From cf164be8f7e1e65a933d7074b5d43100340a8277 Mon Sep 17 00:00:00 2001
From: ysyneu <ysyneu@gmail.com>
Date: Mon, 14 Sep 2026 02:46:14 -0700
Subject: [PATCH 1/7] feat(member): add member notify command

---
 go.mod                                     |  2 +-
 go.sum                                     |  4 +-
 internal/cli/zz_generated_manifest.go      |  1 +
 internal/cli/zz_generated_members.go       | 63 ++++++++++++++++++++++
 internal/cli/zz_generated_response_help.go |  1 +
 skills/flashduty/reference/member.md       | 14 +++++
 6 files changed, 82 insertions(+), 3 deletions(-)
diff --git a/go.mod b/go.mod
index f7edce6..ab750ab 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/flashcatcloud/flashduty-cli
 go 1.25.1
 
 require (
-	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093700-c688445d02c3
+	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093721-fce7fad70984
 	github.com/mattn/go-runewidth v0.0.29
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
diff --git a/go.sum b/go.sum
index 1d29788..db458c7 100644
--- a/go.sum
+++ b/go.sum
@@ -1,8 +1,8 @@
 github.com/clipperhouse/uax29/v2 v2.2.0 h1:ChwIKnQN3kcZteTXMgb1wztSgaU+ZemkgWdohwgs8tY=
 github.com/clipperhouse/uax29/v2 v2.2.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093700-c688445d02c3 h1:Fq3FELZmnEzyeAsHBV9o3pfhjMONonhHFdecRFqw0m8=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093700-c688445d02c3/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093721-fce7fad70984 h1:EGTGeKUR1Z3QsnJdm/ny7/cp1zI9ea2sXf2f1gXCAhI=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093721-fce7fad70984/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/mattn/go-runewidth v0.0.29 h1:3oGF3R/S2N9DQ3ptftzVIvg2eicmojCzlwBEmqEPDfQ=
diff --git a/internal/cli/zz_generated_manifest.go b/internal/cli/zz_generated_manifest.go
index 5ca9441..a4d53e9 100644
--- a/internal/cli/zz_generated_manifest.go
+++ b/internal/cli/zz_generated_manifest.go
@@ -181,6 +181,7 @@ var generatedOpIDs = []string{
 	"memberInfo",
 	"memberInvite",
 	"memberList",
+	"memberNotify",
 	"memberResetInfo",
 	"memberRevokeRole",
 	"memberUpdateRole",
diff --git a/internal/cli/zz_generated_members.go b/internal/cli/zz_generated_members.go
index 5724112..ac61fdf 100644
--- a/internal/cli/zz_generated_members.go
+++ b/internal/cli/zz_generated_members.go
@@ -374,6 +374,68 @@ Response fields ('data' envelope is unwrapped — rows are nested under items[];
 	return cmd
 }
 
