.fromResponse(response);
   }
 }
 
 // src/config.ts
-import * as z4 from "zod";
+import * as z5 from "zod";
 
 // src/interactive.ts
 import { isCancel, select } from "@clack/prompts";
 
 // src/output.ts
-import * as z3 from "zod";
-var zRenderValue = z3.json();
+import * as z4 from "zod";
+var zRenderValue = z4.json();
 var PREFERRED_LEADING_COLUMNS = ["id", "name"];
 var HIDDEN_TABLE_COLUMNS = /* @__PURE__ */ new Set(["org_id", "project_id"]);
 var useColor = process.stdout.isTTY && process.env.NO_COLOR === void 0;
@@ -6860,9 +6990,9 @@ async function runCliAction(action) {
   } catch (error) {
     if (error instanceof CliInputError) {
       console.error(`error: ${error.message}`);
-    } else if (error instanceof z3.ZodError) {
+    } else if (error instanceof z4.ZodError) {
       console.error(`error: unexpected response shape:
-${z3.prettifyError(error)}`);
+${z4.prettifyError(error)}`);
     } else if (error instanceof ApiError) {
       const code = error.code ? ` [${error.code}]` : "";
       console.error(`error: API ${error.status}${code}: ${error.message}`);
@@ -6919,10 +7049,13 @@ async function promptProjectSelection(client2, orgId) {
 }
 
