@bicon/mcp-composer 0.3.6 → 0.5.0

package/dist/index.mjs

@@ -12,7 +12,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // src/version.ts
-var COMPOSER_VERSION = true ? "0.3.6" : readPackageVersion();
+var COMPOSER_VERSION = true ? "0.5.0" : readPackageVersion();
 
 // ../../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -4102,12 +4102,75 @@ var UpdateSkillResponse = objectType({
 var DeleteSkillParams = objectType({
   "id": coerce.string().uuid()
 });
+var listCapabilitiesResponseNameMax = 200;
+var listCapabilitiesResponseCurrentMaturityMax = 5;
+var listCapabilitiesResponseTargetMaturityMax = 5;
+var listCapabilitiesResponseOwnerMax = 200;
+var ListCapabilitiesResponseItem = objectType({
+  "id": stringType().uuid(),
+  "name": stringType().max(listCapabilitiesResponseNameMax),
+  "parentId": stringType().uuid().nullable(),
+  "currentMaturity": numberType().min(1).max(listCapabilitiesResponseCurrentMaturityMax),
+  "targetMaturity": numberType().min(1).max(listCapabilitiesResponseTargetMaturityMax),
+  "importance": enumType(["differentiating", "core", "supporting"]),
+  "owner": stringType().max(listCapabilitiesResponseOwnerMax).optional(),
+  "sortOrder": numberType()
+}).describe("One node of the organisation's capability map: a domain (parentId null) or a capability under a domain. Maturity (1\u20135) and importance are meaningful on capabilities; a domain carries the defaults.");
+var ListCapabilitiesResponse = arrayType(ListCapabilitiesResponseItem);
+var createCapabilityBodyNameMax = 200;
+var createCapabilityBodyCurrentMaturityMax = 5;
+var createCapabilityBodyTargetMaturityMax = 5;
+var createCapabilityBodyOwnerMax = 200;
+var CreateCapabilityBody = objectType({
+  "id": stringType().uuid().optional().describe("Optional client-supplied id \u2014 see SkillInput's id field."),
+  "name": stringType().max(createCapabilityBodyNameMax),
+  "parentId": stringType().uuid().nullish().describe("The domain this capability belongs to; null (or absent) for a domain."),
+  "currentMaturity": numberType().min(1).max(createCapabilityBodyCurrentMaturityMax),
+  "targetMaturity": numberType().min(1).max(createCapabilityBodyTargetMaturityMax),
+  "importance": enumType(["differentiating", "core", "supporting"]),
+  "owner": stringType().max(createCapabilityBodyOwnerMax).optional(),
+  "sortOrder": numberType()
+});
+var UpdateCapabilityParams = objectType({
+  "id": coerce.string().uuid()
+});
+var updateCapabilityBodyNameMax = 200;
+var updateCapabilityBodyCurrentMaturityMax = 5;
+var updateCapabilityBodyTargetMaturityMax = 5;
+var updateCapabilityBodyOwnerMax = 200;
+var UpdateCapabilityBody = objectType({
+  "id": stringType().uuid().optional().describe("Optional client-supplied id \u2014 see SkillInput's id field."),
+  "name": stringType().max(updateCapabilityBodyNameMax),
+  "parentId": stringType().uuid().nullish().describe("The domain this capability belongs to; null (or absent) for a domain."),
+  "currentMaturity": numberType().min(1).max(updateCapabilityBodyCurrentMaturityMax),
+  "targetMaturity": numberType().min(1).max(updateCapabilityBodyTargetMaturityMax),
+  "importance": enumType(["differentiating", "core", "supporting"]),
+  "owner": stringType().max(updateCapabilityBodyOwnerMax).optional(),
+  "sortOrder": numberType()
+});
+var updateCapabilityResponseNameMax = 200;
+var updateCapabilityResponseCurrentMaturityMax = 5;
+var updateCapabilityResponseTargetMaturityMax = 5;
+var updateCapabilityResponseOwnerMax = 200;
+var UpdateCapabilityResponse = objectType({
+  "id": stringType().uuid(),
+  "name": stringType().max(updateCapabilityResponseNameMax),
+  "parentId": stringType().uuid().nullable(),
+  "currentMaturity": numberType().min(1).max(updateCapabilityResponseCurrentMaturityMax),
+  "targetMaturity": numberType().min(1).max(updateCapabilityResponseTargetMaturityMax),
+  "importance": enumType(["differentiating", "core", "supporting"]),
+  "owner": stringType().max(updateCapabilityResponseOwnerMax).optional(),
+  "sortOrder": numberType()
+}).describe("One node of the organisation's capability map: a domain (parentId null) or a capability under a domain. Maturity (1\u20135) and importance are meaningful on capabilities; a domain carries the defaults.");
+var DeleteCapabilityParams = objectType({
+  "id": coerce.string().uuid()
+});
 var ListOrganizationMembersResponseItem = objectType({
   "userId": stringType().uuid(),
   "email": stringType(),
   "displayName": stringType().nullable(),
   "role": enumType(["admin", "member", "viewer"]),
-  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation.")
+  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones.")
 });
 var ListOrganizationMembersResponse = arrayType(ListOrganizationMembersResponseItem);
 var SyncOrganizationMembersResponse = objectType({
@@ -4117,17 +4180,18 @@ var SyncOrganizationMembersResponse = objectType({
 var GetMyOrganizationAccessResponse = objectType({
   "userId": stringType().describe(`The caller's own local user id (matches AuthorRef.userId on initiatives), so the client can tell its own changes apart from a teammate's \u2014 e.g. to suppress the "updated by X" collaboration banner when an edit echoing back is the caller's own save.`),
   "role": enumType(["admin", "member", "viewer"]),
-  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation.")
+  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones."),
+  "initiativeLimit": numberType().describe("The most initiatives this organisation may hold, archived ones included. Creating one more answers 507 with code initiative_limit_reached, so the client blocks New, Duplicate and Import up front.")
 });
 var UpdateOrganizationMemberPermissionsParams = objectType({
   "userId": coerce.string().uuid()
 });
 var UpdateOrganizationMemberPermissionsBody = objectType({
-  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation.")
+  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones.")
 });
 var UpdateOrganizationMemberPermissionsResponse = objectType({
   "userId": stringType().uuid(),
-  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation.")
+  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones.")
 });
 var ListPermissionProfilesResponseItem = objectType({
   "id": stringType().uuid(),
@@ -4216,9 +4280,17 @@ var listSnapshotsResponseInitiativesItemStatusReportsItemBudgetCommentMax = 1e4;
 var listSnapshotsResponseInitiativesItemStatusReportsItemSkillsCommentMax = 1e4;
 var listSnapshotsResponseInitiativesItemStatusReportsItemSummaryMax = 1e4;
 var listSnapshotsResponseInitiativesItemStatusReportsMax = 1e3;
+var listSnapshotsResponseInitiativesItemMilestonesItemTitleMax = 300;
+var listSnapshotsResponseInitiativesItemMilestonesItemBaselineDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listSnapshotsResponseInitiativesItemMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listSnapshotsResponseInitiativesItemMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listSnapshotsResponseInitiativesItemMilestonesItemNoteMax = 1e4;
+var listSnapshotsResponseInitiativesItemMilestonesMax = 30;
 var listSnapshotsResponseInitiativesItemDependsOnMax = 1e3;
 var listSnapshotsResponseInitiativesItemRequiredSkillsItemRunFteMin = 0;
 var listSnapshotsResponseInitiativesItemRequiredSkillsMax = 1e3;
+var listSnapshotsResponseInitiativesItemCapabilityImpactsItemMaturityToMax = 5;
+var listSnapshotsResponseInitiativesItemCapabilityImpactsMax = 1e3;
 var listSnapshotsResponseInitiativesItemDpiaUrlMax = 2e3;
 var listSnapshotsResponseInitiativesItemModelCardUrlMax = 2e3;
 var listSnapshotsResponseInitiativesItemProhibitedOverrideMax = 2e3;
@@ -4268,7 +4340,12 @@ var ListSnapshotsResponseItem = objectType({
     "evaluation": objectType({
       "valueScale": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "frequencyOfProcess": numberType(),
@@ -4282,7 +4359,12 @@ var ListSnapshotsResponseItem = objectType({
       })),
       "feasibility": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "dataAvailability": numberType(),
@@ -4296,7 +4378,12 @@ var ListSnapshotsResponseItem = objectType({
       })),
       "governance": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "regulatoryExposure": numberType(),
@@ -4311,7 +4398,12 @@ var ListSnapshotsResponseItem = objectType({
       })),
       "strategic": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "strategicDifferentiation": numberType(),
@@ -4366,7 +4458,12 @@ var ListSnapshotsResponseItem = objectType({
       "kind": enumType(["go", "pause", "stop", "rescope", "rebudget", "other"]),
       "owner": stringType().max(listSnapshotsResponseInitiativesItemDecisionLogItemOwnerMax).optional(),
       "rationale": stringType().max(listSnapshotsResponseInitiativesItemDecisionLogItemRationaleMax).optional(),
-      "createdAt": stringType().optional()
+      "createdAt": stringType().optional(),
+      "recordedAt": stringType().optional().describe("Server stamp: when the entry was recorded or its content last changed (`date` is when the decision was taken). Absent on entries not saved since the stamps were introduced. Ignored in requests."),
+      "recordedBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who recorded it. Ignored in requests.")
     })).max(listSnapshotsResponseInitiativesItemDecisionLogMax).optional(),
     "statusReports": arrayType(objectType({
       "id": stringType(),
@@ -4390,12 +4487,25 @@ var ListSnapshotsResponseItem = objectType({
       }),
       "summary": stringType().max(listSnapshotsResponseInitiativesItemStatusReportsItemSummaryMax).optional()
     })).max(listSnapshotsResponseInitiativesItemStatusReportsMax).optional(),
+    "milestones": arrayType(objectType({
+      "id": stringType(),
+      "title": stringType().min(1).max(listSnapshotsResponseInitiativesItemMilestonesItemTitleMax),
+      "baselineDate": stringType().regex(listSnapshotsResponseInitiativesItemMilestonesItemBaselineDateRegExp),
+      "forecastDate": stringType().regex(listSnapshotsResponseInitiativesItemMilestonesItemForecastDateRegExp).optional(),
+      "doneDate": stringType().regex(listSnapshotsResponseInitiativesItemMilestonesItemDoneDateRegExp).optional(),
+      "note": stringType().max(listSnapshotsResponseInitiativesItemMilestonesItemNoteMax).optional()
+    }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(listSnapshotsResponseInitiativesItemMilestonesMax).optional(),
     "dependsOn": arrayType(stringType()).max(listSnapshotsResponseInitiativesItemDependsOnMax),
     "requiredSkills": arrayType(objectType({
       "skillId": stringType(),
       "fte": numberType(),
       "runFte": numberType().min(listSnapshotsResponseInitiativesItemRequiredSkillsItemRunFteMin).optional()
     })).max(listSnapshotsResponseInitiativesItemRequiredSkillsMax).optional(),
+    "capabilityImpacts": arrayType(objectType({
+      "capabilityId": stringType(),
+      "kind": enumType(["improve", "new", "replace", "retire"]),
+      "maturityTo": numberType().min(1).max(listSnapshotsResponseInitiativesItemCapabilityImpactsItemMaturityToMax).optional().describe("The maturity level the initiative brings the capability to; absent for `retire`.")