+func genMembersMemberNotifyCmd() *cobra.Command {
+	var dataJSON string
+	var fHTML string
+	var fPersonIDs []int
+	var fSubject string
+	cmd := &cobra.Command{
+		Use:   "notify",
+		Short: "Notify members",
+		Long: `Notify members.
+
+Send an email to account members on behalf of the caller, with content the caller supplies. Only callable with a credential minted for an AI SRE session; any other credential is rejected with 'AccessDenied'. Delivery is asynchronous — 'accepted' means the email was queued, not that it was delivered.
+
+API: POST /member/notify (memberNotify)
+
+Request fields:
+  --html string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (≤512000 chars)
+  --person-ids []int — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
+  --subject string (required) — Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
+
+Response fields ('data' envelope is unwrapped — rows are nested under items[]; pipe 'jq '.items[]'', NOT '.data.items[]'):
+  - items (array<object>) — One result per resolved recipient, in the same order as the resolved recipient list.
+    - person_id (integer) (required) — Recipient member ID.
+    - reason (string) — Why the recipient was skipped. Only present when 'status' is 'skipped'. 'not_member' — not an active member of the caller's account; 'no_email' — the member has no email address on file; 'email_disabled' — the member's notification preferences for this kind of message exclude email; 'duplicate' — this recipient already received a message from the same AI SRE session turn; 'rate_limited' — this recipient already received more than 20 emails through this endpoint in the last hour; 'send_failed' — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]
+    - status (string) (required) — Delivery status. 'accepted' — the email was queued for asynchronous delivery; 'skipped' — no email was queued, see 'reason'. [accepted, skipped]
+`,
+		Example: `  flashduty member notify --data '{"html":"\u003cp\u003eCan you confirm the rollback window?\u003c/p\u003e","person_ids":[5068740052131,5068740052132],"subject":"Incident 20260914-1 needs your input"}'`,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			return runCommand(cmd, args, func(ctx *RunContext) error {
+				body, err := genAssembleBody(dataJSON, func(body map[string]any) error {
+					if cmd.Flags().Changed("html") {
+						body["html"] = fHTML
+					}
+					if cmd.Flags().Changed("person-ids") {
+						body["person_ids"] = fPersonIDs
+					}
+					if cmd.Flags().Changed("subject") {
+						body["subject"] = fSubject
+					}
+					return nil
+				})
+				if err != nil {
+					return err
+				}
+				req := new(flashduty.MemberNotifyRequest)
+				if err := genBindBody(body, req); err != nil {
+					return err
+				}
+				out, _, err := ctx.Client.Members.MemberNotify(cmdContext(ctx.Cmd), req)
+				if err != nil {
+					return err
+				}
+				return printGenericResult(ctx, out)
+			})
+		},
+	}
+	cmd.Flags().StringVar(&fHTML, "html", "", "Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (required) (≤512000 chars)")
+	cmd.Flags().IntSliceVar(&fPersonIDs, "person-ids", nil, "Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.")
+	cmd.Flags().StringVar(&fSubject, "subject", "", "Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (required) (1-200 chars)")
+	cmd.Flags().StringVar(&dataJSON, "data", "", "Full request body as JSON; positional arguments and typed flags override its fields. Accepts inline JSON, or - to read stdin.")
+	return cmd
+}
+
 func genMembersMemberResetInfoCmd() *cobra.Command {
 	var dataJSON string
 	var fCountryCode string
@@ -654,6 +716,7 @@ func registerGeneratedMembers(root *cobra.Command) {
 	genAddLeaf(gMember, genMembersMemberInfoCmd())
 	genAddLeaf(gMember, genMembersMemberInviteCmd())
 	genAddLeaf(gMember, genMembersMemberListCmd())
+	genAddLeaf(gMember, genMembersMemberNotifyCmd())
 	genAddLeaf(gMember, genMembersMemberResetInfoCmd())
 	genAddLeaf(gMember, genMembersMemberRevokeRoleCmd())
 	genAddLeaf(gMember, genMembersMemberUpdateRoleCmd())
diff --git a/internal/cli/zz_generated_response_help.go b/internal/cli/zz_generated_response_help.go
index 2bad4a4..bbaabc1 100644
--- a/internal/cli/zz_generated_response_help.go
+++ b/internal/cli/zz_generated_response_help.go
@@ -166,6 +166,7 @@ var responseHelpBySDKMethod = map[string]string{
 	"Members.MemberInfo":                          "Response fields (`data` envelope is unwrapped — these fields are at the top level):\n  - account_avatar (string) (required) — Account avatar URL\n  - account_email (string) (required) — Account email\n  - account_id (integer) (required) — Account ID\n  - account_locale (string) — Account-level locale preference (e.g. zh-CN or en-US). Omitted when the account has none set.\n  - account_name (string) (required) — Account name\n  - account_role_ids (array<integer>) (required) — Assigned role IDs\n  - account_time_zone (string) — Account-level time zone (e.g. Asia/Shanghai). Omitted when the account has none set.\n  - avatar (string) (required) — Member avatar URL\n  - country_code (string) (required) — ISO 3166-1 alpha-2 region code of the member's contact phone (e.g. \"CN\", \"US\", \"HK\").\n  - created_at (string) (required) — Member creation time, Unix timestamp in seconds. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - domain (string) (required) — Account domain\n  - email (string) (required) — Email address\n  - email_verified (boolean) (required) — Whether email is verified\n  - is_external (boolean) (required) — Whether provisioned via SSO\n  - locale (string) — Member's locale preference. Omitted when the member has none set.\n  - member_id (integer) (required) — Member ID\n  - member_name (string) (required) — Member display name\n  - mp_account_id (string) — Account identifier on the marketplace platform. Omitted together with `mp_plat`.\n  - mp_plat (string) — Cloud marketplace platform the account was provisioned from. Omitted when the account did not come from a marketplace.\n  - phone (string) (required) — Masked phone number\n  - phone_verified (boolean) (required) — Whether phone is verified\n  - time_zone (string) — Member's IANA time zone. Omitted when the member has none set.\n",
 	"Members.MemberInvite":                        "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - member_id (integer) — Member ID\n  - member_name (string) — Member display name\n",
 	"Members.MemberList":                          "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — Account ID\n  - account_role_ids (array<integer>) (required) — Role IDs\n  - avatar (string) (required) — Avatar URL\n  - country_code (string) (required) — ISO 3166-1 alpha-2 region code of the member's contact phone (e.g. \"CN\", \"US\", \"HK\").\n  - created_at (string) (required) — Creation timestamp (Unix seconds) CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - email (string) (required) — Email address\n  - email_verified (boolean) (required) — Email verified\n  - is_external (boolean) (required) — Provisioned via SSO\n  - locale (string) — Member's locale preference (e.g. `zh-CN`). Omitted when empty — the list endpoint does not populate it.\n  - member_id (integer) (required) — Member ID\n  - member_name (string) (required) — Display name\n  - phone (string) (required) — Masked phone number\n  - phone_verified (boolean) (required) — Phone verified\n  - ref_id (string) (required) — External reference ID\n  - status (string) (required) — Member status. `enabled` — active member; `pending` — invited but not yet accepted; `deleted` — removed from the organization. [enabled, pending, deleted]\n  - time_zone (string) — Member's IANA time zone (e.g. `Asia/Shanghai`). Omitted when empty — the list endpoint does not populate it.\n  - updated_at (string) (required) — Update timestamp (Unix seconds) CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n",
+	"Members.MemberNotify":                        "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - person_id (integer) (required) — Recipient member ID.\n  - reason (string) — Why the recipient was skipped. Only present when `status` is `skipped`. `not_member` — not an active member of the caller's account; `no_email` — the member has no email address on file; `email_disabled` — the member's notification preferences for this kind of message exclude email; `duplicate` — this recipient already received a message from the same AI SRE session turn; `rate_limited` — this recipient already received more than 20 emails through this endpoint in the last hour; `send_failed` — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]\n  - status (string) (required) — Delivery status. `accepted` — the email was queued for asynchronous delivery; `skipped` — no email was queued, see `reason`. [accepted, skipped]\n",
 	"Members.PersonInfos":                         "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — Account ID\n  - as (string) — Principal kind: `account` — the account owner principal; `member` — an organization member. [account, member]\n  - avatar (string) — Avatar URL. Omitted when empty.\n  - email (string) — Email address. Omitted when empty.\n  - email_verified (boolean) (required) — Email verified\n  - locale (string) — Locale. Omitted when empty.\n  - person_id (integer) (required) — Person ID\n  - person_name (string) — Display name. Omitted when empty.\n  - phone (string) — Phone number. Omitted when empty — this endpoint never populates it.\n  - phone_verified (boolean) (required) — Whether the phone is verified. Always false in this endpoint's response.\n  - status (string) — Person status. `enabled` — active; `pending` — invited but not yet accepted; `deleted` — removed. Omitted when empty. [enabled, pending, deleted]\n  - time_zone (string) — Time zone. Omitted when empty.\n",
 	"NotificationTemplates.ReadInfo":              "Response fields (`data` envelope is unwrapped — these fields are at the top level):\n  - account_id (integer) (required) — ID of the owning account.\n  - created_at (string) (required) — Unix epoch seconds the template was created. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - creator_id (integer) (required) — Member ID of the creator.\n  - deleted_at (string) — Unix epoch seconds the template was soft-deleted. Absent (omitempty) when the template is live. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - description (string) (required) — Free-form description.\n  - dingtalk (string) (required) — DingTalk robot message template source.\n  - dingtalk_app (string) (required) — DingTalk app message template source.\n  - email (string) (required) — Email body template source (Go `html/template` syntax).\n  - feishu (string) (required) — Feishu robot message template source.\n  - feishu_app (string) (required) — Feishu app message template source.\n  - feishu_app_card_v2_table_enabled (boolean) (required) — Whether alert labels use table rendering in Feishu app cards.\n  - incident_card_hidden_fields (object) (required) — Incident card fields hidden per IM app type; an empty object when none are configured.\n  - slack (string) (required) — Slack robot message template source.\n  - slack_app (string) (required) — Slack app message template source.\n  - sms (string) (required) — SMS template source (Go `text/template` syntax).\n  - status (string) (required) — Template lifecycle status. `enabled` templates can be referenced by escalation policies for notifications; `disabled` templates are no longer used for new notifications; `deleted` templates are never returned by list endpoints. [enabled, disabled, deleted]\n  - team_id (integer) (required) — ID of the team this template is scoped to, or 0 for account-wide.\n  - teams_app (string) (required) — Microsoft Teams app message template source.\n  - telegram (string) (required) — Telegram bot message template source.\n  - template_id (string) (required) — Template ID.\n  - template_name (string) (required) — Unique template name within the account.\n  - updated_at (string) (required) — Unix epoch seconds the template was last updated. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - updated_by (integer) (required) — Member ID of the last editor.\n  - voice (string) (required) — Voice call script template source.\n  - wecom (string) (required) — WeCom robot message template source.\n  - wecom_app (string) (required) — WeCom app message template source.\n  - zoom (string) (required) — Zoom bot message template source.\n",
 	"NotificationTemplates.ReadList":              "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — ID of the owning account.\n  - created_at (string) (required) — Unix epoch seconds the template was created. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - creator_id (integer) (required) — Member ID of the creator.\n  - deleted_at (string) — Unix epoch seconds the template was soft-deleted. Absent (omitempty) when the template is live. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - description (string) (required) — Free-form description.\n  - dingtalk (string) (required) — DingTalk robot message template source.\n  - dingtalk_app (string) (required) — DingTalk app message template source.\n  - email (string) (required) — Email body template source (Go `html/template` syntax).\n  - feishu (string) (required) — Feishu robot message template source.\n  - feishu_app (string) (required) — Feishu app message template source.\n  - feishu_app_card_v2_table_enabled (boolean) (required) — Whether alert labels use table rendering in Feishu app cards.\n  - incident_card_hidden_fields (object) (required) — Incident card fields hidden per IM app type; an empty object when none are configured.\n  - slack (string) (required) — Slack robot message template source.\n  - slack_app (string) (required) — Slack app message template source.\n  - sms (string) (required) — SMS template source (Go `text/template` syntax).\n  - status (string) (required) — Template lifecycle status. `enabled` templates can be referenced by escalation policies for notifications; `disabled` templates are no longer used for new notifications; `deleted` templates are never returned by list endpoints. [enabled, disabled, deleted]\n  - team_id (integer) (required) — ID of the team this template is scoped to, or 0 for account-wide.\n  - teams_app (string) (required) — Microsoft Teams app message template source.\n  - telegram (string) (required) — Telegram bot message template source.\n  - template_id (string) (required) — Template ID.\n  - template_name (string) (required) — Unique template name within the account.\n  - updated_at (string) (required) — Unix epoch seconds the template was last updated. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - updated_by (integer) (required) — Member ID of the last editor.\n  - voice (string) (required) — Voice call script template source.\n  - wecom (string) (required) — WeCom robot message template source.\n  - wecom_app (string) (required) — WeCom app message template source.\n  - zoom (string) (required) — Zoom bot message template source.\n",
diff --git a/skills/flashduty/reference/member.md b/skills/flashduty/reference/member.md
index 74ef94e..c62e0c3 100644
--- a/skills/flashduty/reference/member.md
+++ b/skills/flashduty/reference/member.md
@@ -18,6 +18,7 @@ Prereq: `SKILL.md` read. `invite` sends invitation emails immediately (up to 20
 | add roles without touching others | `role-grant` |
 | remove specific roles | `role-revoke` |
 | set exactly these roles (replace all) | `role-update` |
+| email members on the caller's behalf | `notify` |
 
 ## Hot flow — invite then assign role
 
@@ -96,6 +97,13 @@ List members
 - `--search-after-ctx` string
 - response: `{items: [...], limit, p, total}` page wrapper — pipe `--json | jq '.items[]'` (NOT top-level `.[]`) — items fields: account_id (integer); account_role_ids (array<integer>); avatar (string); country_code (string); created_at (string); email (string); email_verified (boolean); is_external (boolean); locale (string); member_id (integer); member_name (string); phone (string); phone_verified (boolean); ref_id (string); status (string); time_zone (string); updated_at (string)
 