 // src/config.ts
-var DEFAULT_BASE_URL = "https://app.omnara.com";
-var zConfigFile = z4.looseObject({
-  base_url: z4.url().optional(),
-  token: z4.string().min(1).optional(),
+var DEFAULT_API_URL = "https://api.omnara.com/v1";
+var DEFAULT_ISSUER_URL = "https://app.omnara.com";
+var zConfigFile = z5.looseObject({
+  api_url: z5.url().optional(),
+  issuer_url: z5.url().optional(),
+  base_url: z5.url().optional(),
+  token: z5.string().min(1).optional(),
   org_id: zOrganizationId.optional(),
   project_id: zProjectId.optional()
 });
@@ -6935,12 +7068,12 @@ function warnConfigIgnored(message) {
   warnedAboutConfig = true;
   console.error(message);
 }
-var zConfigContents = z4.string().transform((raw, ctx) => {
+var zConfigContents = z5.string().transform((raw, ctx) => {
   try {
     return JSON.parse(raw);
   } catch (error) {
     ctx.addIssue(error instanceof Error ? error.message : String(error));
-    return z4.NEVER;
+    return z5.NEVER;
   }
 }).pipe(zConfigFile);
 function loadConfigFile() {
@@ -6952,7 +7085,7 @@ function readConfigFile() {
   const result = loadConfigFile();
   if (result.success) return result.data;
   warnConfigIgnored(
-    `warning: ignoring unreadable config at ${configFilePath()}: ${z4.prettifyError(result.error)}`
+    `warning: ignoring unreadable config at ${configFilePath()}: ${z5.prettifyError(result.error)}`
   );
   return {};
 }
@@ -6960,7 +7093,7 @@ function readConfigFileForUpdate() {
   const result = loadConfigFile();
   if (result.success) return result.data;
   throw new CliInputError(
-    `refusing to modify unreadable config at ${configFilePath()} (fix or delete it first): ${z4.prettifyError(result.error)}`
+    `refusing to modify unreadable config at ${configFilePath()} (fix or delete it first): ${z5.prettifyError(result.error)}`
   );
 }
 function updateConfigFile(patch) {
@@ -6972,7 +7105,7 @@ function updateConfigFile(patch) {
   const result = zConfigFile.safeParse(merged);
   if (!result.success) {
     throw new CliInputError(`refusing to save invalid config:
-${z4.prettifyError(result.error)}`);
+${z5.prettifyError(result.error)}`);
   }
   mkdirSync(dirname(configFilePath()), { recursive: true, mode: 448 });
   writeFileSync(configFilePath(), `${JSON.stringify(result.data, null, 2)}
@@ -6980,18 +7113,32 @@ ${z4.prettifyError(result.error)}`);
   chmodSync(configFilePath(), 384);
   return result.data;
 }
+function resolveUrls(file, env) {
+  return {
+    apiUrl: env.OMNARA_API_URL ?? file.api_url ?? DEFAULT_API_URL,
+    issuerUrl: env.OMNARA_ISSUER_URL ?? file.issuer_url ?? DEFAULT_ISSUER_URL
+  };
+}
+function migrateLegacyBaseUrl(file) {
+  const { base_url: baseUrl, ...rest } = file;
+  if (baseUrl === void 0) return void 0;
+  return rest;
+}
 function loadConfig() {
-  const file = readConfigFile();
-  const baseUrl = process.env.OMNARA_BASE_URL ?? file.base_url ?? DEFAULT_BASE_URL;
+  const loaded = readConfigFile();
+  const migrated = migrateLegacyBaseUrl(loaded);
+  const file = migrated === void 0 ? loaded : updateConfigFile({ ...migrated, base_url: void 0 });
+  const { apiUrl, issuerUrl } = resolveUrls(file, process.env);
   const token = process.env.OMNARA_API_KEY ?? file.token;
   const client2 = createOmnaraClient({
-    baseUrl,
+    baseUrl: apiUrl,
     auth: token ? bearerToken(token) : void 0,
     headers: { "User-Agent": "omnara-cli" }
   });
   return {
     client: client2,
-    baseUrl,
+    apiUrl,
+    issuerUrl,
     defaultOrgId: process.env.OMNARA_ORG_ID ?? file.org_id,
     defaultProjectId: process.env.OMNARA_PROJECT_ID ?? file.project_id
   };
@@ -7011,17 +7158,23 @@ function printConfig() {
   console.log(`config file  ${configFilePath()}`);
   console.log(`org_id       ${describeValue("OMNARA_ORG_ID", file.org_id)}`);
   console.log(`project_id   ${describeValue("OMNARA_PROJECT_ID", file.project_id)}`);
-  console.log(`base_url     ${describeValue("OMNARA_BASE_URL", file.base_url, DEFAULT_BASE_URL)}`);
+  const { apiUrl, issuerUrl } = resolveUrls(file, {});
+  console.log(`api_url      ${describeValue("OMNARA_API_URL", file.api_url, apiUrl)}`);
+  console.log(`issuer_url   ${describeValue("OMNARA_ISSUER_URL", file.issuer_url, issuerUrl)}`);
 }
 function registerConfigCommand(program2, cli) {
-  const config2 = program2.command("config").description("Show or set the default organization and project").option("--org <org-id>", "save this organization ID as the default").option("--project <project-id>", "save this project ID as the default").option("--base-url <url>", "save this API base URL as the default").action(async (options) => {
+  const config2 = program2.command("config").description("Show or set the default organization and project").option("--org <org-id>", "save this organization ID as the default").option("--project <project-id>", "save this project ID as the default").option("--api-url <url>", "save this API root URL (used for requests) as the default").option(
+    "--issuer-url <url>",
+    "save this web app origin (used for login and browser links) as the default"
+  ).action(async (options) => {
     await runCliAction(() => {
-      if (options.org !== void 0 || options.project !== void 0 || options.baseUrl !== void 0) {
+      if (options.org !== void 0 || options.project !== void 0 || options.apiUrl !== void 0 || options.issuerUrl !== void 0) {
         const clearStaleProject = options.org !== void 0 && options.project === void 0;
         updateConfigFile({
           ...options.org !== void 0 ? { org_id: options.org } : {},
           ...clearStaleProject ? { project_id: void 0 } : options.project !== void 0 ? { project_id: options.project } : {},
-          ...options.baseUrl !== void 0 ? { base_url: options.baseUrl } : {}
+          ...options.apiUrl !== void 0 ? { api_url: options.apiUrl } : {},
+          ...options.issuerUrl !== void 0 ? { issuer_url: options.issuerUrl } : {}
         });
       }
       printConfig();
@@ -7042,10 +7195,10 @@ function registerConfigCommand(program2, cli) {
 
 // src/factory.ts
 import { InvalidArgumentError } from "commander";
-import * as z6 from "zod";
+import * as z7 from "zod";
 