+    }).describe("What an initiative does to one capability of the organisation's map.")).max(listSnapshotsResponseInitiativesItemCapabilityImpactsMax).optional(),
     "aiRiskTier": enumType(["Prohibited", "High-Risk", "Limited", "Minimal"]).optional(),
     "hitlPosture": enumType(["Unattended", "Supervised", "Human-Required"]).optional(),
     "dpiaStatus": enumType(["Not Required", "In Progress", "Completed"]).optional(),
@@ -4406,7 +4516,12 @@ var ListSnapshotsResponseItem = objectType({
     "gateEvidence": recordType(stringType(), recordType(stringType(), objectType({
       "checked": booleanType(),
       "asOfDate": stringType().optional(),
-      "note": stringType().max(listSnapshotsResponseInitiativesItemGateEvidenceNoteMax).optional()
+      "note": stringType().max(listSnapshotsResponseInitiativesItemGateEvidenceNoteMax).optional(),
+      "checkedAt": stringType().optional().describe("Server stamp: when the item was ticked; absent while unchecked or ticked before the stamps were introduced. Ignored in requests."),
+      "checkedBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who ticked it. Ignored in requests.")
     }))).optional().describe("Partial<Record<GateTransitionKey, Record<itemId, GateEvidenceItem>>>"),
     "gateBypassed": booleanType().optional(),
     "aiAct": objectType({
@@ -4489,6 +4604,7 @@ var ListSnapshotsResponseItem = objectType({
       "userId": stringType().uuid(),
       "name": stringType()
     }).optional().describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body."),
+    "version": numberType().min(1).optional().describe("Save counter, raised by the server on every save. A request names the version its edit is based on in InitiativeInput.baseVersion; this field is ignored in requests."),
     "createdAt": stringType(),
     "updatedAt": stringType()
   })),
@@ -4516,9 +4632,17 @@ var createSnapshotBodyInitiativesItemStatusReportsItemBudgetCommentMax = 1e4;
 var createSnapshotBodyInitiativesItemStatusReportsItemSkillsCommentMax = 1e4;
 var createSnapshotBodyInitiativesItemStatusReportsItemSummaryMax = 1e4;
 var createSnapshotBodyInitiativesItemStatusReportsMax = 1e3;
+var createSnapshotBodyInitiativesItemMilestonesItemTitleMax = 300;
+var createSnapshotBodyInitiativesItemMilestonesItemBaselineDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createSnapshotBodyInitiativesItemMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createSnapshotBodyInitiativesItemMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createSnapshotBodyInitiativesItemMilestonesItemNoteMax = 1e4;
+var createSnapshotBodyInitiativesItemMilestonesMax = 30;
 var createSnapshotBodyInitiativesItemDependsOnMax = 1e3;
 var createSnapshotBodyInitiativesItemRequiredSkillsItemRunFteMin = 0;
 var createSnapshotBodyInitiativesItemRequiredSkillsMax = 1e3;
+var createSnapshotBodyInitiativesItemCapabilityImpactsItemMaturityToMax = 5;
+var createSnapshotBodyInitiativesItemCapabilityImpactsMax = 1e3;
 var createSnapshotBodyInitiativesItemDpiaUrlMax = 2e3;
 var createSnapshotBodyInitiativesItemModelCardUrlMax = 2e3;
 var createSnapshotBodyInitiativesItemProhibitedOverrideMax = 2e3;
@@ -4568,7 +4692,12 @@ var CreateSnapshotBody = objectType({
     "evaluation": objectType({
       "valueScale": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "frequencyOfProcess": numberType(),
@@ -4582,7 +4711,12 @@ var CreateSnapshotBody = objectType({
       })),
       "feasibility": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "dataAvailability": numberType(),
@@ -4596,7 +4730,12 @@ var CreateSnapshotBody = objectType({
       })),
       "governance": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "regulatoryExposure": numberType(),
@@ -4611,7 +4750,12 @@ var CreateSnapshotBody = objectType({
       })),
       "strategic": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "strategicDifferentiation": numberType(),
@@ -4666,7 +4810,12 @@ var CreateSnapshotBody = objectType({
       "kind": enumType(["go", "pause", "stop", "rescope", "rebudget", "other"]),
       "owner": stringType().max(createSnapshotBodyInitiativesItemDecisionLogItemOwnerMax).optional(),
       "rationale": stringType().max(createSnapshotBodyInitiativesItemDecisionLogItemRationaleMax).optional(),
-      "createdAt": stringType().optional()
+      "createdAt": stringType().optional(),
+      "recordedAt": stringType().optional().describe("Server stamp: when the entry was recorded or its content last changed (`date` is when the decision was taken). Absent on entries not saved since the stamps were introduced. Ignored in requests."),
+      "recordedBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who recorded it. Ignored in requests.")
     })).max(createSnapshotBodyInitiativesItemDecisionLogMax).optional(),
     "statusReports": arrayType(objectType({
       "id": stringType(),
@@ -4690,12 +4839,25 @@ var CreateSnapshotBody = objectType({
       }),
       "summary": stringType().max(createSnapshotBodyInitiativesItemStatusReportsItemSummaryMax).optional()
     })).max(createSnapshotBodyInitiativesItemStatusReportsMax).optional(),
+    "milestones": arrayType(objectType({
+      "id": stringType(),
+      "title": stringType().min(1).max(createSnapshotBodyInitiativesItemMilestonesItemTitleMax),
+      "baselineDate": stringType().regex(createSnapshotBodyInitiativesItemMilestonesItemBaselineDateRegExp),
+      "forecastDate": stringType().regex(createSnapshotBodyInitiativesItemMilestonesItemForecastDateRegExp).optional(),
+      "doneDate": stringType().regex(createSnapshotBodyInitiativesItemMilestonesItemDoneDateRegExp).optional(),
+      "note": stringType().max(createSnapshotBodyInitiativesItemMilestonesItemNoteMax).optional()
+    }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(createSnapshotBodyInitiativesItemMilestonesMax).optional(),
     "dependsOn": arrayType(stringType()).max(createSnapshotBodyInitiativesItemDependsOnMax),
     "requiredSkills": arrayType(objectType({
       "skillId": stringType(),
       "fte": numberType(),
       "runFte": numberType().min(createSnapshotBodyInitiativesItemRequiredSkillsItemRunFteMin).optional()
     })).max(createSnapshotBodyInitiativesItemRequiredSkillsMax).optional(),
+    "capabilityImpacts": arrayType(objectType({
+      "capabilityId": stringType(),
+      "kind": enumType(["improve", "new", "replace", "retire"]),
+      "maturityTo": numberType().min(1).max(createSnapshotBodyInitiativesItemCapabilityImpactsItemMaturityToMax).optional().describe("The maturity level the initiative brings the capability to; absent for `retire`.")
+    }).describe("What an initiative does to one capability of the organisation's map.")).max(createSnapshotBodyInitiativesItemCapabilityImpactsMax).optional(),
     "aiRiskTier": enumType(["Prohibited", "High-Risk", "Limited", "Minimal"]).optional(),
     "hitlPosture": enumType(["Unattended", "Supervised", "Human-Required"]).optional(),
     "dpiaStatus": enumType(["Not Required", "In Progress", "Completed"]).optional(),
@@ -4706,7 +4868,12 @@ var CreateSnapshotBody = objectType({
     "gateEvidence": recordType(stringType(), recordType(stringType(), objectType({
       "checked": booleanType(),
       "asOfDate": stringType().optional(),
-      "note": stringType().max(createSnapshotBodyInitiativesItemGateEvidenceNoteMax).optional()
+      "note": stringType().max(createSnapshotBodyInitiativesItemGateEvidenceNoteMax).optional(),
+      "checkedAt": stringType().optional().describe("Server stamp: when the item was ticked; absent while unchecked or ticked before the stamps were introduced. Ignored in requests."),
+      "checkedBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who ticked it. Ignored in requests.")
     }))).optional().describe("Partial<Record<GateTransitionKey, Record<itemId, GateEvidenceItem>>>"),
     "gateBypassed": booleanType().optional(),
     "aiAct": objectType({
@@ -4789,6 +4956,7 @@ var CreateSnapshotBody = objectType({
       "userId": stringType().uuid(),
       "name": stringType()
     }).optional().describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body."),
+    "version": numberType().min(1).optional().describe("Save counter, raised by the server on every save. A request names the version its edit is based on in InitiativeInput.baseVersion; this field is ignored in requests."),
     "createdAt": stringType(),
     "updatedAt": stringType()
   })),
@@ -4822,9 +4990,17 @@ var renameSnapshotResponseInitiativesItemStatusReportsItemBudgetCommentMax = 1e4
 var renameSnapshotResponseInitiativesItemStatusReportsItemSkillsCommentMax = 1e4;
 var renameSnapshotResponseInitiativesItemStatusReportsItemSummaryMax = 1e4;
 var renameSnapshotResponseInitiativesItemStatusReportsMax = 1e3;
+var renameSnapshotResponseInitiativesItemMilestonesItemTitleMax = 300;
+var renameSnapshotResponseInitiativesItemMilestonesItemBaselineDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var renameSnapshotResponseInitiativesItemMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var renameSnapshotResponseInitiativesItemMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var renameSnapshotResponseInitiativesItemMilestonesItemNoteMax = 1e4;
+var renameSnapshotResponseInitiativesItemMilestonesMax = 30;
 var renameSnapshotResponseInitiativesItemDependsOnMax = 1e3;
 var renameSnapshotResponseInitiativesItemRequiredSkillsItemRunFteMin = 0;
 var renameSnapshotResponseInitiativesItemRequiredSkillsMax = 1e3;
+var renameSnapshotResponseInitiativesItemCapabilityImpactsItemMaturityToMax = 5;
+var renameSnapshotResponseInitiativesItemCapabilityImpactsMax = 1e3;
 var renameSnapshotResponseInitiativesItemDpiaUrlMax = 2e3;
 var renameSnapshotResponseInitiativesItemModelCardUrlMax = 2e3;
 var renameSnapshotResponseInitiativesItemProhibitedOverrideMax = 2e3;
@@ -4874,7 +5050,12 @@ var RenameSnapshotResponse = objectType({
     "evaluation": objectType({
       "valueScale": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "frequencyOfProcess": numberType(),
@@ -4888,7 +5069,12 @@ var RenameSnapshotResponse = objectType({
       })),
       "feasibility": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "dataAvailability": numberType(),
@@ -4902,7 +5088,12 @@ var RenameSnapshotResponse = objectType({
       })),
       "governance": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "regulatoryExposure": numberType(),
@@ -4917,7 +5108,12 @@ var RenameSnapshotResponse = objectType({
       })),
       "strategic": objectType({
         "score": numberType(),
-        "confidence": enumType(["Low", "Medium", "High"])
+        "confidence": enumType(["Low", "Medium", "High"]),
+        "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+        "scoredBy": objectType({
+          "userId": stringType().uuid(),
+          "name": stringType()
+        }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
       }).and(objectType({
         "subs": objectType({
           "strategicDifferentiation": numberType(),
@@ -4972,7 +5168,12 @@ var RenameSnapshotResponse = objectType({
       "kind": enumType(["go", "pause", "stop", "rescope", "rebudget", "other"]),
       "owner": stringType().max(renameSnapshotResponseInitiativesItemDecisionLogItemOwnerMax).optional(),
       "rationale": stringType().max(renameSnapshotResponseInitiativesItemDecisionLogItemRationaleMax).optional(),
-      "createdAt": stringType().optional()
+      "createdAt": stringType().optional(),
+      "recordedAt": stringType().optional().describe("Server stamp: when the entry was recorded or its content last changed (`date` is when the decision was taken). Absent on entries not saved since the stamps were introduced. Ignored in requests."),
+      "recordedBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who recorded it. Ignored in requests.")