+### notify
+Notify members
+- `--html` string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (≤512000 chars)
+- `--person-ids` intSlice — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
+- `--subject` string (required) — Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
+- response: `{items: [...]}` page wrapper — pipe `--json | jq '.items[]'` (NOT top-level `.[]`) — items fields: person_id (integer); reason (string); status (string)
+
 ### role-grant <role-id> [<id2>...]
 Grant role to member
 - `--member-id` int64 (required) — Member ID
@@ -123,6 +131,12 @@ Update member roles
 
 ## Gotchas
 
+- **`notify` only works with an AI SRE session credential.** Any other credential (an account app key, a personal API key) is rejected with a permission error. `person_ids` defaults to the caller when omitted. `html` can be large (up to 512,000 bytes) — never pass it through the typed `--html` flag or `"$(...)"` command substitution (which strips trailing newlines); build the full body with `jq -n --rawfile` and pipe it in with `--data -`, the same pattern `template update` uses:
+  ```bash
+  jq -n --rawfile h /tmp/report.html --argjson pids '[<person_id1>,<person_id2>]' \
+    '{html: $h, subject: "<subject>", person_ids: $pids}' \
+    | fduty member notify --data -
+  ```
 - **Resolving a `person_id` → name: use `fduty person infos <person_id> …`, NOT `member list`.** `schedule`/`oncall`/`incident`/`alert` output returns `person_id`s, a **different namespace from `member_id`**. `fduty person infos` (the sibling `person` group) batch-resolves any number of `person_id`s to `person_name` in one call (rows under `.items[]`). Matching `member list` rows on `member_id == <person_id>` is wrong, and paginating the full roster to find them silently misses people on later pages.
 - **`invite` members array is body-only — use `--data`.** Individual members cannot be passed as flat flags; the `members` array (with nested `role_ids`, `email`, `phone`, etc.) lives only in the JSON body. Up to 20 members per call.
 - **`info-reset <member-id>` can be passed positionally or via `--member-id`** — both work: `fduty member info-reset <member_id> --member-name "New Name"` or `fduty member info-reset --member-id <member_id> --member-name "New Name"`. If both are given, the flag wins.

From 9601cbfbc2d1a00359e0830037ec1d580177e8b1 Mon Sep 17 00:00:00 2001
From: ysyneu <ysyneu@gmail.com>
Date: Mon, 14 Sep 2026 02:49:49 -0700
Subject: [PATCH 2/7] chore(deps): pick up MemberNotify description updates

---
 go.mod                                     | 2 +-
 go.sum                                     | 4 ++--
 internal/cli/zz_generated_members.go       | 6 +++---
 internal/cli/zz_generated_response_help.go | 2 +-
 skills/flashduty/reference/member.md       | 2 +-
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/go.mod b/go.mod
index ab750ab..f592413 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/flashcatcloud/flashduty-cli
 go 1.25.1
 
 require (
-	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093721-fce7fad70984
+	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914094805-d46832d8788b
 	github.com/mattn/go-runewidth v0.0.29
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
diff --git a/go.sum b/go.sum
index db458c7..a5a62c2 100644
--- a/go.sum
+++ b/go.sum
@@ -1,8 +1,8 @@
 github.com/clipperhouse/uax29/v2 v2.2.0 h1:ChwIKnQN3kcZteTXMgb1wztSgaU+ZemkgWdohwgs8tY=
 github.com/clipperhouse/uax29/v2 v2.2.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093721-fce7fad70984 h1:EGTGeKUR1Z3QsnJdm/ny7/cp1zI9ea2sXf2f1gXCAhI=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914093721-fce7fad70984/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914094805-d46832d8788b h1:pqpUCXeXHy+NcrpIMDvGu0k5KL4cU3EKmhVWv2zPhZo=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914094805-d46832d8788b/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/mattn/go-runewidth v0.0.29 h1:3oGF3R/S2N9DQ3ptftzVIvg2eicmojCzlwBEmqEPDfQ=
diff --git a/internal/cli/zz_generated_members.go b/internal/cli/zz_generated_members.go
index ac61fdf..579d3c0 100644
--- a/internal/cli/zz_generated_members.go
+++ b/internal/cli/zz_generated_members.go
@@ -389,14 +389,14 @@ Send an email to account members on behalf of the caller, with content the calle
 API: POST /member/notify (memberNotify)
 
 Request fields:
-  --html string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (≤512000 chars)
+  --html string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (≤512000 chars)
   --person-ids []int — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
   --subject string (required) — Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
 