 // src/flags.ts
-import * as z5 from "zod";
+import * as z6 from "zod";
 function kebabCase(name) {
   return name.replace(/([a-z0-9])([A-Z])/g, "$1-$2").replaceAll("_", "-").toLowerCase();
 }
@@ -7162,7 +7315,7 @@ function finalizeFlag(draft) {
   };
 }
 function deriveFlags(schema) {
-  const jsonSchema = z5.toJSONSchema(schema, { io: "input" });
+  const jsonSchema = z6.toJSONSchema(schema, { io: "input" });
   const drafts = /* @__PURE__ */ new Map();
   collectDrafts(drafts, jsonSchema, [], false);
   return [...drafts.values()].map(finalizeFlag);
@@ -7243,7 +7396,7 @@ function flowOp(spec) {
     type: "flow",
     execute: (input) => run({
       client: input.client,
-      baseUrl: input.baseUrl,
+      apiUrl: input.apiUrl,
       path: parseWithSchema(spec.path, input.path, "arguments"),
       body: parseWithSchema(spec.body, input.body, "flags"),
       report: createFlowReporter(spec.summary)
@@ -7343,7 +7496,7 @@ function parseWithSchema(schema, value, label) {
   const result = schema.safeParse(value);
   if (!result.success) {
     throw new CliInputError(`invalid ${label}:
-${z6.prettifyError(result.error)}`);
+${z7.prettifyError(result.error)}`);
   }
   return result.data;
 }
@@ -7351,7 +7504,7 @@ async function callOperation(spec, input) {
   const result = await spec.fn(input);
   return result.data;
 }
-var zBodyObject = z6.looseObject({});
+var zBodyObject = z7.looseObject({});
 function deepMerge(base, patch) {
   const merged = { ...base };
   for (const [key, value] of Object.entries(patch)) {
@@ -7453,7 +7606,9 @@ function registerOperation(parent, config2, spec) {
         renderResult(data, true);
         return;
       }
-      const formatted = spec.format(data, { baseUrl: config2.baseUrl });
+      const formatted = spec.format(data, {
+        apiUrl: config2.apiUrl
+      });
       renderResult(formatted.value, false, { columns: formatted.columns });
     });
   });
@@ -7469,7 +7624,7 @@ function registerFlow(parent, config2, spec) {
       const options = command.opts();
       await spec.execute({
         client: config2.client,
-        baseUrl: config2.baseUrl,
+        apiUrl: config2.apiUrl,
         path: await resolvePathValues(plan, args, options, config2),
         body: collectFlagValues(bodyFlags, options)
       });
@@ -7488,25 +7643,25 @@ function registerGroup(program2, config2, group) {
 // src/login.ts
 import { hostname } from "node:os";
 import { intro as intro2, log as log2, note as note2, outro as outro2, spinner as spinner2 } from "@clack/prompts";
-import * as z7 from "zod";
+import * as z8 from "zod";
 
