omnara 1.0.41 → 1.0.43

package/dist/bin.js

@@ -11,6 +11,45 @@ import { Command } from "commander";
 // ../sdk/src/agent-event-stream.ts
 import * as z5 from "zod";
 
+// ../sdk/src/abort.ts
+function forwardAbort(source, target) {
+  let attached = false;
+  function dispose() {
+    if (!attached) return;
+    attached = false;
+    source?.removeEventListener("abort", abort);
+  }
+  function abort() {
+    dispose();
+    target.abort(source?.reason);
+  }
+  if (source?.aborted) abort();
+  else if (source) {
+    attached = true;
+    source.addEventListener("abort", abort, { once: true });
+  }
+  return dispose;
+}
+function untilAborted(request, signal) {
+  return new Promise((resolve3, reject) => {
+    const abort = () => {
+      signal.removeEventListener("abort", abort);
+      reject(signal.reason);
+    };
+    if (signal.aborted) {
+      abort();
+      return;
+    }
+    signal.addEventListener("abort", abort, { once: true });
+    Promise.resolve().then(() => {
+      signal.throwIfAborted();
+      return request();
+    }).then(resolve3, reject).finally(() => {
+      signal.removeEventListener("abort", abort);
+    });
+  });
+}
+
 // ../sdk/src/errors.ts
 import * as z4 from "zod";
 
@@ -211,6 +250,7 @@ var zErrorCode = z.enum([
   "idempotency_key_conflict",
   "agent_backlog_full",
   "state_transition_conflict",
+  "tool_call_already_completed",
   "managed_work_admission_denied",
   "pending_work",
   "not_wake_capable",
@@ -391,6 +431,7 @@ var zSkillGrantId = z.string().regex(/^skg_[a-z2-7]{26}$/);
 var zMemoryStoreId = z.string().regex(/^mst_[a-z2-7]{26}$/);
 var zSecretId = z.string().regex(/^sec_[a-z2-7]{26}$/);
 var zUpdateEventWebhookRequest = z.object({
+  scope: zEventWebhookScope.optional(),
   url: z.string().min(1).max(2048).optional(),
   event_types: z.array(zEventWebhookEventType).min(1).optional(),
   signing_secret_id: zSecretId.nullish()
@@ -406,6 +447,7 @@ var zEventWebhook = z.object({
   event_types: z.array(zEventWebhookEventType).min(1),
   signing_secret_id: zSecretId.optional(),
   scope: zEventWebhookScope,
+  scope_name: zResourceName.optional(),
   id: zEventWebhookId,
   org_id: zOrganizationId,
   project_id: zProjectId,
@@ -413,7 +455,8 @@ var zEventWebhook = z.object({
   updated_at: z.iso.datetime({ offset: true })
 });
 var zListEventWebhooksResponse = z.object({
-  data: z.array(zEventWebhook)
+  data: z.array(zEventWebhook),
+  next_cursor: z.string().nullable()
 });
 var zCreateModelProviderConfigRequest = z.object({
   name: zResourceName,
@@ -1076,6 +1119,12 @@ var zCronTriggerLastRun = z.object({
   updated_at: zTimestamp,
   failure_message: z.string().nullable()
 });
+var zAgentActivityState = z.enum([
+  "running",
+  "idle",
+  "waiting_on_interaction",
+  "archived"
+]);
 var zAgentOpenInteractions = z.object({
   question_count: z.int().gte(0),
   permission_request_count: z.int().gte(0)
@@ -1089,12 +1138,7 @@ var zAgentWorkingSubagents = z.object({
   agent_ids: z.array(zAgentId).max(20)
 });
 var zAgentActivity = z.object({
-  state: z.enum([
-    "running",
-    "idle",
-    "waiting_on_interaction",
-    "archived"
-  ]),
+  state: zAgentActivityState,
   last_activity_at: zTimestamp,
   open_interactions: zAgentOpenInteractions,
   running_processes: zAgentRunningProcesses,
@@ -1348,6 +1392,9 @@ var zAgentInputEvent = z.object({
   org_id: zOrganizationId,
   project_id: zProjectId,
   agent_id: zAgentId,
+  agent_profile_id: zAgentProfileId.nullable(),
+  parent_agent_id: zAgentId.nullable(),
+  root_agent_id: zAgentId,
   turn_id: zAgentTurnId,
   turn_sequence: zAgentSequence,
   is_opening_event: z.boolean(),
@@ -1368,6 +1415,9 @@ var zToolResultEvent = z.object({
   org_id: zOrganizationId,
   project_id: zProjectId,
   agent_id: zAgentId,
+  agent_profile_id: zAgentProfileId.nullable(),
+  parent_agent_id: zAgentId.nullable(),
+  root_agent_id: zAgentId,
   turn_id: zAgentTurnId,
   turn_sequence: zAgentSequence,
   is_opening_event: z.literal(false),
@@ -1383,6 +1433,9 @@ var zContextCheckpointEvent = z.object({
   org_id: zOrganizationId,
   project_id: zProjectId,
   agent_id: zAgentId,
+  agent_profile_id: zAgentProfileId.nullable(),
+  parent_agent_id: zAgentId.nullable(),
+  root_agent_id: zAgentId,
   turn_id: zAgentTurnId,
   turn_sequence: zAgentSequence,
   is_opening_event: z.literal(false),
@@ -1458,6 +1511,9 @@ var zModelOutputEvent = z.object({
   org_id: zOrganizationId,
   project_id: zProjectId,
   agent_id: zAgentId,
+  agent_profile_id: zAgentProfileId.nullable(),
+  parent_agent_id: zAgentId.nullable(),
+  root_agent_id: zAgentId,
   turn_id: zAgentTurnId,
   turn_sequence: zAgentSequence,
   is_opening_event: z.literal(false),
@@ -1598,9 +1654,16 @@ var zAgentInteractionUpdate = z.object({
   state: zAgentInteractionState
 });
 var zToolCallUpdate = z.object({
+  org_id: zOrganizationId,
+  project_id: zProjectId,
   tool_call_id: zToolCallId,
-  agent_id: zAgentId.optional(),
+  agent_id: zAgentId,
+  agent_profile_id: zAgentProfileId.nullable(),
+  parent_agent_id: zAgentId.nullable(),
+  root_agent_id: zAgentId,
   state: zToolCallState,
+  name: z.string().optional(),
+  input: zToolInput.optional(),
   interaction_update: zAgentInteractionUpdate.optional()
 });
 var zEventWebhookToolCallUpdate = z.object({
@@ -2369,6 +2432,9 @@ var zBootstrapDaemonResponse = z.object({
 var zCreateProjectRequest = z.object({
   name: zResourceName
 });
+var zUpdateProjectRequest = z.object({
+  name: zResourceName
+});
 var zProjectFields = z.object({
   id: zProjectId,
   org_id: zOrganizationId,
@@ -2941,9 +3007,11 @@ var zListEventWebhooksPath = z.object({
   projectID: zProjectId
 });
 var zListEventWebhooksQuery = z.object({
-  scope_type: zEventWebhookScopeType,
+  scope_type: zEventWebhookScopeType.optional(),
   agent_profile_id: zAgentProfileId.optional(),
-  agent_id: zAgentId.optional()
+  agent_id: zAgentId.optional(),
+  limit: z.int().gte(1).lte(100).optional().default(50),
+  cursor: z.string().max(1024).optional()
 });
 var zListEventWebhooksResponse2 = zListEventWebhooksResponse;
 var zCreateEventWebhookPath = z.object({
@@ -2957,6 +3025,12 @@ var zDeleteEventWebhookPath = z.object({
   webhookID: zEventWebhookId
 });
 var zDeleteEventWebhookResponse = z.void();
+var zGetEventWebhookPath = z.object({
+  orgID: zOrganizationId,
+  projectID: zProjectId,
+  webhookID: zEventWebhookId
+});
+var zGetEventWebhookResponse = zEventWebhook;
 var zUpdateEventWebhookPath = z.object({
   orgID: zOrganizationId,
   projectID: zProjectId,
@@ -3055,6 +3129,7 @@ var zListOrgAgentsQuery = z.object({
   parent_agent_id: zAgentId.optional(),
   include_subagents: z.boolean().optional(),
   include_archived: z.boolean().optional(),
+  activity_state: zAgentActivityState.optional(),
   include_usage: z.boolean().optional(),
   sort: zResourceListSort.optional(),
   limit: z.int().gte(1).lte(100).optional().default(50),
@@ -3094,6 +3169,17 @@ var zDeleteProjectPath = z.object({
   projectID: z.string().regex(/^proj_[a-z2-7]{26}$/)
 });
 var zDeleteProjectResponse = z.void();
+var zGetProjectPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  projectID: z.string().regex(/^proj_[a-z2-7]{26}$/)
+});
+var zGetProjectResponse = zProject;
+var zUpdateProjectBody = zUpdateProjectRequest;
+var zUpdateProjectPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  projectID: z.string().regex(/^proj_[a-z2-7]{26}$/)
+});
+var zUpdateProjectResponse = zProject;
 var zGetProjectUsagePath = z.object({
   orgID: zOrganizationId,
   projectID: zProjectId
@@ -3261,6 +3347,12 @@ var zDeleteSkillGrantPath = z.object({
   grantID: zSkillGrantId
 });
 var zDeleteSkillGrantResponse = z.void();
+var zGetSkillGrantPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  skillID: zSkillId,
+  grantID: zSkillGrantId
+});
+var zGetSkillGrantResponse = zSkillGrant;
 var zListProjectAvailableSkillsPath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
   projectID: zProjectId
@@ -3435,6 +3527,12 @@ var zDeleteSecretGrantPath = z.object({
   grantID: z.string().regex(/^sgr_[a-z2-7]{26}$/)
 });
 var zDeleteSecretGrantResponse = z.void();
+var zGetSecretGrantPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  secretID: z.string().regex(/^sec_[a-z2-7]{26}$/),
+  grantID: z.string().regex(/^sgr_[a-z2-7]{26}$/)
+});
+var zGetSecretGrantResponse = zSecretGrant;
 var zResolveAgentConfigToolsPath = z.object({
   orgID: zOrganizationId,
   projectID: zProjectId
@@ -3609,6 +3707,7 @@ var zListAgentsQuery = z.object({
   parent_agent_id: zAgentId.optional(),
   include_subagents: z.boolean().optional(),
   include_archived: z.boolean().optional(),
+  activity_state: zAgentActivityState.optional(),
   include_usage: z.boolean().optional(),
   sort: zResourceListSort.optional(),
   limit: z.int().gte(1).lte(100).optional().default(50),
@@ -3668,6 +3767,25 @@ var zCreateAgentInputPath = z.object({
   agentID: z.string().regex(/^agt_[a-z2-7]{26}$/)
 });
 var zCreateAgentInputResponse = zAgentInputEnvelope;
+var zListProjectToolCallsPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  projectID: z.string().regex(/^proj_[a-z2-7]{26}$/)
+});
+var zListProjectToolCallsQuery = z.object({
+  state: z.enum([
+    "awaiting_authorization",
+    "awaiting_permission",
+    "ready",
+    "running",
+    "waiting"
+  ]).optional(),
+  type: zToolCallType.optional(),
+  names: z.array(z.string().min(1).max(64)).min(1).max(100).optional(),
+  agent_profile_id: zAgentProfileId.optional(),
+  limit: z.int().gte(1).lte(100).optional().default(50),
+  cursor: z.string().max(1024).optional()
+});
+var zListProjectToolCallsResponse = zListToolCallsResponse;
 var zListToolCallsPath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
   projectID: z.string().regex(/^proj_[a-z2-7]{26}$/),
@@ -3681,6 +3799,13 @@ var zListToolCallsQuery = z.object({
   cursor: z.string().max(1024).optional()
 });
 var zListToolCallsResponse2 = zListToolCallsResponse;
+var zGetToolCallPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  projectID: z.string().regex(/^proj_[a-z2-7]{26}$/),
+  agentID: z.string().regex(/^agt_[a-z2-7]{26}$/),
+  toolCallID: zToolCallId
+});
+var zGetToolCallResponse = zToolCall;
 var zSubmitToolCallResultPath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
   projectID: z.string().regex(/^proj_[a-z2-7]{26}$/),
@@ -3740,6 +3865,17 @@ var zCancelAgentPath = z.object({
   agentID: z.string().regex(/^agt_[a-z2-7]{26}$/)
 });
 var zCancelAgentResponse2 = zCancelAgentResponse;
+var zListProjectInteractionsPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  projectID: z.string().regex(/^proj_[a-z2-7]{26}$/)
+});
+var zListProjectInteractionsQuery = z.object({
+  interaction_kind: zAgentInteractionKind.optional(),
+  agent_profile_id: zAgentProfileId.optional(),
+  limit: z.int().gte(1).lte(100).optional().default(50),
+  cursor: z.string().max(1024).optional()
+});
+var zListProjectInteractionsResponse = zListAgentInteractionsResponse;
 var zListAgentInteractionsPath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
   projectID: z.string().regex(/^proj_[a-z2-7]{26}$/),
@@ -3851,6 +3987,12 @@ var zDeleteProjectMachineGrantPath = z.object({
   grantID: z.string().regex(/^pmg_[a-z2-7]{26}$/)
 });
 var zDeleteProjectMachineGrantResponse = z.void();
+var zGetProjectMachineGrantPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  projectID: z.string().regex(/^proj_[a-z2-7]{26}$/),
+  grantID: z.string().regex(/^pmg_[a-z2-7]{26}$/)
+});
+var zGetProjectMachineGrantResponse = zCreateProjectMachineGrantResponse;
 var zListProjectAvailableSecretsPath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
   projectID: z.string().regex(/^proj_[a-z2-7]{26}$/)
@@ -3918,7 +4060,6 @@ var zCreateMachinePath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/)
 });
 var zCreateMachineResponse = zMachine;
-var zConnectByoMachineBody = zConnectByoMachineRequest;
 var zConnectByoMachinePath = z.object({
   orgID: zOrganizationId
 });
@@ -3996,6 +4137,12 @@ var zDeleteConfiguredModelPath = z.object({
   configuredModelID: z.string().regex(/^mdl_[a-z2-7]{26}$/)
 });
 var zDeleteConfiguredModelResponse = z.void();
+var zGetConfiguredModelPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  modelProviderConfigID: z.string().regex(/^mpc_[a-z2-7]{26}$/),
+  configuredModelID: z.string().regex(/^mdl_[a-z2-7]{26}$/)
+});
+var zGetConfiguredModelResponse = zConfiguredModel;
 var zUpdateConfiguredModelBody = zUpdateConfiguredModelRequest;
 var zUpdateConfiguredModelPath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
@@ -4026,6 +4173,12 @@ var zDeleteProjectModelGrantPath = z.object({
   modelGrantID: z.string().regex(/^pmog_[a-z2-7]{26}$/)
 });
 var zDeleteProjectModelGrantResponse = z.void();
+var zGetProjectModelGrantPath = z.object({
+  orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
+  projectID: z.string().regex(/^proj_[a-z2-7]{26}$/),
+  modelGrantID: z.string().regex(/^pmog_[a-z2-7]{26}$/)
+});
+var zGetProjectModelGrantResponse = zProjectModelGrantEnvelope;
 var zUpdateProjectModelGrantBody = zUpdateProjectModelGrantRequest;
 var zUpdateProjectModelGrantPath = z.object({
   orgID: z.string().regex(/^org_[a-z2-7]{26}$/),
@@ -4235,6 +4388,13 @@ var zDeleteIntegrationSubscriptionPath = z.object({
   subscriptionID: zIntegrationSubscriptionId
 });
 var zDeleteIntegrationSubscriptionResponse = z.void();
+var zGetIntegrationSubscriptionPath = z.object({
+  orgID: zOrganizationId,
+  projectID: zProjectId,
+  integrationID: zIntegrationId,
+  subscriptionID: zIntegrationSubscriptionId
+});
+var zGetIntegrationSubscriptionResponse = zIntegrationSubscription;
 var zConfigureIntegrationBody = zConfigureIntegrationRequest;
 var zConfigureIntegrationPath = z.object({
   orgID: zOrganizationId,
@@ -4367,6 +4527,32 @@ function parseRetryAfter(value) {
   return Math.max(at - Date.now(), 0);
 }
 