 Response fields ('data' envelope is unwrapped — rows are nested under items[]; pipe 'jq '.items[]'', NOT '.data.items[]'):
   - items (array<object>) — One result per resolved recipient, in the same order as the resolved recipient list.
     - person_id (integer) (required) — Recipient member ID.
-    - reason (string) — Why the recipient was skipped. Only present when 'status' is 'skipped'. 'not_member' — not an active member of the caller's account; 'no_email' — the member has no email address on file; 'email_disabled' — the member's notification preferences for this kind of message exclude email; 'duplicate' — this recipient already received a message from the same AI SRE session turn; 'rate_limited' — this recipient already received more than 20 emails through this endpoint in the last hour; 'send_failed' — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]
+    - reason (string) — Why the recipient was skipped. Only present when 'status' is 'skipped'. 'not_member' — not an active member of the caller's account; 'no_email' — the member has no email address on file; 'email_disabled' — the member's notification preferences for this kind of message exclude email; 'duplicate' — this recipient already received a message from the same AI SRE session turn; 'rate_limited' — this recipient has already been sent 20 emails through this endpoint within the last hour; 'send_failed' — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]
     - status (string) (required) — Delivery status. 'accepted' — the email was queued for asynchronous delivery; 'skipped' — no email was queued, see 'reason'. [accepted, skipped]
 `,
 		Example: `  flashduty member notify --data '{"html":"\u003cp\u003eCan you confirm the rollback window?\u003c/p\u003e","person_ids":[5068740052131,5068740052132],"subject":"Incident 20260914-1 needs your input"}'`,
@@ -429,7 +429,7 @@ Response fields ('data' envelope is unwrapped — rows are nested under items[];
 			})
 		},
 	}
-	cmd.Flags().StringVar(&fHTML, "html", "", "Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (required) (≤512000 chars)")
+	cmd.Flags().StringVar(&fHTML, "html", "", "Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (required) (≤512000 chars)")
 	cmd.Flags().IntSliceVar(&fPersonIDs, "person-ids", nil, "Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.")
 	cmd.Flags().StringVar(&fSubject, "subject", "", "Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (required) (1-200 chars)")
 	cmd.Flags().StringVar(&dataJSON, "data", "", "Full request body as JSON; positional arguments and typed flags override its fields. Accepts inline JSON, or - to read stdin.")
diff --git a/internal/cli/zz_generated_response_help.go b/internal/cli/zz_generated_response_help.go
index bbaabc1..2bf564d 100644
--- a/internal/cli/zz_generated_response_help.go
+++ b/internal/cli/zz_generated_response_help.go
@@ -166,7 +166,7 @@ var responseHelpBySDKMethod = map[string]string{
 	"Members.MemberInfo":                          "Response fields (`data` envelope is unwrapped — these fields are at the top level):\n  - account_avatar (string) (required) — Account avatar URL\n  - account_email (string) (required) — Account email\n  - account_id (integer) (required) — Account ID\n  - account_locale (string) — Account-level locale preference (e.g. zh-CN or en-US). Omitted when the account has none set.\n  - account_name (string) (required) — Account name\n  - account_role_ids (array<integer>) (required) — Assigned role IDs\n  - account_time_zone (string) — Account-level time zone (e.g. Asia/Shanghai). Omitted when the account has none set.\n  - avatar (string) (required) — Member avatar URL\n  - country_code (string) (required) — ISO 3166-1 alpha-2 region code of the member's contact phone (e.g. \"CN\", \"US\", \"HK\").\n  - created_at (string) (required) — Member creation time, Unix timestamp in seconds. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - domain (string) (required) — Account domain\n  - email (string) (required) — Email address\n  - email_verified (boolean) (required) — Whether email is verified\n  - is_external (boolean) (required) — Whether provisioned via SSO\n  - locale (string) — Member's locale preference. Omitted when the member has none set.\n  - member_id (integer) (required) — Member ID\n  - member_name (string) (required) — Member display name\n  - mp_account_id (string) — Account identifier on the marketplace platform. Omitted together with `mp_plat`.\n  - mp_plat (string) — Cloud marketplace platform the account was provisioned from. Omitted when the account did not come from a marketplace.\n  - phone (string) (required) — Masked phone number\n  - phone_verified (boolean) (required) — Whether phone is verified\n  - time_zone (string) — Member's IANA time zone. Omitted when the member has none set.\n",
 	"Members.MemberInvite":                        "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - member_id (integer) — Member ID\n  - member_name (string) — Member display name\n",
 	"Members.MemberList":                          "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — Account ID\n  - account_role_ids (array<integer>) (required) — Role IDs\n  - avatar (string) (required) — Avatar URL\n  - country_code (string) (required) — ISO 3166-1 alpha-2 region code of the member's contact phone (e.g. \"CN\", \"US\", \"HK\").\n  - created_at (string) (required) — Creation timestamp (Unix seconds) CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - email (string) (required) — Email address\n  - email_verified (boolean) (required) — Email verified\n  - is_external (boolean) (required) — Provisioned via SSO\n  - locale (string) — Member's locale preference (e.g. `zh-CN`). Omitted when empty — the list endpoint does not populate it.\n  - member_id (integer) (required) — Member ID\n  - member_name (string) (required) — Display name\n  - phone (string) (required) — Masked phone number\n  - phone_verified (boolean) (required) — Phone verified\n  - ref_id (string) (required) — External reference ID\n  - status (string) (required) — Member status. `enabled` — active member; `pending` — invited but not yet accepted; `deleted` — removed from the organization. [enabled, pending, deleted]\n  - time_zone (string) — Member's IANA time zone (e.g. `Asia/Shanghai`). Omitted when empty — the list endpoint does not populate it.\n  - updated_at (string) (required) — Update timestamp (Unix seconds) CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n",
-	"Members.MemberNotify":                        "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - person_id (integer) (required) — Recipient member ID.\n  - reason (string) — Why the recipient was skipped. Only present when `status` is `skipped`. `not_member` — not an active member of the caller's account; `no_email` — the member has no email address on file; `email_disabled` — the member's notification preferences for this kind of message exclude email; `duplicate` — this recipient already received a message from the same AI SRE session turn; `rate_limited` — this recipient already received more than 20 emails through this endpoint in the last hour; `send_failed` — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]\n  - status (string) (required) — Delivery status. `accepted` — the email was queued for asynchronous delivery; `skipped` — no email was queued, see `reason`. [accepted, skipped]\n",
+	"Members.MemberNotify":                        "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - person_id (integer) (required) — Recipient member ID.\n  - reason (string) — Why the recipient was skipped. Only present when `status` is `skipped`. `not_member` — not an active member of the caller's account; `no_email` — the member has no email address on file; `email_disabled` — the member's notification preferences for this kind of message exclude email; `duplicate` — this recipient already received a message from the same AI SRE session turn; `rate_limited` — this recipient has already been sent 20 emails through this endpoint within the last hour; `send_failed` — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]\n  - status (string) (required) — Delivery status. `accepted` — the email was queued for asynchronous delivery; `skipped` — no email was queued, see `reason`. [accepted, skipped]\n",
 	"Members.PersonInfos":                         "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — Account ID\n  - as (string) — Principal kind: `account` — the account owner principal; `member` — an organization member. [account, member]\n  - avatar (string) — Avatar URL. Omitted when empty.\n  - email (string) — Email address. Omitted when empty.\n  - email_verified (boolean) (required) — Email verified\n  - locale (string) — Locale. Omitted when empty.\n  - person_id (integer) (required) — Person ID\n  - person_name (string) — Display name. Omitted when empty.\n  - phone (string) — Phone number. Omitted when empty — this endpoint never populates it.\n  - phone_verified (boolean) (required) — Whether the phone is verified. Always false in this endpoint's response.\n  - status (string) — Person status. `enabled` — active; `pending` — invited but not yet accepted; `deleted` — removed. Omitted when empty. [enabled, pending, deleted]\n  - time_zone (string) — Time zone. Omitted when empty.\n",
 	"NotificationTemplates.ReadInfo":              "Response fields (`data` envelope is unwrapped — these fields are at the top level):\n  - account_id (integer) (required) — ID of the owning account.\n  - created_at (string) (required) — Unix epoch seconds the template was created. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - creator_id (integer) (required) — Member ID of the creator.\n  - deleted_at (string) — Unix epoch seconds the template was soft-deleted. Absent (omitempty) when the template is live. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - description (string) (required) — Free-form description.\n  - dingtalk (string) (required) — DingTalk robot message template source.\n  - dingtalk_app (string) (required) — DingTalk app message template source.\n  - email (string) (required) — Email body template source (Go `html/template` syntax).\n  - feishu (string) (required) — Feishu robot message template source.\n  - feishu_app (string) (required) — Feishu app message template source.\n  - feishu_app_card_v2_table_enabled (boolean) (required) — Whether alert labels use table rendering in Feishu app cards.\n  - incident_card_hidden_fields (object) (required) — Incident card fields hidden per IM app type; an empty object when none are configured.\n  - slack (string) (required) — Slack robot message template source.\n  - slack_app (string) (required) — Slack app message template source.\n  - sms (string) (required) — SMS template source (Go `text/template` syntax).\n  - status (string) (required) — Template lifecycle status. `enabled` templates can be referenced by escalation policies for notifications; `disabled` templates are no longer used for new notifications; `deleted` templates are never returned by list endpoints. [enabled, disabled, deleted]\n  - team_id (integer) (required) — ID of the team this template is scoped to, or 0 for account-wide.\n  - teams_app (string) (required) — Microsoft Teams app message template source.\n  - telegram (string) (required) — Telegram bot message template source.\n  - template_id (string) (required) — Template ID.\n  - template_name (string) (required) — Unique template name within the account.\n  - updated_at (string) (required) — Unix epoch seconds the template was last updated. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - updated_by (integer) (required) — Member ID of the last editor.\n  - voice (string) (required) — Voice call script template source.\n  - wecom (string) (required) — WeCom robot message template source.\n  - wecom_app (string) (required) — WeCom app message template source.\n  - zoom (string) (required) — Zoom bot message template source.\n",
 	"NotificationTemplates.ReadList":              "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — ID of the owning account.\n  - created_at (string) (required) — Unix epoch seconds the template was created. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - creator_id (integer) (required) — Member ID of the creator.\n  - deleted_at (string) — Unix epoch seconds the template was soft-deleted. Absent (omitempty) when the template is live. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - description (string) (required) — Free-form description.\n  - dingtalk (string) (required) — DingTalk robot message template source.\n  - dingtalk_app (string) (required) — DingTalk app message template source.\n  - email (string) (required) — Email body template source (Go `html/template` syntax).\n  - feishu (string) (required) — Feishu robot message template source.\n  - feishu_app (string) (required) — Feishu app message template source.\n  - feishu_app_card_v2_table_enabled (boolean) (required) — Whether alert labels use table rendering in Feishu app cards.\n  - incident_card_hidden_fields (object) (required) — Incident card fields hidden per IM app type; an empty object when none are configured.\n  - slack (string) (required) — Slack robot message template source.\n  - slack_app (string) (required) — Slack app message template source.\n  - sms (string) (required) — SMS template source (Go `text/template` syntax).\n  - status (string) (required) — Template lifecycle status. `enabled` templates can be referenced by escalation policies for notifications; `disabled` templates are no longer used for new notifications; `deleted` templates are never returned by list endpoints. [enabled, disabled, deleted]\n  - team_id (integer) (required) — ID of the team this template is scoped to, or 0 for account-wide.\n  - teams_app (string) (required) — Microsoft Teams app message template source.\n  - telegram (string) (required) — Telegram bot message template source.\n  - template_id (string) (required) — Template ID.\n  - template_name (string) (required) — Unique template name within the account.\n  - updated_at (string) (required) — Unix epoch seconds the template was last updated. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - updated_by (integer) (required) — Member ID of the last editor.\n  - voice (string) (required) — Voice call script template source.\n  - wecom (string) (required) — WeCom robot message template source.\n  - wecom_app (string) (required) — WeCom app message template source.\n  - zoom (string) (required) — Zoom bot message template source.\n",
diff --git a/skills/flashduty/reference/member.md b/skills/flashduty/reference/member.md
index c62e0c3..f6b6fab 100644
--- a/skills/flashduty/reference/member.md
+++ b/skills/flashduty/reference/member.md
@@ -99,7 +99,7 @@ List members
 
 ### notify
 Notify members
-- `--html` string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (≤512000 chars)
+- `--html` string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (≤512000 chars)
 - `--person-ids` intSlice — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
 - `--subject` string (required) — Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
 - response: `{items: [...]}` page wrapper — pipe `--json | jq '.items[]'` (NOT top-level `.[]`) — items fields: person_id (integer); reason (string); status (string)

From 8df11f92e8d63316f417adc53d079eff5998c041 Mon Sep 17 00:00:00 2001
From: ysyneu <ysyneu@gmail.com>
Date: Mon, 14 Sep 2026 03:31:18 -0700
Subject: [PATCH 3/7] chore(member): shrink notify html cap to 102,400 bytes