 // src/browser.ts
 import { spawn } from "node:child_process";
-function browserCommand(url3) {
+function browserCommand(url4) {
   if (process.platform === "darwin") {
-    return { command: "open", args: [url3], windowsVerbatimArguments: false };
+    return { command: "open", args: [url4], windowsVerbatimArguments: false };
   }
   if (process.platform === "win32") {
     return {
       command: "cmd",
-      args: ["/c", "start", '""', `"${url3}"`],
+      args: ["/c", "start", '""', `"${url4}"`],
       windowsVerbatimArguments: true
     };
   }
-  return { command: "xdg-open", args: [url3], windowsVerbatimArguments: false };
+  return { command: "xdg-open", args: [url4], windowsVerbatimArguments: false };
 }
-function openInBrowser(url3, onError) {
-  const { command, args, windowsVerbatimArguments } = browserCommand(url3);
+function openInBrowser(url4, onError) {
+  const { command, args, windowsVerbatimArguments } = browserCommand(url4);
   const child = spawn(command, args, { stdio: "ignore", detached: true, windowsVerbatimArguments });
   child.once("error", () => {
     onError("could not open a browser; use the URL above");
@@ -7528,8 +7683,8 @@ async function isProjectVisible(client2, orgId, projectId) {
   } while (cursor !== void 0);
   return false;
 }
-function interactiveReporter2(baseUrl) {
-  intro2(`Log in to ${baseUrl}`);
+function interactiveReporter2(issuerUrl) {
+  intro2(`Log in to ${issuerUrl}`);
   const spin = spinner2();
   return {
     showCode(userCode, approvalUrl) {
@@ -7587,21 +7742,21 @@ function plainReporter2() {
   };
 }
 function loginTokenName(explicit, hostName) {
-  const candidate = explicit ?? `Omnara CLI on ${hostName}`;
+  const candidate = explicit ?? cliLoginTokenName(hostName);
   const result = zResourceName.safeParse(candidate);
   if (result.success) return result.data;
-  if (explicit === void 0) return "Omnara CLI";
+  if (explicit === void 0) return cliLoginTokenName();
   throw new CliInputError(`invalid token name:
-${z7.prettifyError(result.error)}`);
+${z8.prettifyError(result.error)}`);
 }
 function registerLoginCommand(program2, cli) {
   program2.command("login").description("Log in via the browser and save an API token").option("--no-browser", "print the approval URL instead of opening a browser").option("--token-name <name>", "name for the created API token").action(async (options) => {
     await runCliAction(async () => {
-      readConfigFileForUpdate();
-      const report = canPromptInteractively() ? interactiveReporter2(cli.baseUrl) : plainReporter2();
+      updateConfigFile({});
+      const report = canPromptInteractively() ? interactiveReporter2(cli.issuerUrl) : plainReporter2();
       const start = await startDeviceAuth({
-        baseUrl: cli.baseUrl,
-        clientName: "Omnara CLI",
+        issuerUrl: cli.issuerUrl,
+        clientId: OMNARA_CLI_OAUTH_CLIENT_ID,
         tokenName: loginTokenName(options.tokenName, hostname())
       });
       report.showCode(start.userCode, start.verificationUriComplete);
@@ -7614,7 +7769,8 @@ function registerLoginCommand(program2, cli) {
       let token;
       try {
         token = await pollDeviceAuthToken({
-          baseUrl: cli.baseUrl,
+          tokenEndpoint: start.tokenEndpoint,
+          clientId: start.clientId,
           deviceCode: start.deviceCode,
           intervalSeconds: start.intervalSeconds
         });
@@ -7623,8 +7779,12 @@ function registerLoginCommand(program2, cli) {
         throw error;
       }
       report.stopWaiting(true);
-      const saved = updateConfigFile({ token, base_url: cli.baseUrl });
-      const client2 = createOmnaraClient({ baseUrl: cli.baseUrl, auth: bearerToken(token) });
+      const saved = updateConfigFile({
+        token,
+        api_url: cli.apiUrl,
+        issuer_url: cli.issuerUrl
+      });
+      const client2 = createOmnaraClient({ baseUrl: cli.apiUrl, auth: bearerToken(token) });
       let orgId = saved.org_id;
       let loginMessage = "Logged in";
       let validationWarning;
@@ -7672,16 +7832,16 @@ function registerLoginCommand(program2, cli) {
 }
 
 // src/manifest.ts
-import * as z14 from "zod";
+import * as z15 from "zod";
 