+// ../sdk/src/retry.ts
+var retryBaseDelayMs = 1e3;
+var retryMaximumDelayMs = 3e4;
+var retryAfterMaximumDelayMs = 6e4;
+function retryDelay(attempt) {
+  const maximum = Math.min(retryBaseDelayMs * 2 ** Math.max(attempt - 1, 0), retryMaximumDelayMs);
+  return Math.floor(Math.random() * maximum);
+}
+function abortableDelay(ms, signal) {
+  if (signal?.aborted === true) return Promise.resolve(false);
+  return new Promise((resolve3) => {
+    const onAbort = () => {
+      finish(false);
+    };
+    const timeout = globalThis.setTimeout(() => {
+      finish(true);
+    }, ms);
+    function finish(completed) {
+      globalThis.clearTimeout(timeout);
+      signal?.removeEventListener("abort", onAbort);
+      resolve3(completed);
+    }
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+
 // ../sdk/src/server-sent-events.ts
 function createServerSentEventParser() {
   let parts = [];
@@ -4429,9 +4615,6 @@ var AgentEventStreamError = class extends Error {
   }
 };
 var streamUrl = "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/events/stream";
-var retryBaseDelayMs = 1e3;
-var retryMaximumDelayMs = 3e4;
-var retryAfterMaximumDelayMs = 6e4;
 var stableConnectionResetMs = 1e4;
 var stallTimeoutMs = 35e3;
 var zDurableCursor = z5.object({
@@ -4448,27 +4631,6 @@ function retryable(error) {
   if (error.kind === "api") return error.code === "service_unavailable";
   return error.kind === "http" && (error.status === 408 || error.status === 429 || error.status != null && error.status >= 500);
 }
-function reconnectDelay(attempt) {
-  const maximum = Math.min(retryBaseDelayMs * 2 ** Math.max(attempt - 1, 0), retryMaximumDelayMs);
-  return Math.floor(Math.random() * maximum);
-}
-function abortableDelay(ms, signal) {
-  if (signal?.aborted === true) return Promise.resolve(false);
-  return new Promise((resolve3) => {
-    const timeout = globalThis.setTimeout(() => {
-      finish(true);
-    }, ms);
-    const onAbort = () => {
-      finish(false);
-    };
-    function finish(completed) {
-      globalThis.clearTimeout(timeout);
-      signal?.removeEventListener("abort", onAbort);
-      resolve3(completed);
-    }
-    signal?.addEventListener("abort", onAbort, { once: true });
-  });
-}
 async function settleWithin(pending, ms, attempt) {
   let timer;
   const deadline = new Promise((_, reject) => {
@@ -4486,7 +4648,8 @@ async function settleWithin(pending, ms, attempt) {
 }
 async function* openConnection(client2, { path, query, headers }, callerSignal) {
   const attempt = new AbortController();
-  const signal = callerSignal == null ? attempt.signal : AbortSignal.any([callerSignal, attempt.signal]);
+  const disposeCaller = forwardAbort(callerSignal, attempt);
+  const { signal } = attempt;
   let reader;
   try {
     const dispatch = { started: false };
@@ -4550,7 +4713,9 @@ async function* openConnection(client2, { path, query, headers }, callerSignal)
   } catch (error) {
     throw error instanceof AgentEventStreamError ? error : streamError("transport", "Agent event stream disconnected", { cause: error });
   } finally {
+    disposeCaller();
     await reader?.cancel().catch(() => void 0);
+    reader?.releaseLock();
   }
 }
 function decodeFrame(text) {
@@ -4614,7 +4779,7 @@ async function* openAgentEventStream({
         consecutiveFailures = 0;
       }
       consecutiveFailures += 1;
-      const delayMs = Math.max(reconnectDelay(consecutiveFailures), error.retryAfterMs ?? 0);
+      const delayMs = Math.max(retryDelay(consecutiveFailures), error.retryAfterMs ?? 0);
       onConnectionStateChange?.({
         state: "reconnecting",
         attempt: consecutiveFailures,
@@ -4708,7 +4873,7 @@ function createSseClient({
   let lastEventId;
   const sleep = sseSleepFn ?? ((ms) => new Promise((resolve3) => setTimeout(resolve3, ms)));
   const createStream = async function* () {
-    let retryDelay = sseDefaultRetryDelay ?? 3e3;
+    let retryDelay2 = sseDefaultRetryDelay ?? 3e3;
     let attempt = 0;
     const signal = options.signal ?? new AbortController().signal;
     while (true) {
@@ -4765,7 +4930,7 @@ function createSseClient({
                 } else if (line.startsWith("retry:")) {
                   const parsed = Number.parseInt(line.replace(/^retry:\s*/, ""), 10);
                   if (!Number.isNaN(parsed)) {
-                    retryDelay = parsed;
+                    retryDelay2 = parsed;
                   }
                 }
               }
@@ -4792,7 +4957,7 @@ function createSseClient({
                 data,
                 event: eventName,
                 id: lastEventId,
-                retry: retryDelay
+                retry: retryDelay2
               });
               if (dataLines.length) {
                 yield data;
@@ -4809,7 +4974,7 @@ function createSseClient({
         if (sseMaxRetryAttempts !== void 0 && attempt >= sseMaxRetryAttempts) {
           break;
         }
-        const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4);
+        const backoff = Math.min(retryDelay2 * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4);
         await sleep(backoff);
       }
     }
@@ -5465,6 +5630,508 @@ var createClient = (config2 = {}) => {
 // ../sdk/src/generated/client.gen.ts
 var client = createClient(createConfig({ baseUrl: "https://api.omnara.com/v1", throwOnError: true }));
 