---
 internal/cli/zz_generated_members.go | 4 ++--
 skills/flashduty/reference/member.md | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/internal/cli/zz_generated_members.go b/internal/cli/zz_generated_members.go
index 579d3c0..2723a26 100644
--- a/internal/cli/zz_generated_members.go
+++ b/internal/cli/zz_generated_members.go
@@ -389,7 +389,7 @@ Send an email to account members on behalf of the caller, with content the calle
 API: POST /member/notify (memberNotify)
 
 Request fields:
-  --html string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (≤512000 chars)
+  --html string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (≤102400 chars)
   --person-ids []int — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
   --subject string (required) — Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
 
@@ -429,7 +429,7 @@ Response fields ('data' envelope is unwrapped — rows are nested under items[];
 			})
 		},
 	}
-	cmd.Flags().StringVar(&fHTML, "html", "", "Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (required) (≤512000 chars)")
+	cmd.Flags().StringVar(&fHTML, "html", "", "Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (required) (≤102400 chars)")
 	cmd.Flags().IntSliceVar(&fPersonIDs, "person-ids", nil, "Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.")
 	cmd.Flags().StringVar(&fSubject, "subject", "", "Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (required) (1-200 chars)")
 	cmd.Flags().StringVar(&dataJSON, "data", "", "Full request body as JSON; positional arguments and typed flags override its fields. Accepts inline JSON, or - to read stdin.")
diff --git a/skills/flashduty/reference/member.md b/skills/flashduty/reference/member.md
index f6b6fab..85a6937 100644
--- a/skills/flashduty/reference/member.md
+++ b/skills/flashduty/reference/member.md
@@ -99,7 +99,7 @@ List members
 
 ### notify
 Notify members
-- `--html` string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 512,000 bytes of raw UTF-8 input, and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (≤512000 chars)
+- `--html` string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (≤102400 chars)
 - `--person-ids` intSlice — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
 - `--subject` string (required) — Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
 - response: `{items: [...]}` page wrapper — pipe `--json | jq '.items[]'` (NOT top-level `.[]`) — items fields: person_id (integer); reason (string); status (string)
@@ -131,7 +131,7 @@ Update member roles
 
 ## Gotchas
 
-- **`notify` only works with an AI SRE session credential.** Any other credential (an account app key, a personal API key) is rejected with a permission error. `person_ids` defaults to the caller when omitted. `html` can be large (up to 512,000 bytes) — never pass it through the typed `--html` flag or `"$(...)"` command substitution (which strips trailing newlines); build the full body with `jq -n --rawfile` and pipe it in with `--data -`, the same pattern `template update` uses:
+- **`notify` only works with an AI SRE session credential.** Any other credential (an account app key, a personal API key) is rejected with a permission error. `person_ids` defaults to the caller when omitted. `html` can be large (up to 102,400 bytes) — never pass it through the typed `--html` flag or `"$(...)"` command substitution (which strips trailing newlines); build the full body with `jq -n --rawfile` and pipe it in with `--data -`, the same pattern `template update` uses:
   ```bash
   jq -n --rawfile h /tmp/report.html --argjson pids '[<person_id1>,<person_id2>]' \
     '{html: $h, subject: "<subject>", person_ids: $pids}' \

From cd841e278cd1ed4c724fd795442941ab7225b5d4 Mon Sep 17 00:00:00 2001
From: ysyneu <ysyneu@gmail.com>
Date: Mon, 14 Sep 2026 05:14:13 -0700
Subject: [PATCH 4/7] feat(member): support dry_run on notify

---
 go.mod                               |  2 +-
 go.sum                               |  4 ++--
 internal/cli/zz_generated_members.go | 17 ++++++++++++-----
 skills/flashduty/reference/member.md |  8 +++++---
 4 files changed, 20 insertions(+), 11 deletions(-)

diff --git a/go.mod b/go.mod
index 69c09f5..26a3913 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/flashcatcloud/flashduty-cli
 go 1.25.1
 
 require (
-	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914102602-0b2ebbc85eff
+	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914120920-45aa7e8e02c4
 	github.com/mattn/go-runewidth v0.0.29
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
diff --git a/go.sum b/go.sum
index d4570bb..6859e24 100644
--- a/go.sum
+++ b/go.sum
@@ -1,8 +1,8 @@
 github.com/clipperhouse/uax29/v2 v2.2.0 h1:ChwIKnQN3kcZteTXMgb1wztSgaU+ZemkgWdohwgs8tY=
 github.com/clipperhouse/uax29/v2 v2.2.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914102602-0b2ebbc85eff h1:TwBefEAlz18jGo8X8XhoIBiBjB6jyHh9EjoN7bESQno=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914102602-0b2ebbc85eff/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914120920-45aa7e8e02c4 h1:bIWCmIGwzV8TbrntxfA5EImqqex2f0SLhc18IaVtDTI=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914120920-45aa7e8e02c4/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/mattn/go-runewidth v0.0.29 h1:3oGF3R/S2N9DQ3ptftzVIvg2eicmojCzlwBEmqEPDfQ=
diff --git a/internal/cli/zz_generated_members.go b/internal/cli/zz_generated_members.go
index 2723a26..7de6d0b 100644
--- a/internal/cli/zz_generated_members.go
+++ b/internal/cli/zz_generated_members.go
@@ -376,6 +376,7 @@ Response fields ('data' envelope is unwrapped — rows are nested under items[];
 
 func genMembersMemberNotifyCmd() *cobra.Command {
 	var dataJSON string
+	var fDryRun bool
 	var fHTML string
 	var fPersonIDs []int
 	var fSubject string
@@ -389,12 +390,14 @@ Send an email to account members on behalf of the caller, with content the calle
 API: POST /member/notify (memberNotify)
 
 Request fields:
-  --html string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (≤102400 chars)
+  --dry-run bool — Check without sending. When 'true', every check runs and the response returns the exact email in 'html', but nothing is queued and neither the hourly limit nor the per-turn duplicate check is consumed. Defaults to 'false'.
+  --html string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed); recipients receive it as the whole email body. Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; images are kept only when their 'src' is 'https' — images with any other or no 'src', including 'data:', are removed; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (≤102400 chars)
   --person-ids []int — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
-  --subject string (required) — Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
+  --subject string (required) — Email subject, used as written. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
 
 Response fields ('data' envelope is unwrapped — rows are nested under items[]; pipe 'jq '.items[]'', NOT '.data.items[]'):
-  - items (array<object>) — One result per resolved recipient, in the same order as the resolved recipient list.
+  - html (string) — Only present when 'dry_run' is 'true': the complete email HTML exactly as recipients would receive it, after sanitization.
+  - items (array<object>) — One result per resolved recipient, in the same order as the resolved recipient list. With 'dry_run', each result is what a real send would return.
     - person_id (integer) (required) — Recipient member ID.
     - reason (string) — Why the recipient was skipped. Only present when 'status' is 'skipped'. 'not_member' — not an active member of the caller's account; 'no_email' — the member has no email address on file; 'email_disabled' — the member's notification preferences for this kind of message exclude email; 'duplicate' — this recipient already received a message from the same AI SRE session turn; 'rate_limited' — this recipient has already been sent 20 emails through this endpoint within the last hour; 'send_failed' — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]
     - status (string) (required) — Delivery status. 'accepted' — the email was queued for asynchronous delivery; 'skipped' — no email was queued, see 'reason'. [accepted, skipped]
@@ -403,6 +406,9 @@ Response fields ('data' envelope is unwrapped — rows are nested under items[];
 		RunE: func(cmd *cobra.Command, args []string) error {
 			return runCommand(cmd, args, func(ctx *RunContext) error {
 				body, err := genAssembleBody(dataJSON, func(body map[string]any) error {
+					if cmd.Flags().Changed("dry-run") {
+						body["dry_run"] = fDryRun
+					}
 					if cmd.Flags().Changed("html") {
 						body["html"] = fHTML
 					}
@@ -429,9 +435,10 @@ Response fields ('data' envelope is unwrapped — rows are nested under items[];
 			})
 		},
 	}
-	cmd.Flags().StringVar(&fHTML, "html", "", "Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (required) (≤102400 chars)")
+	cmd.Flags().BoolVar(&fDryRun, "dry-run", false, "Check without sending. When 'true', every check runs and the response returns the exact email in 'html', but nothing is queued and neither the hourly limit nor the per-turn duplicate check is consumed. Defaults to 'false'.")
+	cmd.Flags().StringVar(&fHTML, "html", "", "Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed); recipients receive it as the whole email body. Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; images are kept only when their 'src' is 'https' — images with any other or no 'src', including 'data:', are removed; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (required) (≤102400 chars)")
 	cmd.Flags().IntSliceVar(&fPersonIDs, "person-ids", nil, "Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.")
-	cmd.Flags().StringVar(&fSubject, "subject", "", "Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (required) (1-200 chars)")
+	cmd.Flags().StringVar(&fSubject, "subject", "", "Email subject, used as written. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (required) (1-200 chars)")
 	cmd.Flags().StringVar(&dataJSON, "data", "", "Full request body as JSON; positional arguments and typed flags override its fields. Accepts inline JSON, or - to read stdin.")
 	return cmd
 }
diff --git a/skills/flashduty/reference/member.md b/skills/flashduty/reference/member.md
index 85a6937..648e953 100644
--- a/skills/flashduty/reference/member.md
+++ b/skills/flashduty/reference/member.md
@@ -99,10 +99,11 @@ List members
 
 ### notify
 Notify members
-- `--html` string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed). Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; image 'src' values are kept only when they are 'https' — non-'https' and 'data:' image sources are dropped; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes keep only common text, color, spacing, border and sizing properties; properties that can move content outside the message body (such as 'position' or negative margins) and CSS 'url()' values are removed. (≤102400 chars)
+- `--dry-run` bool — Check without sending. When 'true', every check runs and the response returns the exact email in 'html', but nothing is queued and neither the hourly limit nor the per-turn duplicate check is consumed. Defaults to 'false'.
+- `--html` string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed); recipients receive it as the whole email body. Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; images are kept only when their 'src' is 'https' — images with any other or no 'src', including 'data:', are removed; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (≤102400 chars)
 - `--person-ids` intSlice — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
-- `--subject` string (required) — Email subject. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
-- response: `{items: [...]}` page wrapper — pipe `--json | jq '.items[]'` (NOT top-level `.[]`) — items fields: person_id (integer); reason (string); status (string)
+- `--subject` string (required) — Email subject, used as written. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
+- response: `{items: [...], html}` page wrapper — pipe `--json | jq '.items[]'` (NOT top-level `.[]`) — items fields: person_id (integer); reason (string); status (string)
 
 ### role-grant <role-id> [<id2>...]
 Grant role to member
@@ -137,6 +138,7 @@ Update member roles
     '{html: $h, subject: "<subject>", person_ids: $pids}' \
     | fduty member notify --data -
   ```
+  Add `dry_run: true` to that body to get the finished email back in `.html` without sending anything, and check it before the real send.
 - **Resolving a `person_id` → name: use `fduty person infos <person_id> …`, NOT `member list`.** `schedule`/`oncall`/`incident`/`alert` output returns `person_id`s, a **different namespace from `member_id`**. `fduty person infos` (the sibling `person` group) batch-resolves any number of `person_id`s to `person_name` in one call (rows under `.items[]`). Matching `member list` rows on `member_id == <person_id>` is wrong, and paginating the full roster to find them silently misses people on later pages.
 - **`invite` members array is body-only — use `--data`.** Individual members cannot be passed as flat flags; the `members` array (with nested `role_ids`, `email`, `phone`, etc.) lives only in the JSON body. Up to 20 members per call.
 - **`info-reset <member-id>` can be passed positionally or via `--member-id`** — both work: `fduty member info-reset <member_id> --member-name "New Name"` or `fduty member info-reset --member-id <member_id> --member-name "New Name"`. If both are given, the flag wins.