     })).max(renameSnapshotResponseInitiativesItemDecisionLogMax).optional(),
     "statusReports": arrayType(objectType({
       "id": stringType(),
@@ -4996,12 +5197,25 @@ var RenameSnapshotResponse = objectType({
       }),
       "summary": stringType().max(renameSnapshotResponseInitiativesItemStatusReportsItemSummaryMax).optional()
     })).max(renameSnapshotResponseInitiativesItemStatusReportsMax).optional(),
+    "milestones": arrayType(objectType({
+      "id": stringType(),
+      "title": stringType().min(1).max(renameSnapshotResponseInitiativesItemMilestonesItemTitleMax),
+      "baselineDate": stringType().regex(renameSnapshotResponseInitiativesItemMilestonesItemBaselineDateRegExp),
+      "forecastDate": stringType().regex(renameSnapshotResponseInitiativesItemMilestonesItemForecastDateRegExp).optional(),
+      "doneDate": stringType().regex(renameSnapshotResponseInitiativesItemMilestonesItemDoneDateRegExp).optional(),
+      "note": stringType().max(renameSnapshotResponseInitiativesItemMilestonesItemNoteMax).optional()
+    }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(renameSnapshotResponseInitiativesItemMilestonesMax).optional(),
     "dependsOn": arrayType(stringType()).max(renameSnapshotResponseInitiativesItemDependsOnMax),
     "requiredSkills": arrayType(objectType({
       "skillId": stringType(),
       "fte": numberType(),
       "runFte": numberType().min(renameSnapshotResponseInitiativesItemRequiredSkillsItemRunFteMin).optional()
     })).max(renameSnapshotResponseInitiativesItemRequiredSkillsMax).optional(),
+    "capabilityImpacts": arrayType(objectType({
+      "capabilityId": stringType(),
+      "kind": enumType(["improve", "new", "replace", "retire"]),
+      "maturityTo": numberType().min(1).max(renameSnapshotResponseInitiativesItemCapabilityImpactsItemMaturityToMax).optional().describe("The maturity level the initiative brings the capability to; absent for `retire`.")
+    }).describe("What an initiative does to one capability of the organisation's map.")).max(renameSnapshotResponseInitiativesItemCapabilityImpactsMax).optional(),
     "aiRiskTier": enumType(["Prohibited", "High-Risk", "Limited", "Minimal"]).optional(),
     "hitlPosture": enumType(["Unattended", "Supervised", "Human-Required"]).optional(),
     "dpiaStatus": enumType(["Not Required", "In Progress", "Completed"]).optional(),
@@ -5012,7 +5226,12 @@ var RenameSnapshotResponse = objectType({
     "gateEvidence": recordType(stringType(), recordType(stringType(), objectType({
       "checked": booleanType(),
       "asOfDate": stringType().optional(),
-      "note": stringType().max(renameSnapshotResponseInitiativesItemGateEvidenceNoteMax).optional()
+      "note": stringType().max(renameSnapshotResponseInitiativesItemGateEvidenceNoteMax).optional(),
+      "checkedAt": stringType().optional().describe("Server stamp: when the item was ticked; absent while unchecked or ticked before the stamps were introduced. Ignored in requests."),
+      "checkedBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who ticked it. Ignored in requests.")
     }))).optional().describe("Partial<Record<GateTransitionKey, Record<itemId, GateEvidenceItem>>>"),
     "gateBypassed": booleanType().optional(),
     "aiAct": objectType({
@@ -5095,6 +5314,7 @@ var RenameSnapshotResponse = objectType({
       "userId": stringType().uuid(),
       "name": stringType()
     }).optional().describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body."),
+    "version": numberType().min(1).optional().describe("Save counter, raised by the server on every save. A request names the version its edit is based on in InitiativeInput.baseVersion; this field is ignored in requests."),
     "createdAt": stringType(),
     "updatedAt": stringType()
   })),
@@ -5123,9 +5343,17 @@ var listInitiativesResponseStatusReportsItemBudgetCommentMax = 1e4;
 var listInitiativesResponseStatusReportsItemSkillsCommentMax = 1e4;
 var listInitiativesResponseStatusReportsItemSummaryMax = 1e4;
 var listInitiativesResponseStatusReportsMax = 1e3;
+var listInitiativesResponseMilestonesItemTitleMax = 300;
+var listInitiativesResponseMilestonesItemBaselineDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listInitiativesResponseMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listInitiativesResponseMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listInitiativesResponseMilestonesItemNoteMax = 1e4;
+var listInitiativesResponseMilestonesMax = 30;
 var listInitiativesResponseDependsOnMax = 1e3;
 var listInitiativesResponseRequiredSkillsItemRunFteMin = 0;
 var listInitiativesResponseRequiredSkillsMax = 1e3;
+var listInitiativesResponseCapabilityImpactsItemMaturityToMax = 5;
+var listInitiativesResponseCapabilityImpactsMax = 1e3;
 var listInitiativesResponseDpiaUrlMax = 2e3;
 var listInitiativesResponseModelCardUrlMax = 2e3;
 var listInitiativesResponseProhibitedOverrideMax = 2e3;
@@ -5169,7 +5397,12 @@ var ListInitiativesResponseItem = objectType({
   "evaluation": objectType({
     "valueScale": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "frequencyOfProcess": numberType(),
@@ -5183,7 +5416,12 @@ var ListInitiativesResponseItem = objectType({
     })),
     "feasibility": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "dataAvailability": numberType(),
@@ -5197,7 +5435,12 @@ var ListInitiativesResponseItem = objectType({
     })),
     "governance": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "regulatoryExposure": numberType(),
@@ -5212,7 +5455,12 @@ var ListInitiativesResponseItem = objectType({
     })),
     "strategic": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "strategicDifferentiation": numberType(),
@@ -5267,7 +5515,12 @@ var ListInitiativesResponseItem = objectType({
     "kind": enumType(["go", "pause", "stop", "rescope", "rebudget", "other"]),
     "owner": stringType().max(listInitiativesResponseDecisionLogItemOwnerMax).optional(),
     "rationale": stringType().max(listInitiativesResponseDecisionLogItemRationaleMax).optional(),
-    "createdAt": stringType().optional()
+    "createdAt": stringType().optional(),
+    "recordedAt": stringType().optional().describe("Server stamp: when the entry was recorded or its content last changed (`date` is when the decision was taken). Absent on entries not saved since the stamps were introduced. Ignored in requests."),
+    "recordedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who recorded it. Ignored in requests.")
   })).max(listInitiativesResponseDecisionLogMax).optional(),
   "statusReports": arrayType(objectType({
     "id": stringType(),
@@ -5291,12 +5544,25 @@ var ListInitiativesResponseItem = objectType({
     }),
     "summary": stringType().max(listInitiativesResponseStatusReportsItemSummaryMax).optional()
   })).max(listInitiativesResponseStatusReportsMax).optional(),
+  "milestones": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(listInitiativesResponseMilestonesItemTitleMax),
+    "baselineDate": stringType().regex(listInitiativesResponseMilestonesItemBaselineDateRegExp),
+    "forecastDate": stringType().regex(listInitiativesResponseMilestonesItemForecastDateRegExp).optional(),
+    "doneDate": stringType().regex(listInitiativesResponseMilestonesItemDoneDateRegExp).optional(),
+    "note": stringType().max(listInitiativesResponseMilestonesItemNoteMax).optional()
+  }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(listInitiativesResponseMilestonesMax).optional(),
   "dependsOn": arrayType(stringType()).max(listInitiativesResponseDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
     "fte": numberType(),
     "runFte": numberType().min(listInitiativesResponseRequiredSkillsItemRunFteMin).optional()
   })).max(listInitiativesResponseRequiredSkillsMax).optional(),
+  "capabilityImpacts": arrayType(objectType({
+    "capabilityId": stringType(),
+    "kind": enumType(["improve", "new", "replace", "retire"]),
+    "maturityTo": numberType().min(1).max(listInitiativesResponseCapabilityImpactsItemMaturityToMax).optional().describe("The maturity level the initiative brings the capability to; absent for `retire`.")
+  }).describe("What an initiative does to one capability of the organisation's map.")).max(listInitiativesResponseCapabilityImpactsMax).optional(),
   "aiRiskTier": enumType(["Prohibited", "High-Risk", "Limited", "Minimal"]).optional(),
   "hitlPosture": enumType(["Unattended", "Supervised", "Human-Required"]).optional(),
   "dpiaStatus": enumType(["Not Required", "In Progress", "Completed"]).optional(),
@@ -5307,7 +5573,12 @@ var ListInitiativesResponseItem = objectType({
   "gateEvidence": recordType(stringType(), recordType(stringType(), objectType({
     "checked": booleanType(),
     "asOfDate": stringType().optional(),
-    "note": stringType().max(listInitiativesResponseGateEvidenceNoteMax).optional()
+    "note": stringType().max(listInitiativesResponseGateEvidenceNoteMax).optional(),
+    "checkedAt": stringType().optional().describe("Server stamp: when the item was ticked; absent while unchecked or ticked before the stamps were introduced. Ignored in requests."),
+    "checkedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who ticked it. Ignored in requests.")
   }))).optional().describe("Partial<Record<GateTransitionKey, Record<itemId, GateEvidenceItem>>>"),
   "gateBypassed": booleanType().optional(),
   "aiAct": objectType({
@@ -5390,6 +5661,7 @@ var ListInitiativesResponseItem = objectType({
     "userId": stringType().uuid(),
     "name": stringType()
   }).optional().describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body."),
+  "version": numberType().min(1).optional().describe("Save counter, raised by the server on every save. A request names the version its edit is based on in InitiativeInput.baseVersion; this field is ignored in requests."),
   "createdAt": stringType(),
   "updatedAt": stringType()
 });
@@ -5414,9 +5686,17 @@ var createInitiativeBodyOneStatusReportsItemBudgetCommentMax = 1e4;
 var createInitiativeBodyOneStatusReportsItemSkillsCommentMax = 1e4;
 var createInitiativeBodyOneStatusReportsItemSummaryMax = 1e4;
 var createInitiativeBodyOneStatusReportsMax = 1e3;
+var createInitiativeBodyOneMilestonesItemTitleMax = 300;
+var createInitiativeBodyOneMilestonesItemBaselineDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createInitiativeBodyOneMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createInitiativeBodyOneMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createInitiativeBodyOneMilestonesItemNoteMax = 1e4;
+var createInitiativeBodyOneMilestonesMax = 30;
 var createInitiativeBodyOneDependsOnMax = 1e3;
 var createInitiativeBodyOneRequiredSkillsItemRunFteMin = 0;
 var createInitiativeBodyOneRequiredSkillsMax = 1e3;
+var createInitiativeBodyOneCapabilityImpactsItemMaturityToMax = 5;
+var createInitiativeBodyOneCapabilityImpactsMax = 1e3;
 var createInitiativeBodyOneDpiaUrlMax = 2e3;
 var createInitiativeBodyOneModelCardUrlMax = 2e3;
 var createInitiativeBodyOneProhibitedOverrideMax = 2e3;
@@ -5460,7 +5740,12 @@ var CreateInitiativeBody = objectType({
   "evaluation": objectType({
     "valueScale": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "frequencyOfProcess": numberType(),
@@ -5474,7 +5759,12 @@ var CreateInitiativeBody = objectType({
     })),
     "feasibility": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "dataAvailability": numberType(),
@@ -5488,7 +5778,12 @@ var CreateInitiativeBody = objectType({
     })),
     "governance": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "regulatoryExposure": numberType(),
@@ -5503,7 +5798,12 @@ var CreateInitiativeBody = objectType({
     })),
     "strategic": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "strategicDifferentiation": numberType(),
@@ -5558,7 +5858,12 @@ var CreateInitiativeBody = objectType({
     "kind": enumType(["go", "pause", "stop", "rescope", "rebudget", "other"]),
     "owner": stringType().max(createInitiativeBodyOneDecisionLogItemOwnerMax).optional(),
     "rationale": stringType().max(createInitiativeBodyOneDecisionLogItemRationaleMax).optional(),
-    "createdAt": stringType().optional()
+    "createdAt": stringType().optional(),
+    "recordedAt": stringType().optional().describe("Server stamp: when the entry was recorded or its content last changed (`date` is when the decision was taken). Absent on entries not saved since the stamps were introduced. Ignored in requests."),
+    "recordedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who recorded it. Ignored in requests.")