 // src/config-attachment.ts
 import { readFileSync as readFileSync2 } from "node:fs";
-import * as z8 from "zod";
-var zConfigSourceAttachment = z8.object({
-  file: z8.string().min(1).optional().describe("path to an agent config file (.yaml, .yml, or .json)"),
-  source: z8.string().min(1).optional().describe("inline agent config source (YAML or JSON)")
+import * as z9 from "zod";
+var zConfigSourceAttachment = z9.object({
+  file: z9.string().min(1).optional().describe("path to an agent config file (.yaml, .yml, or .json)"),
+  source: z9.string().min(1).optional().describe("inline agent config source (YAML or JSON)")
 });
-var zConfigAttachment = z8.object({
+var zConfigAttachment = z9.object({
   config: zAgentConfigId.optional().describe("existing agent config ID"),
   ...zConfigSourceAttachment.shape
 });
@@ -7722,9 +7882,9 @@ function renderConfigSource(attachment) {
   }
   throw new CliInputError(SOURCE_HINT);
 }
-var zProjectScope = z8.object({
-  orgID: z8.string().min(1),
-  projectID: z8.string().min(1)
+var zProjectScope = z9.object({
+  orgID: z9.string().min(1),
+  projectID: z9.string().min(1)
 });
 async function resolveConfigId(client2, path, attachment) {
   requireExactlyOne([attachment.config, attachment.file, attachment.source], ATTACHMENT_HINT);
@@ -7736,7 +7896,7 @@ async function resolveConfigId(client2, path, attachment) {
   });
   return data.id;
 }
-var zProfilePath = zProjectScope.extend({ agentProfileID: z8.string().min(1) });
+var zProfilePath = zProjectScope.extend({ agentProfileID: z9.string().min(1) });
 async function currentProfileConfigId(client2, path) {
   const { data } = await sdk_gen_exports.getAgentProfile({ client: client2, path: zProfilePath.parse(path) });
   return data.current_config_id;
@@ -7772,7 +7932,7 @@ import { spawn as spawn2, spawnSync } from "node:child_process";
 import { accessSync, constants, existsSync as existsSync2, readdirSync, readFileSync as readFileSync3 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import { basename, dirname as dirname2, isAbsolute, join as join2, resolve } from "node:path";
-import * as z9 from "zod";
+import * as z10 from "zod";
 var zMachineSetupBody = zConnectByoMachineRequest;
 async function connectMachine(context) {
   const { client: client2, path, body, report } = context;
@@ -7792,13 +7952,16 @@ async function connectMachine(context) {
 function shellQuote(value) {
   return `'${value.replaceAll("'", `'\\''`)}'`;
 }
-function installCommand(baseUrl) {
-  return `curl -fsSL ${shellQuote(`${baseUrl}/install/omnarad.sh`)} | sh`;
+function installScriptUrl(apiUrl) {
+  return new URL("/install/omnarad.sh", apiUrl).toString();
 }
-var formatMachineSetup = (response, { baseUrl }) => ({
+function installCommand(apiUrl) {
+  return `curl -fsSL ${shellQuote(installScriptUrl(apiUrl))} | sh`;
+}
+var formatMachineSetup = (response, { apiUrl }) => ({
   value: {
     ...response,
-    install_command: installCommand(baseUrl),
+    install_command: installCommand(apiUrl),
     install_note: "Run install_command on the target machine and paste the token when prompted."
   }
 });
@@ -7806,9 +7969,9 @@ var daemonConfigFileName = "daemon.json";
 var installLockFileName = "install.lock";
 var daemonLockFileName = "daemon.lock";
 var daemonLockPollMs = 250;
-var zDaemonConfigFile = z9.looseObject({
-  machine_id: z9.string().optional(),
-  api_url: z9.string().optional()
+var zDaemonConfigFile = z10.looseObject({
+  machine_id: z10.string().optional(),
+  api_url: z10.string().optional()
 });
 function daemonHome() {
   const override = process.env.OMNARA_HOME;
@@ -7902,9 +8065,9 @@ function ensureDaemonHomeWritable(home) {
 var DaemonExitError = class extends Error {
 };
 async function runMachineCreateLocal(context) {
-  const { report, baseUrl } = context;
+  const { report, apiUrl } = context;
   ensureSupportedPlatform(process.platform, process.arch);
-  ensureDaemonApiUrl(baseUrl);
+  ensureDaemonApiUrl(apiUrl);
   const home = daemonHome();
   const existing = describeExistingInstallation(home);
   if (existing !== void 0) {
@@ -7922,7 +8085,7 @@ async function runMachineCreateLocal(context) {
   report.info(`Machine ID: ${machine.id}`);
   report.start("Installing omnarad on this machine");
   try {
-    await runInstaller(report, baseUrl, token, machine.id, home);
+    await runInstaller(report, apiUrl, token, machine.id, home);
   } catch (error) {
     if (error instanceof DaemonExitError) {
       report.fail("omnarad exited after it was installed");
@@ -7939,7 +8102,7 @@ async function runMachineCreateLocal(context) {
 ${token}`);
     report.url(
       "Finish setup by running this, then paste the machine token when prompted",
-      installCommand(baseUrl)
+      installCommand(apiUrl)
     );
     throw error;
   }
@@ -7996,11 +8159,11 @@ function readDaemonLockPid(home) {
     return void 0;
   }
 }
-function installerScript(baseUrl) {
+function installerScript(apiUrl) {
   return [
     "installer=$(mktemp)",
     `trap 'rm -f "$installer"' EXIT`,
-    `curl -qfsSL --connect-timeout 10 -m 60 --max-redirs 5 --max-filesize 1048576 --proto '=http,https' --proto-redir '=https' -o "$installer" ${shellQuote(`${baseUrl}/install/omnarad.sh`)}`,
+    `curl -qfsSL --connect-timeout 10 -m 60 --max-redirs 5 --max-filesize 1048576 --proto '=http,https' --proto-redir '=https' -o "$installer" ${shellQuote(installScriptUrl(apiUrl))}`,
     'sh "$installer"'
   ].join(" && ");
 }
@@ -8009,11 +8172,11 @@ function installerFailure(code, signal, log3) {
   return new Error(`omnarad installer failed (${reason})${log3 === "" ? "" : `
 ${log3}`}`);
 }
-function runInstaller(report, baseUrl, token, machineId, home) {
+function runInstaller(report, apiUrl, token, machineId, home) {
   return new Promise((resolve3, reject) => {
-    const child = spawn2("/bin/sh", ["-c", installerScript(baseUrl)], {
+    const child = spawn2("/bin/sh", ["-c", installerScript(apiUrl)], {
       stdio: ["ignore", "pipe", "pipe"],
-      env: { ...process.env, OMNARA_API_URL: baseUrl, OMNARA_MACHINE_TOKEN: token }
+      env: { ...process.env, OMNARA_API_URL: apiUrl, OMNARA_MACHINE_TOKEN: token }
     });
     const relay = (signal) => {
       child.kill(signal);
@@ -8083,10 +8246,10 @@ function runInstaller(report, baseUrl, token, machineId, home) {
 