From ad1a4051374a032944de0c8ce375693f3c974866 Mon Sep 17 00:00:00 2001
From: ysyneu <ysyneu@gmail.com>
Date: Mon, 14 Sep 2026 05:37:16 -0700
Subject: [PATCH 5/7] chore(member): recommend a notify dry run in the command
 help

Bump go-flashduty and regenerate.
---
 go.mod                               | 2 +-
 go.sum                               | 4 ++--
 internal/cli/zz_generated_members.go | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/go.mod b/go.mod
index 26a3913..055bfb4 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/flashcatcloud/flashduty-cli
 go 1.25.1
 
 require (
-	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914120920-45aa7e8e02c4
+	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914123556-63066a40b9f9
 	github.com/mattn/go-runewidth v0.0.29
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
diff --git a/go.sum b/go.sum
index 6859e24..9bd7b6f 100644
--- a/go.sum
+++ b/go.sum
@@ -1,8 +1,8 @@
 github.com/clipperhouse/uax29/v2 v2.2.0 h1:ChwIKnQN3kcZteTXMgb1wztSgaU+ZemkgWdohwgs8tY=
 github.com/clipperhouse/uax29/v2 v2.2.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914120920-45aa7e8e02c4 h1:bIWCmIGwzV8TbrntxfA5EImqqex2f0SLhc18IaVtDTI=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914120920-45aa7e8e02c4/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914123556-63066a40b9f9 h1:f73jf6J2bfik5TmNRzpfI6fXxV5QhDtL+xWz1+7TWcI=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914123556-63066a40b9f9/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/mattn/go-runewidth v0.0.29 h1:3oGF3R/S2N9DQ3ptftzVIvg2eicmojCzlwBEmqEPDfQ=
diff --git a/internal/cli/zz_generated_members.go b/internal/cli/zz_generated_members.go
index 7de6d0b..e414263 100644
--- a/internal/cli/zz_generated_members.go
+++ b/internal/cli/zz_generated_members.go
@@ -385,7 +385,7 @@ func genMembersMemberNotifyCmd() *cobra.Command {
 		Short: "Notify members",
 		Long: `Notify members.
 
-Send an email to account members on behalf of the caller, with content the caller supplies. Only callable with a credential minted for an AI SRE session; any other credential is rejected with 'AccessDenied'. Delivery is asynchronous — 'accepted' means the email was queued, not that it was delivered.
+Send an email to account members on behalf of the caller, with content the caller supplies. Only callable with a credential minted for an AI SRE session; any other credential is rejected with 'AccessDenied'. Delivery is asynchronous — 'accepted' means the email was queued, not that it was delivered. Call it with 'dry_run' set to 'true' before sending: 'html' in the response is the email exactly as recipients will get it, so you can confirm the sanitizer kept everything the message depends on.
 
 API: POST /member/notify (memberNotify)
 

From 51085d4454af4ba61659dfd29cc48b6536e17e20 Mon Sep 17 00:00:00 2001
From: ysyneu <ysyneu@gmail.com>
Date: Mon, 14 Sep 2026 07:12:22 -0700
Subject: [PATCH 6/7] feat(member): read notify outcomes from recipients

Bump go-flashduty: POST /member/notify returns its per-recipient outcomes
as recipients. The response is now a plain object, so a dry run prints
the whole sanitized email instead of hitting the list-page bound, and
the help and card describe it as a single object.
---
 go.mod                                     |  2 +-
 go.sum                                     |  4 +--
 internal/cli/gen_support_test.go           | 38 ++++++++++++++++++++++
 internal/cli/zz_generated_members.go       |  4 +--
 internal/cli/zz_generated_response_help.go |  2 +-
 skills/flashduty/reference/member.md       |  2 +-
 6 files changed, 45 insertions(+), 7 deletions(-)

diff --git a/go.mod b/go.mod
index 055bfb4..f7497e4 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/flashcatcloud/flashduty-cli
 go 1.25.1
 
 require (
-	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914123556-63066a40b9f9
+	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914141057-049216d46a1b
 	github.com/mattn/go-runewidth v0.0.29
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
diff --git a/go.sum b/go.sum
index 9bd7b6f..a5e7617 100644
--- a/go.sum
+++ b/go.sum
@@ -1,8 +1,8 @@
 github.com/clipperhouse/uax29/v2 v2.2.0 h1:ChwIKnQN3kcZteTXMgb1wztSgaU+ZemkgWdohwgs8tY=
 github.com/clipperhouse/uax29/v2 v2.2.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914123556-63066a40b9f9 h1:f73jf6J2bfik5TmNRzpfI6fXxV5QhDtL+xWz1+7TWcI=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914123556-63066a40b9f9/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914141057-049216d46a1b h1:pM7zUe0T3I9HVibhAfXR9I8H+3gdDDTfTDOmGhPMweY=
+github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914141057-049216d46a1b/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/mattn/go-runewidth v0.0.29 h1:3oGF3R/S2N9DQ3ptftzVIvg2eicmojCzlwBEmqEPDfQ=
diff --git a/internal/cli/gen_support_test.go b/internal/cli/gen_support_test.go
index a1a26d4..39bda16 100644
--- a/internal/cli/gen_support_test.go
+++ b/internal/cli/gen_support_test.go
@@ -287,6 +287,44 @@ func TestPrintGenericResultShortenedRowStaysUTF8(t *testing.T) {
 	}
 }
 