   })).max(createInitiativeBodyOneDecisionLogMax).optional(),
   "statusReports": arrayType(objectType({
     "id": stringType(),
@@ -5582,12 +5887,25 @@ var CreateInitiativeBody = objectType({
     }),
     "summary": stringType().max(createInitiativeBodyOneStatusReportsItemSummaryMax).optional()
   })).max(createInitiativeBodyOneStatusReportsMax).optional(),
+  "milestones": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(createInitiativeBodyOneMilestonesItemTitleMax),
+    "baselineDate": stringType().regex(createInitiativeBodyOneMilestonesItemBaselineDateRegExp),
+    "forecastDate": stringType().regex(createInitiativeBodyOneMilestonesItemForecastDateRegExp).optional(),
+    "doneDate": stringType().regex(createInitiativeBodyOneMilestonesItemDoneDateRegExp).optional(),
+    "note": stringType().max(createInitiativeBodyOneMilestonesItemNoteMax).optional()
+  }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(createInitiativeBodyOneMilestonesMax).optional(),
   "dependsOn": arrayType(stringType()).max(createInitiativeBodyOneDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
     "fte": numberType(),
     "runFte": numberType().min(createInitiativeBodyOneRequiredSkillsItemRunFteMin).optional()
   })).max(createInitiativeBodyOneRequiredSkillsMax).optional(),
+  "capabilityImpacts": arrayType(objectType({
+    "capabilityId": stringType(),
+    "kind": enumType(["improve", "new", "replace", "retire"]),
+    "maturityTo": numberType().min(1).max(createInitiativeBodyOneCapabilityImpactsItemMaturityToMax).optional().describe("The maturity level the initiative brings the capability to; absent for `retire`.")
+  }).describe("What an initiative does to one capability of the organisation's map.")).max(createInitiativeBodyOneCapabilityImpactsMax).optional(),
   "aiRiskTier": enumType(["Prohibited", "High-Risk", "Limited", "Minimal"]).optional(),
   "hitlPosture": enumType(["Unattended", "Supervised", "Human-Required"]).optional(),
   "dpiaStatus": enumType(["Not Required", "In Progress", "Completed"]).optional(),
@@ -5598,7 +5916,12 @@ var CreateInitiativeBody = objectType({
   "gateEvidence": recordType(stringType(), recordType(stringType(), objectType({
     "checked": booleanType(),
     "asOfDate": stringType().optional(),
-    "note": stringType().max(createInitiativeBodyOneGateEvidenceNoteMax).optional()
+    "note": stringType().max(createInitiativeBodyOneGateEvidenceNoteMax).optional(),
+    "checkedAt": stringType().optional().describe("Server stamp: when the item was ticked; absent while unchecked or ticked before the stamps were introduced. Ignored in requests."),
+    "checkedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who ticked it. Ignored in requests.")
   }))).optional().describe("Partial<Record<GateTransitionKey, Record<itemId, GateEvidenceItem>>>"),
   "gateBypassed": booleanType().optional(),
   "aiAct": objectType({
@@ -5681,6 +6004,7 @@ var CreateInitiativeBody = objectType({
     "userId": stringType().uuid(),
     "name": stringType()
   }).optional().describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body."),
+  "version": numberType().min(1).optional().describe("Save counter, raised by the server on every save. A request names the version its edit is based on in InitiativeInput.baseVersion; this field is ignored in requests."),
   "createdAt": stringType(),
   "updatedAt": stringType()
 }).and(objectType({
@@ -5688,7 +6012,9 @@ var CreateInitiativeBody = objectType({
   "createdBy": unknownType().optional(),
   "updatedBy": unknownType().optional(),
   "createdAt": unknownType().optional(),
-  "updatedAt": unknownType().optional()
+  "updatedAt": unknownType().optional(),
+  "version": unknownType().optional(),
+  "baseVersion": numberType().min(1).optional().describe("PUT only: the version the edit is based on. When it differs from the stored version, someone else saved in between and the save is refused with 409 and the current copy. Omitted (clients that predate it), the save is not checked. A separate field, not `version`, because older clients echo every field they received, including `version`, without ever updating it.")
 })).describe("Same as Initiative, minus server-assigned fields.");
 var GetInitiativeParams = objectType({
   "id": coerce.string().uuid()
@@ -5713,9 +6039,17 @@ var getInitiativeResponseStatusReportsItemBudgetCommentMax = 1e4;
 var getInitiativeResponseStatusReportsItemSkillsCommentMax = 1e4;
 var getInitiativeResponseStatusReportsItemSummaryMax = 1e4;
 var getInitiativeResponseStatusReportsMax = 1e3;
+var getInitiativeResponseMilestonesItemTitleMax = 300;
+var getInitiativeResponseMilestonesItemBaselineDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var getInitiativeResponseMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var getInitiativeResponseMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var getInitiativeResponseMilestonesItemNoteMax = 1e4;
+var getInitiativeResponseMilestonesMax = 30;
 var getInitiativeResponseDependsOnMax = 1e3;
 var getInitiativeResponseRequiredSkillsItemRunFteMin = 0;
 var getInitiativeResponseRequiredSkillsMax = 1e3;
+var getInitiativeResponseCapabilityImpactsItemMaturityToMax = 5;
+var getInitiativeResponseCapabilityImpactsMax = 1e3;
 var getInitiativeResponseDpiaUrlMax = 2e3;
 var getInitiativeResponseModelCardUrlMax = 2e3;
 var getInitiativeResponseProhibitedOverrideMax = 2e3;
@@ -5759,7 +6093,12 @@ var GetInitiativeResponse = objectType({
   "evaluation": objectType({
     "valueScale": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "frequencyOfProcess": numberType(),
@@ -5773,7 +6112,12 @@ var GetInitiativeResponse = objectType({
     })),
     "feasibility": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "dataAvailability": numberType(),
@@ -5787,7 +6131,12 @@ var GetInitiativeResponse = objectType({
     })),
     "governance": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "regulatoryExposure": numberType(),
@@ -5802,7 +6151,12 @@ var GetInitiativeResponse = objectType({
     })),
     "strategic": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "strategicDifferentiation": numberType(),
@@ -5857,7 +6211,12 @@ var GetInitiativeResponse = objectType({
     "kind": enumType(["go", "pause", "stop", "rescope", "rebudget", "other"]),
     "owner": stringType().max(getInitiativeResponseDecisionLogItemOwnerMax).optional(),
     "rationale": stringType().max(getInitiativeResponseDecisionLogItemRationaleMax).optional(),
-    "createdAt": stringType().optional()
+    "createdAt": stringType().optional(),
+    "recordedAt": stringType().optional().describe("Server stamp: when the entry was recorded or its content last changed (`date` is when the decision was taken). Absent on entries not saved since the stamps were introduced. Ignored in requests."),
+    "recordedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who recorded it. Ignored in requests.")
   })).max(getInitiativeResponseDecisionLogMax).optional(),
   "statusReports": arrayType(objectType({
     "id": stringType(),
@@ -5881,12 +6240,25 @@ var GetInitiativeResponse = objectType({
     }),
     "summary": stringType().max(getInitiativeResponseStatusReportsItemSummaryMax).optional()
   })).max(getInitiativeResponseStatusReportsMax).optional(),
+  "milestones": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(getInitiativeResponseMilestonesItemTitleMax),
+    "baselineDate": stringType().regex(getInitiativeResponseMilestonesItemBaselineDateRegExp),
+    "forecastDate": stringType().regex(getInitiativeResponseMilestonesItemForecastDateRegExp).optional(),
+    "doneDate": stringType().regex(getInitiativeResponseMilestonesItemDoneDateRegExp).optional(),
+    "note": stringType().max(getInitiativeResponseMilestonesItemNoteMax).optional()
+  }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(getInitiativeResponseMilestonesMax).optional(),
   "dependsOn": arrayType(stringType()).max(getInitiativeResponseDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
     "fte": numberType(),
     "runFte": numberType().min(getInitiativeResponseRequiredSkillsItemRunFteMin).optional()
   })).max(getInitiativeResponseRequiredSkillsMax).optional(),
+  "capabilityImpacts": arrayType(objectType({
+    "capabilityId": stringType(),
+    "kind": enumType(["improve", "new", "replace", "retire"]),
+    "maturityTo": numberType().min(1).max(getInitiativeResponseCapabilityImpactsItemMaturityToMax).optional().describe("The maturity level the initiative brings the capability to; absent for `retire`.")
+  }).describe("What an initiative does to one capability of the organisation's map.")).max(getInitiativeResponseCapabilityImpactsMax).optional(),
   "aiRiskTier": enumType(["Prohibited", "High-Risk", "Limited", "Minimal"]).optional(),
   "hitlPosture": enumType(["Unattended", "Supervised", "Human-Required"]).optional(),
   "dpiaStatus": enumType(["Not Required", "In Progress", "Completed"]).optional(),
@@ -5897,7 +6269,12 @@ var GetInitiativeResponse = objectType({
   "gateEvidence": recordType(stringType(), recordType(stringType(), objectType({
     "checked": booleanType(),
     "asOfDate": stringType().optional(),
-    "note": stringType().max(getInitiativeResponseGateEvidenceNoteMax).optional()
+    "note": stringType().max(getInitiativeResponseGateEvidenceNoteMax).optional(),
+    "checkedAt": stringType().optional().describe("Server stamp: when the item was ticked; absent while unchecked or ticked before the stamps were introduced. Ignored in requests."),
+    "checkedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who ticked it. Ignored in requests.")
   }))).optional().describe("Partial<Record<GateTransitionKey, Record<itemId, GateEvidenceItem>>>"),
   "gateBypassed": booleanType().optional(),
   "aiAct": objectType({
@@ -5980,6 +6357,7 @@ var GetInitiativeResponse = objectType({
     "userId": stringType().uuid(),
     "name": stringType()
   }).optional().describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body."),
+  "version": numberType().min(1).optional().describe("Save counter, raised by the server on every save. A request names the version its edit is based on in InitiativeInput.baseVersion; this field is ignored in requests."),
   "createdAt": stringType(),
   "updatedAt": stringType()
 });
@@ -6006,9 +6384,17 @@ var updateInitiativeBodyOneStatusReportsItemBudgetCommentMax = 1e4;
 var updateInitiativeBodyOneStatusReportsItemSkillsCommentMax = 1e4;
 var updateInitiativeBodyOneStatusReportsItemSummaryMax = 1e4;
 var updateInitiativeBodyOneStatusReportsMax = 1e3;
+var updateInitiativeBodyOneMilestonesItemTitleMax = 300;
+var updateInitiativeBodyOneMilestonesItemBaselineDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeBodyOneMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeBodyOneMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeBodyOneMilestonesItemNoteMax = 1e4;
+var updateInitiativeBodyOneMilestonesMax = 30;
 var updateInitiativeBodyOneDependsOnMax = 1e3;
 var updateInitiativeBodyOneRequiredSkillsItemRunFteMin = 0;
 var updateInitiativeBodyOneRequiredSkillsMax = 1e3;
+var updateInitiativeBodyOneCapabilityImpactsItemMaturityToMax = 5;
+var updateInitiativeBodyOneCapabilityImpactsMax = 1e3;
 var updateInitiativeBodyOneDpiaUrlMax = 2e3;
 var updateInitiativeBodyOneModelCardUrlMax = 2e3;
 var updateInitiativeBodyOneProhibitedOverrideMax = 2e3;
@@ -6052,7 +6438,12 @@ var UpdateInitiativeBody = objectType({
   "evaluation": objectType({
     "valueScale": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "frequencyOfProcess": numberType(),
@@ -6066,7 +6457,12 @@ var UpdateInitiativeBody = objectType({
     })),
     "feasibility": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "dataAvailability": numberType(),
@@ -6080,7 +6476,12 @@ var UpdateInitiativeBody = objectType({
     })),
     "governance": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "regulatoryExposure": numberType(),
@@ -6095,7 +6496,12 @@ var UpdateInitiativeBody = objectType({
     })),
     "strategic": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "strategicDifferentiation": numberType(),
@@ -6150,7 +6556,12 @@ var UpdateInitiativeBody = objectType({
     "kind": enumType(["go", "pause", "stop", "rescope", "rebudget", "other"]),
     "owner": stringType().max(updateInitiativeBodyOneDecisionLogItemOwnerMax).optional(),
     "rationale": stringType().max(updateInitiativeBodyOneDecisionLogItemRationaleMax).optional(),
-    "createdAt": stringType().optional()
+    "createdAt": stringType().optional(),
+    "recordedAt": stringType().optional().describe("Server stamp: when the entry was recorded or its content last changed (`date` is when the decision was taken). Absent on entries not saved since the stamps were introduced. Ignored in requests."),
+    "recordedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who recorded it. Ignored in requests.")