+// ../sdk/src/generated/replay-contracts.gen.ts
+var knownOperations = /* @__PURE__ */ new Set([
+  "DELETE /me",
+  "DELETE /orgs/{orgID}",
+  "DELETE /orgs/{orgID}/api-keys/{keyID}/projects/{projectID}",
+  "DELETE /orgs/{orgID}/invitations/{invitationID}",
+  "DELETE /orgs/{orgID}/machine-pools/{poolID}",
+  "DELETE /orgs/{orgID}/machines/{machineID}",
+  "DELETE /orgs/{orgID}/members/{userID}",
+  "DELETE /orgs/{orgID}/members/{userID}/projects/{projectID}",
+  "DELETE /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
+  "DELETE /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/event-webhooks/{webhookID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/subscriptions/{subscriptionID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/machine-grants/{grantID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/memory-stores/{memoryStoreID}",
+  "DELETE /orgs/{orgID}/projects/{projectID}/memory-stores/{memoryStoreID}/file",
+  "DELETE /orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
+  "DELETE /orgs/{orgID}/secrets/{secretID}",
+  "DELETE /orgs/{orgID}/secrets/{secretID}/grants/{grantID}",
+  "DELETE /orgs/{orgID}/skills/{skillID}",
+  "DELETE /orgs/{orgID}/skills/{skillID}/grants/{grantID}",
+  "GET /daemon/processes/{processID}/file",
+  "GET /daemon/runtimes/{runtimeID}/socket",
+  "GET /daemon/skills/{skillID}/archive",
+  "GET /invitations",
+  "GET /mcp-servers",
+  "GET /me",
+  "GET /orgs",
+  "GET /orgs/{orgID}/agent-profiles",
+  "GET /orgs/{orgID}/agents",
+  "GET /orgs/{orgID}/api-keys",
+  "GET /orgs/{orgID}/api-keys/{keyID}",
+  "GET /orgs/{orgID}/api-keys/{keyID}/projects",
+  "GET /orgs/{orgID}/integrations",
+  "GET /orgs/{orgID}/invitations",
+  "GET /orgs/{orgID}/machine-pools",
+  "GET /orgs/{orgID}/machine-pools/{poolID}",
+  "GET /orgs/{orgID}/machines",
+  "GET /orgs/{orgID}/machines/{machineID}",
+  "GET /orgs/{orgID}/machines/{machineID}/daemon-tokens",
+  "GET /orgs/{orgID}/members",
+  "GET /orgs/{orgID}/members/{userID}/projects",
+  "GET /orgs/{orgID}/memory-stores",
+  "GET /orgs/{orgID}/model-provider-configs",
+  "GET /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
+  "GET /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/model-catalog",
+  "GET /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models",
+  "GET /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
+  "GET /orgs/{orgID}/overview",
+  "GET /orgs/{orgID}/projects",
+  "GET /orgs/{orgID}/projects/{projectID}",
+  "GET /orgs/{orgID}/projects/{projectID}/actors",
+  "GET /orgs/{orgID}/projects/{projectID}/actors/{actorID}",
+  "GET /orgs/{orgID}/projects/{projectID}/agent-configs/{agentConfigID}",
+  "GET /orgs/{orgID}/projects/{projectID}/agent-configs/{agentConfigID}/generated-source",
+  "GET /orgs/{orgID}/projects/{projectID}/agent-profiles",
+  "GET /orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
+  "GET /orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/usage",
+  "GET /orgs/{orgID}/projects/{projectID}/agents",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/artifacts/{artifactID}",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/artifacts/{artifactID}/content",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/events",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/events/stream",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/backlog",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/interactions",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls/{toolCallID}",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/turns",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/turns/{turnID}/events",
+  "GET /orgs/{orgID}/projects/{projectID}/agents/{agentID}/usage",
+  "GET /orgs/{orgID}/projects/{projectID}/cron-triggers",
+  "GET /orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
+  "GET /orgs/{orgID}/projects/{projectID}/event-webhooks",
+  "GET /orgs/{orgID}/projects/{projectID}/event-webhooks/{webhookID}",
+  "GET /orgs/{orgID}/projects/{projectID}/integration-definitions",
+  "GET /orgs/{orgID}/projects/{projectID}/integrations",
+  "GET /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}",
+  "GET /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/github-repositories",
+  "GET /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/subscriptions",
+  "GET /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/subscriptions/{subscriptionID}",
+  "GET /orgs/{orgID}/projects/{projectID}/interactions",
+  "GET /orgs/{orgID}/projects/{projectID}/machine-grants",
+  "GET /orgs/{orgID}/projects/{projectID}/machine-grants/{grantID}",
+  "GET /orgs/{orgID}/projects/{projectID}/machine-pool-grants",
+  "GET /orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
+  "GET /orgs/{orgID}/projects/{projectID}/machines",
+  "GET /orgs/{orgID}/projects/{projectID}/memory-stores",
+  "GET /orgs/{orgID}/projects/{projectID}/memory-stores/{memoryStoreID}",
+  "GET /orgs/{orgID}/projects/{projectID}/memory-stores/{memoryStoreID}/file",
+  "GET /orgs/{orgID}/projects/{projectID}/memory-stores/{memoryStoreID}/files",
+  "GET /orgs/{orgID}/projects/{projectID}/model-grants",
+  "GET /orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
+  "GET /orgs/{orgID}/projects/{projectID}/secrets",
+  "GET /orgs/{orgID}/projects/{projectID}/secrets/{secretID}",
+  "GET /orgs/{orgID}/projects/{projectID}/skills",
+  "GET /orgs/{orgID}/projects/{projectID}/tool-calls",
+  "GET /orgs/{orgID}/projects/{projectID}/usage",
+  "GET /orgs/{orgID}/secrets",
+  "GET /orgs/{orgID}/secrets/{secretID}",
+  "GET /orgs/{orgID}/secrets/{secretID}/grants",
+  "GET /orgs/{orgID}/secrets/{secretID}/grants/{grantID}",
+  "GET /orgs/{orgID}/skills",
+  "GET /orgs/{orgID}/skills/{skillID}",
+  "GET /orgs/{orgID}/skills/{skillID}/grants",
+  "GET /orgs/{orgID}/skills/{skillID}/grants/{grantID}",
+  "GET /orgs/{orgID}/usage",
+  "GET /orgs/{orgID}/usage/timeseries",
+  "GET /personal-access-tokens",
+  "GET /tool-catalog",
+  "PATCH /orgs/{orgID}/api-keys/{keyID}",
+  "PATCH /orgs/{orgID}/machines/{machineID}",
+  "PATCH /orgs/{orgID}/members/{userID}",
+  "PATCH /orgs/{orgID}/projects/{projectID}",
+  "PATCH /orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}",
+  "PATCH /orgs/{orgID}/projects/{projectID}/cron-triggers/{cronTriggerID}",
+  "PATCH /orgs/{orgID}/projects/{projectID}/event-webhooks/{webhookID}",
+  "PATCH /orgs/{orgID}/projects/{projectID}/machine-pool-grants/{poolGrantID}",
+  "PATCH /orgs/{orgID}/projects/{projectID}/memory-stores/{memoryStoreID}",
+  "PATCH /orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
+  "PATCH /orgs/{orgID}/secrets/{secretID}",
+  "POST /daemon/bootstrap",
+  "POST /daemon/failures",
+  "POST /daemon/processes/{processID}/file",
+  "POST /daemon/processes/{processID}/git-credentials",
+  "POST /daemon/runtimes",
+  "POST /daemon/runtimes/{runtimeID}/end",
+  "POST /daemon/runtimes/{runtimeID}/sleep",
+  "POST /invitations/{invitationID}/accept",
+  "POST /invitations/{invitationID}/decline",
+  "POST /orgs",
+  "POST /orgs/{orgID}/api-keys",
+  "POST /orgs/{orgID}/api-keys/{keyID}/revoke",
+  "POST /orgs/{orgID}/invitations",
+  "POST /orgs/{orgID}/machine-pools",
+  "POST /orgs/{orgID}/machine-pools/check-connection",
+  "POST /orgs/{orgID}/machines",
+  "POST /orgs/{orgID}/machines/connect",
+  "POST /orgs/{orgID}/machines/{machineID}/daemon-tokens",
+  "POST /orgs/{orgID}/machines/{machineID}/daemon-tokens/{tokenID}/revoke",
+  "POST /orgs/{orgID}/model-provider-configs",
+  "POST /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models",
+  "POST /orgs/{orgID}/projects",
+  "POST /orgs/{orgID}/projects/{projectID}/agent-configs",
+  "POST /orgs/{orgID}/projects/{projectID}/agent-configs/tools",
+  "POST /orgs/{orgID}/projects/{projectID}/agent-profiles",
+  "POST /orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/config",
+  "POST /orgs/{orgID}/projects/{projectID}/agents",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/archive",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/cancel",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/config",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/cancel",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/demote_to_queued",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/move",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs/{inputID}/promote_to_steering",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/interactions/{interactionID}/resolve",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls/{toolCallID}/result",
+  "POST /orgs/{orgID}/projects/{projectID}/cron-triggers",
+  "POST /orgs/{orgID}/projects/{projectID}/event-webhooks",
+  "POST /orgs/{orgID}/projects/{projectID}/integrations",
+  "POST /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/disconnect",
+  "POST /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/github-setup",
+  "POST /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/github-setup/installations",
+  "POST /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/oauth/setup",
+  "POST /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/setup",
+  "POST /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/slack-setup",
+  "POST /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/subscriptions",
+  "POST /orgs/{orgID}/projects/{projectID}/machine-grants",
+  "POST /orgs/{orgID}/projects/{projectID}/machine-pool-grants",
+  "POST /orgs/{orgID}/projects/{projectID}/mcp-servers/tools",
+  "POST /orgs/{orgID}/projects/{projectID}/memory-stores",
+  "POST /orgs/{orgID}/projects/{projectID}/model-grants",
+  "POST /orgs/{orgID}/secrets",
+  "POST /orgs/{orgID}/secrets/mcp-oauth",
+  "POST /orgs/{orgID}/secrets/{secretID}/grants",
+  "POST /orgs/{orgID}/secrets/{secretID}/versions",
+  "POST /orgs/{orgID}/skills",
+  "POST /orgs/{orgID}/skills/{skillID}",
+  "POST /orgs/{orgID}/skills/{skillID}/grants",
+  "POST /personal-access-tokens",
+  "POST /personal-access-tokens/{tokenID}/revoke",
+  "PUT /orgs/{orgID}/api-keys/{keyID}/projects/{projectID}",
+  "PUT /orgs/{orgID}/machine-pools/{poolID}",
+  "PUT /orgs/{orgID}/members/{userID}/projects/{projectID}",
+  "PUT /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}",
+  "PUT /orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
+  "PUT /orgs/{orgID}/projects/{projectID}/actors",
+  "PUT /orgs/{orgID}/projects/{projectID}/integrations/{integrationID}",
+  "PUT /orgs/{orgID}/projects/{projectID}/memory-stores/{memoryStoreID}/file"
+]);
+var keyedOperations = /* @__PURE__ */ new Set([
+  "POST /orgs",
+  "POST /orgs/{orgID}/machines",
+  "POST /orgs/{orgID}/projects",
+  "POST /orgs/{orgID}/projects/{projectID}/agent-profiles",
+  "POST /orgs/{orgID}/projects/{projectID}/agent-profiles/{agentProfileID}/config",
+  "POST /orgs/{orgID}/projects/{projectID}/agents",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/config",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/inputs",
+  "POST /orgs/{orgID}/projects/{projectID}/cron-triggers",
+  "POST /orgs/{orgID}/projects/{projectID}/machine-grants",
+  "POST /orgs/{orgID}/projects/{projectID}/machine-pool-grants"
+]);
+var idempotentOperations = /* @__PURE__ */ new Set([
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/archive",
+  "POST /orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls/{toolCallID}/result",
+  "PUT /orgs/{orgID}/projects/{projectID}/memory-stores/{memoryStoreID}/file"
+]);
+
+// ../sdk/src/observer.ts
+function notifyObserver(observer, observation) {
+  if (observer === void 0) return;
+  try {
+    void Promise.resolve(observer(observation)).catch(() => void 0);
+  } catch {
+  }
+}
+
+// ../sdk/src/response-stream.ts
+function responseWithStreamLifetime(response, signal, dispose) {
+  if (response.body === null) return response;
+  const wrapped = new Response(streamWithLifetime(response.body, signal, dispose), response);
+  return copyResponseMetadata(wrapped, response);
+}
+function copyResponseMetadata(target, source) {
+  Object.defineProperties(target, {
+    url: { value: source.url },
+    redirected: { value: source.redirected },
+    type: { value: source.type },
+    clone: {
+      configurable: true,
+      writable: true,
+      value: function clone() {
+        return copyResponseMetadata(Response.prototype.clone.call(this), this);
+      }
+    }
+  });
+  return target;
+}
+function streamWithLifetime(source, signal, dispose) {
+  const reader = source.getReader();
+  let finished = false;
+  let disposed = false;
+  let output;
+  function release2() {
+    if (disposed) return;
+    disposed = true;
+    signal.removeEventListener("abort", abort);
+    dispose();
+  }
+  function fail(reason) {
+    if (finished) return;
+    finished = true;
+    output.error(reason);
+    release2();
+    void reader.cancel(reason).catch(() => void 0).finally(() => {
+      reader.releaseLock();
+    });
+  }
+  function abort() {
+    fail(signal.reason);
+  }
+  return new ReadableStream(
+    {
+      start(controller) {
+        output = controller;
+        if (signal.aborted) abort();
+        else signal.addEventListener("abort", abort, { once: true });
+        void reader.closed.then(release2, fail);
+      },
+      async pull(controller) {
+        try {
+          const chunk = await reader.read();
+          if (finished) return;
+          if (chunk.done) {
+            finished = true;
+            controller.close();
+            release2();
+            reader.releaseLock();
+          } else controller.enqueue(chunk.value);
+        } catch (error) {
+          fail(error);
+        }
+      },
+      // oxlint-disable-next-line anti-slop/no-unknown-parameters
+      async cancel(reason) {
+        finished = true;
+        release2();
+        try {
+          await reader.cancel(reason);
+        } finally {
+          reader.releaseLock();
+        }
+      }
+    },
+    { highWaterMark: 0 }
+  );
+}
+
+// ../sdk/src/request-policy.ts
+function validateRequestPolicy(options) {
+  for (const name of ["maxRetries", "timeoutMs"]) {
+    const value = options[name];
+    if (value !== void 0 && (!Number.isSafeInteger(value) || value < 0)) {
+      throw new RangeError(`${name} must be a non-negative safe integer`);
+    }
+  }
+  if (options.timeoutMs !== void 0 && options.timeoutMs > 2147483647) {
+    throw new RangeError("timeoutMs must fit a 32-bit timer (at most 2147483647 ms)");
+  }
+}
+function normalizeHeaders(headers) {
+  return Array.isArray(headers) ? new Headers(headers) : headers;
+}
+function validateClientRequestPolicy(options) {
+  validateRequestPolicy(options);
+  if (mergeHeaders(normalizeHeaders(options.headers)).has("Idempotency-Key")) {
+    throw new TypeError(
+      "Idempotency-Key cannot be set in client-wide headers; set it on each request instead."
+    );
+  }
+}
+function oneShotBody(body) {
+  return body instanceof ReadableStream || body !== null && typeof body === "object" && Symbol.asyncIterator in body;
+}
+var retryableStatuses = /* @__PURE__ */ new Set([408, 429, 500, 502, 503, 504]);
+var originalRequests = /* @__PURE__ */ new WeakMap();
+function captureRequestDestination(request, options) {
+  if (options.fetch !== void 0 && originalRequests.has(options.fetch)) {
+    originalRequests.set(options.fetch, {
+      method: request.method,
+      url: request.url,
+      baseUrl: options.baseUrl,
+      operation: `${(options.method ?? "GET").toUpperCase()} ${options.url}`
+    });
+  }
+  return request;
+}
+async function requestWithPolicy(config2, options, dispatch) {
+  const maxRetries = options.maxRetries ?? config2.maxRetries ?? 2;
+  const timeoutMs = options.timeoutMs ?? config2.timeoutMs ?? 0;
+  validateRequestPolicy({ maxRetries, timeoutMs });
+  const startedAt = Date.now();
+  const observer = options.onRequestComplete ?? config2.onRequestComplete;
+  const method = (options.method ?? "GET").toUpperCase();
+  const operation = `${method} ${options.url}`;
+  const baseUrl = "baseUrl" in options ? options.baseUrl : config2.baseUrl;
+  const keyed = keyedOperations.has(operation);
+  let headers = normalizeHeaders(options.headers);
+  const mergedHeaders = mergeHeaders(normalizeHeaders(config2.headers), headers);
+  if (keyed && !mergedHeaders.has("Idempotency-Key")) {
+    headers = {
+      ...headers instanceof Headers ? Object.fromEntries(headers) : headers,
+      "Idempotency-Key": crypto.randomUUID()
+    };
+  }
+  const callerSignal = options.signal !== void 0 ? options.signal : config2.signal;
+  const controller = new AbortController();
+  const disposeCaller = forwardAbort(callerSignal, controller);
+  const { signal } = controller;
+  const timeoutReason = timeoutMs > 0 ? new DOMException("SDK request timed out", "TimeoutError") : void 0;
+  const expiresAt = timeoutMs > 0 ? Date.now() + timeoutMs : Infinity;
+  const timer = timeoutMs > 0 ? setTimeout(() => {
+    if (signal.aborted) return;
+    controller.abort(timeoutReason);
+  }, timeoutMs) : void 0;
+  const fetch2 = options.fetch ?? config2.fetch ?? globalThis.fetch;
+  const parseAs = options.parseAs ?? config2.parseAs;
+  let replayable = !oneShotBody(options.body);
+  const serializer = options.bodySerializer !== void 0 ? options.bodySerializer : config2.bodySerializer;
+  const bodySerializer = serializer ? (body) => {
+    const serialized = serializer(body);
+    replayable &&= !oneShotBody(serialized);
+    return serialized;
+  } : serializer;
+  let lastRequest;
+  let lastResponse;
+  let handoff = "none";
+  let attempts = 0;
+  const backoff = { elapsedMs: 0 };
+  let status;
+  let observationOperation = knownOperations.has(operation) ? operation : "unknown";
+  let outcome = "returned";
+  async function wait(delayMs) {
+    const waitingAt = Date.now();
+    backoff.startedAt = waitingAt;
+    try {
+      await abortableDelay(delayMs, signal);
+    } finally {
+      backoff.elapsedMs += Math.max(0, Date.now() - waitingAt);
+      backoff.startedAt = void 0;
+    }
+  }
+  function exposeResponse(response) {
+    if (parseAs === "stream" && response.ok) clearTimeout(timer);
+    return response;
+  }
+  const retryingFetch = async (input, init) => {
+    signal.throwIfAborted();
+    const template = input instanceof Request && init === void 0 ? input : new Request(input, init);
+    const original = originalRequests.get(retryingFetch);
+    const sameDestination = original?.operation === operation && original.baseUrl === baseUrl && template.method === method && original.method === template.method && original.url === template.url;
+    if (!sameDestination) observationOperation = "unknown";
+    const safe = sameDestination && replayable && parseAs !== "stream" && (template.method === "GET" || template.method === "HEAD" || idempotentOperations.has(operation) || keyed && Boolean(template.headers.get("Idempotency-Key")?.trim()));
+    const retries = safe ? maxRetries : 0;
+    try {
+      for (let attempt = 0; ; attempt++) {
+        signal.throwIfAborted();
+        lastRequest = retries > 0 ? template.clone() : template;
+        lastResponse = void 0;
+        status = void 0;
+        let response;
+        try {
+          attempts++;
+          response = await fetch2(lastRequest);
+        } catch (error) {
+          signal.throwIfAborted();
+          const delay2 = retryDelay(attempt + 1);
+          if (!(error instanceof TypeError) || attempt >= retries || Date.now() + delay2 >= expiresAt)
+            throw error;
+          await wait(delay2);
+          continue;
+        }
+        if (signal.aborted) {
+          void response.body?.cancel().catch(() => void 0);
+          signal.throwIfAborted();
+        }
+        lastResponse = response;
+        status = response.status;
+        if (!retryableStatuses.has(response.status) || attempt >= retries)
+          return exposeResponse(response);
+        const retryAfterMs = parseRetryAfter(response.headers.get("Retry-After")) ?? 0;
+        const delay = Math.max(retryDelay(attempt + 1), retryAfterMs);
+        if (retryAfterMs > retryAfterMaximumDelayMs || Date.now() + delay >= expiresAt)
+          return exposeResponse(response);
+        void response.body?.cancel().catch(() => void 0);
+        lastResponse = void 0;
+        await wait(delay);
+      }
+    } finally {
+      if (retries > 0) void template.body?.cancel().catch(() => void 0);
+    }
+  };
+  originalRequests.set(retryingFetch, void 0);
+  try {
+    const result = await untilAborted(
+      () => dispatch({ fetch: retryingFetch, signal, headers, bodySerializer }),
+      signal
+    );
+    if (result instanceof ReadableStream) {
+      clearTimeout(timer);
+      const stream = callerSignal ? streamWithLifetime(result, signal, disposeCaller) : result;
+      handoff = "stream";
+      return stream;
+    }
+    if (result !== null && // oxlint-disable-next-line anti-slop/no-runtime-typeof
+    typeof result === "object" && "response" in result && result.response instanceof Response) {
+      handoff = result.response === lastResponse ? "response" : "none";
+      if (result.response.body !== null && "data" in result && result.data === result.response.body) {
+        clearTimeout(timer);
+        const response = callerSignal ? responseWithStreamLifetime(result.response, signal, disposeCaller) : result.response;
+        handoff = "stream";
+        return { ...result, data: response.body, response };
+      }
+    }
+    return result;
+  } catch (error) {
+    if (options.throwOnError ?? config2.throwOnError) {
+      outcome = "threw";
+      throw error;
+    }
+    const dataOnly = (options.responseStyle ?? config2.responseStyle) === "data";
+    handoff = !dataOnly && lastResponse !== void 0 ? "response" : "none";
+    return dataOnly ? void 0 : { error, request: lastRequest, response: lastResponse };
+  } finally {
+    originalRequests.delete(retryingFetch);
+    clearTimeout(timer);
+    if (handoff !== "stream") {
+      disposeCaller();
+      if (parseAs === "stream" && (handoff === "none" || signal.aborted))
+        void lastResponse?.body?.cancel().catch(() => void 0);
+    }
+    if (observer !== void 0) {
+      notifyObserver(observer, {
+        operation: observationOperation,
+        durationMs: Math.max(0, Date.now() - startedAt),
+        attempts,
+        backoffMs: backoff.elapsedMs + (backoff.startedAt === void 0 ? 0 : Math.max(0, Date.now() - backoff.startedAt)),
+        status,
+        outcome: signal.aborted ? signal.reason === timeoutReason ? "timeout" : "canceled" : outcome
+      });
+    }
+  }
+}
+
 // ../sdk/src/client.ts
 var httpMethods = [
   "connect",
@@ -5504,28 +6171,43 @@ function normalizeRequestOptions(options) {
   }
   return normalized;
 }
-function patchGeneratedRequests(client2) {
+function configureRequests(client2) {
+  client2.interceptors.request.use(captureRequestDestination);
+  const { setConfig } = client2;
+  client2.setConfig = (config2) => {
+    validateClientRequestPolicy(config2);
+    return setConfig({ ...config2, headers: normalizeHeaders(config2.headers) });
+  };
   const { request } = client2;
-  client2.request = (options) => request(normalizeRequestOptions(options));
+  client2.request = (options) => requestWithPolicy(
+    client2.getConfig(),
+    normalizeRequestOptions(options),
+    (overrides) => request(normalizeRequestOptions({ ...options, ...overrides }))
+  );
   for (const method of httpMethods) {
-    const dispatch = client2[method];
-    client2[method] = (options) => dispatch(normalizeRequestOptions(options));
+    const requestMethod = method.toUpperCase();
+    client2[method] = (options) => client2.request({ ...options, method: requestMethod });
     const sseDispatch = client2.sse[method];
     client2.sse[method] = (options) => sseDispatch(normalizeRequestOptions(options));
   }
 }
-patchGeneratedRequests(client);
+client.setConfig({ maxRetries: 0, timeoutMs: 0 });
+configureRequests(client);
 function createOmnaraClient(options = {}) {
   const client2 = createClient(
     createConfig({
       throwOnError: true
     })
   );
+  configureRequests(client2);
   client2.setConfig({
     baseUrl: options.baseUrl ?? client.getConfig().baseUrl,
     credentials: options.credentials,
     headers: options.headers,
-    fetch: options.fetch
+    fetch: options.fetch,
+    maxRetries: options.maxRetries,
+    timeoutMs: options.timeoutMs,
+    onRequestComplete: options.onRequestComplete
   });
   const { auth } = options;
   if (auth) {
@@ -5538,139 +6220,9 @@ function createOmnaraClient(options = {}) {
     if (!response.ok) throw await ApiError.fromResponse(response);
     return response;
   });
-  patchGeneratedRequests(client2);
   return client2;
 }
 