+// TestMemberNotifyDryRunPrintsWholeEmail pins that a notify dry run is a
+// plain object, not a list page: an email past the structured-output limit
+// comes back whole, with every recipient outcome, instead of failing on the
+// list bound.
+func TestMemberNotifyDryRunPrintsWholeEmail(t *testing.T) {
+	html := "<p>" + strings.Repeat("report line ", 5000) + "</p>"
+	for _, format := range []string{"json", "toon"} {
+		t.Run(format, func(t *testing.T) {
+			saveAndResetGlobals(t)
+			stub := newGFStub(t)
+			stub.data = map[string]any{
+				"recipients": []any{
+					map[string]any{"person_id": 5068740052131, "status": "accepted"},
+					map[string]any{"person_id": 5068740052132, "status": "skipped", "reason": "no_email"},
+				},
+				"html": html,
+			}
+
+			out, stderrText, err := execCommandSplit("member", "notify",
+				"--subject", "Daily report", "--html", "<p>report</p>", "--dry-run", "--output-format", format)
+			if err != nil {
+				t.Fatalf("execCommandSplit: %v", err)
+			}
+			if len(out) < compactListOutputLimit || !strings.Contains(out, strings.Repeat("report line ", 5000)) {
+				t.Errorf("%s dry run lost part of the email: %d bytes", format, len(out))
+			}
+			for _, want := range []string{"5068740052131", "5068740052132", "no_email"} {
+				if !strings.Contains(out, want) {
+					t.Errorf("%s dry run lost recipient outcome %q", format, want)
+				}
+			}
+			if strings.Contains(out, "truncated") || strings.Contains(stderrText, "note:") {
+				t.Errorf("%s dry run must not be reduced, stderr:\n%s", format, stderrText)
+			}
+		})
+	}
+}
+
 // TestPrintGenericResultCompleteEnvelopeUnmarked guards the marker's negative
 // case: a page that fits carries no truncated/emitted_rows keys — the marker
 // means "this page was reduced", not "this command supports reduction".
diff --git a/internal/cli/zz_generated_members.go b/internal/cli/zz_generated_members.go
index e414263..a601e1d 100644
--- a/internal/cli/zz_generated_members.go
+++ b/internal/cli/zz_generated_members.go
@@ -395,9 +395,9 @@ Request fields:
   --person-ids []int — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
   --subject string (required) — Email subject, used as written. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
 