   })).max(updateInitiativeBodyOneDecisionLogMax).optional(),
   "statusReports": arrayType(objectType({
     "id": stringType(),
@@ -6174,12 +6585,25 @@ var UpdateInitiativeBody = objectType({
     }),
     "summary": stringType().max(updateInitiativeBodyOneStatusReportsItemSummaryMax).optional()
   })).max(updateInitiativeBodyOneStatusReportsMax).optional(),
+  "milestones": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(updateInitiativeBodyOneMilestonesItemTitleMax),
+    "baselineDate": stringType().regex(updateInitiativeBodyOneMilestonesItemBaselineDateRegExp),
+    "forecastDate": stringType().regex(updateInitiativeBodyOneMilestonesItemForecastDateRegExp).optional(),
+    "doneDate": stringType().regex(updateInitiativeBodyOneMilestonesItemDoneDateRegExp).optional(),
+    "note": stringType().max(updateInitiativeBodyOneMilestonesItemNoteMax).optional()
+  }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(updateInitiativeBodyOneMilestonesMax).optional(),
   "dependsOn": arrayType(stringType()).max(updateInitiativeBodyOneDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
     "fte": numberType(),
     "runFte": numberType().min(updateInitiativeBodyOneRequiredSkillsItemRunFteMin).optional()
   })).max(updateInitiativeBodyOneRequiredSkillsMax).optional(),
+  "capabilityImpacts": arrayType(objectType({
+    "capabilityId": stringType(),
+    "kind": enumType(["improve", "new", "replace", "retire"]),
+    "maturityTo": numberType().min(1).max(updateInitiativeBodyOneCapabilityImpactsItemMaturityToMax).optional().describe("The maturity level the initiative brings the capability to; absent for `retire`.")
+  }).describe("What an initiative does to one capability of the organisation's map.")).max(updateInitiativeBodyOneCapabilityImpactsMax).optional(),
   "aiRiskTier": enumType(["Prohibited", "High-Risk", "Limited", "Minimal"]).optional(),
   "hitlPosture": enumType(["Unattended", "Supervised", "Human-Required"]).optional(),
   "dpiaStatus": enumType(["Not Required", "In Progress", "Completed"]).optional(),
@@ -6190,7 +6614,12 @@ var UpdateInitiativeBody = objectType({
   "gateEvidence": recordType(stringType(), recordType(stringType(), objectType({
     "checked": booleanType(),
     "asOfDate": stringType().optional(),
-    "note": stringType().max(updateInitiativeBodyOneGateEvidenceNoteMax).optional()
+    "note": stringType().max(updateInitiativeBodyOneGateEvidenceNoteMax).optional(),
+    "checkedAt": stringType().optional().describe("Server stamp: when the item was ticked; absent while unchecked or ticked before the stamps were introduced. Ignored in requests."),
+    "checkedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who ticked it. Ignored in requests.")
   }))).optional().describe("Partial<Record<GateTransitionKey, Record<itemId, GateEvidenceItem>>>"),
   "gateBypassed": booleanType().optional(),
   "aiAct": objectType({
@@ -6273,6 +6702,7 @@ var UpdateInitiativeBody = objectType({
     "userId": stringType().uuid(),
     "name": stringType()
   }).optional().describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body."),
+  "version": numberType().min(1).optional().describe("Save counter, raised by the server on every save. A request names the version its edit is based on in InitiativeInput.baseVersion; this field is ignored in requests."),
   "createdAt": stringType(),
   "updatedAt": stringType()
 }).and(objectType({
@@ -6280,7 +6710,9 @@ var UpdateInitiativeBody = objectType({
   "createdBy": unknownType().optional(),
   "updatedBy": unknownType().optional(),
   "createdAt": unknownType().optional(),
-  "updatedAt": unknownType().optional()
+  "updatedAt": unknownType().optional(),
+  "version": unknownType().optional(),
+  "baseVersion": numberType().min(1).optional().describe("PUT only: the version the edit is based on. When it differs from the stored version, someone else saved in between and the save is refused with 409 and the current copy. Omitted (clients that predate it), the save is not checked. A separate field, not `version`, because older clients echo every field they received, including `version`, without ever updating it.")
 })).describe("Same as Initiative, minus server-assigned fields.");
 var updateInitiativeResponseNameMax = 200;
 var updateInitiativeResponseExternalIdMax = 200;
@@ -6302,9 +6734,17 @@ var updateInitiativeResponseStatusReportsItemBudgetCommentMax = 1e4;
 var updateInitiativeResponseStatusReportsItemSkillsCommentMax = 1e4;
 var updateInitiativeResponseStatusReportsItemSummaryMax = 1e4;
 var updateInitiativeResponseStatusReportsMax = 1e3;
+var updateInitiativeResponseMilestonesItemTitleMax = 300;
+var updateInitiativeResponseMilestonesItemBaselineDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeResponseMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeResponseMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeResponseMilestonesItemNoteMax = 1e4;
+var updateInitiativeResponseMilestonesMax = 30;
 var updateInitiativeResponseDependsOnMax = 1e3;
 var updateInitiativeResponseRequiredSkillsItemRunFteMin = 0;
 var updateInitiativeResponseRequiredSkillsMax = 1e3;
+var updateInitiativeResponseCapabilityImpactsItemMaturityToMax = 5;
+var updateInitiativeResponseCapabilityImpactsMax = 1e3;
 var updateInitiativeResponseDpiaUrlMax = 2e3;
 var updateInitiativeResponseModelCardUrlMax = 2e3;
 var updateInitiativeResponseProhibitedOverrideMax = 2e3;
@@ -6348,7 +6788,12 @@ var UpdateInitiativeResponse = objectType({
   "evaluation": objectType({
     "valueScale": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "frequencyOfProcess": numberType(),
@@ -6362,7 +6807,12 @@ var UpdateInitiativeResponse = objectType({
     })),
     "feasibility": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "dataAvailability": numberType(),
@@ -6376,7 +6826,12 @@ var UpdateInitiativeResponse = objectType({
     })),
     "governance": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "regulatoryExposure": numberType(),
@@ -6391,7 +6846,12 @@ var UpdateInitiativeResponse = objectType({
     })),
     "strategic": objectType({
       "score": numberType(),
-      "confidence": enumType(["Low", "Medium", "High"])
+      "confidence": enumType(["Low", "Medium", "High"]),
+      "scoredAt": stringType().optional().describe("Server stamp: when this dimension's confidence or a sub-score last changed. Absent until a save changes it. Ignored in requests."),
+      "scoredBy": objectType({
+        "userId": stringType().uuid(),
+        "name": stringType()
+      }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who made that change. Ignored in requests.")
     }).and(objectType({
       "subs": objectType({
         "strategicDifferentiation": numberType(),
@@ -6446,7 +6906,12 @@ var UpdateInitiativeResponse = objectType({
     "kind": enumType(["go", "pause", "stop", "rescope", "rebudget", "other"]),
     "owner": stringType().max(updateInitiativeResponseDecisionLogItemOwnerMax).optional(),
     "rationale": stringType().max(updateInitiativeResponseDecisionLogItemRationaleMax).optional(),
-    "createdAt": stringType().optional()
+    "createdAt": stringType().optional(),
+    "recordedAt": stringType().optional().describe("Server stamp: when the entry was recorded or its content last changed (`date` is when the decision was taken). Absent on entries not saved since the stamps were introduced. Ignored in requests."),
+    "recordedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who recorded it. Ignored in requests.")
   })).max(updateInitiativeResponseDecisionLogMax).optional(),
   "statusReports": arrayType(objectType({
     "id": stringType(),
@@ -6470,12 +6935,25 @@ var UpdateInitiativeResponse = objectType({
     }),
     "summary": stringType().max(updateInitiativeResponseStatusReportsItemSummaryMax).optional()
   })).max(updateInitiativeResponseStatusReportsMax).optional(),
+  "milestones": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(updateInitiativeResponseMilestonesItemTitleMax),
+    "baselineDate": stringType().regex(updateInitiativeResponseMilestonesItemBaselineDateRegExp),
+    "forecastDate": stringType().regex(updateInitiativeResponseMilestonesItemForecastDateRegExp).optional(),
+    "doneDate": stringType().regex(updateInitiativeResponseMilestonesItemDoneDateRegExp).optional(),
+    "note": stringType().max(updateInitiativeResponseMilestonesItemNoteMax).optional()
+  }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(updateInitiativeResponseMilestonesMax).optional(),
   "dependsOn": arrayType(stringType()).max(updateInitiativeResponseDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
     "fte": numberType(),
     "runFte": numberType().min(updateInitiativeResponseRequiredSkillsItemRunFteMin).optional()
   })).max(updateInitiativeResponseRequiredSkillsMax).optional(),
+  "capabilityImpacts": arrayType(objectType({
+    "capabilityId": stringType(),
+    "kind": enumType(["improve", "new", "replace", "retire"]),
+    "maturityTo": numberType().min(1).max(updateInitiativeResponseCapabilityImpactsItemMaturityToMax).optional().describe("The maturity level the initiative brings the capability to; absent for `retire`.")
+  }).describe("What an initiative does to one capability of the organisation's map.")).max(updateInitiativeResponseCapabilityImpactsMax).optional(),
   "aiRiskTier": enumType(["Prohibited", "High-Risk", "Limited", "Minimal"]).optional(),
   "hitlPosture": enumType(["Unattended", "Supervised", "Human-Required"]).optional(),
   "dpiaStatus": enumType(["Not Required", "In Progress", "Completed"]).optional(),
@@ -6486,7 +6964,12 @@ var UpdateInitiativeResponse = objectType({
   "gateEvidence": recordType(stringType(), recordType(stringType(), objectType({
     "checked": booleanType(),
     "asOfDate": stringType().optional(),
-    "note": stringType().max(updateInitiativeResponseGateEvidenceNoteMax).optional()
+    "note": stringType().max(updateInitiativeResponseGateEvidenceNoteMax).optional(),
+    "checkedAt": stringType().optional().describe("Server stamp: when the item was ticked; absent while unchecked or ticked before the stamps were introduced. Ignored in requests."),
+    "checkedBy": objectType({
+      "userId": stringType().uuid(),
+      "name": stringType()
+    }).describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body.").optional().describe("Server stamp, who ticked it. Ignored in requests.")