-// ../sdk/src/device.ts
-import * as z7 from "zod";
-var OMNARA_CLI_OAUTH_CLIENT_ID = "omnara-cli";
-var OAUTH_DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
-var zAuthorizationServerMetadata = z7.object({
-  issuer: z7.url(),
-  device_authorization_endpoint: z7.url(),
-  token_endpoint: z7.url(),
-  grant_types_supported: z7.array(z7.string()),
-  token_endpoint_auth_methods_supported: z7.array(z7.string())
-});
-var zDeviceAuthStartResponse = z7.object({
-  device_code: z7.string().min(1),
-  user_code: z7.string().min(1),
-  verification_uri: z7.string().min(1),
-  verification_uri_complete: z7.string().min(1),
-  expires_in: z7.number().int().positive(),
-  interval: z7.number().int().positive()
-});
-var zDeviceAuthErrorResponse = z7.object({
-  error: z7.string().min(1),
-  error_description: z7.string().optional()
-});
-var zDeviceAuthFailure = zJsonText.pipe(zDeviceAuthErrorResponse);
-var zDeviceAuthApprovedResponse = z7.object({
-  access_token: z7.string().min(1),
-  token_type: z7.string()
-});
-var DEVICE_AUTH_FAILURE_MESSAGES = {
-  access_denied: "the login request was denied",
-  expired_token: "the login request expired before it was approved"
-};
-var DeviceAuthError = class extends Error {
-  code;
-  constructor(code) {
-    super(DEVICE_AUTH_FAILURE_MESSAGES[code]);
-    this.name = "DeviceAuthError";
-    this.code = code;
-  }
-};
-async function postOAuthForm(fetchImpl, endpoint, body) {
-  return fetchImpl(endpoint, {
-    method: "POST",
-    headers: {
-      Accept: "application/json",
-      "Content-Type": "application/x-www-form-urlencoded"
-    },
-    body: body.toString()
-  });
-}
-function normalizeIssuer(raw) {
-  const issuer = new URL(raw);
-  if (issuer.username !== "" || issuer.password !== "" || issuer.pathname !== "/" || issuer.search !== "" || issuer.hash !== "") {
-    throw new Error("authorization server issuer must be an origin");
-  }
-  return issuer.origin;
-}
-async function startDeviceAuth(options) {
-  const fetchImpl = options.fetch ?? fetch;
-  const expectedIssuer = normalizeIssuer(options.issuerUrl);
-  const metadataUrl = new URL("/.well-known/oauth-authorization-server", `${expectedIssuer}/`);
-  const metadataResponse = await fetchImpl(metadataUrl, { headers: { Accept: "application/json" } });
-  if (!metadataResponse.ok) throw await ApiError.fromResponse(metadataResponse);
-  const metadata = zAuthorizationServerMetadata.parse(await metadataResponse.json());
-  if (normalizeIssuer(metadata.issuer) !== expectedIssuer) {
-    throw new Error(
-      `authorization server issuer mismatch: expected ${expectedIssuer}, received ${metadata.issuer}`
-    );
-  }
-  if (!metadata.grant_types_supported.includes(OAUTH_DEVICE_GRANT_TYPE)) {
-    throw new Error("authorization server does not support the OAuth device grant");
-  }
-  if (!metadata.token_endpoint_auth_methods_supported.includes("none")) {
-    throw new Error("authorization server does not support public OAuth clients");
-  }
-  const body = new URLSearchParams({ client_id: options.clientId });
-  if (options.tokenName !== void 0) body.set("token_name", options.tokenName);
-  const response = await postOAuthForm(fetchImpl, metadata.device_authorization_endpoint, body);
-  if (!response.ok) throw await ApiError.fromResponse(response);
-  const data = zDeviceAuthStartResponse.parse(await response.json());
-  return {
-    deviceCode: data.device_code,
-    userCode: data.user_code,
-    verificationUri: new URL(data.verification_uri, metadata.issuer).toString(),
-    verificationUriComplete: new URL(data.verification_uri_complete, metadata.issuer).toString(),
-    expiresInSeconds: data.expires_in,
-    intervalSeconds: data.interval,
-    tokenEndpoint: metadata.token_endpoint,
-    clientId: options.clientId
-  };
-}
-function defaultSleep(seconds) {
-  return new Promise((resolve3) => setTimeout(resolve3, seconds * 1e3));
-}
-async function pollDeviceAuthToken(options) {
-  const fetchImpl = options.fetch ?? fetch;
-  const sleep = options.sleep ?? defaultSleep;
-  let interval = options.intervalSeconds;
-  while (true) {
-    await sleep(interval);
-    const response = await postOAuthForm(
-      fetchImpl,
-      options.tokenEndpoint,
-      new URLSearchParams({
-        grant_type: OAUTH_DEVICE_GRANT_TYPE,
-        device_code: options.deviceCode,
-        client_id: options.clientId
-      })
-    );
-    if (response.status === 200) {
-      return zDeviceAuthApprovedResponse.parse(await response.json()).access_token;
-    }
-    if (response.status === 400) {
-      const failure = zDeviceAuthFailure.safeParse(await response.clone().text());
-      if (failure.success) {
-        if (failure.data.error === "authorization_pending") continue;
-        if (failure.data.error === "slow_down") {
-          interval += 5;
-          continue;
-        }
-        if (failure.data.error === "access_denied" || failure.data.error === "expired_token") {
-          throw new DeviceAuthError(failure.data.error);
-        }
-      }
-    }
-    throw await ApiError.fromResponse(response);
-  }
-}
-
 // ../sdk/src/generated/sdk.gen.ts
 var sdk_gen_exports = {};
 __export(sdk_gen_exports, {
@@ -5749,11 +6301,14 @@ __export(sdk_gen_exports, {
   getAgentUsage: () => getAgentUsage,
   getArtifact: () => getArtifact,
   getArtifactContent: () => getArtifactContent,
+  getConfiguredModel: () => getConfiguredModel,
   getCronTrigger: () => getCronTrigger,
   getCurrentUser: () => getCurrentUser,
   getDaemonGitCredentials: () => getDaemonGitCredentials,
   getDaemonSkillArchive: () => getDaemonSkillArchive,
+  getEventWebhook: () => getEventWebhook,
   getIntegration: () => getIntegration,
+  getIntegrationSubscription: () => getIntegrationSubscription,
   getMachine: () => getMachine,
   getMachinePool: () => getMachinePool,
   getMemoryStore: () => getMemoryStore,
@@ -5763,11 +6318,17 @@ __export(sdk_gen_exports, {
   getOrgOverview: () => getOrgOverview,
   getOrgUsage: () => getOrgUsage,
   getOrgUsageTimeseries: () => getOrgUsageTimeseries,
+  getProject: () => getProject,
   getProjectAvailableSecret: () => getProjectAvailableSecret,
+  getProjectMachineGrant: () => getProjectMachineGrant,
   getProjectMachinePoolGrant: () => getProjectMachinePoolGrant,
+  getProjectModelGrant: () => getProjectModelGrant,
   getProjectUsage: () => getProjectUsage,
   getSecret: () => getSecret,
+  getSecretGrant: () => getSecretGrant,
   getSkill: () => getSkill,
+  getSkillGrant: () => getSkillGrant,
+  getToolCall: () => getToolCall,
   getToolCatalog: () => getToolCatalog,
   inspectIntegrationGitHubInstallations: () => inspectIntegrationGitHubInstallations,
   listActors: () => listActors,
@@ -5803,9 +6364,11 @@ __export(sdk_gen_exports, {
   listPersonalAccessTokens: () => listPersonalAccessTokens,
   listProjectAvailableSecrets: () => listProjectAvailableSecrets,
   listProjectAvailableSkills: () => listProjectAvailableSkills,
+  listProjectInteractions: () => listProjectInteractions,
   listProjectMachineGrants: () => listProjectMachineGrants,
   listProjectMachinePoolGrants: () => listProjectMachinePoolGrants,
   listProjectModelGrants: () => listProjectModelGrants,
+  listProjectToolCalls: () => listProjectToolCalls,
   listQueuedBacklogInputs: () => listQueuedBacklogInputs,
   listSecretGrants: () => listSecretGrants,
   listSecrets: () => listSecrets,
@@ -5850,6 +6413,7 @@ __export(sdk_gen_exports, {
   updateModelProviderConfig: () => updateModelProviderConfig,
   updateOrgApiKey: () => updateOrgApiKey,
   updateOrgMember: () => updateOrgMember,
+  updateProject: () => updateProject,
   updateProjectMachinePoolGrant: () => updateProjectMachinePoolGrant,
   updateProjectModelGrant: () => updateProjectModelGrant,
   updateSecret: () => updateSecret,
@@ -5911,6 +6475,20 @@ var deleteEventWebhook = (options) => (options.client ?? client).delete({
   url: "/orgs/{orgID}/projects/{projectID}/event-webhooks/{webhookID}",
   ...options
 });
+var getEventWebhook = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetEventWebhookResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/projects/{projectID}/event-webhooks/{webhookID}",
+  ...options
+});
 var updateEventWebhook = (options) => (options.client ?? client).patch({
   responseValidator: relaxedResponseValidator(zUpdateEventWebhookResponse),
   security: [
@@ -6264,6 +6842,42 @@ var deleteProject = (options) => (options.client ?? client).delete({
   url: "/orgs/{orgID}/projects/{projectID}",
   ...options
 });
+var getProject = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetProjectResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/projects/{projectID}",
+  ...options
+});
+var updateProject = (options) => (options.client ?? client).patch({
+  responseValidator: relaxedResponseValidator(zUpdateProjectResponse),
+  security: [
+    {
+      key: "bearerAuth",
+      scheme: "bearer",
+      type: "http"
+    },
+    {
+      in: "cookie",
+      name: "__Host-omnara_session",
+      type: "apiKey"
+    },
+    { name: "X-Omnara-Csrf", type: "apiKey" }
+  ],
+  url: "/orgs/{orgID}/projects/{projectID}",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
 var getProjectUsage = (options) => (options.client ?? client).get({
   responseValidator: relaxedResponseValidator(zGetProjectUsageResponse),
   security: [{
@@ -6690,6 +7304,20 @@ var deleteSkillGrant = (options) => (options.client ?? client).delete({
   url: "/orgs/{orgID}/skills/{skillID}/grants/{grantID}",
   ...options
 });
+var getSkillGrant = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetSkillGrantResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/skills/{skillID}/grants/{grantID}",
+  ...options
+});
 var listProjectAvailableSkills = (options) => (options.client ?? client).get({
   responseValidator: relaxedResponseValidator(zListProjectAvailableSkillsResponse),
   security: [{
@@ -7065,6 +7693,20 @@ var deleteSecretGrant = (options) => (options.client ?? client).delete({
   url: "/orgs/{orgID}/secrets/{secretID}/grants/{grantID}",
   ...options
 });
+var getSecretGrant = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetSecretGrantResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/secrets/{secretID}/grants/{grantID}",
+  ...options
+});
 var resolveAgentConfigTools = (options) => (options.client ?? client).post({
   responseValidator: relaxedResponseValidator(zResolveAgentConfigToolsResponse),
   security: [
@@ -7601,6 +8243,20 @@ var createAgentInput = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
+var listProjectToolCalls = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zListProjectToolCallsResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/projects/{projectID}/tool-calls",
+  ...options
+});
 var listToolCalls = (options) => (options.client ?? client).get({
   responseValidator: relaxedResponseValidator(zListToolCallsResponse2),
   security: [{
@@ -7615,6 +8271,20 @@ var listToolCalls = (options) => (options.client ?? client).get({
   url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls",
   ...options
 });
+var getToolCall = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetToolCallResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/projects/{projectID}/agents/{agentID}/tool-calls/{toolCallID}",
+  ...options
+});
 var submitToolCallResult = (options) => (options.client ?? client).post({
   responseValidator: relaxedResponseValidator(zSubmitToolCallResultResponse2),
   security: [
@@ -7715,6 +8385,20 @@ var cancelAgent = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
+var listProjectInteractions = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zListProjectInteractionsResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/projects/{projectID}/interactions",
+  ...options
+});
 var listAgentInteractions = (options) => (options.client ?? client).get({
   responseValidator: relaxedResponseValidator(zListAgentInteractionsResponse2),
   security: [{
@@ -7941,6 +8625,20 @@ var deleteProjectMachineGrant = (options) => (options.client ?? client).delete({
   url: "/orgs/{orgID}/projects/{projectID}/machine-grants/{grantID}",
   ...options
 });
+var getProjectMachineGrant = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetProjectMachineGrantResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/projects/{projectID}/machine-grants/{grantID}",
+  ...options
+});
 var listProjectAvailableSecrets = (options) => (options.client ?? client).get({
   responseValidator: relaxedResponseValidator(zListProjectAvailableSecretsResponse),
   security: [{
@@ -8289,6 +8987,20 @@ var deleteConfiguredModel = (options) => (options.client ?? client).delete({
   url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
   ...options
 });
+var getConfiguredModel = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetConfiguredModelResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/model-provider-configs/{modelProviderConfigID}/models/{configuredModelID}",
+  ...options
+});
 var updateConfiguredModel = (options) => (options.client ?? client).put({
   responseValidator: relaxedResponseValidator(zUpdateConfiguredModelResponse),
   security: [
@@ -8365,6 +9077,20 @@ var deleteProjectModelGrant = (options) => (options.client ?? client).delete({
   url: "/orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
   ...options
 });
+var getProjectModelGrant = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetProjectModelGrantResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/projects/{projectID}/model-grants/{modelGrantID}",
+  ...options
+});
 var updateProjectModelGrant = (options) => (options.client ?? client).patch({
   responseValidator: relaxedResponseValidator(zUpdateProjectModelGrantResponse),
   security: [
@@ -8889,6 +9615,20 @@ var deleteIntegrationSubscription = (options) => (options.client ?? client).dele
   url: "/orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/subscriptions/{subscriptionID}",
   ...options
 });
+var getIntegrationSubscription = (options) => (options.client ?? client).get({
+  responseValidator: relaxedResponseValidator(zGetIntegrationSubscriptionResponse),
+  security: [{
+    key: "bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    in: "cookie",
+    name: "__Host-omnara_session",
+    type: "apiKey"
+  }],
+  url: "/orgs/{orgID}/projects/{projectID}/integrations/{integrationID}/subscriptions/{subscriptionID}",
+  ...options
+});
 var configureIntegration = (options) => (options.client ?? client).post({
   responseValidator: relaxedResponseValidator(zConfigureIntegrationResponse),
   security: [
@@ -8958,6 +9698,138 @@ var listIntegrationDefinitions = (options) => (options.client ?? client).get({
   ...options
 });
 