-Response fields ('data' envelope is unwrapped — rows are nested under items[]; pipe 'jq '.items[]'', NOT '.data.items[]'):
+Response fields ('data' envelope is unwrapped — these fields are at the top level):
   - html (string) — Only present when 'dry_run' is 'true': the complete email HTML exactly as recipients would receive it, after sanitization.
-  - items (array<object>) — One result per resolved recipient, in the same order as the resolved recipient list. With 'dry_run', each result is what a real send would return.
+  - recipients (array<object>) — One result per resolved recipient, in the same order as the resolved recipient list. With 'dry_run', each result is what a real send would return.
     - person_id (integer) (required) — Recipient member ID.
     - reason (string) — Why the recipient was skipped. Only present when 'status' is 'skipped'. 'not_member' — not an active member of the caller's account; 'no_email' — the member has no email address on file; 'email_disabled' — the member's notification preferences for this kind of message exclude email; 'duplicate' — this recipient already received a message from the same AI SRE session turn; 'rate_limited' — this recipient has already been sent 20 emails through this endpoint within the last hour; 'send_failed' — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]
     - status (string) (required) — Delivery status. 'accepted' — the email was queued for asynchronous delivery; 'skipped' — no email was queued, see 'reason'. [accepted, skipped]
diff --git a/internal/cli/zz_generated_response_help.go b/internal/cli/zz_generated_response_help.go
index 2bf564d..d6d9d02 100644
--- a/internal/cli/zz_generated_response_help.go
+++ b/internal/cli/zz_generated_response_help.go
@@ -166,7 +166,7 @@ var responseHelpBySDKMethod = map[string]string{
 	"Members.MemberInfo":                          "Response fields (`data` envelope is unwrapped — these fields are at the top level):\n  - account_avatar (string) (required) — Account avatar URL\n  - account_email (string) (required) — Account email\n  - account_id (integer) (required) — Account ID\n  - account_locale (string) — Account-level locale preference (e.g. zh-CN or en-US). Omitted when the account has none set.\n  - account_name (string) (required) — Account name\n  - account_role_ids (array<integer>) (required) — Assigned role IDs\n  - account_time_zone (string) — Account-level time zone (e.g. Asia/Shanghai). Omitted when the account has none set.\n  - avatar (string) (required) — Member avatar URL\n  - country_code (string) (required) — ISO 3166-1 alpha-2 region code of the member's contact phone (e.g. \"CN\", \"US\", \"HK\").\n  - created_at (string) (required) — Member creation time, Unix timestamp in seconds. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - domain (string) (required) — Account domain\n  - email (string) (required) — Email address\n  - email_verified (boolean) (required) — Whether email is verified\n  - is_external (boolean) (required) — Whether provisioned via SSO\n  - locale (string) — Member's locale preference. Omitted when the member has none set.\n  - member_id (integer) (required) — Member ID\n  - member_name (string) (required) — Member display name\n  - mp_account_id (string) — Account identifier on the marketplace platform. Omitted together with `mp_plat`.\n  - mp_plat (string) — Cloud marketplace platform the account was provisioned from. Omitted when the account did not come from a marketplace.\n  - phone (string) (required) — Masked phone number\n  - phone_verified (boolean) (required) — Whether phone is verified\n  - time_zone (string) — Member's IANA time zone. Omitted when the member has none set.\n",
 	"Members.MemberInvite":                        "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - member_id (integer) — Member ID\n  - member_name (string) — Member display name\n",
 	"Members.MemberList":                          "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — Account ID\n  - account_role_ids (array<integer>) (required) — Role IDs\n  - avatar (string) (required) — Avatar URL\n  - country_code (string) (required) — ISO 3166-1 alpha-2 region code of the member's contact phone (e.g. \"CN\", \"US\", \"HK\").\n  - created_at (string) (required) — Creation timestamp (Unix seconds) CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - email (string) (required) — Email address\n  - email_verified (boolean) (required) — Email verified\n  - is_external (boolean) (required) — Provisioned via SSO\n  - locale (string) — Member's locale preference (e.g. `zh-CN`). Omitted when empty — the list endpoint does not populate it.\n  - member_id (integer) (required) — Member ID\n  - member_name (string) (required) — Display name\n  - phone (string) (required) — Masked phone number\n  - phone_verified (boolean) (required) — Phone verified\n  - ref_id (string) (required) — External reference ID\n  - status (string) (required) — Member status. `enabled` — active member; `pending` — invited but not yet accepted; `deleted` — removed from the organization. [enabled, pending, deleted]\n  - time_zone (string) — Member's IANA time zone (e.g. `Asia/Shanghai`). Omitted when empty — the list endpoint does not populate it.\n  - updated_at (string) (required) — Update timestamp (Unix seconds) CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n",
-	"Members.MemberNotify":                        "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - person_id (integer) (required) — Recipient member ID.\n  - reason (string) — Why the recipient was skipped. Only present when `status` is `skipped`. `not_member` — not an active member of the caller's account; `no_email` — the member has no email address on file; `email_disabled` — the member's notification preferences for this kind of message exclude email; `duplicate` — this recipient already received a message from the same AI SRE session turn; `rate_limited` — this recipient has already been sent 20 emails through this endpoint within the last hour; `send_failed` — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]\n  - status (string) (required) — Delivery status. `accepted` — the email was queued for asynchronous delivery; `skipped` — no email was queued, see `reason`. [accepted, skipped]\n",
+	"Members.MemberNotify":                        "Response fields (`data` envelope is unwrapped — these fields are at the top level):\n  - html (string) — Only present when `dry_run` is `true`: the complete email HTML exactly as recipients would receive it, after sanitization.\n  - recipients (array<object>) — One result per resolved recipient, in the same order as the resolved recipient list. With `dry_run`, each result is what a real send would return.\n    - person_id (integer) (required) — Recipient member ID.\n    - reason (string) — Why the recipient was skipped. Only present when `status` is `skipped`. `not_member` — not an active member of the caller's account; `no_email` — the member has no email address on file; `email_disabled` — the member's notification preferences for this kind of message exclude email; `duplicate` — this recipient already received a message from the same AI SRE session turn; `rate_limited` — this recipient has already been sent 20 emails through this endpoint within the last hour; `send_failed` — enqueueing the email failed. [not_member, no_email, email_disabled, duplicate, rate_limited, send_failed]\n    - status (string) (required) — Delivery status. `accepted` — the email was queued for asynchronous delivery; `skipped` — no email was queued, see `reason`. [accepted, skipped]\n",
 	"Members.PersonInfos":                         "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — Account ID\n  - as (string) — Principal kind: `account` — the account owner principal; `member` — an organization member. [account, member]\n  - avatar (string) — Avatar URL. Omitted when empty.\n  - email (string) — Email address. Omitted when empty.\n  - email_verified (boolean) (required) — Email verified\n  - locale (string) — Locale. Omitted when empty.\n  - person_id (integer) (required) — Person ID\n  - person_name (string) — Display name. Omitted when empty.\n  - phone (string) — Phone number. Omitted when empty — this endpoint never populates it.\n  - phone_verified (boolean) (required) — Whether the phone is verified. Always false in this endpoint's response.\n  - status (string) — Person status. `enabled` — active; `pending` — invited but not yet accepted; `deleted` — removed. Omitted when empty. [enabled, pending, deleted]\n  - time_zone (string) — Time zone. Omitted when empty.\n",
 	"NotificationTemplates.ReadInfo":              "Response fields (`data` envelope is unwrapped — these fields are at the top level):\n  - account_id (integer) (required) — ID of the owning account.\n  - created_at (string) (required) — Unix epoch seconds the template was created. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - creator_id (integer) (required) — Member ID of the creator.\n  - deleted_at (string) — Unix epoch seconds the template was soft-deleted. Absent (omitempty) when the template is live. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - description (string) (required) — Free-form description.\n  - dingtalk (string) (required) — DingTalk robot message template source.\n  - dingtalk_app (string) (required) — DingTalk app message template source.\n  - email (string) (required) — Email body template source (Go `html/template` syntax).\n  - feishu (string) (required) — Feishu robot message template source.\n  - feishu_app (string) (required) — Feishu app message template source.\n  - feishu_app_card_v2_table_enabled (boolean) (required) — Whether alert labels use table rendering in Feishu app cards.\n  - incident_card_hidden_fields (object) (required) — Incident card fields hidden per IM app type; an empty object when none are configured.\n  - slack (string) (required) — Slack robot message template source.\n  - slack_app (string) (required) — Slack app message template source.\n  - sms (string) (required) — SMS template source (Go `text/template` syntax).\n  - status (string) (required) — Template lifecycle status. `enabled` templates can be referenced by escalation policies for notifications; `disabled` templates are no longer used for new notifications; `deleted` templates are never returned by list endpoints. [enabled, disabled, deleted]\n  - team_id (integer) (required) — ID of the team this template is scoped to, or 0 for account-wide.\n  - teams_app (string) (required) — Microsoft Teams app message template source.\n  - telegram (string) (required) — Telegram bot message template source.\n  - template_id (string) (required) — Template ID.\n  - template_name (string) (required) — Unique template name within the account.\n  - updated_at (string) (required) — Unix epoch seconds the template was last updated. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - updated_by (integer) (required) — Member ID of the last editor.\n  - voice (string) (required) — Voice call script template source.\n  - wecom (string) (required) — WeCom robot message template source.\n  - wecom_app (string) (required) — WeCom app message template source.\n  - zoom (string) (required) — Zoom bot message template source.\n",
 	"NotificationTemplates.ReadList":              "Response fields (this command's `--json` is a TOP-LEVEL array of these row objects — pipe `jq '.[]'`, NOT `.items[]`):\n  - account_id (integer) (required) — ID of the owning account.\n  - created_at (string) (required) — Unix epoch seconds the template was created. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - creator_id (integer) (required) — Member ID of the creator.\n  - deleted_at (string) — Unix epoch seconds the template was soft-deleted. Absent (omitempty) when the template is live. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - description (string) (required) — Free-form description.\n  - dingtalk (string) (required) — DingTalk robot message template source.\n  - dingtalk_app (string) (required) — DingTalk app message template source.\n  - email (string) (required) — Email body template source (Go `html/template` syntax).\n  - feishu (string) (required) — Feishu robot message template source.\n  - feishu_app (string) (required) — Feishu app message template source.\n  - feishu_app_card_v2_table_enabled (boolean) (required) — Whether alert labels use table rendering in Feishu app cards.\n  - incident_card_hidden_fields (object) (required) — Incident card fields hidden per IM app type; an empty object when none are configured.\n  - slack (string) (required) — Slack robot message template source.\n  - slack_app (string) (required) — Slack app message template source.\n  - sms (string) (required) — SMS template source (Go `text/template` syntax).\n  - status (string) (required) — Template lifecycle status. `enabled` templates can be referenced by escalation policies for notifications; `disabled` templates are no longer used for new notifications; `deleted` templates are never returned by list endpoints. [enabled, disabled, deleted]\n  - team_id (integer) (required) — ID of the team this template is scoped to, or 0 for account-wide.\n  - teams_app (string) (required) — Microsoft Teams app message template source.\n  - telegram (string) (required) — Telegram bot message template source.\n  - template_id (string) (required) — Template ID.\n  - template_name (string) (required) — Unique template name within the account.\n  - updated_at (string) (required) — Unix epoch seconds the template was last updated. CLI `--json` renders this as an RFC3339 string in the process's local timezone (NOT UTC, and NOT the wire integer); an unset value renders as null.\n  - updated_by (integer) (required) — Member ID of the last editor.\n  - voice (string) (required) — Voice call script template source.\n  - wecom (string) (required) — WeCom robot message template source.\n  - wecom_app (string) (required) — WeCom app message template source.\n  - zoom (string) (required) — Zoom bot message template source.\n",
diff --git a/skills/flashduty/reference/member.md b/skills/flashduty/reference/member.md
index 648e953..6dabbed 100644
--- a/skills/flashduty/reference/member.md
+++ b/skills/flashduty/reference/member.md
@@ -103,7 +103,7 @@ Notify members
 - `--html` string (required) — Email body as an HTML fragment (no '<html>'/'<head>'/'<body>' wrapper needed); recipients receive it as the whole email body. Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: '<script>', '<style>', '<iframe>', '<object>', '<embed>', '<form>', '<input>', '<button>', '<svg>', '<meta>', '<link>', and '<base>' tags and all 'on*' event handlers are removed; images are kept only when their 'src' is 'https' — images with any other or no 'src', including 'data:', are removed; links are restricted to 'http', 'https', and 'mailto'. Inline 'style' attributes are kept as written. (≤102400 chars)
 - `--person-ids` intSlice — Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
 - `--subject` string (required) — Email subject, used as written. Required, 1–200 characters. Line breaks are replaced with a space; leading/trailing whitespace is trimmed. (1-200 chars)
-- response: `{items: [...], html}` page wrapper — pipe `--json | jq '.items[]'` (NOT top-level `.[]`) — items fields: person_id (integer); reason (string); status (string)
+- response: single object (`data` unwrapped to the top level) — fields: html (string); recipients (array<object>)
 
 ### role-grant <role-id> [<id2>...]
 Grant role to member

From c4b547f473d9d0fc39450a920ad2dea78a88be48 Mon Sep 17 00:00:00 2001
From: ysyneu <ysyneu@gmail.com>
Date: Mon, 14 Sep 2026 08:01:01 -0700
Subject: [PATCH 7/7] chore(deps): bump go-flashduty to v0.15.3

---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index f7497e4..a05b895 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/flashcatcloud/flashduty-cli
 go 1.25.1
 
 require (
-	github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914141057-049216d46a1b
+	github.com/flashcatcloud/go-flashduty v0.15.3
 	github.com/mattn/go-runewidth v0.0.29
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
diff --git a/go.sum b/go.sum
index a5e7617..bc67339 100644
--- a/go.sum
+++ b/go.sum
@@ -1,8 +1,8 @@
 github.com/clipperhouse/uax29/v2 v2.2.0 h1:ChwIKnQN3kcZteTXMgb1wztSgaU+ZemkgWdohwgs8tY=
 github.com/clipperhouse/uax29/v2 v2.2.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914141057-049216d46a1b h1:pM7zUe0T3I9HVibhAfXR9I8H+3gdDDTfTDOmGhPMweY=
-github.com/flashcatcloud/go-flashduty v0.15.3-0.20260914141057-049216d46a1b/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
+github.com/flashcatcloud/go-flashduty v0.15.3 h1:NKxAupco3bE5GuToAYt5DHtdWg/gdwcwfguyenc/umI=
+github.com/flashcatcloud/go-flashduty v0.15.3/go.mod h1:YpHiTYXR5NXBI/rGRZfUy537XMkhdCkwA8NW1QoRHwk=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/mattn/go-runewidth v0.0.29 h1:3oGF3R/S2N9DQ3ptftzVIvg2eicmojCzlwBEmqEPDfQ=