   }))).optional().describe("Partial<Record<GateTransitionKey, Record<itemId, GateEvidenceItem>>>"),
   "gateBypassed": booleanType().optional(),
   "aiAct": objectType({
@@ -6569,6 +7052,7 @@ var UpdateInitiativeResponse = objectType({
     "userId": stringType().uuid(),
     "name": stringType()
   }).optional().describe("Display reference to the local user who created / last edited a record. Server-assigned from the authenticated session \u2014 never taken from the request body."),
+  "version": numberType().min(1).optional().describe("Save counter, raised by the server on every save. A request names the version its edit is based on in InitiativeInput.baseVersion; this field is ignored in requests."),
   "createdAt": stringType(),
   "updatedAt": stringType()
 });
@@ -6605,7 +7089,7 @@ var ListAdminAuditLogQueryParams = objectType({
 });
 var ListAdminAuditLogResponseItem = objectType({
   "id": stringType().uuid(),
-  "action": enumType(["member.added", "member.role_changed", "member.permissions_changed", "member.removed", "settings.updated", "permission_profile.created", "permission_profile.updated", "permission_profile.deleted", "initiative.created", "initiative.deleted", "snapshot.created", "snapshot.renamed", "snapshot.deleted", "skill.created", "skill.updated", "skill.deleted", "organization.renamed", "user.erased"]),
+  "action": enumType(["member.added", "member.role_changed", "member.permissions_changed", "member.removed", "settings.updated", "permission_profile.created", "permission_profile.updated", "permission_profile.deleted", "initiative.created", "initiative.deleted", "snapshot.created", "snapshot.renamed", "snapshot.deleted", "skill.created", "skill.updated", "skill.deleted", "capability.created", "capability.updated", "capability.deleted", "organization.renamed", "user.erased"]),
   "targetType": stringType(),
   "targetId": stringType().nullable(),
   "actorName": stringType().nullable(),
@@ -6711,6 +7195,9 @@ var GATE_TRANSITIONS = [
   { key: "scaling-production", from: "Scaling", to: "In Production" }
 ];
 var GATE_TRANSITION_KEYS = GATE_TRANSITIONS.map((t) => t.key);
+var CAPABILITY_IMPORTANCES = ["differentiating", "core", "supporting"];
+var CAPABILITY_MATURITY_MIN = 1;
+var CAPABILITY_MATURITY_MAX = 5;
 var ANNEX_III_CATEGORIES = [
   "Biometrics",
   "Critical Infrastructure",
@@ -6841,6 +7328,7 @@ var EN_DIGITAL = {
   "govLabel.Controlled Automation": "Controlled Operation",
   "govLabel.Human-in-the-Loop Required": "Supervised Operation Required",
   "govLabel.Restricted Deployment": "Restricted Rollout",
+  "memo.governance.intro": "{count} initiatives sit in the Restricted Rollout band or above (governance \u2265 61/100) and require active board-level monitoring.",
   "subHelp.modelRobustness": "Stability of the solution under load, edge cases and unexpected inputs.",
   "subHelp.reproducibility": "Maturity of the underlying cloud / platform stack \u2014 proven and supported (managed services, mature regions, SLAs) vs experimental or self-hosted.",
   "subHelp.explainability": "How clearly the system's behaviour and outputs can be explained to operators and end-users.",
@@ -7057,6 +7545,7 @@ var DE_DIGITAL = {
   "govLabel.Controlled Automation": "Kontrollierter Betrieb",
   "govLabel.Human-in-the-Loop Required": "Beaufsichtigter Betrieb erforderlich",
   "govLabel.Restricted Deployment": "Eingeschr\xE4nkter Rollout",
+  "memo.governance.intro": "{count} Initiativen liegen im Band \u201EEingeschr\xE4nkter Rollout\u201C oder dar\xFCber (Governance \u2265 61/100) und ben\xF6tigen aktive Vorstandsaufsicht.",
   "subHelp.modelRobustness": "Stabilit\xE4t der L\xF6sung unter Last, bei Edge-Cases und unerwarteten Eingaben.",
   "subHelp.reproducibility": "Reife des zugrundeliegenden Cloud-/Plattform-Stacks \u2014 bew\xE4hrt und supportet (Managed Services, etablierte Regionen, SLAs) vs. experimentell oder selbstgehostet.",
   "subHelp.explainability": "Wie klar Verhalten und Ergebnisse des Systems Betreibern und Endnutzern erkl\xE4rbar sind.",
@@ -7273,6 +7762,7 @@ var EN_INNOVATION = {
   "govLabel.Controlled Automation": "Monitored Trial",
   "govLabel.Human-in-the-Loop Required": "Active Stewardship Required",
   "govLabel.Restricted Deployment": "Bounded Pilot Only",
+  "memo.governance.intro": "{count} initiatives sit in the Bounded Pilot Only band or above (governance \u2265 61/100) and require active board-level monitoring.",
   "govLabel.High Governance Sensitivity": "Board-Level Sponsorship Required",
   "subHelp.modelRobustness": "How well the core concept holds up under stress, edge cases and pessimistic assumptions.",
   "subHelp.reproducibility": "Likelihood that observed results would repeat under independent conditions.",
@@ -7538,6 +8028,7 @@ var DE_INNOVATION = {
   "govLabel.Controlled Automation": "\xDCberwachte Erprobung",
   "govLabel.Human-in-the-Loop Required": "Aktive Begleitung erforderlich",
   "govLabel.Restricted Deployment": "Nur eingegrenzter Pilot",
+  "memo.governance.intro": "{count} Initiativen liegen im Band \u201ENur eingegrenzter Pilot\u201C oder dar\xFCber (Governance \u2265 61/100) und ben\xF6tigen aktive Vorstandsaufsicht.",
   "govLabel.High Governance Sensitivity": "Vorstandspatenschaft erforderlich",
   "subHelp.modelRobustness": "Wie gut das Kernkonzept Belastung, Edge-Cases und pessimistische Annahmen aush\xE4lt.",
   "subHelp.reproducibility": "Wahrscheinlichkeit, dass beobachtete Ergebnisse unter unabh\xE4ngigen Bedingungen wiederholbar sind.",
@@ -9055,6 +9546,20 @@ var OPTIONAL_SECTIONS = [
   { key: "economics", hint: { en: "Benefit/cost P10/P50/P90 ranges, ramp, confidence, discount rate", de: "Nutzen/Kosten P10/P50/P90, Ramp, Konfidenz, Diskontsatz" } },
   { key: "decisionLog", hint: { en: "Dated decisions (go/pause/stop/rescope/rebudget/other)", de: "Datierte Entscheidungen" } },
   { key: "statusReports", hint: { en: "Dated RAG reports (scope/timeline/budget/skills)", de: "Datierte RAG-Berichte" } },
+  {
+    key: "milestones",
+    hint: {
+      en: "[{title, baselineDate, forecastDate?, doneDate?, note?}] \u2014 dated intermediate results (pilot live, vendor selected, go-live; at most 30, title up to 300 characters). baselineDate is the agreed plan; forecastDate today's expectation when it differs; doneDate once reached. Ask for the 3\u20135 that the steering committee watches. On an update, send every milestone the initiative keeps: the file replaces the list.",
+      de: "[{title, baselineDate, forecastDate?, doneDate?, note?}] \u2014 datierte Zwischenergebnisse (Pilot live, Anbieter gew\xE4hlt, Go-live; h\xF6chstens 30, Titel bis 300 Zeichen). baselineDate ist der vereinbarte Plan, forecastDate die heutige Erwartung, wenn sie abweicht, doneDate sobald erreicht. Nach den 3\u20135 fragen, die der Lenkungsausschuss verfolgt. Bei einem Update alle Meilensteine senden, die bleiben sollen: die Datei ersetzt die Liste."
+    }
+  },
+  {
+    key: "capabilityImpacts",
+    hint: {
+      en: "[{capabilityId, kind: improve|new|replace|retire, maturityTo?}] \u2014 what the initiative does to a capability of the organisation's map; maturityTo (1\u20135) is the level it brings the capability to (omit = the capability's target; never for retire). With the portfolio-context file, pick from read_portfolio_context \u2192 lists.capabilities (id, name, domain, current \u2192 target maturity); without it, leave empty and link capabilities in the app.",
+      de: "[{capabilityId, kind: improve|new|replace|retire, maturityTo?}] \u2014 was die Initiative mit einer F\xE4higkeit der Landkarte macht; maturityTo (1\u20135) ist die Stufe, auf die sie die F\xE4higkeit bringt (fehlend = Ziel der F\xE4higkeit; nie bei retire). Mit der Portfolio-Kontext-Datei aus read_portfolio_context \u2192 lists.capabilities (ID, Name, Dom\xE4ne, Reife heute \u2192 Ziel) w\xE4hlen; ohne sie leer lassen und in der App verkn\xFCpfen."
+    }
+  },
   {
     key: "requiredSkills",
     hint: {
@@ -9107,7 +9612,7 @@ function describeZodShape(schema, depth = 0) {
 }
 function buildSchemaDescriptor(sectionShapes) {
   return {
-    about: "BICon initiative composer. Collect the required fields, then rate every sub-dimension 0\u2013100 (higher = more of the named quality) and a confidence per dimension. Dimension scores are DERIVED (mean of subs) \u2014 never ask the user for them. Values are used verbatim; enum values must match exactly; unknown keys are rejected. Dates: talk dd/mm/yyyy with the user (dd/mm/yyyy, dd.mm.yyyy and yyyy-mm-dd are all accepted; stored as yyyy-mm-dd). Row ids of decision-log entries, status reports and incidents are minted by the Composer \u2014 never invent ids. To UPDATE an existing initiative pass its id as `id`; omit it for a new one.",
+    about: "BICon initiative composer. Collect the required fields, then rate every sub-dimension 0\u2013100 (higher = more of the named quality) and a confidence per dimension. Dimension scores are DERIVED (mean of subs) \u2014 never ask the user for them. Values are used verbatim; enum values must match exactly; unknown keys are rejected. Dates: talk dd/mm/yyyy with the user (dd/mm/yyyy, dd.mm.yyyy and yyyy-mm-dd are all accepted; stored as yyyy-mm-dd). Row ids of decision-log entries, status reports, milestones and incidents are minted by the Composer \u2014 never invent ids. To UPDATE an existing initiative pass its id as `id`; omit it for a new one.",
     requiredFields: REQUIRED_FIELDS,
     enums: {
       status: STATUS_VALUES,
@@ -9139,7 +9644,7 @@ function buildSchemaDescriptor(sectionShapes) {
     },
     optionalSections: OPTIONAL_SECTIONS,
     // Exact shapes of the object/array sections (aiAct, economics, actuals,
-    // decisionLog, statusReports, requiredSkills). Keys ending in "?" are
+    // decisionLog, statusReports, requiredSkills, capabilityImpacts, milestones). Keys ending in "?" are
     // optional; "enum[a|b]" lists the allowed values; "<key>" marks a map.
     // Pass these sections as JSON objects/arrays. Any key not listed is
     // rejected with its path.
@@ -9149,7 +9654,7 @@ function buildSchemaDescriptor(sectionShapes) {
       ...AI_ACT_VOCABULARIES,
       note: "prohibitedPractices/art50Flags: arrays of these ids. artifacts/obligations: maps keyed by these ids. annexIIICategory: one of these, or omit when no Annex III area applies (record the reasoning in classificationRationale; annexExceptionRationale is only for an Art. 6(3) exception claim). Empty is honest; invented values are rejected."
     },
-    portfolioContext: "Ask the user for the organisation's portfolio-context file first (in the app: Import/Export \u2192 'Download portfolio context'). Call read_portfolio_context on it: it returns the interview plan in the organisation's own wording, the sub-dimensions that are switched off, the slider step the ratings must follow, and the organisation's business units, categories, tags, skills and initiatives \u2014 with the file, business unit and category MUST be from those lists (no inventing) and skill / dependency ids are validated. Pass the same context to assemble_initiative and export_initiative_file. Without the file, interview with the wording below and treat business unit / category as free text.",
+    portfolioContext: "Ask the user for the organisation's portfolio-context file first (in the app: Import/Export \u2192 'Download portfolio context'). Call read_portfolio_context on it: it returns the interview plan in the organisation's own wording, the sub-dimensions that are switched off, the slider step the ratings must follow, and the organisation's business units, categories, tags, skills, initiatives and capabilities \u2014 with the file, business unit and category MUST be from those lists (no inventing) and skill / dependency / capability ids are validated. Pass the same context to assemble_initiative and export_initiative_file. Without the file, interview with the wording below and treat business unit / category as free text.",
     handoff: "Call assemble_initiative with the compact spec (+ context), review derivedScores (and any warnings) with the user, then call export_initiative_file with the SAME spec (+ context) \u2192 save the JSON \u2192 in the app: Import/Export \u2192 Single initiative \u2192 drop the file \u2192 'Add as new' \u2192 Confirm. If the initiative carries EU-AI-Act data, the organisation's EU-AI-Act module must be switched on (Settings \u203A AI Act) when importing."