 // src/mcp-add.ts
 import { isMap, isScalar as isScalar2, parseDocument } from "yaml";
-import * as z11 from "zod";
+import * as z12 from "zod";
 
 // src/mcp-oauth.ts
-import * as z10 from "zod";
+import * as z11 from "zod";
 
 // src/poll.ts
 var POLL_INTERVAL_SECONDS = 2;
@@ -8134,11 +8297,11 @@ async function authorizeMcpOAuthSecret(options) {
     }
   });
 }
-var zBrowserFlag = z10.boolean().default(true).describe("open the authorization URL in a browser");
-function openAuthorizationUrl(report, title, url3, browser) {
-  report.url(title, url3);
+var zBrowserFlag = z11.boolean().default(true).describe("open the authorization URL in a browser");
+function openAuthorizationUrl(report, title, url4, browser) {
+  report.url(title, url4);
   if (browser) {
-    openInBrowser(url3, (message) => {
+    openInBrowser(url4, (message) => {
       report.warn(message);
     });
   }
@@ -8153,8 +8316,8 @@ async function runMcpOAuth(context) {
       client: client2,
       orgId: path.orgID,
       request,
-      onAuthorization(url3) {
-        openAuthorizationUrl(report, "Authorize this MCP server in your browser", url3, browser);
+      onAuthorization(url4) {
+        openAuthorizationUrl(report, "Authorize this MCP server in your browser", url4, browser);
         report.start("Waiting for the secret to be created");
       }
     });
@@ -8170,7 +8333,7 @@ async function runMcpOAuth(context) {
 // src/mcp-add.ts
 var SERVER_KEY_PATTERN = /^[a-zA-Z][a-zA-Z0-9-]{0,31}$/;
 var zMcpAddBody = zMcpoAuthStartRequest.omit({ owner: true, name: true }).extend({
-  server_name: z11.string().regex(
+  server_name: z12.string().regex(
     SERVER_KEY_PATTERN,
     "must start with a letter and contain at most 32 letters, digits, or hyphens"
   ).describe("MCP server key used in the agent config"),
@@ -8180,10 +8343,10 @@ var zMcpAddBody = zMcpoAuthStartRequest.omit({ owner: true, name: true }).extend
 function targetLabel(target) {
   return target === "agent" ? "agent" : "agent profile";
 }
-function serverEntry(url3, secretId) {
-  return { url: url3, auth: { type: "oauth", secret_id: secretId } };
+function serverEntry(url4, secretId) {
+  return { url: url4, auth: { type: "oauth", secret_id: secretId } };
 }
-var zJsonRecord = z11.record(z11.string(), z11.json());
+var zJsonRecord = z12.record(z12.string(), z12.json());
 function prepareJsonConfig(config2, serverName, mcpUrl) {
   let parsedJson;
   try {
@@ -8313,8 +8476,8 @@ async function runMcpAdd(context, target, targetId) {
       client: client2,
       orgId: scope.orgId,
       request,
-      onAuthorization(url3) {
-        openAuthorizationUrl(report, "Authorize this MCP server in your browser", url3, browser);
+      onAuthorization(url4) {
+        openAuthorizationUrl(report, "Authorize this MCP server in your browser", url4, browser);
         report.start("Waiting for the MCP OAuth secret to be created");
       }
     });
@@ -8350,10 +8513,10 @@ function runProfileMcpAdd(context) {
 import { readdirSync as readdirSync2, readFileSync as readFileSync4, statSync } from "node:fs";
 import { basename as basename2, dirname as dirname3, join as join3, resolve as resolve2 } from "node:path";
 import * as tar from "tar";
-import * as z12 from "zod";
-var zCreateSkillCliBody = z12.object({
+import * as z13 from "zod";
+var zCreateSkillCliBody = z13.object({
   owner: zSkillOwnerInput,
-  archive: z12.string().min(1).describe("path to a skill directory (packed automatically) or a .zip/.tar.gz archive")
+  archive: z13.string().min(1).describe("path to a skill directory (packed automatically) or a .zip/.tar.gz archive")
 });
 var ARCHIVE_SUFFIXES = [".zip", ".tar.gz", ".tgz"];
 function assertPackable(dir) {
@@ -8395,16 +8558,16 @@ async function loadSkillArchive(archivePath) {
 }
 