+// ../sdk/src/device.ts
+import * as z7 from "zod";
+var OMNARA_CLI_OAUTH_CLIENT_ID = "omnara-cli";
+var OAUTH_DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+var zAuthorizationServerMetadata = z7.object({
+  issuer: z7.url(),
+  device_authorization_endpoint: z7.url(),
+  token_endpoint: z7.url(),
+  grant_types_supported: z7.array(z7.string()),
+  token_endpoint_auth_methods_supported: z7.array(z7.string())
+});
+var zDeviceAuthStartResponse = z7.object({
+  device_code: z7.string().min(1),
+  user_code: z7.string().min(1),
+  verification_uri: z7.string().min(1),
+  verification_uri_complete: z7.string().min(1),
+  expires_in: z7.number().int().positive(),
+  interval: z7.number().int().positive()
+});
+var zDeviceAuthErrorResponse = z7.object({
+  error: z7.string().min(1),
+  error_description: z7.string().optional()
+});
+var zDeviceAuthFailure = zJsonText.pipe(zDeviceAuthErrorResponse);
+var zDeviceAuthApprovedResponse = z7.object({
+  access_token: z7.string().min(1),
+  token_type: z7.string()
+});
+var DEVICE_AUTH_FAILURE_MESSAGES = {
+  access_denied: "the login request was denied",
+  expired_token: "the login request expired before it was approved"
+};
+var DeviceAuthError = class extends Error {
+  code;
+  constructor(code) {
+    super(DEVICE_AUTH_FAILURE_MESSAGES[code]);
+    this.name = "DeviceAuthError";
+    this.code = code;
+  }
+};
+async function postOAuthForm(fetchImpl, endpoint, body) {
+  return fetchImpl(endpoint, {
+    method: "POST",
+    headers: {
+      Accept: "application/json",
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: body.toString()
+  });
+}
+function normalizeIssuer(raw) {
+  const issuer = new URL(raw);
+  if (issuer.username !== "" || issuer.password !== "" || issuer.pathname !== "/" || issuer.search !== "" || issuer.hash !== "") {
+    throw new Error("authorization server issuer must be an origin");
+  }
+  return issuer.origin;
+}
+async function startDeviceAuth(options) {
+  const fetchImpl = options.fetch ?? fetch;
+  const expectedIssuer = normalizeIssuer(options.issuerUrl);
+  const metadataUrl = new URL("/.well-known/oauth-authorization-server", `${expectedIssuer}/`);
+  const metadataResponse = await fetchImpl(metadataUrl, { headers: { Accept: "application/json" } });
+  if (!metadataResponse.ok) throw await ApiError.fromResponse(metadataResponse);
+  const metadata = zAuthorizationServerMetadata.parse(await metadataResponse.json());
+  if (normalizeIssuer(metadata.issuer) !== expectedIssuer) {
+    throw new Error(
+      `authorization server issuer mismatch: expected ${expectedIssuer}, received ${metadata.issuer}`
+    );
+  }
+  if (!metadata.grant_types_supported.includes(OAUTH_DEVICE_GRANT_TYPE)) {
+    throw new Error("authorization server does not support the OAuth device grant");
+  }
+  if (!metadata.token_endpoint_auth_methods_supported.includes("none")) {
+    throw new Error("authorization server does not support public OAuth clients");
+  }
+  const body = new URLSearchParams({ client_id: options.clientId });
+  if (options.tokenName !== void 0) body.set("token_name", options.tokenName);
+  const response = await postOAuthForm(fetchImpl, metadata.device_authorization_endpoint, body);
+  if (!response.ok) throw await ApiError.fromResponse(response);
+  const data = zDeviceAuthStartResponse.parse(await response.json());
+  return {
+    deviceCode: data.device_code,
+    userCode: data.user_code,
+    verificationUri: new URL(data.verification_uri, metadata.issuer).toString(),
+    verificationUriComplete: new URL(data.verification_uri_complete, metadata.issuer).toString(),
+    expiresInSeconds: data.expires_in,
+    intervalSeconds: data.interval,
+    tokenEndpoint: metadata.token_endpoint,
+    clientId: options.clientId
+  };
+}
+function defaultSleep(seconds) {
+  return new Promise((resolve3) => setTimeout(resolve3, seconds * 1e3));
+}
+async function pollDeviceAuthToken(options) {
+  const fetchImpl = options.fetch ?? fetch;
+  const sleep = options.sleep ?? defaultSleep;
+  let interval = options.intervalSeconds;
+  while (true) {
+    await sleep(interval);
+    const response = await postOAuthForm(
+      fetchImpl,
+      options.tokenEndpoint,
+      new URLSearchParams({
+        grant_type: OAUTH_DEVICE_GRANT_TYPE,
+        device_code: options.deviceCode,
+        client_id: options.clientId
+      })
+    );
+    if (response.status === 200) {
+      return zDeviceAuthApprovedResponse.parse(await response.json()).access_token;
+    }
+    if (response.status === 400) {
+      const failure = zDeviceAuthFailure.safeParse(await response.clone().text());
+      if (failure.success) {
+        if (failure.data.error === "authorization_pending") continue;
+        if (failure.data.error === "slow_down") {
+          interval += 5;
+          continue;
+        }
+        if (failure.data.error === "access_denied" || failure.data.error === "expired_token") {
+          throw new DeviceAuthError(failure.data.error);
+        }
+      }
+    }
+    throw await ApiError.fromResponse(response);
+  }
+}
+
+// ../sdk/src/event-webhook.ts
+var webhookPayload = relaxedSchema(zEventWebhookPayload);
+
 // ../sdk/src/memory.ts
 var MAX_MEMORY_FILE_BYTES = 10 * 1024 * 1024;
 var FILE_DIGEST_HEADER = "X-Omnara-File-Digest";
@@ -9186,6 +10058,12 @@ var zConfigFile = z10.looseObject({
   org_id: zOrganizationId.optional(),
   project_id: zProjectId.optional()
 });
+function firstPresentSetting(...values) {
+  for (const value of values) {
+    if (value !== void 0 && value.trim() !== "") return value;
+  }
+  return void 0;
+}
 function configFilePath() {
   return join(homedir(), ".config", "omnara", "config.json");
 }
@@ -9483,7 +10361,7 @@ async function loginWithDevice(options) {
   report.success(loginMessage);
   report.info(`Token saved to ${store.path}`);
   if (validationWarning !== void 0) report.warn(validationWarning);
-  if (process.env.OMNARA_API_KEY !== void 0) {
+  if (firstPresentSetting(process.env.OMNARA_API_KEY) !== void 0) {
     report.warn("OMNARA_API_KEY is set and takes precedence over the saved token");
   }
   return { token, orgId, projectId, hasOrganizations };
@@ -9492,18 +10370,47 @@ async function loginWithDevice(options) {
 // src/poll.ts
 var POLL_INTERVAL_SECONDS = 2;
 var MAX_CONSECUTIVE_POLL_FAILURES = 3;
+var MAX_TIMER_MS = 2 ** 31 - 1;
 function sleepSeconds(seconds) {
   return new Promise((resolve3) => setTimeout(resolve3, seconds * 1e3));
 }
+var DeadlineExceeded = class extends Error {
+};
+var PollTerminalError = class extends CliInputError {
+};
+async function fetchBeforeDeadline(abortAt, fetchOnce) {
+  const controller = new AbortController();
+  const remainingMs = abortAt - Date.now();
+  let timer;
+  const expired = new Promise((_, reject) => {
+    if (remainingMs > MAX_TIMER_MS) return;
+    timer = setTimeout(
+      () => {
+        controller.abort();
+        reject(new DeadlineExceeded());
+      },
+      Math.max(0, remainingMs)
+    );
+  });
+  try {
+    return await Promise.race([fetchOnce(controller.signal), expired]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
 async function pollUntilDeadline(options) {
   const deadline = Date.parse(options.expiresAt);
+  const abortAt = deadline + POLL_INTERVAL_SECONDS * 1e3;
   let consecutiveFailures = 0;
   while (true) {
     try {
-      const found = await options.fetchOnce();
+      const found = await fetchBeforeDeadline(abortAt, options.fetchOnce);
+      if (Date.now() >= abortAt) break;
       consecutiveFailures = 0;
       if (found !== void 0) return found;
     } catch (error) {
+      if (error instanceof PollTerminalError) throw error;
+      if (error instanceof DeadlineExceeded || Date.now() >= deadline) break;
       consecutiveFailures += 1;
       if (consecutiveFailures >= MAX_CONSECUTIVE_POLL_FAILURES) throw error;
     }
@@ -9519,10 +10426,13 @@ var DEFAULT_API_URL = "https://api.omnara.com/v1";
 var DEFAULT_ISSUER_URL = "https://app.omnara.com";
 function resolveUrls(file, env) {
   return {
-    apiUrl: env.OMNARA_API_URL ?? file.api_url ?? DEFAULT_API_URL,
-    issuerUrl: env.OMNARA_ISSUER_URL ?? file.issuer_url ?? DEFAULT_ISSUER_URL
+    apiUrl: firstPresentSetting(env.OMNARA_API_URL, file.api_url) ?? DEFAULT_API_URL,
+    issuerUrl: firstPresentSetting(env.OMNARA_ISSUER_URL, file.issuer_url) ?? DEFAULT_ISSUER_URL
   };
 }
+function resolveSavedToken(env, fileToken) {
+  return firstPresentSetting(env.OMNARA_API_KEY, fileToken);
+}
 function migrateLegacyBaseUrl(file) {
   const { base_url: baseUrl, ...rest } = file;
   if (baseUrl === void 0) return void 0;
@@ -9553,7 +10463,7 @@ function loadConfig() {
   const { apiUrl, issuerUrl } = resolveUrls(file, process.env);
   let saved = { orgId: file.org_id, projectId: file.project_id };
   const resolveToken = createTokenResolver({
-    savedToken: process.env.OMNARA_API_KEY ?? file.token,
+    savedToken: resolveSavedToken(process.env, file.token),
     canPrompt: canPromptInteractively,
     login: async () => {
       const report = createLoginReporter(`Not logged in yet. Log in to ${issuerUrl}`);
@@ -9584,10 +10494,10 @@ function loadConfig() {
     fetch: globalThis.fetch,
     sleep: sleepSeconds,
     get defaultOrgId() {
-      return process.env.OMNARA_ORG_ID ?? saved.orgId;
+      return firstPresentSetting(process.env.OMNARA_ORG_ID, saved.orgId);
     },
     get defaultProjectId() {
-      return process.env.OMNARA_PROJECT_ID ?? saved.projectId;
+      return firstPresentSetting(process.env.OMNARA_PROJECT_ID, saved.projectId);
     },
     ensureLoggedIn: async () => {
       await resolveToken();
@@ -9595,7 +10505,7 @@ function loadConfig() {
   };
 }
 function describeValue(envName, fileValue, defaultValue) {
-  const envValue = process.env[envName];
+  const envValue = firstPresentSetting(process.env[envName]);
   if (envValue !== void 0) {
     const shadowed = fileValue !== void 0 ? ` (config has ${fileValue})` : "";
     return `${envValue}  [from ${envName}${shadowed}]`;
@@ -9999,7 +10909,9 @@ function collectFlagValues(specs, options) {
   return root;
 }
 function parseWithSchema(schema, value, label) {
-  const result = schema.safeParse(value);
+  const result = schema.safeParse(value, {
+    error: (issue) => issue.input === "" ? "value is empty" : void 0
+  });
   if (!result.success) {
     throw new CliInputError(`invalid ${label}:
 ${z13.prettifyError(result.error)}`);
@@ -10168,7 +11080,7 @@ function registerLoginCommand(program2, cli) {
         report.finish(
           `This account has no organization yet. Create one at ${new URL("/onboarding", cli.issuerUrl).toString()}, then run 'omnara config select'.`
         );
-      } else if ((process.env.OMNARA_ORG_ID ?? orgId) === void 0) {
+      } else if (firstPresentSetting(process.env.OMNARA_ORG_ID, orgId) === void 0) {
         report.finish("Run 'omnara config select' to choose a default organization and project.");
       } else {
         report.finish();
@@ -10190,7 +11102,7 @@ function registerLoginCommand(program2, cli) {
 }
 