   };
 }
@@ -9191,12 +9696,14 @@ var keepDescription = (from, to) => from.description ? to.describe(from.descript
 var dateField = (what) => external_exports.preprocess(normaliseDateInput, external_exports.string().refine(isCalendarDate, { message: `${what} must be a real calendar date \u2014 dd/mm/yyyy or yyyy-mm-dd` })).describe("dd/mm/yyyy (or yyyy-mm-dd)");
 var DATE_LIKE_KEY = /^date$|Date$|At$/;
 var MINTED_KEYS = /* @__PURE__ */ new Set(["id", "createdAt", "updatedAt"]);
+var SERVER_STAMP_KEY = /^(recorded|scored|checked)(At|By)$/;
 var holdsString = (s) => s instanceof external_exports.ZodString || s instanceof external_exports.ZodOptional && s.unwrap() instanceof external_exports.ZodString || s instanceof external_exports.ZodNullable && s.unwrap() instanceof external_exports.ZodString;
 function deepStrict(schema) {
   const walk = (s, inArrayItem = false) => {
     if (s instanceof external_exports.ZodObject) {
       const next = {};
       for (const [k, v] of Object.entries(s.shape)) {
+        if (SERVER_STAMP_KEY.test(k)) continue;
         let field = walk(v, false);
         if (inArrayItem && MINTED_KEYS.has(k) && !(field instanceof external_exports.ZodOptional)) field = field.optional();
         if (DATE_LIKE_KEY.test(k) && holdsString(field)) field = keepDescription(field, external_exports.preprocess(normaliseDateInput, field));
@@ -9233,7 +9740,7 @@ var parseIfString = (v) => typeof v === "string" ? tryParseJson(v) : v;
 function wireSection(inner, description) {
   return external_exports.preprocess(parseIfString, deepStrict(inner)).describe(description);
 }
-var SECTION_KEYS = ["aiAct", "economics", "actuals", "decisionLog", "statusReports", "requiredSkills"];
+var SECTION_KEYS = ["aiAct", "economics", "actuals", "decisionLog", "statusReports", "requiredSkills", "capabilityImpacts", "milestones"];
 var SECTION_SCHEMAS = Object.fromEntries(
   SECTION_KEYS.map((k) => [k, contractSection(k)])
 );
@@ -9243,6 +9750,8 @@ var SECTION_DESCRIPTIONS = {
   actuals: "Actuals block (In Production only) \u2014 see sectionShapes.actuals.",
   decisionLog: "Decision log entries \u2014 see sectionShapes.decisionLog. Entry ids are minted by the Composer \u2014 leave them out. Dates dd/mm/yyyy or yyyy-mm-dd.",
   statusReports: "Status reports \u2014 see sectionShapes.statusReports. Report ids are minted by the Composer \u2014 leave them out. Dates dd/mm/yyyy or yyyy-mm-dd.",
+  capabilityImpacts: "Capability links [{capabilityId, kind: improve|new|replace|retire, maturityTo?}]. maturityTo 1\u20135 = level reached (omit = the capability's target; never for retire). capabilityId: a capability of the map, from read_portfolio_context \u2192 lists.capabilities; without the context leave the list empty.",
+  milestones: "Milestones (max 30, title \u2264300 chars): baselineDate = the plan, forecastDate = today's expectation (omit = baseline), doneDate = reached. Dates dd/mm/yyyy or yyyy-mm-dd; ids minted. An update replaces the list: send all.",
   requiredSkills: "Required skills [{skillId, fte, runFte?}] \u2014 fte is the build-phase demand, the optional runFte the run-team demand after the planned end (absent = build fte continues, 0 = no run demand). skillId must be the id of a skill that exists in the organisation. With the portfolio context the Composer validates it (read_portfolio_context \u2192 lists.skills gives id + name); without it, leave the list empty and link skills in the app."
 };
 var contextWire = () => external_exports.preprocess(parseIfString, external_exports.union([external_exports.string().regex(/^ctx_[0-9a-f]{16}$/, "a contextId looks like ctx_<16 hex>"), external_exports.object({}).passthrough()]));
@@ -9286,6 +9795,8 @@ var compactSpecSchema = external_exports.object({
   decisionLog: wireSection(SECTION_SCHEMAS.decisionLog, SECTION_DESCRIPTIONS.decisionLog).optional(),
   statusReports: wireSection(SECTION_SCHEMAS.statusReports, SECTION_DESCRIPTIONS.statusReports).optional(),
   requiredSkills: wireSection(SECTION_SCHEMAS.requiredSkills, SECTION_DESCRIPTIONS.requiredSkills).optional(),
+  capabilityImpacts: wireSection(SECTION_SCHEMAS.capabilityImpacts, SECTION_DESCRIPTIONS.capabilityImpacts).optional(),
+  milestones: wireSection(SECTION_SCHEMAS.milestones, SECTION_DESCRIPTIONS.milestones).optional(),
   aiRiskTier: external_exports.enum(AI_RISK_TIERS).optional(),
   hitlPosture: external_exports.enum(HITL_POSTURES).optional(),
   dpiaStatus: external_exports.enum(DPIA_STATUSES).optional(),
@@ -9295,7 +9806,7 @@ var compactSpecSchema = external_exports.object({
   prohibitedOverride: external_exports.string().optional(),
   aiAct: wireSection(SECTION_SCHEMAS.aiAct, SECTION_DESCRIPTIONS.aiAct).optional(),
   context: contextWire().optional().describe(
-    `OPTIONAL but strongly recommended: the organisation's portfolio context \u2014 the contextId returned by read_portfolio_context ("ctx_\u2026") or the file's JSON itself. With it, switched-off sub-dimensions are skipped in the score, business unit / category must be the organisation's own, and skill / dependency / update ids are validated.`
+    `OPTIONAL but strongly recommended: the organisation's portfolio context \u2014 the contextId returned by read_portfolio_context ("ctx_\u2026") or the file's JSON itself. With it, switched-off sub-dimensions are skipped in the score, business unit / category must be the organisation's own, and skill / dependency / capability / update ids are validated.`
   )
 }).strict();
 var exportInputSchema = external_exports.object({
@@ -9340,7 +9851,7 @@ import { createHash } from "node:crypto";
 
 // ../../initiative-model/src/portfolio-context.ts
 var PORTFOLIO_CONTEXT_KIND = "portfolio-context";
-var PORTFOLIO_CONTEXT_VERSION = 1;
+var PORTFOLIO_CONTEXT_VERSION = 2;
 
 // ../../initiative-model/src/ai-act-fields.ts
 var AI_ACT_FIELDS = [
@@ -9380,12 +9891,25 @@ var portfolioContextSchema = external_exports.object({
   suggestedTags: external_exports.array(external_exports.string()),
   skills: external_exports.array(external_exports.object({ id: external_exports.string().min(1), name: external_exports.string() }).passthrough()),
   initiatives: external_exports.array(external_exports.object({ id: external_exports.string().min(1), externalId: external_exports.string().trim().optional(), name: external_exports.string(), status: external_exports.enum(STATUS_VALUES) }).passthrough()),
-  sliders: external_exports.array(sliderSchema)
+  sliders: external_exports.array(sliderSchema),
+  /** Version 2 (2026-10-15): the capability map's leaves. Optional so a
+   * version-1 file still parses — it then validates no capability links. */
+  capabilities: external_exports.array(
+    external_exports.object({
+      id: external_exports.string().min(1),
+      name: external_exports.string(),
+      domain: external_exports.string(),
+      importance: external_exports.enum(CAPABILITY_IMPORTANCES),
+      currentMaturity: external_exports.number(),
+      targetMaturity: external_exports.number()
+    }).passthrough()
+  ).optional()
 }).passthrough();
 var CONTEXT_SUPPORTED_VERSION = PORTFOLIO_CONTEXT_VERSION;
 function versionNotice(ctx) {
   return ctx.version > CONTEXT_SUPPORTED_VERSION ? `The portfolio-context file is version ${ctx.version}; this Composer understands version ${CONTEXT_SUPPORTED_VERSION}. Newer fields are ignored \u2014 update the Composer (Import/Export \u2192 download the extension again) to be safe.` : void 0;
 }
+var CAPABILITY_MATURITY_RANGE = `${CAPABILITY_MATURITY_MIN}\u2013${CAPABILITY_MATURITY_MAX}`;
 var CONTEXT_ID_PREFIX = "ctx_";
 var CACHE_MAX = 32;
 var cache = /* @__PURE__ */ new Map();
@@ -9481,6 +10005,31 @@ function checkAgainstContext(spec, ctx) {
   for (const [i, s] of (spec.requiredSkills ?? []).entries()) {
     if (!skillIds.has(s.skillId)) errors.push(`requiredSkills.${i}.skillId: "${s.skillId}" is not a skill of this organisation \u2014 pick from read_portfolio_context \u2192 lists.skills (id + name), or leave requiredSkills empty.`);
   }
+  const impacts = spec.capabilityImpacts ?? [];
+  if (impacts.length && ctx.capabilities === void 0) {
+    errors.push(
+      "capabilityImpacts: this portfolio-context file predates the capability map (version 1) \u2014 download it again from the app (Import/Export \u2192 Download portfolio context) so the Composer can check capability ids, or leave capabilityImpacts empty and link capabilities in the app."