 // src/slack-integration.ts
-import * as z13 from "zod";
-var zSlackBody = z13.object({
-  app_name: z13.string().optional().describe("name for a new Slack app"),
-  app_configuration_token: z13.string().optional().describe("Slack app configuration token for a new app"),
-  icon_filename: z13.string().optional().describe("filename for the new Slack app icon"),
-  icon_data_base64: z13.string().optional().describe("base64-encoded Slack app icon"),
-  client_id: z13.string().optional().describe("existing Slack app client ID"),
-  client_secret: z13.string().optional().describe("existing Slack app client secret"),
-  signing_secret: z13.string().optional().describe("existing Slack app signing secret"),
-  return_to: z13.string().optional().describe("console-relative path opened after authorization"),
+import * as z14 from "zod";
+var zSlackBody = z14.object({
+  app_name: z14.string().optional().describe("name for a new Slack app"),
+  app_configuration_token: z14.string().optional().describe("Slack app configuration token for a new app"),
+  icon_filename: z14.string().optional().describe("filename for the new Slack app icon"),
+  icon_data_base64: z14.string().optional().describe("base64-encoded Slack app icon"),
+  client_id: z14.string().optional().describe("existing Slack app client ID"),
+  client_secret: z14.string().optional().describe("existing Slack app client secret"),
+  signing_secret: z14.string().optional().describe("existing Slack app signing secret"),
+  return_to: z14.string().optional().describe("console-relative path opened after authorization"),
   browser: zBrowserFlag
 });
 function parseRequest(body) {
@@ -8433,7 +8596,7 @@ function parseRequest(body) {
     if (!result2.success) {
       throw new CliInputError(
         `invalid existing Slack app parameters:
-${z13.prettifyError(result2.error)}`
+${z14.prettifyError(result2.error)}`
       );
     }
     return { kind: "existing-app", body: result2.data };
@@ -8455,7 +8618,7 @@ ${z13.prettifyError(result2.error)}`
   if (!result.success) {
     throw new CliInputError(
       `invalid Slack app parameters:
-${z13.prettifyError(result.error)}
+${z14.prettifyError(result.error)}
 Pass --app-name and --app-configuration-token, or existing app credentials.`
     );
   }
@@ -8550,7 +8713,7 @@ var commandGroups = [
         body: zConfigAttachment.extend({
           profile: zAgentProfileId.optional(),
           name: zAgentName.optional(),
-          message: z14.string().optional()
+          message: z15.string().optional()
         }),
         transformBody: async ({ profile, name, message, ...attachment }, { client: client2, path }) => ({
           profile,
@@ -8591,7 +8754,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-add",
         summary: "Create an OAuth secret and add an MCP server to an agent",
-        path: z14.object({
+        path: z15.object({
           orgID: zOrganizationId,
           projectID: zProjectId,
           agentID: zAgentId
@@ -9060,7 +9223,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-oauth",
         summary: "Create a secret through an MCP server OAuth flow",
-        path: z14.object({ orgID: zOrganizationId }),
+        path: z15.object({ orgID: zOrganizationId }),
         body: zMcpOAuthBody,
         run: runMcpOAuth
       })
@@ -9174,7 +9337,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-add",
         summary: "Create an OAuth secret and add an MCP server to an agent profile",
-        path: z14.object({
+        path: z15.object({
           orgID: zOrganizationId,
           projectID: zProjectId,
           agentProfileID: zAgentProfileId
@@ -9186,7 +9349,7 @@ var commandGroups = [
         verb: "slack",
         aliases: ["slack-setup"],
         summary: "Connect Slack to an agent profile through OAuth",
-        path: z14.object({
+        path: z15.object({
           orgID: zOrganizationId,
           projectID: zProjectId,
           agentProfileID: zAgentProfileId