 // src/manifest.ts
-import * as z28 from "zod";
+import * as z29 from "zod";
 
 // src/agent-commands.ts
 import * as z19 from "zod";
@@ -10318,20 +11230,11 @@ function projectActorsQueryPredicate(orgID, projectID) {
 }
 
 // ../react/src/domains/agent-activity.ts
-var activeAgentPollIntervalMs = 5e3;
 function isAgentActive(agent) {
   const activity = agent.activity;
   if (!activity) return false;
   return activity.state === "running" || activity.state === "waiting_on_interaction" || activity.running_processes.count > 0 || activity.working_subagents.count > 0;
 }
-function activeAgentsRefetchInterval(getAgents, refetchInterval) {
-  return (query) => {
-    const data = query.state.data;
-    const own = refetchInterval?.(data);
-    if (own) return own;
-    return getAgents(data).some(isAgentActive) ? activeAgentPollIntervalMs : false;
-  };
-}
 
 // ../react/src/domains/agent-chat.ts
 import { useQueryClient as useQueryClient3 } from "@tanstack/react-query";
@@ -10507,10 +11410,8 @@ function agentEventsToMessages(events, { hasOlderEvents = false } = {}) {
       toolType: part.toolType,
       state: "output-available",
       input: part.input,
-      output: {
-        outcome: event.outcome,
-        contentBlocks
-      }
+      output: { contentBlocks },
+      toolOutcome: event.outcome
     };
     if (toolErrorCode != null) toolPart.toolErrorCode = toolErrorCode;
     const mediaParts = contentBlocks.flatMap(
@@ -11542,46 +12443,47 @@ import {
   useQueryClient as useQueryClient6,
   useSuspenseQuery as useSuspenseQuery3
 } from "@tanstack/react-query";
-var agentListRefetchInterval = activeAgentsRefetchInterval(
-  (data) => data?.pages.flatMap((page) => page.data) ?? []
-);
 
 // ../react/src/domains/cron-triggers.ts
 import { useInfiniteQuery as useInfiniteQuery4, useMutation as useMutation6, useQueryClient as useQueryClient7 } from "@tanstack/react-query";
 
 // ../react/src/domains/event-webhooks.ts
-import { useMutation as useMutation7, useQuery as useQuery7, useQueryClient as useQueryClient8 } from "@tanstack/react-query";
+import {
+  useInfiniteQuery as useInfiniteQuery5,
+  useMutation as useMutation7,
+  useQueryClient as useQueryClient8
+} from "@tanstack/react-query";
 
 // ../react/src/domains/integration-subscriptions.ts
 import {
-  useInfiniteQuery as useInfiniteQuery5,
+  useInfiniteQuery as useInfiniteQuery6,
   useMutation as useMutation8,
   useQueryClient as useQueryClient9
 } from "@tanstack/react-query";
 
 // ../react/src/domains/integrations.ts
 import {
-  useInfiniteQuery as useInfiniteQuery6,
+  useInfiniteQuery as useInfiniteQuery7,
   useMutation as useMutation9,
-  useQuery as useQuery8,
+  useQuery as useQuery7,
   useQueryClient as useQueryClient10
 } from "@tanstack/react-query";
 
 // ../react/src/domains/invitations.ts
-import { useMutation as useMutation10, useQuery as useQuery9, useQueryClient as useQueryClient11, useSuspenseQuery as useSuspenseQuery4 } from "@tanstack/react-query";
+import { useMutation as useMutation10, useQuery as useQuery8, useQueryClient as useQueryClient11, useSuspenseQuery as useSuspenseQuery4 } from "@tanstack/react-query";
 
 // ../react/src/domains/machine-pools.ts
-import { useInfiniteQuery as useInfiniteQuery7, useMutation as useMutation11, useQuery as useQuery10, useQueryClient as useQueryClient12 } from "@tanstack/react-query";
+import { useInfiniteQuery as useInfiniteQuery8, useMutation as useMutation11, useQuery as useQuery9, useQueryClient as useQueryClient12 } from "@tanstack/react-query";
 
 // ../react/src/domains/machines.ts
-import { useInfiniteQuery as useInfiniteQuery8, useMutation as useMutation12, useQuery as useQuery11, useQueryClient as useQueryClient13 } from "@tanstack/react-query";
+import { useInfiniteQuery as useInfiniteQuery9, useMutation as useMutation12, useQuery as useQuery10, useQueryClient as useQueryClient13 } from "@tanstack/react-query";
 
 // ../react/src/domains/mcp-registry.ts
-import { useInfiniteQuery as useInfiniteQuery9, useQuery as useQuery12, useQueryClient as useQueryClient14 } from "@tanstack/react-query";
+import { useInfiniteQuery as useInfiniteQuery10, useQuery as useQuery11, useQueryClient as useQueryClient14 } from "@tanstack/react-query";
 var serverInfoStaleTime = 5 * 60 * 1e3;
 
 // ../react/src/domains/mcp-server-tools.ts
-import { useQuery as useQuery13 } from "@tanstack/react-query";
+import { useQuery as useQuery12 } from "@tanstack/react-query";
 var mcpServerToolsStaleTime = 60 * 1e3;
 
 // ../react/src/domains/me.ts
@@ -11589,10 +12491,9 @@ import { useMutation as useMutation13, useQueryClient as useQueryClient15, useSu
 
 // ../react/src/domains/memory.ts
 import {
-  skipToken,
-  useInfiniteQuery as useInfiniteQuery10,
+  useInfiniteQuery as useInfiniteQuery11,
   useMutation as useMutation14,
-  useQuery as useQuery14,
+  useQuery as useQuery13,
   useQueryClient as useQueryClient16
 } from "@tanstack/react-query";
 import * as z16 from "zod";
@@ -11600,55 +12501,50 @@ var memoryFileDigest = z16.object({ digest: z16.string() });
 
 // ../react/src/domains/model-providers.ts
 import {
-  useInfiniteQuery as useInfiniteQuery11,
+  useInfiniteQuery as useInfiniteQuery12,
   useMutation as useMutation15,
   useQueries,
-  useQuery as useQuery15,
+  useQuery as useQuery14,
   useQueryClient as useQueryClient17
 } from "@tanstack/react-query";
 import { useEffect as useEffect2 } from "react";
 
 // ../react/src/domains/org-api-keys.ts
-import { useInfiniteQuery as useInfiniteQuery12, useMutation as useMutation16, useQuery as useQuery16, useQueryClient as useQueryClient18 } from "@tanstack/react-query";
+import { useInfiniteQuery as useInfiniteQuery13, useMutation as useMutation16, useQuery as useQuery15, useQueryClient as useQueryClient18 } from "@tanstack/react-query";
 