+    );
+  } else {
+    const caps = new Map((ctx.capabilities ?? []).map((c) => [c.id, c]));
+    const seen = /* @__PURE__ */ new Set();
+    for (const [i, link] of impacts.entries()) {
+      if (seen.has(link.capabilityId)) continue;
+      seen.add(link.capabilityId);
+      const cap = caps.get(link.capabilityId);
+      if (!cap) {
+        errors.push(
+          caps.size ? `capabilityImpacts.${i}.capabilityId: "${link.capabilityId}" is not a capability of this organisation's map \u2014 pick from read_portfolio_context \u2192 lists.capabilities (id + name + domain), or leave capabilityImpacts empty.` : `capabilityImpacts.${i}.capabilityId: this organisation has no capability map yet \u2014 it is built in the app's Settings \u203A Taxonomy; leave capabilityImpacts empty.`
+        );
+        continue;
+      }
+      if (link.maturityTo !== void 0 && link.kind !== "retire" && link.maturityTo < cap.currentMaturity) {
+        warnings.push(
+          `capabilityImpacts.${i}.maturityTo: ${link.maturityTo} is below the current maturity ${cap.currentMaturity} of "${cap.name}" \u2014 the app shows the capability as unchanged; the target is ${cap.targetMaturity}.`
+        );
+      }
+    }
+  }
   const aiFieldsSet = AI_ACT_FIELDS.filter((f) => spec[f] !== void 0);
   if (aiFieldsSet.length && !ctx.aiActEnabled) {
     warnings.push(
@@ -9523,6 +10072,7 @@ function buildInterviewPlan(ctx, contextId) {
     ...allOff.length ? [`Dimension(s) with EVERY sub-dimension switched off (${allOff.join(", ")}) still need an entry in evaluation: { subs: {}, confidence } \u2014 the score is 0 there; ask only for the confidence.`] : [],
     ctx.businessUnits.length && ctx.categories.length ? "businessUnit MUST be one of lists.businessUnits and aiCategory one of lists.categories (matched case-insensitively, normalised to the organisation's spelling) \u2014 the Composer rejects anything else; new ones are created in the app's Settings, not in the interview." : "This organisation has no business units and/or categories configured yet \u2014 they must be added in the app's Settings and the context downloaded again before an initiative can be assembled.",
     "dependsOn entries must be ids from lists.initiatives; requiredSkills[].skillId must be ids from lists.skills. Never invent an id; leave the list empty when unsure.",
+    ctx.capabilities === void 0 ? "This file predates the capability map (version 1): capability links cannot be checked \u2014 leave capabilityImpacts empty, or ask the user to download the portfolio context again." : ctx.capabilities.length ? `capabilityImpacts[].capabilityId must be ids from lists.capabilities (${ctx.capabilities.length} capabilities; each lists its domain, importance and current \u2192 target maturity ${CAPABILITY_MATURITY_RANGE}). kind is improve | new | replace | retire; maturityTo (${CAPABILITY_MATURITY_RANGE}) is the level the initiative brings the capability to \u2014 omit it to mean the capability's target, and never send it for retire. Ask which capabilities the initiative changes and to what level.` : "This organisation has no capability map yet (built in the app's Settings \u203A Taxonomy): leave capabilityImpacts empty.",
     "To UPDATE an existing initiative instead of creating a new one, pass its id (from lists.initiatives) as `id` in the spec \u2014 the exported file then updates it in the app (Import/Export \u2192 Single initiative \u2192 'Update'). Omit id for a new initiative. Entries in lists.initiatives may carry externalId \u2014 the organisation's own reference (e.g. IC-26-118) \u2014 use it to recognise which initiative the user means. An update REPLACES the whole record: any field, section or row you omit is CLEARED \u2014 decision log, status reports and links included \u2014 so re-send everything that must survive. Exception: the organisation's externalId is carried over automatically when omitted.",
     ...ctx.sliderGranularity ? [`Ratings are in steps of ${ctx.sliderGranularity} (the organisation's slider step \u2014 Settings \u203A Slider granularity): ask for and send only multiples of ${ctx.sliderGranularity} between 0 and 100 (${gridExample(ctx.sliderGranularity)}); any other value is rejected.`] : [],
     "Dates: talk to the user in dd/mm/yyyy; you may send dates as dd/mm/yyyy, dd.mm.yyyy or yyyy-mm-dd \u2014 the Composer stores yyyy-mm-dd.",
@@ -9547,7 +10097,17 @@ function buildInterviewPlan(ctx, contextId) {
       categories: ctx.categories,
       suggestedTags: ctx.suggestedTags,
       skills: ctx.skills.map((s) => ({ id: s.id, name: s.name })),
-      initiatives: ctx.initiatives.map((i) => ({ id: i.id, ...i.externalId ? { externalId: i.externalId } : {}, name: i.name, status: i.status }))
+      initiatives: ctx.initiatives.map((i) => ({ id: i.id, ...i.externalId ? { externalId: i.externalId } : {}, name: i.name, status: i.status })),
+      ...ctx.capabilities ? {
+        capabilities: ctx.capabilities.map((c) => ({
+          id: c.id,
+          name: c.name,
+          domain: c.domain,
+          importance: c.importance,
+          currentMaturity: c.currentMaturity,
+          targetMaturity: c.targetMaturity
+        }))
+      } : {}
     },
     interview: {
       dimensions,
@@ -9608,8 +10168,11 @@ function checkAiActVocabularies(block, errors) {
 }
 function mintNestedIds(rows, stamp, withStamps = false) {
   if (!rows) return void 0;
+  const seen = /* @__PURE__ */ new Set();
   return rows.map((r) => {
-    const next = { ...r, id: isUuid(r.id) ? r.id : randomUUID() };
+    const id = isUuid(r.id) && !seen.has(r.id) ? r.id : randomUUID();
+    seen.add(id);
+    const next = { ...r, id };
     if (withStamps) {
       if (!next.createdAt) next.createdAt = stamp;
       if (!next.updatedAt) next.updatedAt = stamp;
@@ -9643,6 +10206,41 @@ function assembleInitiative(input, now = /* @__PURE__ */ new Date()) {
     }
   }
   if (spec.aiAct && typeof spec.aiAct === "object") checkAiActVocabularies(spec.aiAct, errors);
+  const allImpacts = spec.capabilityImpacts ?? [];
+  const seenCaps = /* @__PURE__ */ new Set();
+  const impacts = [];
+  for (const [i, link] of allImpacts.entries()) {
+    if (seenCaps.has(link.capabilityId)) {
+      errors.push(`capabilityImpacts.${i}.capabilityId: "${link.capabilityId}" is linked twice \u2014 one link per capability.`);
+      continue;
+    }
+    seenCaps.add(link.capabilityId);
+    impacts.push([i, link]);
+    if (link.kind === "retire" && link.maturityTo !== void 0) errors.push(`capabilityImpacts.${i}.maturityTo: a retire link has no target level \u2014 omit maturityTo.`);
+    else if (link.maturityTo !== void 0 && !Number.isInteger(link.maturityTo)) errors.push(`capabilityImpacts.${i}.maturityTo: must be a whole number 1\u20135 (got ${link.maturityTo}).`);
+  }
+  const milestones = spec.milestones ?? [];
+  const pad = (n) => String(n).padStart(2, "0");
+  const today = `${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())}`;
+  for (const [i, m] of milestones.entries()) {
+    if (!m.title.trim()) errors.push(`milestones.${i}.title: must not be empty (got only spaces).`);
+    for (const field of ["baselineDate", "forecastDate", "doneDate"]) {
+      const v = m[field];
+      if (v !== void 0 && !isCalendarDate(v)) errors.push(`milestones.${i}.${field}: "${v}" is not a real calendar date \u2014 dd/mm/yyyy or yyyy-mm-dd`);
+    }
+    const due = m.doneDate ?? m.forecastDate ?? m.baselineDate;
+    if (isCalendarDate(due) && (spec.timelineStart && due < spec.timelineStart || spec.timelineEnd && due > spec.timelineEnd)) {
+      warnings.push(`milestones.${i}: "${m.title.trim()}" falls on ${due}, outside the timeline ${spec.timelineStart} \u2013 ${spec.timelineEnd}.`);
+    }
+    if (m.doneDate && isCalendarDate(m.doneDate) && m.doneDate > today) warnings.push(`milestones.${i}.doneDate: ${m.doneDate} lies in the future \u2014 a done date marks a milestone already reached.`);
+  }
+  const norm2 = (v) => (v ?? "").trim().toLowerCase();
+  const others = context?.initiatives ?? [];
+  const ext = norm2(spec.externalId);
+  const updates = spec.id !== void 0 || !!ext && others.filter((x) => norm2(x.externalId) === ext).length === 1 || others.some((x) => norm2(x.name) === norm2(spec.name));
+  if (updates && spec.milestones === void 0) {
+    warnings.push("milestones: none sent, and the app will offer this file as an update \u2014 it replaces the initiative's milestones, so any the app holds are removed. Send the full list to keep them.");
+  }
   let businessUnit = spec.businessUnit;
   let aiCategory = spec.aiCategory;
   if (context) {
@@ -9656,6 +10254,9 @@ function assembleInitiative(input, now = /* @__PURE__ */ new Date()) {
     for (const [i, id] of (spec.dependsOn ?? []).entries()) {
       if (!isUuid(id)) errors.push(`dependsOn.${i}: "${id}" is not a UUID \u2014 without the organisation's portfolio context the Composer cannot verify ids; leave dependsOn empty and link dependencies in the app, or provide the context.`);
     }
+    for (const [i, link] of impacts) {
+      if (!isUuid(link.capabilityId)) errors.push(`capabilityImpacts.${i}.capabilityId: "${link.capabilityId}" is not a UUID \u2014 without the organisation's portfolio context the Composer cannot verify capability ids; leave capabilityImpacts empty and link capabilities in the app, or provide the context.`);
+    }
   }
   if (spec.timelineStart && spec.timelineEnd && spec.timelineEnd < spec.timelineStart) {
     warnings.push("timelineEnd is before timelineStart");
@@ -9690,6 +10291,7 @@ function assembleInitiative(input, now = /* @__PURE__ */ new Date()) {
     evaluation,
     decisionLog: mintNestedIds(spec.decisionLog, stamp),
     statusReports: mintNestedIds(spec.statusReports, stamp),
+    milestones: mintNestedIds(spec.milestones, stamp)?.map((m) => ({ ...m, title: m.title.trim() })),
     aiAct: aiAct ? { ...aiAct, ...aiAct.incidents ? { incidents: mintNestedIds(aiAct.incidents, stamp, true) } : {} } : void 0,
     createdAt: stamp,
     updatedAt: stamp
@@ -9701,7 +10303,7 @@ function assembleInitiative(input, now = /* @__PURE__ */ new Date()) {
 }
 
 // ../../initiative-model/src/backup-version.ts
-var BACKUP_VERSION = 10;
+var BACKUP_VERSION = 11;
 
 // src/envelope.ts
 var ENVELOPE_BRAND = "BICon Portfolio Steering";
@@ -9759,12 +10361,12 @@ function createServer() {
     async () => text({
       capabilities: [
         "strict typed schemas: unknown keys anywhere in the spec are rejected with their exact path (never silently dropped)",
-        "sections (aiAct/economics/actuals/decisionLog/statusReports/requiredSkills) accept a JSON object/array or the same JSON as a string; row ids are minted by the Composer",
+        "sections (aiAct/economics/actuals/decisionLog/statusReports/requiredSkills/capabilityImpacts/milestones) accept a JSON object/array or the same JSON as a string; row ids are minted by the Composer",
         "dates accepted as dd/mm/yyyy, dd.mm.yyyy or yyyy-mm-dd (stored as yyyy-mm-dd)",
         "get_initiative_schema: sectionShapes, aiActVocabularies, portfolio-mode wording overlays",
         "AI-Act vocabulary and id-format enforcement with the allowed values in the error",
         "one pipeline: export_initiative_file takes the same spec as assemble_initiative \u2014 scores are always derived; pass `id` to update an existing initiative",
-        "portfolio context: read_portfolio_context turns the app's exported context file into an organisation-specific interview plan and a short contextId; with it, switched-off sub-dimensions are skipped in the score, business unit / category must be the organisation's own, and skill / dependency / update ids are validated"
+        "portfolio context: read_portfolio_context turns the app's exported context file into an organisation-specific interview plan and a short contextId; with it, switched-off sub-dimensions are skipped in the score, business unit / category must be the organisation's own, and skill / dependency / capability / update ids are validated (capabilities from the version-2 context file)"
       ]
     })
   );
@@ -9780,7 +10382,7 @@ function createServer() {
     "read_portfolio_context",
     {
       title: "Read portfolio context",
-      description: "Turns the organisation's portfolio-context file (downloaded in the BICon Portfolio Steering app: Import/Export \u2192 'Download portfolio context') into the interview plan for THIS organisation: its own labels, help texts and rating notes for the sub-dimensions, which sub-dimensions are switched off (do not ask, not scored), its business units, categories, tags, skills (id + name) and initiatives (id + name), currency, discount rate and whether the EU-AI-Act module is on \u2014 plus a short contextId. Call it right after get_initiative_schema when the user provides the file, then pass `context: \"<contextId>\"` to assemble_initiative and export_initiative_file.",
+      description: "Turns the organisation's portfolio-context file (downloaded in the BICon Portfolio Steering app: Import/Export \u2192 'Download portfolio context') into the interview plan for THIS organisation: its own labels, help texts and rating notes for the sub-dimensions, which sub-dimensions are switched off (do not ask, not scored), its business units, categories, tags, skills (id + name), initiatives (id + name) and the capability map's capabilities (id, name, domain, importance, current \u2192 target maturity), currency, discount rate and whether the EU-AI-Act module is on \u2014 plus a short contextId. Call it right after get_initiative_schema when the user provides the file, then pass `context: \"<contextId>\"` to assemble_initiative and export_initiative_file.",
       inputSchema: readContextInputSchema
     },
     async ({ context }) => {