 // ../react/src/domains/org-members.ts
-import { useMutation as useMutation17, useQuery as useQuery17, useQueryClient as useQueryClient19 } from "@tanstack/react-query";
+import { useMutation as useMutation17, useQuery as useQuery16, useQueryClient as useQueryClient19 } from "@tanstack/react-query";
 
 // ../react/src/domains/orgs.ts
-import { useInfiniteQuery as useInfiniteQuery13, useMutation as useMutation18, useQuery as useQuery18, useQueryClient as useQueryClient20 } from "@tanstack/react-query";
+import { useInfiniteQuery as useInfiniteQuery14, useMutation as useMutation18, useQuery as useQuery17, useQueryClient as useQueryClient20 } from "@tanstack/react-query";
 
 // ../react/src/domains/personal-access-tokens.ts
-import { useInfiniteQuery as useInfiniteQuery14, useMutation as useMutation19, useQueryClient as useQueryClient21 } from "@tanstack/react-query";
+import { useInfiniteQuery as useInfiniteQuery15, useMutation as useMutation19, useQueryClient as useQueryClient21 } from "@tanstack/react-query";
 
 // ../react/src/domains/project-grants.ts
-import { useInfiniteQuery as useInfiniteQuery15, useMutation as useMutation20, useQueryClient as useQueryClient22 } from "@tanstack/react-query";
+import { useInfiniteQuery as useInfiniteQuery16, useMutation as useMutation20, useQueryClient as useQueryClient22 } from "@tanstack/react-query";
 
 // ../react/src/domains/projects.ts
-import {
-  skipToken as skipToken2,
-  useInfiniteQuery as useInfiniteQuery16,
-  useQueryClient as useQueryClient23,
-  useSuspenseInfiniteQuery
-} from "@tanstack/react-query";
+import { useInfiniteQuery as useInfiniteQuery17, useQueryClient as useQueryClient23, useSuspenseInfiniteQuery } from "@tanstack/react-query";
 
 // ../react/src/domains/secrets.ts
 import {
-  useInfiniteQuery as useInfiniteQuery17,
+  useInfiniteQuery as useInfiniteQuery18,
   useMutation as useMutation21,
-  useQuery as useQuery19,
+  useQuery as useQuery18,
   useQueryClient as useQueryClient24
 } from "@tanstack/react-query";
 
 // ../react/src/domains/skills.ts
 import {
-  useInfiniteQuery as useInfiniteQuery18,
+  useInfiniteQuery as useInfiniteQuery19,
   useMutation as useMutation22,
-  useQuery as useQuery20,
+  useQuery as useQuery19,
   useQueryClient as useQueryClient25
 } from "@tanstack/react-query";
 
 // ../react/src/domains/tool-catalog.ts
-import { useQuery as useQuery21 } from "@tanstack/react-query";
+import { useQuery as useQuery20 } from "@tanstack/react-query";
 
 // src/chat.tsx
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
@@ -11774,6 +12670,7 @@ function SelectList({
 }
 function InteractionPrompt({
   interaction,
+  agentID,
   onAnswer
 }) {
   const approval = interaction.interaction_kind === "permission";
@@ -11799,11 +12696,11 @@ function InteractionPrompt({
       " ",
       form.title
     ] }),
-    interaction.agent_name != null && /* @__PURE__ */ jsxs(Text, { children: [
+    interaction.agent_id !== agentID && /* @__PURE__ */ jsxs(Text, { children: [
       "  ",
       /* @__PURE__ */ jsx2(Text, { dimColor: true, children: "from subagent" }),
       " ",
-      interaction.agent_name
+      (interaction.agent_name ?? "") || interaction.agent_id
     ] }),
     (form.context ?? []).map((item) => /* @__PURE__ */ jsxs(Text, { children: [
       "  ",
@@ -11876,7 +12773,6 @@ var streamingTailLines = 8;
 var streamingTailChars = 1500;
 var zToolInput2 = z18.record(z18.string(), z18.json());
 var zToolOutput = z18.object({
-  outcome: zToolCallOutcome,
   contentBlocks: z18.array(zToolResultContentBlock)
 });
 function formatDuration(ms) {
@@ -11896,12 +12792,13 @@ function toolOutput(part) {
   if (part.state !== "output-available") return void 0;
   const output = zToolOutput.safeParse(part.output);
   if (!output.success) return void 0;
+  const outcome = part.toolOutcome ?? "succeeded";
   for (const block of output.data.contentBlocks) {
     if (block.type !== "text" && block.type !== "structured_data") continue;
     const text = blockText(block);
-    if (text.trim() !== "") return { outcome: output.data.outcome, text };
+    if (text.trim() !== "") return { outcome, text };
   }
-  return { outcome: output.data.outcome, text: void 0 };
+  return { outcome, text: void 0 };
 }
 function ToolPartView({ part }) {
   const summary = useMemo2(() => toolSummary(part), [part]);
@@ -12177,6 +13074,7 @@ function Chat({ scope }) {
       InteractionPrompt,
       {
         interaction,
+        agentID: scope.agentID,
         onAnswer: (answers) => {
           void resolveInteraction.mutateAsync({
             interactionID: interaction.id,
@@ -12258,14 +13156,110 @@ var agentEventsStreamOp = customOp({
   }
 });
 
+// src/agent-wait.ts
+import * as z20 from "zod";
+var DEFAULT_AGENT_WAIT_TIMEOUT_SECONDS = 300;
+var DEFAULT_AGENT_WAIT_STATE = "idle";
+var zWaitState = zAgentActivity.shape.state;
+var zAgentWaitStateFlags = z20.array(z20.string()).optional().transform((value) => value ?? []);
+var zAgentWaitTimeoutSeconds = z20.number().int().gte(0).optional().transform((value) => value ?? DEFAULT_AGENT_WAIT_TIMEOUT_SECONDS);
+function collectRepeatableFlag(value, previous) {
+  return [...previous ?? [], value];
+}
+function parseAgentWaitStates(values) {
+  const selected = values.length === 0 ? [DEFAULT_AGENT_WAIT_STATE] : values;
+  const states = [];
+  for (const value of selected) {
+    const parsed = zWaitState.safeParse(value);
+    if (!parsed.success) {
+      throw new CliInputError(
+        `invalid --activity-state ${value}: expected running, idle, waiting_on_interaction, or archived`
+      );
+    }
+    if (!states.includes(parsed.data)) states.push(parsed.data);
+  }
+  return states;
+}
+function agentWaitDeadline(nowMs, timeoutSeconds) {
+  if (timeoutSeconds === 0) {
+    return new Date(nowMs + 100 * 365 * 24 * 60 * 60 * 1e3).toISOString();
+  }
+  return new Date(nowMs + timeoutSeconds * 1e3).toISOString();
+}
+function agentMatchesWaitStates(agent, states) {
+  const current = agent.activity?.state;
+  if (current === void 0 || !states.includes(current)) return false;
+  return current !== "idle" || !isAgentActive(agent);
+}
+function agentWaitExpiredMessage(states, timeoutSeconds) {
+  const wanted = states.join(", ");
+  const note3 = states.includes("idle") ? " (idle also waits for subagents and background work to finish)" : "";
+  if (timeoutSeconds === 0) {
+    return `agent did not reach activity state ${wanted}${note3}`;
+  }
+  return `agent did not reach activity state ${wanted} within ${timeoutSeconds}s${note3}`;
+}
+function agentArchivedMessage(states) {
+  return `agent was archived before reaching activity state ${states.join(", ")}`;
+}
+async function waitForAgent(input) {
+  return pollUntilDeadline({
+    expiresAt: agentWaitDeadline(Date.now(), input.timeoutSeconds),
+    expiredMessage: agentWaitExpiredMessage(input.states, input.timeoutSeconds),
+    async fetchOnce(signal) {
+      const { data } = await sdk_gen_exports.getAgent({
+        client: input.client,
+        path: { orgID: input.orgID, projectID: input.projectID, agentID: input.agentID },
+        signal
+      });
+      if (agentMatchesWaitStates(data.agent, input.states)) return data;
+      const archived = data.agent.state === "archived" || data.agent.activity?.state === "archived";
+      if (archived) throw new PollTerminalError(agentArchivedMessage(input.states));
+      return void 0;
+    }
+  });
+}
+var agentWaitOp = customOp({
+  verb: "wait",
+  summary: "Wait until an agent reaches an activity state",
+  path: zListAgentsPath,
+  configure: (command) => {
+    command.argument("<agent-id>").option(
+      "--activity-state <state>",
+      "activity state to wait for; repeatable (default: idle, which also waits for subagents and background work)",
+      collectRepeatableFlag
+    ).option(
+      "--timeout <seconds>",
+      "seconds to wait before failing; 0 waits until interrupted (default: 300)",
+      parseNumberFlag
+    ).option("--json", "print the raw JSON response");
+  },
+  run: async ({ client: client2, path, args, options }) => {
+    const agentID = parseWithSchema(zAgentId, args[0], "agent id");
+    const states = parseAgentWaitStates(
+      parseWithSchema(zAgentWaitStateFlags, options.activityState, "--activity-state")
+    );
+    const timeoutSeconds = parseWithSchema(zAgentWaitTimeoutSeconds, options.timeout, "--timeout");
+    const response = await waitForAgent({
+      client: client2,
+      orgID: path.orgID,
+      projectID: path.projectID,
+      agentID,
+      states,
+      timeoutSeconds
+    });
+    renderResult(zOptionalRenderValue.parse(response), options.json === true);
+  }
+});
+
 // src/config-attachment.ts
 import { readFileSync as readFileSync2 } from "node:fs";
-import * as z20 from "zod";
-var zConfigSourceAttachment = z20.object({
-  file: z20.string().min(1).optional().describe("path to an agent config file (.yaml, .yml, or .json)"),
-  source: z20.string().min(1).optional().describe("inline agent config source (YAML or JSON)")
+import * as z21 from "zod";
+var zConfigSourceAttachment = z21.object({
+  file: z21.string().min(1).optional().describe("path to an agent config file (.yaml, .yml, or .json)"),
+  source: z21.string().min(1).optional().describe("inline agent config source (YAML or JSON)")
 });
-var zConfigAttachment = z20.object({
+var zConfigAttachment = z21.object({
   config: zAgentConfigId.optional().describe("existing agent config ID"),
   ...zConfigSourceAttachment.shape
 });
@@ -12282,8 +13276,8 @@ function fileFormat(filePath) {
   throw new CliInputError(`config file must end in .yaml, .yml, or .json: ${filePath}`);
 }
 var zDefinitionText = zJsonText.pipe(
-  z20.custom(
-    (value) => z20.record(z20.string(), z20.unknown()).safeParse(value).success,
+  z21.custom(
+    (value) => z21.record(z21.string(), z21.unknown()).safeParse(value).success,
     "expected a JSON object"
   )
 );
@@ -12369,13 +13363,13 @@ function formatVoid(message = "ok") {
 }
 
 // src/integration-setup.ts
-import * as z23 from "zod";
+import * as z24 from "zod";
 
 // src/slack-setup.ts
-import * as z22 from "zod";
+import * as z23 from "zod";
 
 // src/mcp-oauth.ts
-import * as z21 from "zod";
+import * as z22 from "zod";
 async function authorizeMcpOAuthSecret(options) {
   const { data: start } = await sdk_gen_exports.startSecretMcpoAuth({
     client: options.client,
@@ -12386,17 +13380,18 @@ async function authorizeMcpOAuthSecret(options) {
   return pollUntilDeadline({
     expiresAt: start.expires_at,
     expiredMessage: "MCP OAuth authorization expired before the secret was created",
-    async fetchOnce() {
+    async fetchOnce(signal) {
       const { data } = await sdk_gen_exports.listSecrets({
         client: options.client,
         path: { orgID: options.orgId },
-        query: { mcp_oauth_flow_id: start.flow_id, limit: 1 }
+        query: { mcp_oauth_flow_id: start.flow_id, limit: 1 },
+        signal
       });
       return data.data[0];
     }
   });
 }
-var zBrowserFlag = z21.boolean().default(true).describe("open the authorization URL in a browser");
+var zBrowserFlag = z22.boolean().default(true).describe("open the authorization URL in a browser");
 function openAuthorizationUrl(report, title, url4, browser) {
   report.url(title, url4);
   if (browser) {
@@ -12430,15 +13425,15 @@ async function runMcpOAuth(context) {
 }
 
 // src/slack-setup.ts
-var zSlackBody = z22.object({
-  app_name: z22.string().optional().describe("name for a new Slack app"),
-  app_configuration_token: z22.string().optional().describe("Slack app configuration token for a new app"),
-  icon_filename: z22.string().optional().describe("filename for the new Slack app icon"),
-  icon_data_base64: z22.string().optional().describe("base64-encoded Slack app icon"),
-  client_id: z22.string().optional().describe("existing Slack app client ID"),
-  client_secret: z22.string().optional().describe("existing Slack app client secret"),
-  signing_secret: z22.string().optional().describe("existing Slack app signing secret"),
-  return_to: z22.string().optional().describe("console-relative path opened after authorization"),
+var zSlackBody = z23.object({
+  app_name: z23.string().optional().describe("name for a new Slack app"),
+  app_configuration_token: z23.string().optional().describe("Slack app configuration token for a new app"),
+  icon_filename: z23.string().optional().describe("filename for the new Slack app icon"),
+  icon_data_base64: z23.string().optional().describe("base64-encoded Slack app icon"),
+  client_id: z23.string().optional().describe("existing Slack app client ID"),
+  client_secret: z23.string().optional().describe("existing Slack app client secret"),
+  signing_secret: z23.string().optional().describe("existing Slack app signing secret"),
+  return_to: z23.string().optional().describe("console-relative path opened after authorization"),
   browser: zBrowserFlag
 });
 function parseRequest(body) {
@@ -12467,7 +13462,7 @@ function parseRequest(body) {
     if (!result2.success) {
       throw new CliInputError(
         `invalid existing Slack app parameters:
-${z22.prettifyError(result2.error)}`
+${z23.prettifyError(result2.error)}`
       );
     }
     return { kind: "existing-app", body: result2.data };
@@ -12488,7 +13483,7 @@ ${z22.prettifyError(result2.error)}`
   if (!result.success) {
     throw new CliInputError(
       `invalid Slack app parameters:
-${z22.prettifyError(result.error)}
+${z23.prettifyError(result.error)}
 Pass --app-name and --app-configuration-token, or existing app credentials.`
     );
   }
@@ -12532,8 +13527,8 @@ async function runSlackIntegration(context) {
     integration = await pollUntilDeadline({
       expiresAt: start.expires_at,
       expiredMessage: "Slack authorization expired before the integration connected",
-      async fetchOnce() {
-        const { data } = await sdk_gen_exports.getIntegration({ client: client2, path: setupPath });
+      async fetchOnce(signal) {
+        const { data } = await sdk_gen_exports.getIntegration({ client: client2, path: setupPath, signal });
         return data.state === "active" && data.last_oauth_flow_id === start.flow_id ? data : void 0;
       }
     });
@@ -12553,8 +13548,8 @@ async function runSlackIntegration(context) {
 }
 
 // src/integration-setup.ts
-var zIntegrationProfilesBody = z23.object({
-  profile_ids: z23.array(zAgentProfileId).max(16).describe("repeat for each offered profile; preserves other integration settings")
+var zIntegrationProfilesBody = z24.object({
+  profile_ids: z24.array(zAgentProfileId).max(16).describe("repeat for each offered profile; preserves other integration settings")
 });
 async function runIntegrationProfilesUpdate(context) {
   const { client: client2, path, body, report } = context;
@@ -12655,8 +13650,12 @@ import { spawn as spawn2, spawnSync } from "node:child_process";
 import { accessSync, constants, existsSync as existsSync2, readdirSync, readFileSync as readFileSync3 } from "node:fs";
 import { homedir as homedir2, release } from "node:os";
 import { basename, dirname as dirname2, isAbsolute, join as join2, resolve } from "node:path";
-import * as z24 from "zod";
-var zMachineSetupBody = zConnectByoMachineRequest;
+import * as z25 from "zod";
+var zMachineSetupBody = zConnectByoMachineRequest.extend({
+  project_ids: zConnectByoMachineRequest.shape.project_ids.describe(
+    "project ID to grant the machine to, from omnara projects list"
+  )
+});
 async function connectMachine(context) {
   const { client: client2, path, body, report } = context;
   report.start("Creating machine with a daemon token");
@@ -12692,9 +13691,9 @@ var daemonConfigFileName = "daemon.json";
 var installLockFileName = "install.lock";
 var daemonLockFileName = "daemon.lock";
 var daemonLockPollMs = 250;
-var zDaemonConfigFile = z24.looseObject({
-  machine_id: z24.string().optional(),
-  api_url: z24.string().optional()
+var zDaemonConfigFile = z25.looseObject({
+  machine_id: z25.string().optional(),
+  api_url: z25.string().optional()
 });
 function daemonHome() {
   const override = process.env.OMNARA_HOME;
@@ -12976,10 +13975,10 @@ function runInstaller(report, apiUrl, token, machineId, home) {
 
 // src/mcp-add.ts
 import { isMap, isScalar as isScalar2, parseDocument } from "yaml";
-import * as z25 from "zod";
+import * as z26 from "zod";
 var SERVER_KEY_PATTERN = /^[a-zA-Z][a-zA-Z0-9-]{0,31}$/;
 var zMcpAddBody = zMcpoAuthStartRequest.omit({ owner: true, name: true }).extend({
-  server_name: z25.string().regex(
+  server_name: z26.string().regex(
     SERVER_KEY_PATTERN,
     "must start with a letter and contain at most 32 letters, digits, or hyphens"
   ).describe("MCP server key used in the agent config"),
@@ -12992,9 +13991,9 @@ function targetLabel(target) {
 function serverEntry(url4, secretId) {
   return { url: url4, auth: { type: "oauth", secret_id: secretId } };
 }
-var zJsonRecord = z25.record(z25.string(), z25.json());
+var zJsonRecord = z26.record(z26.string(), z26.json());
 var zDefinitionText2 = zJsonText.pipe(
-  z25.custom((value) => zJsonRecord.safeParse(value).success)
+  z26.custom((value) => zJsonRecord.safeParse(value).success)
 );
 function prepareJsonConfig(configId, source, serverName, mcpUrl) {
   const parsed = zDefinitionText2.safeParse(source);
@@ -13164,9 +14163,9 @@ function runProfileMcpAdd(context) {
 // src/memory-files.ts
 import { open, writeFile } from "node:fs/promises";
 import { buffer } from "node:stream/consumers";
-import * as z26 from "zod";
-var zMemoryUploadBody = z26.object({
-  file: z26.string().min(1).describe("local file to upload")
+import * as z27 from "zod";
+var zMemoryUploadBody = z27.object({
+  file: z27.string().min(1).describe("local file to upload")
 });
 async function loadMemoryUpload(file) {
   const handle = await open(file, "r");
@@ -13198,7 +14197,7 @@ var memoryDownloadOp = customOp({
       { path: options.path ?? null },
       "query flags"
     );
-    const output = parseWithSchema(z26.string().min(1), options.output, "--output");
+    const output = parseWithSchema(z27.string().min(1), options.output, "--output");
     const { response } = await sdk_gen_exports.downloadMemoryFile({ client: client2, path, query, parseAs: "stream" });
     const digest = response.headers.get(FILE_DIGEST_HEADER);
     if (!digest) throw new CliInputError("file response is missing its digest");
@@ -13212,10 +14211,10 @@ var memoryDownloadOp = customOp({
 import { readdirSync as readdirSync2, readFileSync as readFileSync4, statSync } from "node:fs";
 import { basename as basename2, dirname as dirname3, join as join3, resolve as resolve2 } from "node:path";
 import * as tar from "tar";
-import * as z27 from "zod";
-var zCreateSkillCliBody = z27.object({
+import * as z28 from "zod";
+var zCreateSkillCliBody = z28.object({
   owner: zSkillOwnerInput,
-  archive: z27.string().min(1).describe("path to a skill directory (packed automatically) or a .zip/.tar.gz archive")
+  archive: z28.string().min(1).describe("path to a skill directory (packed automatically) or a .zip/.tar.gz archive")
 });
 var ARCHIVE_SUFFIXES = [".zip", ".tar.gz", ".tgz"];
 function assertPackable(dir) {
@@ -13268,9 +14267,18 @@ var commandGroups = [
         verb: "list",
         summary: "List agents in a project",
         fn: sdk_gen_exports.listAgents,
-        format: (response) => formatTable(["id", "name", "state", "model", "parent_agent_id", "created_at"])({
+        format: (response) => formatTable([
+          "id",
+          "name",
+          "state",
+          "activity",
+          "model",
+          "parent_agent_id",
+          "created_at"
+        ])({
           data: response.data.map((agent) => ({
             ...agent,
+            activity: agent.activity?.state,
             model: agent.model?.name,
             parent_agent_id: agent.parent_agent_id ?? ""
           })),
@@ -13286,6 +14294,7 @@ var commandGroups = [
         format: formatRecord(),
         path: zGetAgentPath
       }),
+      agentWaitOp,
       op({
         verb: "launch",
         summary: "Launch a new agent",
@@ -13295,7 +14304,7 @@ var commandGroups = [
         body: zConfigAttachment.extend({
           profile: zAgentProfileId.optional().describe("agent profile ID; runs its current config unless a config is given"),
           name: zAgentName.optional(),
-          message: z28.string().optional()
+          message: z29.string().optional()
         }),
         transformBody: ({ profile, name, message, ...attachment }) => ({
           name,
@@ -13335,7 +14344,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-add",
         summary: "Create an OAuth secret and add an MCP server to an agent",
-        path: z28.object({
+        path: z29.object({
           orgID: zOrganizationId,
           projectID: zProjectId,
           agentID: zAgentId
@@ -13351,7 +14360,7 @@ var commandGroups = [
         format: (response) => formatRecord()(response.agent_input),
         path: zCreateAgentInputPath,
         body: zCreateAgentInputBody.partial({ content_blocks: true }).extend({
-          message: z28.string().optional().describe("plain text to send as a single text block")
+          message: z29.string().optional().describe("plain text to send as a single text block")
         }).transform(({ message, content_blocks, ...rest }, ctx) => {
           if (content_blocks !== void 0 && message === void 0) {
             return { ...rest, content_blocks };
@@ -13360,7 +14369,7 @@ var commandGroups = [
             return { ...rest, content_blocks: [{ type: "text", text: message }] };
           }
           ctx.addIssue("pass exactly one of --message or --content-blocks");
-          return z28.NEVER;
+          return z29.NEVER;
         })
       })
     ],
@@ -13377,8 +14386,8 @@ var commandGroups = [
             format: formatAgentEventList,
             path: zListEventsPath,
             query: zListEventsQuery.extend({
-              before_sequence: z28.int().gte(0).optional(),
-              after_sequence: z28.int().gte(0).optional()
+              before_sequence: z29.int().gte(0).optional(),
+              after_sequence: z29.int().gte(0).optional()
             })
           }),
           agentEventsStreamOp
@@ -13465,6 +14474,23 @@ var commandGroups = [
         path: zCreateProjectPath,
         body: zCreateProjectBody
       }),
+      op({
+        verb: "get",
+        summary: "Fetch a project",
+        fn: sdk_gen_exports.getProject,
+        format: formatRecord(),
+        path: zGetProjectPath,
+        positional: ["projectID"]
+      }),
+      op({
+        verb: "update",
+        summary: "Rename a project",
+        fn: sdk_gen_exports.updateProject,
+        format: formatRecord(),
+        path: zUpdateProjectPath,
+        body: zUpdateProjectBody,
+        positional: ["projectID"]
+      }),
       op({
         verb: "delete",
         summary: "Delete a project",
@@ -13654,7 +14680,7 @@ var commandGroups = [
         fn: sdk_gen_exports.connectByoMachine,
         format: formatMachineSetup,
         path: zConnectByoMachinePath,
-        body: zConnectByoMachineBody
+        body: zMachineSetupBody
       }),
       flowOp({
         verb: "create-local",
@@ -13796,6 +14822,13 @@ var commandGroups = [
         path: zListConfiguredModelsPath,
         query: zListConfiguredModelsQuery
       }),
+      op({
+        verb: "get",
+        summary: "Fetch a configured model",
+        fn: sdk_gen_exports.getConfiguredModel,
+        format: formatRecord(),
+        path: zGetConfiguredModelPath
+      }),
       op({
         verb: "create",
         summary: "Configure a model",
@@ -13874,7 +14907,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-oauth",
         summary: "Create a secret through an MCP server OAuth flow",
-        path: z28.object({ orgID: zOrganizationId }),
+        path: z29.object({ orgID: zOrganizationId }),
         body: zMcpOAuthBody,
         run: runMcpOAuth
       })
@@ -14081,7 +15114,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-add",
         summary: "Create an OAuth secret and add an MCP server to an agent profile",
-        path: z28.object({
+        path: z29.object({
           orgID: zOrganizationId,
           projectID: zProjectId,
           agentProfileID: zAgentProfileId
@@ -14168,6 +15201,13 @@ var commandGroups = [
             path: zListSkillGrantsPath,
             query: zListSkillGrantsQuery
           }),
+          op({
+            verb: "get",
+            summary: "Fetch a skill grant",
+            fn: sdk_gen_exports.getSkillGrant,
+            format: formatRecord(),
+            path: zGetSkillGrantPath
+          }),
           op({
             verb: "add",
             summary: "Grant a skill to a project",
@@ -14204,6 +15244,13 @@ var commandGroups = [
             path: zListSecretGrantsPath,
             query: zListSecretGrantsQuery
           }),
+          op({
+            verb: "get",
+            summary: "Fetch a secret grant",
+            fn: sdk_gen_exports.getSecretGrant,
+            format: formatRecord(),
+            path: zGetSecretGrantPath
+          }),
           op({
             verb: "add",
             summary: "Grant a secret to a project",
@@ -14240,6 +15287,13 @@ var commandGroups = [
             path: zListProjectMachineGrantsPath,
             query: zListProjectMachineGrantsQuery
           }),
+          op({
+            verb: "get",
+            summary: "Fetch a machine grant",
+            fn: sdk_gen_exports.getProjectMachineGrant,
+            format: (response) => formatRecord()(response.grant),
+            path: zGetProjectMachineGrantPath
+          }),
           op({
             verb: "add",
             summary: "Grant a machine to a project",
@@ -14324,6 +15378,13 @@ var commandGroups = [
             path: zListProjectModelGrantsPath,
             query: zListProjectModelGrantsQuery
           }),
+          op({
+            verb: "get",
+            summary: "Fetch a model grant",
+            fn: sdk_gen_exports.getProjectModelGrant,
+            format: (response) => formatRecord()(response.grant),
+            path: zGetProjectModelGrantPath
+          }),
           op({
             verb: "add",
             summary: "Grant a configured model to a project",